Bitwarden Release Notes

What's Changed

[PM-38565] Replace tray settings with "Keep Bitwarden running in the background" by @quexten in #21044
[PM-18344] Implement Clipboard Support on Wayland/Gnome via RemoteDesktop Portal by @quexten in #21068
Bump client version(s) by @github-actions[bot] in #21271
[PM-38362] fix(powermonitor): Improve connection handling and remove unwraps by @ChihweiLHBird in #20919
[BRE-2013] Fix repo name in PR description link by @vgrassia in #21276
[PM-25277] SSH Key desktop translations by @nick-livefront in #21208
[PM-34926] Allow single-character CJK vault searches by @jaasen-livefront in #21013
[PM-32423] Add a less confusing argument and environment variable name to disable updates by @marcquark in #19045
Auth/Add CLAUDE.md files to angular/src/auth and common/src/auth on file organization + barrel files by @JaredSnider-Bitwarden in #21283
fix(codeowners): Added environment selector to auth's responsibilities by @Patrick-Pimentel-Bitwarden in #21284
[PM-35212] - allow bulk archive/unarchive of items in a collection by @jaasen-livefront in #20920
[PM-37752] - fix collections control when extension loses focus by @jaasen-livefront in #20812
[PM-39048] Feat: scaffold @bitwarden/pam library by @Hinton in #21259
Update sdk-internal to 0.2.0-main.843 by @bw-ghapp[bot] in #21233
[PM- 38988] Fix Trial Dialog Dismissal Caching by @sbrown-livefront in #21240
[PM-38892] Remove unused methods invokeMenu and openContextMenu by @djsmith85 in #21197
[PM-34779] Add accept method to OrganizationInviteLinkApiService by @r-tome in #21266
[PM-31884] implemented controls for send policy access dropdown by @bmbitwarden in #19777
[PM-38958] Add ESLint no package self import rule by @quexten in #21198
Auth/PM-38298 - Org Invite Acceptance Refactor by @JaredSnider-Bitwarden in #21011
[PM-35059] Coachmark tour for Access Intelligence by @voommen-livefront in #20808
[PM-38830] fix: Display fixed-amount and repeating churn discounts by @amorask-bitwarden in #21281
[PM-38580] Adds copy to invite member role select by @BTreston in #21280
[PM-38787] Pin vault bulk-actions bar to the viewport on scroll by @nick-livefront in #21154
[PM-38275] Fix at-risk application count in Access Intelligence v2 drawer by @Banrion in #21265
[PM-34023] Remove 2FA account recovery flag by @eliykat in #21291
[PM-35288] feat: auto-close sso tab after authentication completes by @sander-adamse in #20213
[deps] Platform: Update webpack-dev-server to v5.2.4 [SECURITY] by @renovate[bot] in #20700
PM 35229 [Browser/Desktop] Stripe Checkout from upgrade dialog by @cyprain-okeke in #20592
[PM-36835] implement logging in the weak-passwords component by @voommen-livefront in #21305
[PM-38286] Fix Access Intelligence at-risk drawer can reopen by @Banrion in #21314
Update sdk-internal to 0.2.0-main.849 by @bw-ghapp[bot] in #21299
Revert "[PM-36835] implement logging in the weak-passwords component" by @voommen-livefront in #21343
Revert "Revert "[PM-36835] implement logging in the weak-passwords component"" by @voommen-livefront in #21344
[PM-32445] Extension Scrollbar Fix by @rr-bw in #20478
[PM-39182] Migrate to relative imports - @bitwarden/team-platform-dev by @quexten in #21334
[PM-39182] Migrate to relative imports - @bitwarden/team-tools-dev by @quexten in #21326
[PM-39182] Migrate to relative imports - @bitwarden/team-autofill-dev by @quexten in #21332
IPC Desktop <-> Browser transport by @coroiu in #19908
[CL-1223] simplify banner component by @BryanCunningham in #21301
[PM-34053] Swap verify trust to new SDK method by @Thomas-Avery in #21347
[PM-39070] Create new permissions screen by @dan-livefront in #21311
[PM-39182] Migrate to relative imports - @bitwarden/team-vault-dev by @quexten in #21331
[PM-39129] Add UsePam organization capability by @Hinton in #21298
[PM-39206] use block input to ensure radios are displayed stacked by @BryanCunningham in #21361
Auth/PM-35783 - Fix Org Invite Policy State Pollution and State Clearing Issue by @JaredSnider-Bitwarden in #21218
[PM-39200] - fix notification bar behavior with save and fill by @jaasen-livefront in #21351
Remove unneeded import for ChipActionComponent by @jengstrom-bw in #21342
[PM-38409] - update custom field value on reorder by @jaasen-livefront in #21137
[PM-38581] - disable drag for single custom fields by @jaasen-livefront in #21136
[Sm-1934] Fixing showing 10/123 secrets issue by @cd-bitwarden in #20783
[PM-39195] Add banner to scimv2 component for invite link by @BTreston in #21363
[PM-39008] Do not show save new password inline menu over generate password menu if a new password has not been filled by @jprusik in #21244
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #21380
[PM-39295] Fix SDK IPC messages being parsed by legacy IPC, resetting the connection by @quexten in #21387
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #21379
fix(platform): remove hardcoded vault.bitwarden.com checks in getSendUrl and getScimUrl by @addisonbeck in #21373
[PM-39293] Remove v2 naming from account recovery dialog by @eliykat in #21386
[PM-38760] Recursively create directory when writing manifest by @pschlan in #21141
Disable self import rule by @quexten in #21410
[BEEEP] [PM-38226] Add disable auto-start option for snap by @quexten in #20855
[PM-39182] Migrate to relative imports - @bitwarden/team-key-management-dev by @quexten in #21333
[PM-39182] Migrate to relative imports - @bitwarden/team-ui-foundation by @quexten in #21328
PM-37236 resolved password button issue on browser by @bmbitwarden in #21359
[PM-39182] Migrate to relative imports - @bitwarden/team-auth-dev by @quexten in #21330
[PM-39182] Migrate to relative imports - @bitwarden/team-billing-dev by @quexten in #21325
[PM-39182] Migrate to relative imports - @bitwarden/team-admin-console-dev by @quexten in #21329
[PM-39182] Migrate to relative imports - @bitwarden/team-data-insights-and-reporting-dev by @quexten in #21327
[PM-12043] Remove usage of ActiveUserState from biometric-state.service by @mzieniukbw in #20860
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #21381
[PM-38834]Allow programmatic changes to Firefox settings by @dan-livefront in #21177
[deps] Platform: Update Rust crate serde_with to v3.21.0 by @renovate[bot] in #21407
[SM-1993][CL-1227] Fix textarea height and fix SM button spacing by @vleague2 in #21417
[PM-37986] Centralized ownership UI rework by @BTreston in #21348
Bump client version(s) by @github-actions[bot] in #21420
[PM-35230] clients Web Checkout success page by @cyprain-okeke in #20653
Auth/PM-38742 - SSO Invited Existing User Flow Improvement - Show SSO redirect error notification on LoginComponent by @JaredSnider-Bitwarden in #21134
[PM-39392] Use readonly styles for fields intended to be readonly by @vleague2 in #21425
[PM-36864] Refactor vault routing to use VaultV2Component directly, removing feature flagged code by @JaredScar in #21419
[deps] Platform: Update @babel/core to v7.29.6 [SECURITY] by @renovate[bot] in #21277
[PM-37875] Automatic V2 Upgrade Migration by @quexten in #20831
[deps]: Pin dependencies by @renovate[bot] in #21406
[PM-38778]Make Bitwarden default password manager, callout implementation. by @dan-livefront in #21156
[PM 34708] Use new shared enforce label workflow by @djsmith85 in #21365
[PM-39195] Back port banner to old component by @BTreston in #21415
[PM-34580] Rename "Note" to "Secure note" for SecureNote cipher type by @nick-livefront in #21423
[PM-39204] Add extra spacing to vault items when batch bar is visible by @nick-livefront in #21390
[PM-34331] Update electron to 41 by @dani-garcia in #20448
PM-39289 fixed close to done, misplaced popover and alignment by @voommen-livefront in #21437
[PM-36443] fix microsoft totp autofill by @danysigha in #20481
[deps] Platform: Update webpack-dev-server to v5.2.5 [SECURITY] by @renovate[bot] in #21404
[PM-33740] Remove unlock service for password flagged logic by @mzieniukbw in #21427
[PM-39351][PM-39353][PM-39369] Update Angular to 21.2.17 by @vleague2 in #21377
[PM-32249] Electron custom file protocol by @dani-garcia in #19208
[PM-33285] Enhance privacy in password leak detection with response padding by @TheDcoder in #19439
[CL-1228] hide actions container if empty and always render button outside by @BryanCunningham in #21440
[PM-37555] add autofill lifecycle by @audreyality in #20949
[deps] Fix Rust nightly toolchain reference in lint workflow by @coroiu in #21457
[PM-37932] Make IPC content script re-injection idempotent by @coroiu in #21451
[PM-38904] - Managed to Claimed Rename by @jrmccannon in #21430
add data-testids to log in elements by @nthompson-bitwarden in #21458
[PM-39290] Coachmark navigation in v2 by @voommen-livefront in #21456
Update sdk-internal to 0.2.0-main.857 by @bw-ghapp[bot] in #21393
[PM-33408] Add OrganizationUserNotification banner to vault by @jengstrom-bw in #21209
[PM-37807] Implement VaultBatchBarComponent on organization vault by @gbubemismith in #21345
[PM-27041] - CLI - respect passphrase param in /generate by @jaasen-livefront in #21290
[PM-38190] Improve sanitization of storybook args helper by @vleague2 in #21362
[PM-39429] remeasure bulk actions bar width when actions change by @BryanCunningham in #21443
[deps] Vault: Update @koa/router to v15.6.0 by @renovate[bot] in #21114
[PM-32696] Add data field to Cipher object to support blob encryption by @nikwithak in #20765
[deps] Vault: Update https-proxy-agent to v9.1.0 by @renovate[bot] in #21408
Update sdk-internal to 0.2.0-main.859 by @bw-ghapp[bot] in #21475
change link for terraform integration in SM GUI by @vlad-trofimov in #21285
[PM-38109] fix(browser): use direct clipboard API when popup has DOM access by @RobinAngele in #20859
[PM-39141] Fail Safari packaging script on xcodebuild/codesign errors and missing executable by @quexten in #21307
manually recompile select css by @BryanCunningham in #21488
[PM-24223] Add feature flagged support for password v2 registration by @eligrubb in #20782
[PM-39179] fix(desktop): correct various typos in desktop application by @luojiyin1987 in #21322
[PM-38345] block account, remove card, remove free fam, and desktop autotype to simple toggle by @JaredScar in #21097
[PM-39440] Refactor domain verification dialog to improve form control handling by @JaredScar in #21476
Auth/BEEEP/PM-21301 - Move SelfHostedEnvConfigDialog out of libs/auth by @JaredSnider-Bitwarden in #21268
[CL-1225] Berry should hide when count is 0 in toggle group by @vleague2 in #21491
[SM-1483] Fix self-hosted environment URLs in Secrets Manager config by @vincentsalucci in #21375
PM-39449 resolved root url issues by @bmbitwarden in #21468
[PM-3841] - Default the new collection organization select to the active org by @jaasen-livefront in #21374
[PM-39576] - [Defect] Coachmark tour page number is displaying "$CURRENT$ of $TOTAL$" in main. by @jaasen-livefront in #21496
[PM-38343] 2 step and require sso and remove unlock and remove export into simple toggle by @JaredScar in #21092
[PM-33410] Add organizationusernotification banners to vault desktop by @jengstrom-bw in #21462
[PM-38643] Fix default broken on wayland only systems by @quexten in #21079
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #21506
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #21507
[PM-29785] Abstract Windows Passkey Plugin Authenticator COM implementation by @iinuwa in #20285
[PM-39182] Enable no relative imports rule by @quexten in #21515
[PM-38985] Fix CipherResponse/CipherData type confusion in archive and emergency access services by @nick-livefront in #21237
[PM-36835] Logging to reports by @voommen-livefront in #21512
[PM-36841] Align Subtitles for all new Item Types by @jengstrom-bw in #21316
[PM-33409] Add organizationusernotification banner to vault browser by @jengstrom-bw in #21461
[PM-39610] Keyboard shortcuts only work once by @gbubemismith in #21520
[PM-23485] Use a staticlib for UniFFI by @iinuwa in #21495
reduce select label font size by @BryanCunningham in #21525
[deps]: Update Rust crate pbkdf2 to v0.13.0 by @renovate[bot] in #20581
Bumped client version(s) (#21554) by @addisonbeck in #21555

