Alteryx Release Notes

What's Changed

Feature Development

[PM-33527] Allow multiple tasks per budget by @Banrion in #8309
feat(sso): check assertion type by @enmande in #8301
[PM-39100] - Removing ChangeMemberEmailNoMp FF by @jrmccannon in #8318
feat(saml): SimpleSaml local assertion encryption by @enmande in #8319
Add support for DDG ext device type by @kspearrin in #8259
[PM-43285] add feature flag by @BTreston in #8339
[PM-43378] Impl new feature flag by @JaredScar in #8346
[SM-2083] Adding feature flag gate to server side for secrets versioning by @cd-bitwarden in #8330
[PM-38935] - Moved MembersController to v2 Update. by @jrmccannon in #8281
[PM-41861] Add Ability to Invited Staged Users by @sven-bitwarden in #8283
[PM-40806] add EnableEmailVerification to sever response model by @BTreston in #8342
[Sm-1588] secrets versioning by @cd-bitwarden in #8307
[SHOT-231] Add scheduled seeded database workflow by @mimartin12 in #8189
[PM-39927] Subscription preview fixes by @sbrown-livefront in #8337
[PM-43061] Gate Previews Endpoint with isOrganizationManagedByProvider Callback by @sbrown-livefront in #8343
[PM-34732] Remove feature flagged logic by @BTreston in #8362
[Sm-1588] Event logging for secret versioning restore event by @cd-bitwarden in #7533
[PM-43815] feat: Add dead letter retention for event integrations by @withinfocus in #8364

🐛 Bug fixes

[PM-16095] validation message updates server by @JaredScar in #8295
[PM-38743] Honor a partially supplied event date range by @AlexRubik in #8265
[PM-43035] - Set ActingUser Type for providers by @jrmccannon in #8313
[PM-42557] - Fix TXT generation by @jrmccannon in #8333
[PM-42491] Allow endpoint if user has permission for Manage Reset Password by @JaredScar in #8325
[PM-43021] fix: Align server domain name validation with the web client by @sven-bitwarden in #8335
Resolve Item-Scoped Discounts for Subscription Preview by @sbrown-livefront in #8336
[PM-42319] - Add Inject Collection by @jrmccannon in #8267
[PM-42357] fix: Scope collection group and member access to the organization by @r-tome in #8329
[PM-42397] - Check IsLocal on redirect by @jrmccannon in #8332
[PM-41863] Fix redundant Send event logging by @harr1424 in #8327
[PM-42906] file id validations to address manipulation concerns by @itsadrago in #8326
[PM-43632] Add new endpoint for domain slim via /mini by @JaredScar in #8357
[PM-43027] fix: Scope invited member collection and group access to the organization by @sven-bitwarden in #8347
[BRE-2266] Update K6 Load Tests by @vgrassia in #8379
fix: validate encrypted string piece byte lengths by @quexten in #8328
Cherry-pick: [PM-43897] set Reply-To on price migration email by @connerbw in #8407
cherry-pick: PM-43809: bugfix: Skip deleting attachments in default collection on Org Vault purge by @nikwithak in #8416

⚙️ Maintenance

QA-2360: Add organization cipher seeder scenes for remaining item types by @Corbet-BW in #8323
[PM-36234] Consolidate into 1 auto confirm organization users command (one that is most performative) by @JaredScar in #8297
[DBOPS-231] Rewrite SecurityTask_ReadByUserIdStatus to remove OPTION (RECOMPILE) by @rkac-bw in #8331
[BRE-2213] Rename PR target workflow for clarity by @michalchecinski in #8341
[PM-41861] fix: Declare send-invite response type in the OpenAPI spec by @sven-bitwarden in #8354
[PM-43475] refactor: Remove unused deprecated Admin Console API endpoints by @eliykat in #8350
[PM-43474] refactor: remove dead Service Bus application-cache broadcast by @eliykat in #8349
Auth/PM-43794 - Fido2 v4 Upgrade - Extend Base64UrlSchemaFilter to all required Fido2 properties by @JaredSnider-Bitwarden in #8371
[PM-43773] Add verification call when saving or updating an event integration by @Banrion in #8365
fillAssistRules change for QA and Prod by @alex8bitw in #8359
[BRE-2266] ci: Fix load test credential wiring and error logging by @withinfocus in #8380
Revert "[PM-43773] Add verification call when saving or updating an event integration" by @Banrion in #8383
[BRE-2266] ci: Move the client version check out of the k6 init context by @withinfocus in #8385
Seeder/secrets manager access token minting by @nthompson-bitwarden in #8300
[PM-39411] feat: Add flight recorder logging feature flag by @dani-garcia in #8384
Bump version to 2026.9.1 by @github-actions[bot] in #8398
Bumped version to 2026.9.2 (#8454) by @addisonbeck in #8456

📦 Dependency Updates

[PM-40870] Auth renovate fido2 v4 migration by @ike-kottlowski in #8071
[PM-44131] deps: Bump Server SDK to 1.7.0 by @justindbaur in #8471

New Contributors

@Corbet-BW made their first contribution in #8323

Full Changelog: v2026.9.1...v2026.9.2

Original source

What's Changed

Feature Development

[PM-33527] Implement Organization Delete Tasks with Events by @Banrion in #8182
[PM-40237] Require cipher Name only when Data is absent by @quexten in #8252
[PM-42203] Add feature flag enable-basic-auth-response by @jprusik in #8248
Auth/PM-42167 - SSO - Add Staged Org User Support by @JaredSnider-Bitwarden in #8228
[PM-39925] feat: scaffold the Bit.Subscription.* and Bit.Invoicing libraries for invoice preview by @kdenney in #8208
[PM-39925] feat: add the invoice preview projection to Bit.Invoicing by @kdenney in #8209
Auth/PM-42267 - SSO Error Handling Improvement - Redirect to /sso-login-failed when no seats available by @JaredSnider-Bitwarden in #8261
[PM-42318] Add the collection reads behind PAM's access rules by @Hinton in #8243
[PM-42584] Require single organization to enable fill assist policy by @bensbits91 in #8266
[PM-40167] feat: Update billing domain email copy by @cyprain-okeke in #8203
[PM-41268] Withhold gated cipher secrets behind a type-checked witness by @Hinton in #8115
[PM-39040] Scaffold the PAM rotation API surface by @Hinton in #8279
Feat: Add Organization Subscription-Preview Endpoint by @sbrown-livefront in #8245
[PM-35599] Update set-password endpoint to handle V1 encryption when given Auth and Unlock data by @rr-bw in #7723
Scaffold the target-system delete endpoint by @Hinton in #8298
[PM-39099] - Removing feature flag for no mp admin change member email code. by @jrmccannon in #8275
feat(sso): Add preferred algorithms to SP metadata by @enmande in #8280
[PM-38574] feat: Set trialInitiationPath for sales-assisted trials by @cyprain-okeke in #8272
feat(sso): check assertion type (#8301) by @enmande in #8324

🐛 Bug fixes

[PM-41693] Align error behavior when Send is not accessible by @harr1424 in #8229
[PC-42433] Handle Seat Expansion for Staged Users by @sven-bitwarden in #8251
[PM-42317] - SCIM compare/logging fix by @jrmccannon in #8262
[PM-40292] fix: Handle deleted Stripe customer on Admin user and provider edit pages by @amorask-bitwarden in #8276
[PM-40493] Claimed Domain Account Delete Check by @rr-bw in #8263
Retry a PAM lease mint the provider could not serialize by @Hinton in #8253
Admin Portal - Fix GetTwoFactorProviders wrong exception type handling on Organization and User by @JaredSnider-Bitwarden in #8234
[PM-40514] Add UseRiskInsights Org ability check in all Access Intelligence v1 endpoints by @lastbestdev in #8258
[PM-41064] fix: Preserve discounts across subscription schedule rebuilds by @amorask-bitwarden in #8278
Auth/PM-41517 - Registration with an Open Org Invite Link - Allow when DisableUserRegistration Enabled by @JaredSnider-Bitwarden in #8277
[PM-42891] - Add route param enforcement. by @jrmccannon in #8299
[PM-43035] - Set ActingUser Type for providers by @jrmccannon in #8340

⚙️ Maintenance

QA-2398: support SM-off Enterprise org via seeder OrganizationOverrides by @awiester-bw in #8249
QA-2398: correct SeederApi README overrides bullet for SM-off support by @awiester-bw in #8250
[PM-39455] Organization user v2 upgrade token repository tests by @mzieniukbw in #8168
Add self-hosted premium license signing to the seeder by @nthompson-bitwarden in #8178
ci: Fix not reporting test results on push and workflow_dispatch by @eliykat in #8257
[deps]: Update github-action minor by @renovate[bot] in #8021
Seeder/secrets manager scenes by @nthompson-bitwarden in #8255
PM-40997 - Opt-in Stripe billing for seeded organizations by @theMickster in #8232
fix(mac-certs): Support OpenSSL/LIbreSSL and immediate returns on failure by @enmande in #8246
QA-2420: add OrganizationCardCipherScene to the seeder by @awiester-bw in #8294
Bump version to 2026.8.2 by @github-actions[bot] in #8310
Bump version to 2026.9.0 by @github-actions[bot] in #8321

📦 Dependency Updates

[deps] Platform: Update azure azure-sdk-for-net monorepo by @renovate[bot] in #6656
[PM-28941] test: Bump Azurite to 3.37.0 by @dereknance in #8271

Full Changelog: v2026.8.2...v2026.9.0

Original source

Enterprise AI has an accuracy problem, and it isn’t the models.

