FYI, tried to update 2023.8.10 to 2025.11.0 in a sandbox, get changes every puppet run:

2026-07-18 23:23:17 +0000 /Stage[main]/Puppet_enterprise::Profile::Database/Puppet_enterprise::App_database[puppetdb]/Pe_postgresql::Server::Role[pe-puppetdb]/Pe_postgresql_psql[CREATE ROLE "pe-puppetdb"  LOGIN NOCREATEROLE NOCREATEDB NOSUPERUSER  CONNECTION LIMIT -1]/command (notice): command changed  to 'CREATE ROLE "pe-puppetdb"  LOGIN NOCREATEROLE NOCREATEDB NOSUPERUSER  CONNECTION LIMIT -1' (corrective)
2026-07-18 23:23:17 +0000 /Stage[main]/Puppet_enterprise::Profile::Database/Puppet_enterprise::App_database[puppetdb]/Pe_postgresql::Server::Role[pe-puppetdb]/Pe_postgresql_psql[ALTER ROLE "pe-puppetdb" NOSUPERUSER]/command (notice): command changed  to 'ALTER ROLE "pe-puppetdb" NOSUPERUSER' (corrective)
2026-07-18 23:23:17 +0000 /Stage[main]/Puppet_enterprise::Profile::Database/Puppet_enterprise::App_database[puppetdb]/Pe_postgresql::Server::Role[pe-puppetdb]/Pe_postgresql_psql[ALTER ROLE "pe-puppetdb" NOCREATEDB]/command (notice): command changed  to 'ALTER ROLE "pe-puppetdb" NOCREATEDB' (corrective)
2026-07-18 23:23:17 +0000 /Stage[main]/Puppet_enterprise::Profile::Database/Puppet_enterprise::App_database[puppetdb]/Pe_postgresql::Server::Role[pe-puppetdb]/Pe_postgresql_psql[ALTER ROLE "pe-puppetdb" NOCREATEROLE]/command (notice): command changed  to 'ALTER ROLE "pe-puppetdb" NOCREATEROLE' (corrective)
2026-07-18 23:23:17 +0000 /Stage[main]/Puppet_enterprise::Profile::Database/Puppet_enterprise::App_database[puppetdb]/Pe_postgresql::Server::Role[pe-puppetdb]/Pe_postgresql_psql[ALTER ROLE "pe-puppetdb" LOGIN]/command (notice): command changed  to 'ALTER ROLE "pe-puppetdb" LOGIN' (corrective)
2026-07-18 23:23:18 +0000 /Stage[main]/Puppet_enterprise::Profile::Database/Puppet_enterprise::App_database[puppetdb]/Pe_postgresql::Server::Role[pe-puppetdb]/Pe_postgresql_psql[ALTER ROLE "pe-puppetdb" INHERIT]/command (notice): command changed  to 'ALTER ROLE "pe-puppetdb" INHERIT' (corrective)
2026-07-18 23:23:18 +0000 /Stage[main]/Puppet_enterprise::Profile::Database/Puppet_enterprise::App_database[puppetdb]/Pe_postgresql::Server::Role[pe-puppetdb]/Pe_postgresql_psql[ALTER ROLE "pe-puppetdb" NOREPLICATION]/command (notice): command changed  to 'ALTER ROLE "pe-puppetdb" NOREPLICATION' (corrective)
2026-07-18 23:23:18 +0000 /Stage[main]/Puppet_enterprise::Profile::Database/Puppet_enterprise::App_database[puppetdb]/Pe_postgresql::Server::Role[pe-puppetdb]/Pe_postgresql_psql[ALTER ROLE "pe-puppetdb" CONNECTION LIMIT -1]/command (notice): command changed  to 'ALTER ROLE "pe-puppetdb" CONNECTION LIMIT -1' (corrective)
2026-07-18 23:23:21 +0000 /Stage[main]/Puppet_enterprise::Profile::Database/Puppet_enterprise::App_database[puppetdb]/Pe_postgresql::Server::Db[pe-puppetdb]/Pe_postgresql::Server::Database[pe-puppetdb]/Pe_postgresql_psql[Create database 'pe-puppetdb']/command (notice): command changed  to 'CREATE DATABASE "pe-puppetdb" WITH OWNER = "pe-postgres" TEMPLATE = template0 ENCODING \'UTF8\' LC_CTYPE \'en_US.UTF-8\' LC_COLLATE \'en_US.UTF-8\' TABLESPACE "pe-puppetdb"' (corrective)
2026-07-18 23:23:21 +0000 /Stage[main]/Puppet_enterprise::Profile::Database/Puppet_enterprise::App_database[puppetdb]/Pe_postgresql::Server::Db[pe-puppetdb]/Pe_postgresql::Server::Database[pe-puppetdb]/Pe_postgresql_psql[REVOKE CONNECT ON DATABASE "pe-puppetdb" FROM public] (notice): Triggered 'refresh' from 1 event
2026-07-18 23:23:21 +0000 /Stage[main]/Puppet_enterprise::Profile::Database/Puppet_enterprise::App_database[puppetdb]/Pe_postgresql::Server::Db[pe-puppetdb]/Pe_postgresql::Server::Database[pe-puppetdb]/Pe_postgresql_psql[UPDATE pg_database SET datistemplate = false WHERE datname = 'pe-puppetdb']/command (notice): command changed  to 'UPDATE pg_database SET datistemplate = false WHERE datname = \'pe-puppetdb\'' (corrective)

Installation and upgrade known issues | Puppet Enterprise (PE) | 2025.11 The bottom issue, this is caused by a bad entry from older versions of PEADM.

Ah, ok, thank you, will try