New Contributors

@ChihweiLHBird made their first contribution in #20919
@marcquark made their first contribution in #19045
@sander-adamse made their first contribution in #20213
@pschlan made their first contribution in #21141
@danysigha made their first contribution in #20481
@TheDcoder made their first contribution in #19439
@RobinAngele made their first contribution in #20859

Full Changelog: web-v2026.6.3...web-v2026.6.4

Original source

Overview

Enhanced encryption support across more account sign-up methods

Improved account security and data protection

Faster, more reliable vault syncing

Fixed an issue that could cause sign-in errors

What's Changed

✨ Community Highlight

[PM-37654] fix: Route vault icon downloads through mTLS-aware URLSession by @jalenfran in #2658

Feature Development

[PM-38147] feat: Convert premium checkout to ASWebAuthenticationSession by @andrebispo5 in #2713

[PM-37283] feat: Add Upgrade to Premium button to file send premium required alert by @andrebispo5 in #2726

[PM-37903] feat: Show Upgraded to Premium action card on all tabs by @andrebispo5 in #2688

[PM-38151] feat: Complete Passport SDK bridge by @SaintPatrck in #2578

[PM-27235] feat: Support v2 encryption on JIT password signups by @matt-livefront in #2717

[PM-38394] feat: Update settings plan row visibility by @andrebispo5 in #2736

[PM-27240] feat: Support v2 encryption on TDE signups by @matt-livefront in #2724

[PM-38148] feat: Add License to vault list and search by @SaintPatrck in #2728

[PM-38143] feat: Add Bank Account to vault list and search by @SaintPatrck in #2729

[PM-38507] feat: Add Binding initializer to ExpandableHeaderView by @SaintPatrck in #2583

[PM-38440] feat: Add fill-assist-targeting-rules feature flag by @andrebispo5 in #2752

[PM-27238] feat: Support v2 encryption on key connector signups by @matt-livefront in #2648

[PM-37961] feat: Handle policiesNew and organizationsNew by @fedemkr in #2692

[PM-38149] feat: Add Driver's License Add/Edit screens by @SaintPatrck in #2746

[PM-38152] feat: Add Passport to vault list and search by @SaintPatrck in #2730

[PM-29571] feat: Save password credentials without user interaction by @fedemkr in #2749