Ask a good LLM to calculate net revenue retention and you’ll get a fast, fluent, confident answer. Ask again next quarter and you may get a different one, because the model is deriving the logic from scratch every time. Your analytics team settled that definition years ago, wrote it into a workflow, and had it reviewed. The model has never seen it.

That gap, between what a model can infer on its own and what your business has already agreed on, is where most enterprise AI pilots stall.

The latest AI capabilities in Alteryx One are built to solve this challenge. The theme of our 2026 Summer Release is AI with ROI, focused on three areas where Alteryx improves the economics of AI.

Answers are more trustworthy. Every response traces back to the same governed workflows your teams already maintain, keeping answers consistent across users and AI tools. NextWave recently demonstrated a 100% accuracy rate using Alteryx in a complex reconciliation process, catching all 11 breaks, compared to a general-purpose LLM that caught 9 but missed 2 completely.

Token spend goes down. Complex analytics run inside Alteryx instead of being re-derived by a model on every question. The result is predictable, governed compute in place of token spend that scales unpredictably. In the same reconciliation use case, NextWave reduced LLM token consumption by 20x using Alteryx to execute the established logic rather than asking the model to reason through the entire process each time.

Outcomes come faster. Agents reuse workflows your team has already built rather than rediscovering business logic from zero. Using Alteryx One, Big Query, and Gemini, Papa Johns reduced franchise billing and reconciliation processes from 300+ hours to 2 hours.

The governed foundation, now on every AI surface

We describe that foundation as VURA: visible, understandable, repeatable, and auditable. An answer should show its inputs, explain its steps, produce the same result twice, and leave a trail someone can review.

This release extends VURA to the AI surfaces your business already uses. Ask a question in Claude, ChatGPT, or Alteryx One, and it resolves against the same approved logic your analytics team maintains.

New ways to put trusted logic to work

The capabilities in this release extend the same governed foundation across a natural progression: ask a question, create a reusable workflow, turn that logic into an agent, and make it available wherever your teams work.

Ask Alteryx:

Ask a business question in plain language, inside Alteryx One. Ask Alteryx delivers a trusted answer when one already exists, and builds a new, reusable workflow when it doesn’t. Users can inspect, edit, and verify every output, or summarize the workflow, so a quick answer today becomes a governed asset tomorrow.

Agent Studio:

Turn any approved dataset into a conversational agent in a few clicks, with no rebuilding of the underlying logic. Finance, operations, and other teams get an agent they can simply ask. Analytics teams keep full control of the data and logic behind every response. Agent Studio is a built-in Alteryx One capability with no additional token costs each time an agent runs. Building and using Alteryx Agents in Agent Studio is in public preview.

Alteryx MCP Server and Skills:

Connect Alteryx to whatever AI platform you already work in. Your agent interacts with Alteryx the way a person would: finding the right data, building a multi-step workflow, and turning it into something governed and repeatable. Alteryx Skills teaches AI coding tools like Codex, Copilot, Claude Code, Gemini CLI, and others, to build Alteryx workflows using the same patterns Ask Alteryx uses.

Alteryx Insights for OpenAI:

Available now through the ChatGPT Plugin Directory, this feature brings analyst-approved data, calculations, and workflows into ChatGPT. A business user can investigate a revenue variance or resolve a reconciliation question without opening Alteryx or holding a seat. Support for Claude, Gemini, Slack, and Microsoft Teams is on the way.

Why not just point the model at my data warehouse?

Fair question, and you should — for retrieval. Databricks and Snowflake now do real analytics too, not just storage.

What they’re not built for is letting the people who hold the business rules encode them directly. An FP&A analyst knows that revenue excludes intercompany transfers, EMEA follows a different fiscal calendar, and three SKUs were reclassified in March.

With Alteryx, the analyst can translate that knowledge into reusable logic without relying on someone else to interpret it. In Databricks or Snowflake, the same rule usually means a ticket to a data engineering team who has to translate it into code first.

Alteryx sits between the agent and logic. The model keeps doing what it’s good at — understanding the question and handling the conversation. The calculation runs against business rules a human already approved.

Your AI tools like Claude, ChatGPT, Gemini, and Copilot also become more useful when the answers they surface are grounded in logic your business owns. Your existing stack stays in place and gains a trusted business logic layer.

Putting AI to work with confidence

The next phase of enterprise AI will be defined by more than model capability. It will be defined by how well organizations connect those models to the context, logic, and accountability that make their businesses run.

That is what the Alteryx 2026 Summer Release delivers, with a governed foundation that reaches from the analyst’s workflow to the business user’s conversation and into enterprise agentic systems. AI that can show its work, repeat it reliably, and deliver value at scale. AI with ROI.

I encourage you to explore how the new capabilities deliver value to business and IT teams here and dive into details in the release notes. To support and accelerate our users’ journey into agentic analytics, Alteryx is also offering a new customer learning path for current users.

Original source

What's Changed

💙 Community Highlight

[PM-41468] Fix thread-unsafe StringBuilder in Setup Helpers.Exec by @cttech-io in #8141

Feature Development

Auth/PM-41503 and PM-41533 - Registration - Add open org invite flow support by @JaredSnider-Bitwarden in #8159

[PM-41268] Declare the PartialData cipher response field by @Hinton in #8114

[PM-40209] Add PAM access claim and ManageAccessRules permission by @Hinton in #8160

[PM-32211] fix private key before key rotation by @mzieniukbw in #7548

[PM-40336] Access Rules: domain, persistence & schema by @Hinton in #7981

[PM-40210] Add single + bulk PAM enable flows for AccessPam by @Hinton in #8161

[PM-40211] Authorize Access Rule endpoints with IOrganizationRequirement by @Hinton in #8162

[PM-40336] Access Rules: API by @Hinton in #7983

[PM-40525] PAM access rule evaluation engine by @Hinton in #7992

feat: wire-in key id on registration and key rotation flows by @quexten in #8164

[PM-40526] Access Leasing: domain by @Hinton in #8001

[PM-40526] Access Leasing: persistence & schema by @Hinton in #8002

[PM-41472] feat: add bulk folder delete endpoint by @gbubemismith in #8157

feat(vault): add key id validation by @quexten in #8184

[PM-39455] Set Upgrade Tokens for Organizations by @mzieniukbw in #8158

[PM-39455] Let the organization rotate the account recovery key by @mzieniukbw in #8174

[PM-41871] Add Chrome extension beta to allowed passkey origins by @trmartin4 in #8197

[PM-40640] Adjust error messages for Send policy enforcement by @mcamirault in #8196

[PM-34809] Remove feature flag for policy drawers from server by @JaredScar in #8188

[PM-29460] feat: Authenticate PricingClient to the pricing service by @amorask-bitwarden in #8054

[PM-39979] Add full API support for Item-type Sends by @mcamirault in #8192

❗ Breaking Changes

[PM-36225] Upgrade Stripe SDK to 52.1.0 by @sbrown-livefront in #7643

🐛 Bug fixes

[SHOT-247] fix: Disable proxy for container healthchecks by @keithhubner in #8170

Ensure seeder appsettings.{env}.json can be found by @Hinton in #8222

[PM-5108] fix: Show all owners and admins in admin portal org view by @r-tome in #8099

[SHOT-187] fix: Make database migration execution timeout configurable by @mimartin12 in #8143

