STANZA=demo

for file in archive/$STANZA/archive.info backup/$STANZA/backup.info; do
    for key in $(pgbackrest --stanza=$STANZA repo-get $file | grep '^cipher-pass=' | grep -oE '[A-Za-z0-9+/]{64}'); do
        echo "$(printf '%s' $key | base64 -d | od -An -v -tx1 | tr -s ' ' '\n' | grep -c '^00$') $file"
    done
done

• Upgrade to pgBackRest 2.59.3 or later, which reports an error when random data cannot be generated.
• If the subkey in archive.info or backup.info is weak, create the stanza in a new repository and keep the old repository only as long as its backups are needed.
• Consider making a new full backup after upgrading, since differential and incremental backups use the subkey of their full backup.
• Weak backup subkeys and salts are removed as backups and WAL from before the upgrade expire. Backups with a long retention period keep them until they expire.

• Fix possible weak encryption subkeys/salts (j0uinim)
• Fix possible checksum error loading encrypted info and manifest files (j0uinim)

• In prior versions it was possible for weak encryption subkeys and salts to be generated if there was an error accessing system random data. See Weak Encryption Subkeys and Salts for more information.

• Website
• User Guides
• Release Notes

• PostgreSQL 19beta4 support (David Steele)
• Fix empty block map when file is truncated to zero during backup (David Steele)
• Disable read retry when filters are passed to the driver (David Steele)
• Fix pagination of S3 version listing (David Steele)
• Set the Azure version header for SAS authentication (David Steele)
• Fix async archive-push stalling on a zero-size backup history file (Andrew Kroh)
• Fix annotate command on a remote encrypted repository (Douglas J Hunley)

• PostgreSQL 19beta4 changed the pg_control and WAL formats, so clusters and WAL from an earlier 19 beta are no longer supported. Clusters running an earlier beta should be recreated with 19beta4.

• Website
• User Guides
• Release Notes

• PostgreSQL 19beta3 support (Lardière Sébastien)
• Fix hang when the chunk buffer is smaller than the input buffer (David Steele)
• Compare a new backup label only against its own full backup set (David Steele)
• Fix source archives generated by GitHub missing files required to build (David Steele)

• PostgreSQL 19beta3 changed the WAL format, so WAL archived from an earlier 19 beta is no longer readable. Clusters running an earlier beta should be recreated with 19beta3.

• Website
• User Guides
• Release Notes

• PostgreSQL 19 support (David Steele)
• Add archive-expire-before option to clean up WAL archive (Stefan Fercot)
• Add support for S3 Outposts (Shiva Kumar Ambigi)
• Add S3 process authentication (David Steele)
• Add user/group caching for faster manifest build (Gunnar Lindholm)
• Reconnect SFTP storage after the server drops an idle connection (David Steele)
• Add per-repo backup progress to info command output (Will Morland)
• Add batch delete for Azure storage (David Steele)
• Add backup.info checks to verify command (Denis Garsh)
• Allow the S3 STS endpoint to be configured (Simon Gratton)
• Add systemd notify integration (Andrew Jackson)
• Error when running as root unless allow-root is enabled (David Steele)
• Exit async archive-push on first error (David Steele)

• Only the restore command may be run as root by default. Use allow-root to run other commands as root (though this is not recommended).
• A new distribution tarball with pregenerated documentation, man page, and code is attached to each release to simplify packaging. See New Distribution Tarball for more information.
• There is a new optional dependency on libsystemd.

• Website
• User Guides
• Release Notes