[PM-37962] feat: Decode providerOrganizations and surface isProviderUser by @fedemkr in #2693

[PM-27138] feat: Add credit card input form to Test Harness by @morganzellers-bw in #2744

[PM-38176] feat: Expose policies client SDK for policy evaluation by @fedemkr in #2727

🐛 Bug fixes

[PM-38200] fix: Migrate collections update to v2 endpoint by @KatherineInCode in #2723

fix: Restore executable bit on fix-ellipsis-changes.sh by @SaintPatrck in #2759

[PM-31723] fix: Unlock vault error when missing login data by @LRNcardozoWDF in #2635

[PM-38978] [RC] fix: Hide Plan settings row for organization-only premium users by @matt-livefront in #2785

⚙️ Maintenance

PM-36952 - Improve code review workflow with added triggers by @theMickster in #2662

Crowdin Pull by @bw-ghapp[bot] in #2697

[PM-35398] refactor: Promote ExpandableHeaderView from AuthenticatorShared to BitwardenKit by @SaintPatrck in #2582

[PM-38428] ci: Fix codecov ignore patterns and exclude mock files by @fedemkr in #2740

[PM-29574] refactor: Rename AutofillExtensionMode to CredentialProviderMode by @fedemkr in #2741

[PM-37617] ci: Add weekly cron job to run fix-localizable-strings by @KatherineInCode in #2655

[PM-38533] chore: Fix flaky tests by @fedemkr in #2751

[PM-35680] chore: Convert PlatformClientService to AutoMockable by @matt-livefront in #2750

chore: Include new item type data in cipher requests by @SaintPatrck in #2756

[PM-37569] chore: Remove cipher key encryption feature flag by @morganzellers-bw in #2681

Crowdin Pull by @bw-ghapp[bot] in #2765

[PM-38861] [RC] chore: Disable save password credential iOS 26 API on the extension by @fedemkr in #2784

📦 Dependency Updates

[deps]: Update SnapshotTesting to v1.19.2 by @renovate[bot] in #2703

Update public suffix list by @github-actions[bot] in #2733

[deps]: Update SwiftUIIntrospect to v26 by @renovate[bot] in #2706

Update SDK to c6ddb2d (3.0.0-6510-7bca9fc) by @bw-ghapp[bot] in #2722

[deps]: Lock file maintenance by @renovate[bot] in #2394

🎨 Other

[PM-38411] tech-debt: Update deprecated argument in actions/create-github-app-token by @vvolkgang in #2737

[PM-38420] ci: Update brew check behaviour in bootstrap.sh by @vvolkgang in #2738

[QA-1825] Adding missing accessibility identifiers for Authenticator/PM views by @ifernandezdiaz in #2734

llm: Add alphabetical enum case ordering rule to iOS skill by @SaintPatrck in #2754

llm: Add review-driven iOS skill conventions by @SaintPatrck in #2755

[BRE] Updated codecov action to v7.0.0 to fix issue with key verification by @gitclonebrian in #2768

[PM-38790] Fixes TestHarness target dependency by @fedemkr in #2772

Full Changelog: v2026.5.1-bwpm...v2026.6.0-bwpm

Builds Source: https://github.com/bitwarden/ios/actions/runs/27559994185

Original source

Overview

Hide Send from navigation for users subject to policy removing send

Bug fix for keyboard shortcuts

Various under-the-hood improvements and minor bug fixes

What's Changed

💙 Community Highlight

[PM-31854] fix: simplify switching unlock methods by @iHildy in #18826

[PM-38330] Fix per-request memory leak in bw serve (authStatusFor$) by @ggiesen in #20912

Feature Development

[Shared Unlock] [PM-35083] Shared Unlock for Web, Browser, Desktop by @quexten in #19698

[CL-1077] Update Menu Item styles by @lxiong-livefront in #19763

[Shared Unlock] [PM-34508] Default enable native messaging permission on browser by @quexten in #19907

[CL-999] Update tabs by @lxiong-livefront in #20010

[CL-963] Update breadcrumb styles by @lxiong-livefront in #20085

Add new SendApiServer that uses the SDK by @adudek-bw in #20170

[PM-23585] Migrate desktop settings dialog to CL by @Hinton in #20230

[PM-35224] Add route provider parameters support to featureFlaggedRoute by @Banrion in #20235

BEEEP/Auth/PM-35338 - Auto Submit on OTP Paste by @JaredSnider-Bitwarden in #20250

Desktop UI Cleanup milestone 3 & 4 by @Hinton in #20266

[PM-34157] Wire up SDK to NewPolicyService by @eliykat in #20377

[PM-31059] Implement SDK managed PIN unlock by @quexten in #20395

[CL-1042] Design system refresh: Milestone 3 by @vleague2 in #20425

[PM-35228] Add Premium Status Changed Push Notification by @sbrown-livefront in #20498

[Shared Unlock] [PM-35083] Add shared unlock typescript drivers and services by @quexten in #20589

[PM-36857] Add copy actions for bank account cipher type by @nick-livefront in #20605

[PM-27679] Remove flagged logic from clients/server and clients feature flag by @jengstrom-bw in #20609

[PM-34113] Add Passport to the desktop by @nick-livefront in #20617

[PM-34156] Add accepted-state organization sync by @eliykat in #20627

[PM-28192] Migrate Cipher Attachment Operations to use SDK instead of APIs by @gbubemismith in #20628

[PM-37295] Ignore upgrade key rotation logout based on feature flag by @Thomas-Avery in #20637

[PM-32016] - hide at-risk callout behind feature flag by @jaasen-livefront in #20639

[PM-31054] Add V2UpgradeToken handling to sync by @Thomas-Avery in #20641

SSH Agent v2: Sign Request by @neuronull in #20657

Remove feature flag check from password generation by @adudek-bw in #20671

[PM-2588] resolved sends root url conditionally by @bmbitwarden in #20684

[Shared Unlock] [PM-35083] Implement biometrics over sdk IPC by @quexten in #20689

[PM-37251] Add getStatus API method for public invite link status endpoint by @r-tome in #20695

[PM-35656] Update Copy functionality for new item types by @nick-livefront in #20708

[PM-36967] Update rotate_user_keys to use UpgradeTokenAction by @Thomas-Avery in #20711

[PM-37229] Add bwi-passport icon for passport cipher type by @nick-livefront in #20712

[PM-36229] Route bulk-collections, move, and assigned-cipher ops to SDK by @gbubemismith in #20718

[CL-1204] bulk actions bar by @BryanCunningham in #20735

[PM-36563] Send access event logs by @harr1424 in #20740

[PM-37797] Add API method to check if email is valid for a given organization invite link by @r-tome in #20749

SSH Agent v2: testing coverage for unsupported key types by @neuronull in #20789

[CL-1214] remove tabs min height by @BryanCunningham in #20796

[PM-30848] Key connector for user key rotation by @mzieniukbw in #20805

Add feature flag for SSH ecdsa by @neuronull in #20813

[PM-33753] Remove unlock-via-sdk-flag by @quexten in #20832

[PM-37875] Split out crypto verification UI by @quexten in #20856

[CL-1172] Improved non-color a11y for selected vs unselected nav items by @vleague2 in #20865

[CL-1201] update row selected state and hover state by @BryanCunningham in #20869

update contrast variant text color by @BryanCunningham in #20878

SSH Agent v2: agent forwarding by @neuronull in #20879

chore(platform): add FedRampGovRegion to client feature flag enum by @addisonbeck in #20880