[PM-41951] sponsored families email template copy by @JaredScar in #8217

fix(vault): skip key id validation for organization by @quexten in #8219

[PM-40801] Add option for alternative DataProtection settings on FIPS nodes by @eligrubb in #8092

PM-42152 - Open Org Invite Status Endpoint - Decode org name by @JaredSnider-Bitwarden in #8227

[PM-40300]: Restrict Provider Users' Account Recovery by @sven-bitwarden in #8103

[PM-40350] ManagePolicies should allow read-only access to claimed organization domains by @harr1424 in #8220

[PM-22405] - Remove invalid users from invites by @jrmccannon in #8151

[PM-42240] perms still returned for members who were previously custom by @JaredScar in #8244

⚙️ Maintenance

[PM-40492] Regenerate NuGet lock files during version bump by @Hinton in #8097

[BRE] Removing build workflow and Dockerfiles by @gitclonebrian in #8173

[BRE-2162] ci(build): Trigger downstream build on release branches by @fntyler in #8155

[PM-37320] refactor: consolidate AuthRequest update validation and remove dead code by @ike-kottlowski in #8051

[PM-41451] Migrate last files off of AssemblyHelpers.GetVersion() by @justindbaur in #8137

Remove grype scanning by @sognefej in #8180

[PM-34546] Add integration tests for Notifications POST /send endpoint by @justindbaur in #8171

QA-2279: add OrganizationEventScene to the seeder by @awiester-bw in #8175

[PM-32211] Database testing CI failures fix by @mzieniukbw in #8185

[PM-34564] Remove Core & SharedWeb from icons by @justindbaur in #8181

[PM-35601] Add TODO comments about future conditional validation by @rr-bw in #8153

[PM-41787] Move two-factor integration tests into a CODEOWNERS-compatible path. by @enmende in #8172

Document the AccessRuleId write contract on ICollectionRepository by @Hinton in #8186

[BRE-2116] Checkout v7 privileged workflows by @brandonbiete in #8194

[PM-41917] Add lit inline menu feature flag to server by @dan-livefront in #8198

Allow seeder to create a Free org with Secrets Manager by @nthompson-bitwarden in #8187

feat(seeder): add --account-age-days to seed aged individual users by @nthompson-bitwarden in #8201

[PM-38270] perf: Speed up "claimed by organization" status checks on the Members page by @r-tome in #8125

[PM-38269] refactor: remove redundant permissions round-trip in OrganizationUserUserDetailsQuery by @r-tome in #8119

[PM-38272] fix: handle null or empty permissions in OrganizationUserResponseModel by @JaredScar in #8207

[PM-38326] Utilize cache for UsePolicies by @JaredScar in #8205

[PM-38271] Speed up load org data by running queries in parallel by @JaredScar in #8202

[PM-39422] Remove obsolete properties for organization management compatibility by @JaredScar in #8206

Add dev.playground seeder preset with role-based login emails by @Hinton in #8223

[PM-39455] Reuse the connection and transaction during user key rotation by @mzieniukbw in #8165

Auth/PM-41812 - Auth - New Org User Staged Status Audit - Comment changes only by @JaredSnider-Bitwarden in #8225

Prepare IPushNotificationService for extraction into a push library by @justindbaur in #8199

Bump version to 2026.8.1 by @github-actions[bot] in #8247

[BRE-2166] Add metadata to container images by @vgrassia in #8241

[PM-38329] policies stop converting policy data on every response by @JaredScar in #8204

📦 Dependency Updates

[deps]: Update CommunityToolkit.Aspire.Hosting.Ngrok to v13.4.0 by @renovate[bot] in #8020

[SHOT-251] Update Dockerfile to use Ubuntu 22.04 by @mimartin12 in #8183

[deps]: Update jquery to v4 by @renovate[bot] in #6932

[deps]: Update dotnet monorepo by @renovate[bot] in #8018

🎨 Other

[AI-88] llm: Remove .claude/CONTRIBUTING.md by @SaintPatrck in #8233

New Contributors

@cttech-io made their first contribution in #8141

Full Changelog: v2026.8.0...v2026.8.1

Original source

What's Changed

Feature Development

[PM-38923] feat: Add v2 UpdateOrganizationUser command with role-escalation validation by @jrmccannon in #7919

[PM-38926] feat: Add admin change member email to v2 UpdateOrganizationUser command by @jrmccannon in #7964

[PM-36011] feat: add member email change notification email by @jrmccannon in #8044

[PM-39978] Add Item type Send support by @mcamirault in #8008

[PM-41015] Create feature flag for managed-device-framework by @djsmith85 in #8072

[PM-40509] Make sales-assisted trials always payment optional by @enmande in #8067

[PM-40161] feat(admin-approval-email): Update copy by @enmande in #8079

[PM-41065] Arch/seeder api additional auth accounts by @MGibson1 in #8077

[PM-40515] Add the support confirmation check. by @JimmyVo16 in #8074

Auth/PM-40521 - Registration - Optionally carry SealedOpenOrgInviteData through email verification by @JaredSnider-Bitwarden in #8037

[PM-39430] Extract shared business-plan migration coordinator by @sbrown-livefront in #8050

[PM-39894] fix: Exclude provider-linked organizations from add-existing-organization flow by @cyprain-okeke in #7988

[PM-36007] add event logging for changed email by @BTreston in #8083

[DIRT] Expose feature flag for browser extension Health tab by @lastbestdev in #8100

[PM-38799] Add audit events for the confirm flow. by @JimmyVo16 in #8081

[PM-40738] user facing error messages by @JaredScar in #8088

[PM-39197] - improve vault sync performance by @gbubemismith in #8080

[PM-41304] Add feature flag pm-40435-quick-copy-icon-setting by @jengstrom-bw in #8121

[PM-39454] feat(km): add KeyId value type and user key id validation attribute by @quexten in #8107

[PM-41259] Scaffold PAM cipher-lease endpoints by @Hinton in #8105

[PM-40160] SecurityTasksNotification copy update by @jengstrom-bw in #7997

[PM-40744] Update Server Error Messages for VFO1 by @BTreston in #8087

[PM-40743] Update email copy for VFO1 by @BTreston in #8131

[PM-38248] Remove SendEventLogging feature flag by @harr1424 in #8084

[PM-41438] - Add new errors for taken emails by @jrmccannon in #8140

[PM-41481] Fix policy enforcement when accepting invite link by @eliykat in #8146

[PM-39454] feat(km): add UserKeyId column to the user row by @quexten in #8108

[PM-41409] Introduce ImportRefresh Feature Flag by @harr1424 in #8126

[PM-41311] Register Fill Assist policy by @bensbits91 in #8123

feat(crypto): add key ids to request and response models by @quexten in #8124

[PM-39431] feat: Implement SendInvoicePriceMigrationJob by @cyprain-okeke in #8086

[PM-38333] feat: Annual billing savings offer on cancel by @kdenney in #8010

🐛 Bug fixes

[PM-41066] fix: Preserve subscription schedule phase metadata on phase rebuilds by @amorask-bitwarden in #8078

[PM-17000] fix: block self-host from autoscaling Secrets Manager seats on bulk enable by @jrmccannon in #8073

[PM-17002] - Added self host guard to stop autoscale when self hosted and creating a service account. by @jrmccannon in #8085

[PM-17012] - Update Org User Self Host SM Autoscale Guard by @jrmccannon in #8089

[PM-40866] Fix Teams 2019 organization upgrades to Enterprise by @sbrown-livefront in #8057

[PM-40507] Change Password Well Known URLs Issues by @gbubemismith in #8036

PM-41426: PM and SM select for sales-assisted trials by @enmande in #8142

[PM-39998] Omit org owner and admin Sends from policy enforcement by @mcamirault in #7982

Add PendingProtection for safe protect-cert rotation when secrets land before non-secrets by @justindbaur in #8104

[PM-41579] Update email copy by @BTreston in #8166

[PM-41628] Update email copy by @BTreston in #8167

[PM-40694] fix: Derive Stripe tax ID type server-side by @amorask-bitwarden in #8122

⚙️ Maintenance

Stabilize RelayPushRegistration tests by @justindbaur in #8041

Remove unneeded RequireFeature filter by @justindbaur in #8062

PM-40665 - Back out the hardcoded local-sso org GUID so the preset can be reseeded by @theMickster in #8060

docs: note ISNULL rolling-deploy pattern for JSON/TVP NOT NULL columns by @Hinton in #7991

[PM-40946] refactor: Remove unauthenticated Stripe event recovery endpoints and Admin tool by @amorask-bitwarden in #8070

