marcpope/borgbackupserver v2.55.5 on GitHub

Fixes

Repository Repair no longer aborts with 'Cancelled by user' (#295) — borg check --repair prompts for a literal 'YES' on stdin before running, and the server-side repair job wasn't supplying it. Now sets BORG_CHECK_I_KNOW_WHAT_I_AM_DOING=YES on both the local and remote-SSH borg paths.

GET /api/v1/repositories — list every repository across every client in one response. Pass ?include_secrets=1 to also return the decrypted passphrase per repo (for escrow / disaster-recovery exports). Each call with include_secrets=1 is logged to server_log for audit (#289).
GET /api/v1/s3-credentials now follows the same pattern: returns endpoint / region / bucket / path_prefix by default; add ?include_secrets=1 to also get the access key and secret key.
Token capability: Display Secrets — Settings → API → Create Token has a new checkbox. Only tokens with the capability can pass ?include_secrets=1 on either endpoint; everything else gets HTTP 403. Existing tokens default to no-secrets, so this is a strictly additive permission.