[CL-1213] allow tab label to be anchor for spotlight by @BryanCunningham in #20882

[PM-37175] Preserve individual vault export folders when importing to My Items by @mcamirault in #20883

[PM-37800] Add VaultBatchBarService to libs/vault by @nick-livefront in #20885

[PM-38165] Limit Send Email character length by @harr1424 in #20895

PM-32577 implemeneted send policy check of nav for desktop and browser by @bmbitwarden in #20934

[PM-31625] Removes feature flag pm-30521-autofill-button-view-login-screen by @jengstrom-bw in #20968

SSH Agent support of ECDSA key type by @neuronull in #21028

[PM-18400] Update multi-select component to add title attribute for better accessibility by @JaredScar in #21031

Gate import of SSH key ECDSA type on FF by @neuronull in #21059

[PM-38163] Add getPoliciesByInviteLinkCode to PolicyApiService by @r-tome in #21075

[PM-38012] Initialize feature flag overrides state to empty object by @quexten in #21166

🐛 Bug fixes

[PM-35120] - Update user delete flows with org ownership by @jaasen-livefront in #20462

[PM-32445] Extension Scrollbar Fix by @rr-bw in #20478

[PM-36880] Filter Linked field type for Bank Account cipher type by @nick-livefront in #20564

[PM-36947] Restrict bank account PIN field to numeric characters only by @nick-livefront in #20598

PM-37554 resolved double cancel issue by @bmbitwarden in #20683

[CL-1046] Add no-bit-dialog-wrapper lint rule by @willmartian in #20698

Fix errors from UUID and yargs packages in the native messaging test runner by @differsthecat in #20706

[CL-1203] Place tab overflow More button next to last visible tab by @willmartian in #20709

[PM-36642] Fixing LastPass direct import for non-SSO accounts by @itsadrago in #20716

Disable Native popover use from Angular 21 by @nick-livefront in #20730

[PM-8123] Clearing import target selector as necessary by @itsadrago in #20739

[PM-37782] User with view permission cannot favorite or add an item to a folder by @jengstrom-bw in #20764

[PM-37798] Fix bank account section label to show "Bank account details" by @nick-livefront in #20779

[PM-37776] - fix empty vault on pin and touch id unlock by @jaasen-livefront in #20793

[PM-37825] Fix partial date validation blocking save and improve error count accuracy by @nick-livefront in #20799

[PM-24173] Fix credential generator constraint bypass by @harr1424 in #20810

[PM-37970] Fix vault list icons for Login and Identity with new item types flag by @nick-livefront in #20818

[PM-37479] Assign to collection dialog displays dummy string 0"> by @jengstrom-bw in #20819

PM-37696 resolved broswer popup when trying to close tab by @bmbitwarden in #20861

[PM-23564] Item view shows removed attachment/does not show added attachment temporarily by @jengstrom-bw in #20884

SSH Agent fix calling unregistered IPC handlers upon account switch by @neuronull in #20914

[PM-37948] Add back missing desktop shortcuts by @BryanCunningham in #20942

Fix: SSH Agent v1 no agent forwarding warning by @neuronull in #20944

[PM-38400] Fix avoid ambiguous character bug by @adudek-bw in #20953

PM-38423 - Fix unsavedSendEditsGuard blocking logout by @JaredSnider-Bitwarden in #20967

[PM-38405] Fix SDK ref leaking out of scope and add eslint rule by @quexten in #20999

[PM-35573] - Refocus login input on Desktop restore by @jaasen-livefront in #21012

[PM-38421] Remove duplicate copy actions by @nick-livefront in #21023

[PM-38544] Fix flatpak auto-start by @quexten in #21039

[PM-38547] Fix missing Flatpak desktop icon by @quexten in #21040

[PM-38026] Fix desktop client saturates gpu usage at 99% after start when using fallapart effect in KDE/KWIN by @quexten in #21043

[PM-38529] Fix virtual scroll after Angular 21 update by @vleague2 in #21055

[PM-37913] - fix cloning archived cipher by @jaasen-livefront in #21058

[PM-38357] Surface more descriptive error messages from server on Send edit failure by @mcamirault in #21067

[PM-38571] Fix shareReplay memory leaks by @nick-livefront in #21087

[CL-1217] Fix menu item role after menu item style changes by @vleague2 in #21091

[PM-38759] Fix desktop not launching by @quexten in #21140

[PM-38621] Fix desktop settings dialog saving stale form values by @nick-livefront in #21148

[CL-1208] Remove extra header space in desktop by @vleague2 in #21157

[PM-37913] - set archivedDate when cloning ciphers by @jaasen-livefront in #21160

[PM-38831] fix: defective SyncPolicy push notification parsing by @eliykat in #21189

[CL-1222] m3 fast follows by @BryanCunningham in #21202

fix(nx): clear build dependsOn workspace default by @addisonbeck in #21203

[PM-38867] Fix: add error toast if no owner for a new item by @eliykat in #21222

[PM-38012] Fix local override migration by @quexten in #21223

fix(extension-scrollbar): Auth [PM-32445] Extension Scrollbar Fix (#2… by @rr-bw in #21353

[SM-1993][CL-1227] Fix textarea height and fix SM button spacing by @vleague2 in #21417

[SM-1993][CL-1227] Fix textarea height and fix SM button spacing (#21417) by @vleague2 in #21418

[PM-39392] Use readonly styles for fields intended to be readonly by @vleague2 in #21425

[PM-39392] Use readonly styles for fields intended to be readonly (#21425) by @vleague2 in #21428

PM-39449 resolved root url issues by @itsadrago in #21481

⚙️ Maintenance

[CL-965] update spinner component by @iivins-livefront in #19017

[CL-1129] Enable @angular-eslint/template/elements-content lint rule by @willmartian in #19505

[PM-36363] Refactors org user view models and consumers to be ts-strict compliant by @BTreston in #20559

[PM-31084] - migrate badge to chip-action in vault components by @jaasen-livefront in #20606

[PM-6796] implemented file reorg by @bmbitwarden in #20648

PM-36952 - Improve code review workflow with added triggers by @theMickster in #20702

[PM-377730] Refactor unlock service & add decrypted user key method by @quexten in #20719

Desktop Native: Clean up SSH Agent v1 deps by @neuronull in #20733

fixed perms in cherry-pick workflow by @gitclonebrian in #20758

[BRE-1938] Simplify and optimize Retrieve Current Desktop Rollout workflow by @vgrassia in #20778

[bre-1942] improve native module cache busting logic by @aj-bw in #20791

Temporarily increase shared ownership of desktop SSH Agent owned files by @neuronull in #20806

refactor(platform): migrate Region enum to const object per ADR-0025 by @addisonbeck in #20887

Remove cargo-deny check from the pre-commit hooks by @neuronull in #21005

[BEEEP] [PM-38497] Dev-ex: Add attach VSCode debugger to desktop, web configs by @quexten in #21016

[PM-36510] Remove dead "SDK not available" guards from SDK-backed services by @gbubemismith in #21173

[BRE-2013] Add repository_dispatch trigger to sdk-update workflow by @vgrassia in #21187

[BRE-2017] Pin snapcraft to 8.x/stable to fix Linux builds by @brandonbiete in #21217