[PM-36838] Render DeviceType display name in event integration templates by @lastbestdev in #8011

[PM-41079] Extract SSRF protection into src/Libraries/SsrfProtection by @justindbaur in #8066

Seeder/Add billing gateway to SingleUserScene by @nthompson-bitwarden in #8069

Aspire: add parameter for idp configuration by @eliykat in #8082

Seeder: Add UsePam organization override by @Hinton in #8093

PM-40996 - Add async and post-commit step support to the seeder pipeline by @theMickster in #8094

[PM-41220] add integration tests capturing current middleware behavior by @justindbaur in #8096

[PM-41225] Extract exception handling into src/Libraries/ExceptionHandling by @justindbaur in #8090

chore: remove checkmarx from repo by @sognefej in #8120

[PM-41272] Extract organization authorization into a new library by @Hinton in #8095

[PM-39454] refactor(users): make UpdateUserData provider-agnostic and enlist EF delegates by @quexten in #8106

Add steps to build and push gov container images by @gitclonebrian in #7822

[PM-35791] Remove email verification FF and legacy Send access endpoints by @mcamirault in #8065

[BRE] Add login step for Chainguard repo by @gitclonebrian in #8129

Move the shared exception handler to Bit.ExceptionHandling and use it for PAM endpoints by @Hinton in #8118

[PM-41451] Migrate AC files off off AssemblyHelpers.GetVersion() by @justindbaur in #8133

[PM-16936] Fix double HTML encoding by @JimmyVo16 in #8047

Update registry to FedRAMP-specific ACR by @gitclonebrian in #8148

[PM-41451] Migrate Dirt files off of AssemblyHelpers.GetVersion() by @justindbaur in #8136

[PM-41451] Migrate Auth files off of AssemblyHelpers.GetVersion() by @justindbaur in #8134

[BRE-2158] Add PR label to _move_edd_db_scripts workflow by @vgrassia in #8145

[PM-41451] Migrate Billing files off of AssemblyHelpers.GetVersion() by @justindbaur in #8135

Extract Serilog file logging into Libraries/SerilogFileLogging by @justindbaur in #8149

QA-2270: add OrganizationGroupScene to the seeder by @awiester-bw in #8150

[BRE-2157] ci(build): Centralize Docker image tag sanitization by @fntyler in #8144

[PM-33046] Drop obsolete ReadAbilities stored procedures by @JimmyVo16 in #7961

Refactor Seeder Factories by @theMickster in #8152

Add GlobalSettingsBridge library by @justindbaur in #8156

[BRE-2116] Bump actions/checkout to v7.0.1 in non-privileged workflows by @brandonbiete in #8101

Bump version to 2026.8.0 by @github-actions[bot] in #8179

📦 Dependency Updates

[deps] Platform: Lock file maintenance by @renovate[bot] in #6336

[deps]: Update Testcontainers to v4.13.0 by @renovate[bot] in #7776

Server update sdk by @justindbaur in #8128

[deps] Vault: Update AngleSharp to v1.5.2 [SECURITY] by @renovate[bot] in #8012

nginx alpine bump by @keithhubner in #8147

[SHOT-251] build: update Dockerfile to use Ubuntu 22.04 by @mimartin12 in #8195

Full Changelog: v2026.7.2...v2026.8.0

Original source

What's Changed

removed feature flag for enforcing policies for accepted status members

removed feature flag for pricing migrations

Various under-the-hood improvements and minor bug fixes

Feature Development

[PM-38951] feat: Add CreationDate to org user detail endpoints by @jrmccannon in #7936

[PM-39815] feat: Surface org name on invite-link status when links unavailable by @r-tome in #7928

[PM-40152] feat: Require verified email to accept organization invite link by @r-tome in #7949

Add VFO1 Foundation Flag by @nick-livefront in #7973

[PM-27060] chore: add feature flag for password prelogin from SDK by @ike-kottlowski in #7954

[PM-40293] feat: Trim invite-link policies endpoint to Master Password and Account Recovery by @r-tome in #7977

[PM-38388] Support sales-assisted trials by @enmande in #7881

[PM-38791] feat: Add SupportsConfirmation to invite-link status endpoint by @JimmyVo16 in #7974

[PM-39274] Add feature flag event-management-for-generic-hec by @Banrion in #7993

[PM-40006] Add temporary item sharing feature flag by @mcamirault in #7996

[INNO] - Passkey Directory Endpoint by @jrmccannon in #7317

[PM-38749] Add endpoint to update SupportsConfirmation and inviteBlob by @JimmyVo16 in #7999

[PM-40245] Add google favicon API to icon service lookups by @kspearrin in #7951

[PM-40216] feat: Data-protect OrganizationInviteLink.Code at rest by @r-tome in #7969

[PM-40537] fix: Only rewrite Stripe schedules for plan-migration organizations by @amorask-bitwarden in #8035

[PM-39387] fix: Bump AccountRevisionDate when premium status changes by @cyprain-okeke in #7966

[PM-34429] Create an endpoint to retrieve the Invite by @JimmyVo16 in #7994

[PM-40523] feat: Add endpoint to return organization private key to admins by @r-tome in #8006

[PM-40208] Add AccessPam column + PAM seat-occupancy read by @Hinton in #7957

[PM-39236]: Add RenewalNotificationSentDate column + repository method by @sbrown-livefront in #8031

[PM-39197] - improve vault sync performance by @jaasen-livefront in #7829

Revert "[PM-39197] - improve vault sync performance" by @gbubemismith in #8064

[PM-39197] - improve vault sync performance (#8080) by @gbubemismith in #8117

🐛 Bug fixes

[PM-40281] Convert email search to text search field by @BTreston in #7968

[PM-38951] fix: Correct migration script date to 2026-07-14 by @jrmccannon in #7972

[PM-38773] Require org membership before logging org audit events via /collect by @AlexRubik in #7934

[PM-38874] fix: Keep Admin org page accessible when Stripe customer is deleted by @kdenney in #7913

[PM-40372] Fix Issue with Restoring Staged Users by @sven-bitwarden in #7979

[PM-40516] fix: Isolate ExtendedCache backplane per cache name on shared Redis by @withinfocus in #8004

[PM-18747] Add more protections to endpoints on backend so regular members can't hit endpoints and see data by @JaredScar in #7985

[PM-33940] Enforce per-secret access checks in SecretVersionsController by @mandreko-bitwarden in #7823

[PM-16456] Enhance PreviewOrganizationTaxCommand to support Teams Starter 2023 by @JaredScar in #8000

[PM-40201] Added feature flag for derive ssh keys by @gbubemismith in #7998

[PM-16095] feat: Enhance provider seat limit validation messages by @JaredScar in #7980

[PM-40440] fix: Include Secrets Manager and storage in plan-change tax preview by @amorask-bitwarden in #7995

[PM-40751] fix: Sales-assisted trials email copy by @enmande in #8045

⚙️ Maintenance

Bump version to 2026.7.0 by @github-actions[bot] in #7967

[PM-33046] Remove legacy cache DI registration in Events by @JimmyVo16 in #7958

Auth/PM-3813 - 2FA Management Endpoints - User Verification Refactor by @JaredSnider-Bitwarden in #7841

[PM-33046] Remove legacy in-memory application cache services by @JimmyVo16 in #7959

[PM-40343] Extract ITableObject, IRepository, CombGuid to Data by @Hinton in #7976

[PM-40047] Detect blob ciphers via format_version probe by @shane-melton in #7930

ci: route Swashbuckle (Swagger) Renovate updates to Platform by @amorask-bitwarden in #7978

PM-39869 - Implement attachments in Seeder & cipher key encryption by @theMickster in #7953

Add library documentation by @justindbaur in #7950

[PM-33046] Remove GetManyAbilities repo methods and cache interface by @JimmyVo16 in #7960

chore: update code owners to include architecture team for RustSDK by @theMickster in #7986

[PM-34857] Remove PoliciesInAcceptedState feature flag by @eliykat in #7947

Switch to Bitwarden.Server.Sdk.Features by @justindbaur in #7898

removed curl and replaced healthcheck with wget by @keithhubner in #7858

chore(ci): skip platform-community signal for fork PRs by @addisonbeck in #8009

Seeder/add parameterized org seeding by @nthompson-bitwarden in #7987

[PM-37260] Profile service improvements by @ike-kottlowski in #7924

Bump version to 2026.7.1 by @github-actions[bot] in #8038

Resolve minor code smells in attachment tests by @theMickster in #8030

PM-40665 - Seed SSO configuration and a realistic local-sso dev org in the Seeder by @theMickster in #8014

