This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryUpdates https://github.com/restic/restic/issues/5234, https://github.com/restic/restic/issues/5667, and https://github.com/restic/restic/issues/5722 across a mixed release.
Full changelog
Changelog for restic 0.19.1 (2026-07-05)
The following sections list the changes in restic 0.19.1 relevant to restic users. The changes are ordered by importance.
Summary
- Fix #5234: Prevent mounting over the repository directory
- Fix #5667: Skip inaccessible
backupsource paths - Fix #5722: Update
mountlatest symlink after snapshot reload - Fix #21866: Hide
statsprogress bar in JSON mode - Fix #21869: Restore old behavior of
snapshots --latest <n>without--group-by - Fix #21876: Show timezone location in
snapshotsoutput - Fix #21879: Prevent crash in mountpoint validation if mountpoint is inaccessible
- Fix #21895: Remove read-only files via the SFTP backend on Windows servers
- Fix #21899: Make
backuprespect excludes for duplicate directory entries
Details
-
Bugfix #5234: Prevent mounting over the repository directory
Using a local repository directory as the
mounttarget — or a path that contains it, or that it contains — caused the FUSE server to read its own backend files through the new mount, deadlocking the kernel and requiring a long reboot to recover.Restic now resolves both paths and refuses any such overlap with a clear error before mounting.
-
Bugfix #5667: Skip inaccessible
backupsource pathsThe
backupcommand only skipped source paths that did not exist. A path that could not be accessed for another reason, such as a malformed path on Windows, was kept and produced an empty snapshot. Restic now skips any such path and aborts if none remain. -
Bugfix #5722: Update
mountlatest symlink after snapshot reloadWhen
restic mountwas kept running while new snapshots were created, the new snapshots appeared in the mountpoint, but thelatestsymlink could still point to the previously latest snapshot. Restic now invalidates the cached snapshot directory entries after a snapshot reload so thatlatestpoints to the newest snapshot. -
Bugfix #21866: Hide
statsprogress bar in JSON modeSince restic 0.19.0, the
statscommand shows a progress bar. This progress bar was unintentionally displayed also when using the--jsonoption, mixing regular text output with JSON. This is now fixed. -
Bugfix #21869: Restore old behavior of
snapshots --latest <n>without--group-byRestic 0.19.0 accidentally changed the behavior of
snapshots --latest <n>to no longer group snapshots by host and paths by default.The
snapshots --latest <n>command now again uses the old behavior of grouping by host and paths when--group-byis not specified. However, when specifying--group-bythe output is still grouped as requested, as in restic 0.19.0. -
Bugfix #21876: Show timezone location in
snapshotsoutputWith restic 0.19.0, the
snapshotscommand printed the current timezone when listing snapshots. However, that timezone label might change during the year, for example with daylight saving time. Restic now prints a more consistent and shorter version of the text.#21876 https://forum.restic.net/t/possible-bug-in-timezone-naming/10867
-
Bugfix #21879: Prevent crash in mountpoint validation if mountpoint is inaccessible
Since restic 0.19.0, the
mountcommand validates a mountpoint before loading the repository. If restic was unable to stat the mountpoint, this would result in a crash. This has now been fixed to correctly return an error instead. -
Bugfix #21895: Remove read-only files via the SFTP backend on Windows servers
Since restic 0.19.0, repository files on the SFTP backend are marked read-only after save. On Windows SFTP servers, removing them failed with a permission error. The SFTP backend now clears the read-only flag before removing the file.
-
Bugfix #21899: Make
backuprespect excludes for duplicate directory entriesSince restic 0.19.0, backing up a directory with duplicate directory entries always produced "Warning: at least one source file could not be read", even when those files were excluded. This has now been fixed.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]