📦 Dependency Updates

[deps] Platform: Update Rust crate serde_with to v3.20.0 by @renovate in #18712

[CL-954] Upgrade to Angular 21 by @willmartian in #19725

[PM-36068] Update NAPI versions by @iinuwa in #20460

Update sdk-internal to 0.2.0-main.765 by @bw-ghapp in #20744

Update sdk-internal to 0.2.0-main.774 by @bw-ghapp in #20770

[PM-37729] SDK Bump by @nick-livefront in #20776

[bre-1942] fix package lock issue by @aj-bw in #20785

Update sdk-internal to 0.2.0-main.779 by @bw-ghapp in #20798

Update sdk-internal to 0.2.0-main.782 by @bw-ghapp in #20807

[deps] Architecture: Update lint-staged to v17 by @renovate in #20843

Update sdk-internal to 0.2.0-main.798 by @bw-ghapp in #20937

Add cargo deny ignore RUSTSEC-2026-0153 by @neuronull in #21003

[deps] KM: Pin dependencies by @renovate in #21111

[deps] Autofill: Update tldts to v7.4.2 by @renovate in #21112

[deps] Desktop Native: Update Rust crate serial_test to v3.5.0 by @renovate in #21113

Bump SDK version for ECDSA key support by @neuronull in #21176

🔧 Other

Bump client version(s) by @github-actions in #20690

Autosync Crowdin Translations for desktop by @bw-ghapp in #20691

[BEEEP] [PM-38012] Add local feature flag overrides by @quexten in #20833

Improve claude.md by @Hinton in #20941

[BEEEP] [PM-38497] Dev-ex: Add debugger attach rust desktop-native support by @quexten in #21036

Expand .claude/rules to cover i18n, Tailwind, testing, and Angular DI by @Hinton in #21051

Autosync Crowdin Translations for desktop by @bw-ghapp in #21063

Add flatpak manifest claude md by @quexten in #21078

Autosync Crowdin Translations for desktop by @bw-ghapp in #21109

[PM-38719] Add env var to override access token location by @quexten in #21125

Remove FF caching for dev env by default by @coltonhurst in #21131

Change configRetrievalIntervalMs by @coltonhurst in #21143

Bump client version(s) by @github-actions in #21145

Autosync Crowdin Translations for desktop by @bw-ghapp in #21194

Autosync Crowdin Translations for desktop by @bw-ghapp in #21219

Auth - Add claude.md for libs/auth by @JaredSnider-Bitwarden in #21235

Autosync Crowdin Translations for desktop by @bw-ghapp in #21260

Bump client version(s) by @github-actions in #21271

Bumped client version(s) (#21271) by @addisonbeck in #21274

Full Changelog: desktop-v2026.5.0...desktop-v2026.6.0

Original source

What's Changed

💙 Community Highlight

[PM-38330] Fix per-request memory leak in bw serve (authStatusFor$) by @ggiesen in #20912

Feature Development

Add new SendApiServer that uses the SDK by @adudek-bw in #20170

[PM-34157] Wire up SDK to NewPolicyService by @eliykat in #20377

[PM-31059] Implement SDK managed PIN unlock by @quexten in #20395

[PM-35228] Add Premium Status Changed Push Notification by @sbrown-livefront in #20498

[Shared Unlock] [PM-35083] Add shared unlock typescript drivers and services by @quexten in #20589

[PM-27679] Remove flagged logic from clients/server and clients feature flag by @jengstrom-bw in #20609

[PM-34114] Add Passport item type to the CLI by @nick-livefront in #20621

[PM-34156] Add accepted-state organization sync by @eliykat in #20627

[PM-28192] Migrate Cipher Attachment Operations to use SDK instead of APIs by @gbubemismith in #20628

[PM-37295] Ignore upgrade key rotation logout based on feature flag by @Thomas-Avery in #20637

[PM-31054] Add V2UpgradeToken handling to sync by @Thomas-Avery in #20641

Remove feature flag check from password generation by @adudek-bw in #20671

[PM-2588] resolved sends root url conditionally by @bmbitwarden in #20684

[Shared Unlock] [PM-35083] Implement biometrics over sdk IPC by @quexten in #20689

[PM-37251] Add getStatus API method for public invite link status endpoint by @r-tome in #20695

[PM-36967] Update rotate_user_keys to use UpgradeTokenAction by @Thomas-Avery in #20711

[PM-36229] Route bulk-collections, move, and assigned-cipher ops to SDK by @gbubemismith in #20718

[PM-36563] Send access event logs by @harr1424 in #20740

[PM-37797] Add API method to check if email is valid for a given organization invite link by @r-tome in #20749

Add feature flag for SSH ecdsa by @neuronull in #20813

[PM-33753] Remove unlock-via-sdk-flag by @quexten in #20832

chore(platform): add FedRampGovRegion to client feature flag enum by @addisonbeck in #20880

[PM-37175] Preserve individual vault export folders when importing to My Items by @mcamirault in #20883

[PM-31625] Removes feature flag pm-30521-autofill-button-view-login-screen by @jengstrom-bw in #20968

Gate import of SSH key ECDSA type on FF by @neuronull in #21059

[PM-38163] Add getPoliciesByInviteLinkCode to PolicyApiService by @r-tome in #21075

[PM-38012] Initialize feature flag overrides state to empty object by @quexten in #21166

🐛 Bug fixes

[PM-37782] User with view permission cannot favorite or add an item to a folder by @jengstrom-bw in #20764

[PM-37462] bw get attachment writes decrypted filename verbatim by @jengstrom-bw in #20790

[PM-37776] - fix empty vault on pin and touch id unlock by @jaasen-livefront in #20793

[PM-24173] Fix credential generator constraint bypass by @harr1424 in #20810

fix(cli): harden bw serve origin-protection against DNS rebinding [PM-36600] by @addisonbeck in #20881

[PM-38400] Fix avoid ambiguous character bug by @adudek-bw in #20953

[PM-38405] Fix SDK ref leaking out of scope and add eslint rule by @quexten in #20999

[PM-37913] - fix cloning archived cipher by @jaasen-livefront in #21058

[PM-38571] Fix shareReplay memory leaks by @nick-livefront in #21087

[PM-37913] - set archivedDate when cloning ciphers by @jaasen-livefront in #21160

[PM-38831] fix: defective SyncPolicy push notification parsing by @eliykat in #21189

fix(nx): clear build dependsOn workspace default by @addisonbeck in #21203

[PM-38012] Fix local override migration by @quexten in #21223

PM-39449 resolved root url issues by @itsadrago in #21481

⚙️ Maintenance

[PM-36363] Refactors org user view models and consumers to be ts-strict compliant by @BTreston in #20559

[PM-6796] implemented file reorg by @bmbitwarden in #20648

PM-36952 - Improve code review workflow with added triggers by @theMickster in #20702

[PM-377730] Refactor unlock service & add decrypted user key method by @quexten in #20719

fixed perms in cherry-pick workflow by @gitclonebrian in #20758

[BRE-1938] Update Build Web workflow to run on published Web releases by @vgrassia in #20761

[BRE-1938] Simplify and optimize Retrieve Current Desktop Rollout workflow by @vgrassia in #20778

refactor(platform): migrate Region enum to const object per ADR-0025 by @addisonbeck in #20887

[PM-36510] Remove dead "SDK not available" guards from SDK-backed services by @gbubemismith in #21173

[BRE-2013] Add repository_dispatch trigger to sdk-update workflow by @vgrassia in #21187