Fix date of migration files that broke main by @patriksvensson in #8048

Seeder/provider scenes by @nthompson-bitwarden in #8034

[PM-40623] Add ProducesResponseType to fix SDK server bindings by @eliykat in #8046

map System.Text.Json.Nodes types to OpenAPI schemas by @dani-garcia in #8053

[PM-37599] refactor: Remove PM37597 always-enable-Stripe-automatic-tax feature flag by @amorask-bitwarden in #7989

[PM-16095] Revert changes before RC by @JaredScar in #8055

[PM-40623] Add ProducesResponseType to OrganizationUsersController.GetInvite by @eliykat in #8058

Bump version to 2026.7.2 by @github-actions[bot] in #8063

Seeder - Tech debt - Migrate CoreHelpers.GenerateComb to CombGuid.Generate by @theMickster in #8061

[PM-36062] refactor: Remove defer-price-migration-to-renewal feature flag by @amorask-bitwarden in #7883

📦 Dependency Updates

[deps]: Update MarkDig to v1.3.2 by @renovate[bot] in #7704

[deps]: Update dtolnay/rust-toolchain digest to 4cda84d by @renovate[bot] in #8016

[deps]: Pin rust to 1.97.1 by @renovate[bot] in #8015

New Contributors

@patriksvensson made their first contribution in #8048

Full Changelog: v2026.7.1...v2026.7.2

Original source

Enterprises have spent the last two years pouring budget into copilots, agents, and generative tools. But the harder problem was never the model. It was the data feeding it, and whether anyone could explain where an answer came from once it landed on someone’s desk.

Snowflake customers are asking that question constantly right now, which is why we’re glad to share that Alteryx One is available on Snowflake Marketplace as a Connected App. Now Snowflake customers can leverage the Alteryx One Platform to access, analyze, and curate AI-ready data, all within their Snowflake environment.

What’s included

The listing includes the full Alteryx One platform, not a single feature carved out for Marketplace. Everything below runs against the same governed Snowflake data, so there’s no separate copy to maintain and no separate conversation with IT about whether it’s safe.

Analysts who don’t want to wait on a data engineering queue to access Snowflake get Alteryx Designer, the drag-and-drop tool for blending, cleaning, and analyzing data without code. Intelligence Suite extends that same approach into machine learning, computer vision, and text mining, so advanced analytics doesn’t sit behind a data science team’s backlog.

For teams working with Snowflake data specifically, Alteryx Live Query is a browser-based experience built for querying that data in place. Workspace Execution goes a step further and lets anyone building in Designer Desktop run the workflow in the cloud, without a local machine standing between the work and the result.

There’s also a set of capabilities built specifically for AI work:

• Auto Insights: Uses machine learning to surface visualizations automatically.
• Ask Alteryx: A generative assistant built into the platform for natural language interaction.
• AI Tools: Brings large language models directly into Alteryx workflows.
• Agent Studio: Enables teams to build AI agents grounded in governed, Alteryx-managed data rather than starting from nothing.

Additionally, Alteryx MCP Agents can integrate with Cortex CoWork, providing governed data, insights, and workflows to help build truly valuable agentic AI applications.

Customers with a Snowflake Capacity commitment may also be able to apply eligible spend toward Alteryx One through Snowflake Marketplace, depending on region and eligibility. Check with your account team for specifics.

Why this matters in the age of AI

Every enterprise buying AI tooling right now is asking some version of the same question: Can I trust what this produces? Alteryx was working on this problem before “agentic AI” became a category, which is why Alteryx built VURA—Visible, Understandable, Repeatable and Auditable—as the foundation for what trustworthy AI actually requires.

• Visible: An AI system shouldn’t be a black box. A user should be able to say where an answer came from and how it was derived. With Alteryx sitting between Snowflake data and the people or agents using it, that visibility is part of the workflow rather than something added afterward.
• Understandable: The logic behind an output has to make sense to the business user relying on it, not just the engineer who wrote it. Alteryx’s visual workflow model exists so that logic isn’t buried in a prompt or a script only one person can read.
• Repeatable: The same data and the same logic should produce the same answer every time, for every user. That consistency needs to live somewhere documented rather than in one analyst’s head.
• Auditable: When a number looks wrong, someone needs to trace who owns the workflow, what data and logic produced it, and where a person made a judgment call along the way. Without that trail, “the AI said so” isn’t an answer a business can stand behind.

Snowflake gives enterprises a governed perimeter for their data and AI workloads. Alteryx gives them a governed logic layer for what happens inside that perimeter, controlled by the business teams that own the outcomes and verifiable by the IT teams that own the risk. Listing Alteryx as a Connected App means customers no longer have to stitch that pairing together themselves.

It’s also what positions Alteryx well as customers adopt Snowflake Cortex, including Snowflake CoCo and Snowflake CoWork. Those agents are only as reliable as the logic and context they draw on, and Alteryx workflows are already built to be that foundation: human-verified, versioned and auditable from the day they’re built.

Customers don’t have to stand up a separate trust framework every time a new Cortex capability ships. They also don’t have to rebuild that framework every time the business changes or absorb a new round of change management with each rollout. Alteryx workflow outputs can power Cortex directly, so CoCo and CoWork reason over logic the business has already verified instead of logic it has to take on faith.

Built for how Snowflake customers already work

Alteryx One meets customers where their data already lives, and for a growing number of them, that’s Snowflake. Live Query lets analysts work with Snowflake data in place instead of extracting or replicating it just to get value from it. Workspace Execution extends that same idea to compute, letting workflows built in Designer Desktop run in the cloud without local machines or added infrastructure.

Take a finance or FP&A team trying to close the books faster or model a forecast against live Snowflake data. The old path usually ran through a request to data engineering, an extract, a wait and a spreadsheet that was already stale by the time it arrived.

With Alteryx One connected directly to Snowflake, that same analyst works in Live Query against governed data in place and hands off something the rest of the team can rerun the same way next quarter—with no shadow copy sitting in a downloads folder and no scramble to explain where a number came from when someone asks.

Alteryx has closed that gap for finance, operations and other business teams for years by giving nonengineers a way to reach governed data directly instead of routing every question through a technical team that’s already stretched thin. The Marketplace listing doesn’t change that. It just shortens the distance between deciding to try Alteryx and actually using it.

A few common questions

Does this replace how customers already connect Alteryx to Snowflake?

No. Existing Snowflake connections, In-Database processing and Snowpark integrations keep working as they do today. The Marketplace listing is a new way to discover and provision Alteryx One, not a replacement for anything customers have already built.

Does data leave Snowflake to use Alteryx One?

The Connected App model exists specifically so it doesn’t have to. Alteryx One’s logic runs against data inside the customer’s Snowflake account rather than requiring a full extract, and Live Query was built for working with that data in place.

Is this for IT or for business users?

Both. Business teams get a no-code way to work directly with governed data, and IT gets a single auditable layer between that data and the people using it, along with a procurement path that runs through infrastructure they already trust.

What if we’re already an Alteryx customer?

This listing is mainly a new front door for Snowflake customers evaluating Alteryx for the first time or existing customers looking to consolidate spend through a Snowflake Capacity commitment.

Getting started

Snowflake customers can find the Alteryx One listing on Snowflake Marketplace today.

Original source

Version: 2026.2 (For upgrade considerations as well as fixed and known issues, go to Release Notes)

New Features: Designer

AMP Engine Only for New Workflows

Important

The AMP engine is now the default engine for all new workflows.

Designer now uses the AMP engine as the default engine for all new workflows. New workflows no longer include an option to use the original engine by default.

Existing workflows retain their current engine setting, and you can configure them to use either engine. Once you save an existing workflow configured to use the AMP engine, you can't revert the change.

Workspace Indicator in Designer

The Designer window that launches from Alteryx One app has the same workspace name showing the currently selected workspace that shows in the Alteryx One app window.

• Users can see which workspace they selected.
• The selected workspace is visible in the separate Designer window.
• The visual context helps users understand the active workspace.

To switch workspaces, go to the Alteryx One app. You cannot switch workspaces in Designer.

Designer Offline and Alteryx One App

The Alteryx One app supports temporary and permanent offline scenarios. If you don't have an internet connection, you can still launch Designer from the Alteryx One app and activate Designer offline if needed. After activation, you can continue using Designer while offline. Available functionality is limited to the features that Designer supports in offline mode.