📦 Dependency Updates

[deps] Vault: Update https-proxy-agent to v9 by @renovate in #20124

[deps] Vault: Update @koa/router to v15.5.0 by @renovate in #20580

Update sdk-internal to 0.2.0-main.765 by @bw-ghapp in #20744

Update sdk-internal to 0.2.0-main.774 by @bw-ghapp in #20770

[PM-37729] SDK Bump by @nick-livefront in #20776

[bre-1942] fix package lock issue by @aj-bw in #20785

Update sdk-internal to 0.2.0-main.779 by @bw-ghapp in #20798

Update sdk-internal to 0.2.0-main.782 by @bw-ghapp in #20807

[deps] Architecture: Update lint-staged to v17 by @renovate in #20843

Update sdk-internal to 0.2.0-main.798 by @bw-ghapp in #20937

[deps] Autofill: Update tldts to v7.4.2 by @renovate in #21112

Bump SDK version for ECDSA key support by @neuronull in #21176

🔧 Other

Bump client version(s) by @github-actions in #20690

[BEEEP] [PM-38012] Add local feature flag overrides by @quexten in #20833

Improve claude.md by @Hinton in #20941

[PM-38192] Collection Check for CLI Move by @nick-livefront in #21010

Expand .claude/rules to cover i18n, Tailwind, testing, and Angular DI by @Hinton in #21051

Remove FF caching for dev env by default by @coltonhurst in #21131

Change configRetrievalIntervalMs by @coltonhurst in #21143

Auth - Add claude.md for libs/auth by @JaredSnider-Bitwarden in #21235

Bump client version(s) by @github-actions in #21271

Bumped client version(s) (#21271) by @addisonbeck in #21274

Full Changelog: cli-v2026.5.0...cli-v2026.6.0

Original source

Overview

Hide Send from navigation for users subject to policy removing send

SSO redirect page will now auto-close on some browsers

Corrected login page UI to avoid scroll bar displaying by default

Users with pending confirmation are approved when admin logs in

Various under-the-hood improvements and minor bug fixes

What's Changed

💙 Community Highlight

[PM-26954] Disable 'sync vault now' button while busy by @henrebotha in #16868

[PM-31854] fix: simplify switching unlock methods by @iHildy in #18826

[PM-33781] fix(fido2): fall back to browser for hardware/CTAP1 keys not in vault by @nancysangani in #19606

Remove unused strings by @mKoonrad in #20608

[PM-38330] Fix per-request memory leak in bw serve (authStatusFor$) by @ggiesen in #20912

Feature Development

[Shared Unlock] [PM-35083] Shared Unlock for Web, Browser, Desktop by @quexten in #19698

[CL-1077] Update Menu Item styles by @lxiong-livefront in #19763

[Shared Unlock] [PM-34508] Default enable native messaging permission on browser by @quexten in #19907

[CL-999] Update tabs by @lxiong-livefront in #20010

[CL-963] Update breadcrumb styles by @lxiong-livefront in #20085

Add new SendApiServer that uses the SDK by @adudek-bw in #20170

[PM-33933] Update autofill dialog for 'never' match setting by @nikwithak in #20189

[PM-35224] Add route provider parameters support to featureFlaggedRoute by @Banrion in #20235

BEEEP/Auth/PM-35338 - Auto Submit on OTP Paste by @JaredSnider-Bitwarden in #20250

[PM-34157] Wire up SDK to NewPolicyService by @eliykat in #20377

[PM-31059] Implement SDK managed PIN unlock by @quexten in #20395

[PM-34497] Handle Same-Origin iframes in queryDeepSelector by @bensbits91 in #20401

[CL-1042] Design system refresh: Milestone 3 by @vleague2 in #20425

[PM-35228] Add Premium Status Changed Push Notification by @sbrown-livefront in #20498

[Shared Unlock] [PM-35083] Add shared unlock typescript drivers and services by @quexten in #20589

[PM-36857] Add copy actions for bank account cipher type by @nick-livefront in #20605

[PM-27679] Remove flagged logic from clients/server and clients feature flag by @jengstrom-bw in #20609

[PM-34156] Add accepted-state organization sync by @eliykat in #20627

[PM-28192] Migrate Cipher Attachment Operations to use SDK instead of APIs by @gbubemismith in #20628

[PM-37295] Ignore upgrade key rotation logout based on feature flag by @Thomas-Avery in #20637

[PM-32016] - hide at-risk callout behind feature flag by @jaasen-livefront in #20639

[PM-31054] Add V2UpgradeToken handling to sync by @Thomas-Avery in #20641

[PM-34112] Add Passport copy actions to browser extension by @nick-livefront in #20655

Remove feature flag check from password generation by @adudek-bw in #20671

[PM-2588] resolved sends root url conditionally by @bmbitwarden in #20684

[Shared Unlock] [PM-35083] Implement biometrics over sdk IPC by @quexten in #20689

[PM-37251] Add getStatus API method for public invite link status endpoint by @r-tome in #20695

[PM-35656] Update Copy functionality for new item types by @nick-livefront in #20708

[PM-36967] Update rotate_user_keys to use UpgradeTokenAction by @Thomas-Avery in #20711

[PM-37229] Add bwi-passport icon for passport cipher type by @nick-livefront in #20712

[PM-36229] Route bulk-collections, move, and assigned-cipher ops to SDK by @gbubemismith in #20718

[CL-1204] bulk actions bar by @BryanCunningham in #20735

[PM-36563] Send access event logs by @harr1424 in #20740

[PM-37797] Add API method to check if email is valid for a given organization invite link by @r-tome in #20749

[PM-37779] - Add notification bar confirmation mode for inline menu save flow by @jaasen-livefront in #20752

[CL-1214] remove tabs min height by @BryanCunningham in #20796

[PM-30848] Key connector for user key rotation by @mzieniukbw in #20805

Add feature flag for SSH ecdsa by @neuronull in #20813

[PM-33753] Remove unlock-via-sdk-flag by @quexten in #20832

[PM-37875] Split out crypto verification UI by @quexten in #20856

[CL-1172] Improved non-color a11y for selected vs unselected nav items by @vleague2 in #20865

[CL-1201] update row selected state and hover state by @BryanCunningham in #20869

update contrast variant text color by @BryanCunningham in #20878

chore(platform): add FedRampGovRegion to client feature flag enum by @addisonbeck in #20880

[CL-1213] allow tab label to be anchor for spotlight by @BryanCunningham in #20882

[PM-37175] Preserve individual vault export folders when importing to My Items by @mcamirault in #20883

[PM-37800] Add VaultBatchBarService to libs/vault by @nick-livefront in #20885

[PM-38243] performance metrics by @audreyality in #20888

[PM-37780] - Add "Save and fill" button to inline menu cipher creation by @jaasen-livefront in #20892

[PM-38165] Limit Send Email character length by @harr1424 in #20895

PM-32577 implemeneted send policy check of nav for desktop and browser by @bmbitwarden in #20934

[PM-31625] Removes feature flag pm-30521-autofill-button-view-login-screen by @jengstrom-bw in #20968

[PM-38458] Let the browser client assemble the targeting rules manifest.json URI by @jprusik in #21001

[PM-36016] Handle cross-origin iframes in queryDeepSelector by @bensbits91 in #21024

[PM-18400] Update multi-select component to add title attribute for better accessibility by @JaredScar in #21031

[PM-32245] Update toggle for targeting rules in Autofill Settings view with designed experience by @dan-livefront in #21049

Gate import of SSH key ECDSA type on FF by @neuronull in #21059

[PM-38163] Add getPoliciesByInviteLinkCode to PolicyApiService by @r-tome in #21075

[PM-38012] Initialize feature flag overrides state to empty object by @quexten in #21166