Note

If you use offline activation for Designer while connected to the internet, this scenario is not currently supported in version 2026.1. We recommend waiting to upgrade to Designer version 2026.1 until we address this scenario in a future upgrade.

AMP Engine Spill File Performance Improvement

The AMP Engine now uses a dynamic disk allocation strategy for spill files instead of fixed 256 KB blocks. Disk space is allocated based on the size of the compressed data, which can reduce disk usage and I/O overhead when workflows process highly compressible data, such as repetitive values.

Python Tool AMP Support

We've converted the Python tool to work natively with the AMP engine.

Designer Save Dialog Improvements

We've made a number of usability improvements to the Save As > Alteryx One experience in Designer. This includes adding tooltips, information banners, and the option to reset dependencies for packaged workflows.

• Updated the Location field value from Library to Alteryx One Library.
• Added tooltips to clarify the recommended usage for the various file types (.yxmd, .yxmc, .yxzp, etc).
• Added a note to clarify that only workflow packages (.yxzp) are executable when saved to the Alteryx One Library.
• Added the option to reset dependencies for packaged workflows.
• Added support for the dialog for both light and dark modes in Designer.

MapInfo TAB Date/Time Import

The Input Data tool includes a new Use String for Date/Time Types option for MapInfo TAB (.TAB) files.

By default, Designer imports date and time fields as strings to preserve existing behavior. Clear this option to import date, time, and datetime fields as native Alteryx data types for immediate use in date calculations and sorting.

If you execute the workflow on an earlier version of Server (2026.1 and earlier), this setting will be ignored.

Select Fields Option for Parquet Files

The Select Fields option, available for Parquet files, lets you specify a comma-separated list of fields to read. The Input Data and Dynamic Input tools read only the selected fields, which can reduce the amount of data your workflow processes.

This feature is currently available only in Designer. If you run the workflow on an earlier version of Server (2026.1 and earlier), you may notice differences in execution time because this optimization isn’t yet supported.

Control Container Error Reporting Improvement

Control containers now distinguish between recoverable errors and exceptions that indicate code defects. Recoverable errors continue to appear as informational messages or warnings, while code defects are reported as errors to help identify issues that require investigation.

Output Data Tool Updates and Dataset Support

We have updated the tool configuration UI in the Output Data tool, including an improved connection creation experience.

Additionally, you can now connect the Output Data tool to datasets that you have access to in your active Alteryx One workspace.

The output configuration panel also includes additional output actions: relational datasets support append, create, drop, and update, while file-based datasets support create and overwrite.

Data Support in Preview in 2026.2

This initial release of Alteryx One dataset support is in preview. Please note these requirements and limitations:

• This feature is currently in preview and is under active development. As Designer is updated, breaking changes might affect assets created in earlier versions, and the dataset configuration might need to be updated.
• Users can access only datasets for which they have permission as part of their Alteryx One user role (datasets must be available in the user’s workspace).
• You can access one dataset per Output Data tool.
• The Output Data tool supports connecting to and updating existing datasets. Creating new datasets isn’t currently supported.

Support for Microsoft Excel 97–2003 (XLS) files

You can continue to read from and write to Microsoft Excel 97–2003 (XLS) files by specifying the file path directly.

Designer now supports both 32-bit and 64-bit Microsoft Access Database Engine (ACE) drivers and automatically uses the latest installed version, preferring the 64-bit driver.

These changes align with the planned removal of 32-bit driver support starting in 2026.3.

Databricks ODBC Driver Compatibility

We've improved compatibility with the renamed Databricks ODBC Driver, replacing the legacy Simba Spark ODBC Driver. This update helps prevent connection and workflow issues when migrating from the legacy driver.

BigQuery Connector Support Enhancements

We've added a new MERGE / UPSERT write mode to the native BigQuery connector. You can now update existing records and insert new records in a single bulk write operation by defining match key columns. MERGE processing runs directly in BigQuery, simplifying incremental data-loading workflows and providing a more consistent experience across cloud data warehouse connectors.

Standardized DCM Connector Configuration Experience

We've standardized DCM connector forms across major connectors to provide a more consistent configuration experience. This update introduces clearer technology and authentication names, streamlined forms with improved field organization and help text, and removes redundant options to simplify connector setup.

New Features: AI Tools

AI Tools Improvements

Added various AI tool improvements:

• Improved overall tool performance.
• Improved authentication error handling.
• Updated Invoice Extractor to use the gemini-2.5-flash model.
• Updated Schema Fit to preserve output data and handle metadata correctly.
• Updated Prompt Builder text handling to prevent overflow.
• Updated Prompt Builder test runs to omit unset optional model settings and show generated content validation errors.

Original source

What's Changed

💙 Community Highlight

[PM-37648] Fix double HTML encoding in emergency access emails by @singhvishalkr in #7652

Feature Development

[PM-38928] - Add name, email to org user update by @jrmccannon in #7871
Seeder: add --owner-email and --org-name CLI override flags by @JaredSnider-Bitwarden in #7870
[PM-28365] - Add Feature Flag Admin Initiated Member Email change by @jrmccannon in #7887
[PM-37514] Support Teams 2019 Migration by @sbrown-livefront in #7864
[PM-38798] Create validation link confirmation by @JimmyVo16 in #7895
Auth/PM-39774 - Redirect existing users without org membership back to /login on SSO callback by @JaredSnider-Bitwarden in #7890
[PM-39745] Scaffold PAM access-rule endpoints by @Hinton in #7878
[PM-34393] Add event logging for organization invite link actions by @r-tome in #7826
[PM-39798] Scaffold PAM access-request endpoints by @Hinton in #7893
[PM-39557] Replace invite link key columns with an opaque Invite blob by @r-tome in #7896
[PM-37954] Add Command for Provisioning Staged OrganizationUsers by @sven-bitwarden in #7859
[PM-32187] Add Send Type restriction to Send Controls policy by @mcamirault in #7504
[PM-36965] feat: Add SeederApi scene for migration cohort CSV-export testing by @cyprain-okeke in #7906
[PM-38567] Migration Renewal Copy Dynamic Update by @sbrown-livefront in #7921
[PM-38101] Add Staged Provision API Fields by @sven-bitwarden in #7927
[PM-31929] Add deletion days restriction to Send Controls policy by @mcamirault in #7506
[PM-36505] Finalize Send Controls policy, add second feature flag to enable/disable logic by @mcamirault in #7943
[PM-38927] - Extract Organziation User Role Validation by @jrmccannon in #7876
[PM-39210] fix: Block converting a Secrets-Manager-enabled org to a Business Unit Portal by @cyprain-okeke in #7892
[PM-38796] Create link confirmation endpoint by @JimmyVo16 in #7907
[PM-40085] Remove initial delay on self-hosted database migration by @trmartin4 in #7917
[PM-39976] Scaffold PAM lease endpoints by @Hinton in #7925
added new env var to alter backup filename TZ by @keithhubner in #7956
[PM-37944] Differentiate Send events according to domain by @harr1424 in #7690

🐛 Bug fixes

[PM-39584] fix: Gate migration grace service accounts on Secrets Manager presence by @amorask-bitwarden in #7897
[PM-39816] fix: Raise migrated Password Manager seats to cover Secrets Manager seats by @amorask-bitwarden in #7904
[PM-39805] fix: Expose SM migration-grace service accounts on subscription response by @amorask-bitwarden in #7901
[PM-38000] Convert text feilds for email to email fields for form validation by @BTreston in #7908
[PM-39164] Gate Access Intelligence report reads on new-architecture flag by @Banrion in #7825
fix(codeowners): Reorder Docker rules to fix owner override by @fntyler in #7937
[PM-35198] - remove orphaned blob attachments after deletion by @jaasen-livefront in #7539
[PM-40002] Fix Teams 2019 Migration Display by @sbrown-livefront in #7933
[SHOT-215] fix: Migrate legacy identity.pfx to modern encryption on update by @mimartin12 in #7942
[PM-39554] Create default collection for demoted admin by @BTreston in #7918
[PM-38595] Get collection permission with users and groups by @BTreston in #7945
[PM-38827] Remove errant org membership check by @BTreston in #7929
[PM-40128] Adjust enforcement message when Send is noncompliant with … by @mcamirault in #7946
[PM-39909] fixed LINQ error when saving send controls by @itsadrago in #7939
[SHOT-219] fix: build nginx image for arm64 architecture by @mimartin12 in #7944
[PM-40281] convert to text field by @BTreston in #7971
[PM-40516] Fix Extended Cache Service Registration by @sven-bitwarden in #8007