🐛 Bug fixes

[PM-32445] Extension Scrollbar Fix by @rr-bw in #20478

[PM-36880] Filter Linked field type for Bank Account cipher type by @nick-livefront in #20564

[PM-36947] Restrict bank account PIN field to numeric characters only by @nick-livefront in #20598

PM-37554 resolved double cancel issue by @bmbitwarden in #20683

[CL-1046] Add no-bit-dialog-wrapper lint rule by @willmartian in #20698

[CL-1203] Place tab overflow More button next to last visible tab by @willmartian in #20709

[PM-36642] Fixing LastPass direct import for non-SSO accounts by @itsadrago in #20716

Disable Native popover use from Angular 21 by @nick-livefront in #20730

[PM-37759] Unable to use passkey that is stored in my vault to log in by @jengstrom-bw in #20738

[PM-8123] Clearing import target selector as necessary by @itsadrago in #20739

[CL-1207] Fix missing provideZoneChangeDetection() in bit-browser bootstrap by @willmartian in #20750

[PM-37782] User with view permission cannot favorite or add an item to a folder by @jengstrom-bw in #20764

[PM-37798] Fix bank account section label to show "Bank account details" by @nick-livefront in #20779

[PM-37776] - fix empty vault on pin and touch id unlock by @jaasen-livefront in #20793

[PM-37825] Fix partial date validation blocking save and improve error count accuracy by @nick-livefront in #20799

[PM-24173] Fix credential generator constraint bypass by @harr1424 in #20810

[PM-36277]Save login notification not appearing on Facebook by @dan-livefront in #20814

[PM-37970] Fix vault list icons for Login and Identity with new item types flag by @nick-livefront in #20818

[PM-37479] Assign to collection dialog displays dummy string 0"> by @jengstrom-bw in #20819

[PM-37932] Recover browser IPC after process reload by @coroiu in #20848

PM-37696 resolved broswer popup when trying to close tab by @bmbitwarden in #20861

[PM-36823] ensure browser uses Inter font by @BryanCunningham in #20864

[PM-35196] Mutation memory management by @blackwood in #20871

[BRE-1949] Removing duplicate messages keys by @pixman20 in #20916

Improve consistency of popout closure by @trmartin4 in #20924

[PM-38400] Fix avoid ambiguous character bug by @adudek-bw in #20953

[PM-38185] Safari numeric values translations by @nick-livefront in #20964

[PM-38405] Fix SDK ref leaking out of scope and add eslint rule by @quexten in #20999

[PM-35573] - Refocus login input on Desktop restore by @jaasen-livefront in #21012

[PM-37913] - fix cloning archived cipher by @jaasen-livefront in #21058

[PM-38357] Surface more descriptive error messages from server on Send edit failure by @mcamirault in #21067

Adjust size variant for spinner by @nick-livefront in #21080

[PM-38571] Fix shareReplay memory leaks by @nick-livefront in #21087

[CL-1217] Fix menu item role after menu item style changes by @vleague2 in #21091

[PM-38617] Fix Targeting Rules not respecting Fill Assist setting changes in some cases by @jprusik in #21094

[PM-38744] Bugfix - Do not trigger Targeting Rules sync on scheduled vault syncs by @jprusik in #21132

[PM-37913] - set archivedDate when cloning ciphers by @jaasen-livefront in #21160

[PM-38856] Match targeting rules against frame over tab URI by @jprusik in #21178

[PM-38831] fix: defective SyncPolicy push notification parsing by @eliykat in #21189

[CL-1222] m3 fast follows by @BryanCunningham in #21202

fix(nx): clear build dependsOn workspace default by @addisonbeck in #21203

[PM-38867] Fix: add error toast if no owner for a new item by @eliykat in #21222

[PM-38012] Fix local override migration by @quexten in #21223

[PM-38992] Fix Targeting Rules autofilling new password inputs with current password values by @jprusik in #21238

[PM-39000] Fix targeted new password field not filling upon click on generate password inline menu by @jprusik in #21239

[PM-39009] Do not do heuristic filtering on targeted fields by @jprusik in #21245

[PM-39200] - fix notification bar behavior with save and fill by @jaasen-livefront in #21351

fix(extension-scrollbar): Auth [PM-32445] Extension Scrollbar Fix (#2… by @rr-bw in #21353

[PM-39200] - fix notification bar behavior with save and fill (#21351) by @jaasen-livefront in #21369

[SM-1993][CL-1227] Fix textarea height and fix SM button spacing by @vleague2 in #21417

[SM-1993][CL-1227] Fix textarea height and fix SM button spacing (#21417) by @vleague2 in #21418

[PM-39392] Use readonly styles for fields intended to be readonly by @vleague2 in #21425

[PM-39392] Use readonly styles for fields intended to be readonly (#21425) by @vleague2 in #21428

PM-39449 resolved root url issues by @itsadrago in #21481

⚙️ Maintenance

[PM-31832] Update *ngIf/*ngFor to @if/@for in vault browser components by @jengstrom-bw in #18818

[CL-965] update spinner component by @iivins-livefront in #19017

[CL-1129] Enable @angular-eslint/template/elements-content lint rule by @willmartian in #19505

[PM-36363] Refactors org user view models and consumers to be ts-strict compliant by @BTreston in #20559

[PM-31084] - migrate badge to chip-action in vault components by @jaasen-livefront in #20606

[PM-6796] implemented file reorg by @bmbitwarden in #20648

PM-36952 - Improve code review workflow with added triggers by @theMickster in #20702

[PM-377730] Refactor unlock service & add decrypted user key method by @quexten in #20719

[PM-33906] Use PureCrypto::new_guid for FIDO2 credential ID by @dereknance in #20736

fixed perms in cherry-pick workflow by @gitclonebrian in #20758

refactor(platform): migrate Region enum to const object per ADR-0025 by @addisonbeck in #20887

[PM-36510] Remove dead "SDK not available" guards from SDK-backed services by @gbubemismith in #21173

[BRE-2013] Add repository_dispatch trigger to sdk-update workflow by @vgrassia in #21187

📦 Dependency Updates

[CL-954] Upgrade to Angular 21 by @willmartian in #19725

Update sdk-internal to 0.2.0-main.765 by @bw-ghapp in #20744

Update sdk-internal to 0.2.0-main.774 by @bw-ghapp in #20770

[PM-37729] SDK Bump by @nick-livefront in #20776

[bre-1942] fix package lock issue by @aj-bw in #20785

Update sdk-internal to 0.2.0-main.779 by @bw-ghapp in #20798

Update sdk-internal to 0.2.0-main.782 by @bw-ghapp in #20807

[deps] Autofill: Update @lit-labs/signals to v0.3.0 by @renovate in #20841

[deps] Architecture: Update lint-staged to v17 by @renovate in #20843

Update sdk-internal to 0.2.0-main.798 by @bw-ghapp in #20937

[deps] Autofill: Update tldts to v7.4.2 by @renovate in #21112

Bump SDK version for ECDSA key support by @neuronull in #21176

🔧 Other

Autosync Crowdin Translations for browser by @bw-ghapp in #20692

[BEEEP] [PM-38012] Add local feature flag overrides by @quexten in #20833

[PM-36085] - add autofillVerb and autofillNoun by @jaasen-livefront in #20904

Improve claude.md by @Hinton in #20941

Bump client version(s) by @github-actions in #20950

Expand .claude/rules to cover i18n, Tailwind, testing, and Angular DI by @Hinton in #21051