⚙️ Maintenance

add MyItems to ApplyEnterpriseFeatures by @nthompson-bitwarden in #7882
[PM-31107] Seeder: blob-migration preset + fido2/password-history/linked-field fixture support by @shane-melton in #7809
[PM-19169] Remove feature flag pm-19148-innovation-archive by @jengstrom-bw in #7884
[PM-29251] Remove pm-23384-browser-premium-spotlight feature flag by @jengstrom-bw in #7885
Seeder: fix RecipeOrchestratorIntegrationTests build after SeederDependencies arity change by @JaredSnider-Bitwarden in #7888
Minor but important doc update to align with other overrides by @theMickster in #7889
[PM-39734] Support Minimal API endpoints in OpenAPI by @Hinton in #7874
[PM-39512] Stricter data protection errors by @justindbaur in #7837
[PM-35812] Remove BulkAutoConfirmOnLogin feature flag logic by @JaredScar in #7902
[BRE-1533] Trigger Bitwarden Lite for server builds (including PRs) by @vgrassia in #7905
Relax cert check on development builds by @justindbaur in #7912
Seeder - Bump RustSdk to the latest release of sdk-internal by @theMickster in #7903
Opt the Aspire project out of package locking by @justindbaur in #7916
add new cipher type scenes by @rdaugherty in #7911
[deps]: Update github-action minor by @renovate[bot] in #7006
test(accounts-controller): Move tests under Auth/ directories for CODEOWNERS. by @enmande in #7658
PM-39866 - Enhance seeder to seed archive and deleted ciphers by @theMickster in #7923
Add Seeder query to get email codes by @bnagawiecki in #7880
Add OrganizationUserInviteQuery by @bnagawiecki in #7915
[BRE-2039] ci(docker): add distroless FIPS gov.Dockerfile variants by @fntyler in #7875
[PM-32699] Utilize cache to check ability of useMyItems if available by @JaredScar in #7922
[PM-37469] UseRiskInsights organization ability: migration, plan mapping, admin toggle, license, and endpoint guard by @AlexRubik in #7782
[BRE-1907] Add artifact manifest to build.yml by @gitclonebrian in #7920
[BRE-2039] chore: cleanup dockerfile comments by @fntyler in #7935
Refactor Skill(bump-rust-sdk) to align with current workflow & best practices for skill evaluation by @theMickster in #7909
[PM-33045] Remove FeatureRoutedCacheService by @JimmyVo16 in #7931
chore(ci): add platform-community code-review signal by @addisonbeck in #7948
[PM-38209] Remove pm-26961-access-intelligence-trend-chart feature flag by @lastbestdev in #7840
[BRE-1907] Corrected artifact manifest container image format by @gitclonebrian in #7938
Auth/PM-38811 - KM - Update RotateUserAccountKeysCommand to use MasterPasswordService by @JaredSnider-Bitwarden in #7804
Bumped version to 2026.7.0 (#7967) by @addisonbeck in #7970

📦 Dependency Updates

[PM-39443] pin automapper dependency to under v15 by @itsadrago in #7856
[deps]: Update actions/upload-artifact action to v7 by @renovate[bot] in #7219
[deps]: Update Microsoft.NET.Test.Sdk to v18.7.0 by @renovate[bot] in #7777
[deps] Tools: Update MailKit to v4.17.0 by @renovate[bot] in #7775
[deps] BRE: Update nginx Docker tag to v1.31 by @renovate[bot] in #7932

🎨 Other

Stripe integration tests by @justindbaur in #7828
[VULN-649] ci: Remove deprecated scan workflow by @theMickster in #7851
Auth - Tokenables Claude Rule Update - Add binding-property lockdown and known-limitation note by @JaredSnider-Bitwarden in #7900
Create exploring-bitwarden-data Claude Skill by @theMickster in #7763

New Contributors

@rdaugherty made their first contribution in #7911
@singhvishalkr made their first contribution in #7652

Full Changelog: v2026.6.2...v2026.7.0

Original source

What's Changed

Feature Development

[PM-38393]: add debug-disable-self-host-premium-check feature flag by @kdenney in #7805
[PM-36158] - Fix org cipher push notifications to fan out per authorized user by @jaasen-livefront in #7522
[PM-36963] Bulk cohort assignment by @kdenney in #7792
[PM-37513] feat: Add Enterprise 2019 to current pricing migration path by @cyprain-okeke in #7819
[PM-34023] Remove 2FA account recovery flag by @eliykat in #7815
[PM-39257] Add feature flag pm-32380-btn-text-add-create by @jengstrom-bw in #7833
[PM-32116] Remove pm-32111-provider-ability-extended-cache logic by @JimmyVo16 in #7838
[PM-39102] Feature Flag for Staged Status by @sven-bitwarden in #7844
[PM-36865] Removes the feature flag from the constants of the server-side code by @JaredScar in #7849
[PM-30806] Self service change email command by @ike-kottlowski in #7740
[PM-38851] Crypto cipher suite feature flag by @mzieniukbw in #7852
[PM-38422] feat: Stack customer-level discount with churn and migration discounts by @amorask-bitwarden in #7831
[PM-37512] feat: Add Teams Starter to current pricing migration path by @amorask-bitwarden in #7827
[PM-36965] feat: Add CSV export of cohort to cohort management table by @cyprain-okeke in #7847
[PM-38922] - Adding Problem Details Result by @jrmccannon in #7853

🐛 Bug fixes

[PM-38830] fix: Surface fixed-amount and time-bounded discounts in billing API by @amorask-bitwarden in #7814
fix broken auto confirm policyRequirement check for org scoped request by @BTreston in #7839
[PM-36574] fix: scope provider client invoice report to the authorized provider by @connerbw in #7770
[PM-39237] fix: Handle mismatched and orphaned migration cohort assignments in admin dropdown by @cyprain-okeke in #7836
[PM-39562] fix: Reconcile org seats to billed quantity on packaged-plan migration by @amorask-bitwarden in #7869
[PM-39569][PM-39286] fix: Wait for Stripe test clock before migration grace write by @amorask-bitwarden in #7872

⚙️ Maintenance

[BRE-1969] Add Docker login with OAT to Build workflow by @vgrassia in #7835
[PM 34707] Use new shared enforce label workflow by @djsmith85 in #7834
add AccessSecretsManager to OrganizationUserScene by @nthompson-bitwarden in #7860
[PM-39474] - Updating Lock Files by @jrmccannon in #7862
[PM-33402] Remove Feature-Flagged Logic: pm-33398-refactor-members-invite-org-users-command by @sven-bitwarden in #7855
[PM-33403] Remove Feature Flag (pm-33398) by @sven-bitwarden in #7865
Add ability to enable SM on SingleOrgScene by @bnagawiecki in #7861
[PM-39561] Copy ListResponseModel from Api to HttpExtensions by @Hinton in #7868
PM-33964 - Resolve defect in premium user licensing by @theMickster in #7788
Bump version to 2026.6.2 by @github-actions[bot] in #7879

📦 Dependency Updates

[deps] Platform: Update Microsoft.AspNetCore.SignalR.Protocols.MessagePack to v10.0.9 [SECURITY] by @renovate[bot] in #7817

🎨 Other

[PM-34053] Add new GET endpoint for fetching key data for user key rotation by @Thomas-Avery in #7772
[PM-29129] Add Policy Update Event README by @JimmyVo16 in #7159
[PM-34779] Add accept invite link endpoint by @r-tome in #7812
[PM-31884] Add access control support to Send Controls policy by @mcamirault in #7417
[PM-36158] - bump migration file name by @jaasen-livefront in #7820
[PM-39129] Add UsePam organization capability by @Hinton in #7816
[PM-39293] Remove v2 naming from account recovery command by @eliykat in #7842
Auth/PM-38742 - SSO Invited Existing User Flow Improvement - Redirect on error by @JaredSnider-Bitwarden in #7785
[BEEEP] - Model Binding for Org and Org User Validation by @jrmccannon in #7724
[PM-38769] Fix OrganizationConnectionsController logic by @eliykat in #7845
[PM-37953] Add OrganizationUserStatusType.Staged, Remove Ordinal Checks by @sven-bitwarden in #7780
[PM-32108] - Remove FF for org ability cache by @jrmccannon in #7821
llm(rules): Auth tokenables must be minted via factory. by @enmande in #7857
Revert "[PM-38851] Crypto cipher suite feature flag" by @mzieniukbw in #7863
Add PM39071_DefaultPasswordManagerPrompt constant by @differsthecat in #7866
[PM-38456]: Allow License Generation for Sales Trial Orgs by @sbrown-livefront in #7793
[PM-35314] Backfill Revocation Reasons to All Users by @sven-bitwarden in #7713
Removed feature flag for organization features caching
Removed feature flag for member controller refactor
Removed feature flag for collections component refactor
Added new ‘staged’ status for organization members
Invited users no longer reach dead end when attempting to log in with SSO
Fixed cases where new device login protection email could not be re-sent
Various under-the-hood improvements and minor bug fixes
Full Changelog: v2026.6.1...v2026.6.2

Original source

Every analytics journey starts with a question: Where should I begin? Which tool should I use? How do I prepare this data? How do I turn an idea into a workflow?

Ask Alteryx is now available in Alteryx One to help answer those questions faster.

Ask Alteryx is an AI-powered analytics assistant that lets users ask questions in natural language and get guidance inside the Alteryx experience. Whether you are new to Alteryx or looking for a faster way to navigate common analytics tasks, Ask Alteryx helps you learn platform capabilities, understand workflows and datasets, find recommended next steps, and get started building.

A Faster Way to Get Started in Alteryx One

In Alteryx One, Ask Alteryx helps users explore the platform and move from question to action. You can ask about workflows, datasets, reports, plans, data preparation, and more.

For example, you can ask:

“How do I prepare data for analysis?”

“How do I connect to a dataset?”

“What tools remove duplicate rows?”

“How do I schedule a workflow?”

“How do I share assets with other users?”

Instead of searching across docs or guessing where to go next, users can ask Ask Alteryx directly from the Alteryx One home page and review a generated response.

From Answers to Action

Ask Alteryx does more than respond with information. It can also suggest actions based on what you are trying to do.

Depending on your question, Ask Alteryx may recommend next steps like connecting to data, exploring datasets, learning more about a feature, opening related documentation, or launching Designer to begin building a workflow.

That makes Ask Alteryx especially useful for teams that want to reduce friction across the analytics process. New users can build confidence faster, experienced users can find the right path more quickly, and organizations can help more people get value from Alteryx One.

Built for Analytics Workflows

Ask Alteryx is designed around the work users are already doing in Alteryx. In Alteryx One, it can help you understand platform capabilities and common analytics tasks. In Designer, Ask Alteryx can also help users build workflows, understand tools, troubleshoot issues, and even add preconfigured tools to the canvas.

Together, these experiences make Ask Alteryx a helpful assistant across the analytics lifecycle, from learning what is possible to taking the next step in a workflow.

Start Asking

Ask Alteryx is available from the Alteryx One home page in the browser and app.

Try asking a question the next time you are getting started with a dataset, exploring a workflow, or figuring out which step to take next. And as always, review AI-generated responses before using them in production workflows or business processes.

Get a free trial to try Ask Alteryx for yourself. If you want help getting set up or learning more, check out the Alteryx Knowledge Base.

Original source

Overview

Added more argon2id configurations to prelogin endpoint

Improved validation of access intelligence reports

Add support for plan plan migration paths

Various under-the-hood improvements and minor bug fixes

What's Changed

Feature Development

[PM-34909] Serve only validated report files from get-latest and self-hosted file endpoints by @AlexRubik in #7465

[PM-33951] automatically confirm pending users on admin login by @JaredScar in #7527

[PM-35395] MasterPasswordService Key Management Integration by @enmande in #7637

[PM-37595] Use New OrganizationUserStatusType Columns by @sven-bitwarden in #7693

[PM-31191] New Argon2id configuration into prelogin by @mzieniukbw in #7708

chore(server): add FedRampGovRegion feature flag constant by @addisonbeck in #7726

feat(server): add Gov cloud region by @addisonbeck in #7730

[PM-36951] Add Billing Plan Migration Cohorts Admin UI by @kdenney in #7732

[PM-37589] - Add PM29968_FillAfterSave feature flag by @jaasen-livefront in #7733

[PM-37087] Release migration schedule before adding org to provider" by @cyprain-okeke in #7737

[PM-38416] Add Bitwarden-Region to HTTP request to the pricing service by @justindbaur in #7749

[PM-37070] feat: Add business plan migration renewal email by @cyprain-okeke in #7755

[PM-37085] feat: Release migration schedule on organization plan upgrade by @amorask-bitwarden in #7757

[PM-34778] Implement AcceptOrganizationInviteLinkCommand by @r-tome in #7759

Set fill assist server urls by @differsthecat in #7761

[PM-38265] Enhance TwoFactorIsEnabledQuery to use a dictionary for two-factor authentication results by @r-tome in #7764

[PM-37510] feat: Grandfather Secrets Manager machine accounts for Enterprise 2020 migrations by @amorask-bitwarden in #7765

[PM-38163] Add endpoint to retrieve organization policies by invite link code by @r-tome in #7767

[PM-37228] feat: Add scheduled price increase to organization warnings by @amorask-bitwarden in #7790

[PM-37292] - update feature flag by @jaasen-livefront in #7791

[PM-33408] Add OrganizationUser_NotificationBannerActionClicked EventType by @jengstrom-bw in #7796

[PM-37875] Make webauthn available on all platforms by @quexten in #7801

🐛 Bug fixes

Auth/PM-38129 by @JaredSnider-Bitwarden in #7743

Dirt/pm 38134 access intelligence report not generating by @prograhamming in #7748

[PM-37168] Fix missing expiration check. by @JimmyVo16 in #7760

Auth/PM-38588 - Login and Refresh backfill CurrentContext for LaunchDarkly Feature Flag Evaluation by @JaredSnider-Bitwarden in #7766

Auth/PM-38648 - Refactor device last-activity cache to use configurable TTL by @JaredSnider-Bitwarden in #7773

[PM-38729] fix: Reflect all discounts in 2020-migration renewal email by @cyprain-okeke in #7786

Aspire: Fix Self-Host Development Configuration by @sbrown-livefront in #7803

fix broken auto confirm policyRequirement check for org scoped request by @BTreston in #7839

fix broken auto confirm policyRequirement check for org scoped reques… by @BTreston in #7848

⚙️ Maintenance

Auth/PM-32102 - (1) Create ConvertUserToKeyConnectorCommand (2) Remove salt and hint on key connector conversion by @JaredSnider-Bitwarden in #7692

[PM-38116] Harden SSRF protection in IPAddressExtensions by @jengstrom-bw in #7721

[PM-38165] Improve Data Protection error handling and constrain plaintext input by @harr1424 in #7734

[PM-13330] Move collection SQL files to AC Team by @eliykat in #7758

[SHOT-96] Apply new http2 directive by @mimartin12 in #7769

[PM-38338] Drop Unused Sprocs by @sven-bitwarden in #7789

[PM-37511] test: Add Teams 2020 + Secrets Manager migration tests by @cyprain-okeke in #7799

📦 Dependency Updates

[deps] BRE: Update mcr.microsoft.com/mssql/server Docker tag to v2025 by @renovate in #6447

[deps]: Update webpack-cli to v7 by @renovate in #7348

[deps] Auth: Update Auth dotnet dependencies to v10.0.8 by @renovate in #7604

[deps]: Update dotnet monorepo by @renovate in #7605

[PM-36584] Bidirectional C2 in icons.bitwarden.net by @jengstrom-bw in #7668

[AppSec] Add packages.lock.json files for dependency locking by @aikido-autofix in #7725

Bump version to 2026.6.0 by @github-actions in #7747

[deps]: Update sass-loader to v17 by @renovate in #7779

PM-37021 - Fix dotnet deps version bump failure to modify packages.lock.json by @JaredSnider-Bitwarden in #7787

Pin nginx image to a specific version by @mimartin12 in #7802

[DBOPS-177] Update MSSQL Docker image to SQL Server 2025 CU5 by @mkincaid-bw in #7806

[deps] Platform: Update MessagePack to v3.1.7 [SECURITY] by @renovate in #7807

Bump version to 2026.6.1 by @github-actions in #7813

🎨 Other

Document migration workflow in .claude/CLAUDE.md by @Hinton in #7689

Update EmergencyAccessInviteQuery to return encoded URLs and a JSON object by @bnagawiecki in #7741

[bre-1835] update SeederApi Base Image by @aj-bw in #7771

Add SingleOrganizationScene to seeder by @bnagawiecki in #7781

Add 3 more Org Scenes by @bnagawiecki in #7798

Full Changelog: v2026.6.0...v2026.6.1

Original source