[PM-37768] VULN - webauthn honor permissions policy by @bensbits91 in #21054

Autosync Crowdin Translations for browser by @bw-ghapp in #21064

Autosync Crowdin Translations for browser by @bw-ghapp in #21110

Remove FF caching for dev env by default by @coltonhurst in #21131

Change configRetrievalIntervalMs by @coltonhurst in #21143

Autosync Crowdin Translations for browser by @bw-ghapp in #21192

Autosync Crowdin Translations for browser by @bw-ghapp in #21220

Auth - Add claude.md for libs/auth by @JaredSnider-Bitwarden in #21235

Autosync Crowdin Translations for browser by @bw-ghapp in #21261

Bump client version(s) by @github-actions in #21271

Bumped client version(s) (#21271) by @addisonbeck in #21274

Full Changelog: browser-v2026.5.1...browser-v2026.6.0

Original source

What's Changed

💙 Community Highlight

• [PM-31854] fix: simplify switching unlock methods by @iHildy in #18826
• [PM-38330] Fix per-request memory leak in bw serve (authStatusFor$) by @ggiesen in #20912

Feature Development

• [Shared Unlock] [PM-35083] Shared Unlock for Web, Browser, Desktop by @quexten in #19698
• [CL-1077] Update Menu Item styles by @lxiong-livefront in #19763
• Add new SendApiServer that uses the SDK by @adudek-bw in #20170
• [PM-34615] - add ability to toggle interstitial prompts by @jaasen-livefront in #20293
• [PM-33407] Add organizationusernotificationpolicy component by @jengstrom-bw in #20362
• [PM-31059] Implement SDK managed PIN unlock by @quexten in #20395
• [CL-1042] Design system refresh: Milestone 3 by @vleague2 in #20425
• [Shared Unlock] [PM-35083] Add shared unlock typescript drivers and services by @quexten in #20589
• [PM-30365] Account recovery salt fallback by @ike-kottlowski in #20603
• [PM-28192] Migrate Cipher Attachment Operations to use SDK instead of APIs by @gbubemismith in #20628
• [PM-32016] - hide at-risk callout behind feature flag by @jaasen-livefront in #20639
• [PM-31054] Add V2UpgradeToken handling to sync by @Thomas-Avery in #20641
• [PM-35133] Update empty state copy in Access Intelligence critical apps widget by @lastbestdev in #20675
• [PM-2588] resolved sends root url conditionally by @bmbitwarden in #20684
• [PM-37875] Split out crypto verification UI by @quexten in #20856
• [PM-37173] - Add churn-offer dialog to organization cancel flow by @jaasen-livefront in #20866
• [PM-36406] Edit member dialog by @BTreston in #20868
• chore(platform): add FedRampGovRegion to client feature flag enum by @addisonbeck in #20880
• [PM-37800] Add VaultBatchBarService to libs/vault by @nick-livefront in #20885
• [PM-37780] - Add "Save and fill" button to inline menu cipher creation by @jaasen-livefront in #20892
• [PM-38165] Limit Send Email character length by @harr1424 in #20895
• [PM-30146] Support TDE user key rotation by @eligrubb in #20938
• [PM-37977] Implement SimpleTogglePolicyComponent by @JaredScar in #20947
• [PM-37806] Add batch action bar to individual vault by @nick-livefront in #20954
• [CL-1200] remove visible label from table header checkboxes by @BryanCunningham in #20961
• [PM-31625] Removes feature flag pm-30521-autofill-button-view-login-screen by @jengstrom-bw in #20968
• [PM-18400] Update multi-select component to add title attribute for better accessibility by @JaredScar in #21031
• Gate import of SSH key ECDSA type on FF by @neuronull in #21059
• [PM-38163] Add getPoliciesByInviteLinkCode to PolicyApiService by @r-tome in #21075
• BRE-1965 feat(web): add usqa2 environment build and artifact by @fntyler in #21088
• [PM-37228] feat: Add price increase callout to organization subscription page by @amorask-bitwarden in #21153
• [PM-38012] Initialize feature flag overrides state to empty object by @quexten in #21166
• Revert "Revert "[PM-36835] implement logging in the weak-passwords component"" by @voommen-livefront in #21344
• [PM-36835] implement logging in the weak-passwords report by @voommen-livefront in #21346

🐛 Bug fixes

• [PM-35323] Fix Risk Over Time chart X-axis when All time has a narrow data span by @AlexRubik in #20374
• [sm-1928] Undecryptable Access Tokens by @cd-bitwarden in #20423
• [PM-32445] Extension Scrollbar Fix by @rr-bw in #20478
• [PM-36534] - fixes to coachmarks by @jaasen-livefront in #20533
• [PM-8123] Clearing import target selector as necessary by @itsadrago in #20739
• [PM-37798] Fix bank account section label to show "Bank account details" by @nick-livefront in #20779
• [PM-37610] - immediately clear onboarding tasks after completing them by @jaasen-livefront in #20921
• [PM-38400] Fix avoid ambiguous character bug by @adudek-bw in #20953
• PM-38423 - Fix unsavedSendEditsGuard blocking logout by @JaredSnider-Bitwarden in #20967
• [PM-38405] Fix SDK ref leaking out of scope and add eslint rule by @quexten in #20999
• [PM-35573] - Refocus login input on Desktop restore by @jaasen-livefront in #21012
• [PM-38522] Fix styling of new admin welcome dialog text by @Banrion in #21025
• [PM-32089] Sync after collection deletion by @nick-livefront in #21029
• [PM-38529] Fix virtual scroll after Angular 21 update by @vleague2 in #21055
• [PM-33813] Wrap danger zone buttons in a conditional to prevent rendering by @JaredScar in #21057
• [PM-37913] - fix cloning archived cipher by @jaasen-livefront in #21058
• [PM-38357] Surface more descriptive error messages from server on Send edit failure by @mcamirault in #21067
• [PM-38571] Fix shareReplay memory leaks by @nick-livefront in #21087
• [CL-1217] Fix localization string after menu style updates by @vleague2 in #21089
• [CL-1217] Fix menu item role after menu item style changes by @vleague2 in #21091
• [PM-38530] Fix marking critical applications in Access Intelligence reports stored as files by @lastbestdev in #21095
• [PM-38182] Fix Trend Chart not appearing in Access Intelligence V2 path by @Banrion in #21152
• [PM-38274] Fix help text in At-Risk drawers not appearing in Access Intelligence V2 path by @Banrion in #21155
• [PM-37913] - set archivedDate when cloning ciphers by @jaasen-livefront in #21160
• [PM-38833] - properly set billing cycle in offer/success. by @jaasen-livefront in #21179
• [PM-38274] Fix help text size in At-Risk drawer views in Access Intelligence v2 by @Banrion in #21183
• [PM-38831] fix: defective SyncPolicy push notification parsing by @eliykat in #21189
• [CL-1222] m3 fast follows by @BryanCunningham in #21202
• fix(nx): clear build dependsOn workspace default by @addisonbeck in #21203
• [PM-38891] fix: Bind subscription strikethrough price to actual billing interval by @amorask-bitwarden in #21205
• [PM-38867] Fix: add error toast if no owner for a new item by @eliykat in #21222
• [PM-38012] Fix local override migration by @quexten in #21223
• [PM- 38988] Fix Trial Dialog Dismissal Caching by @sbrown-livefront in #21240
• 🍒 🤏 [PM- 38988] Fix Trial Dialog Dismissal Caching (#21240) by @sbrown-livefront in #21306
• fix(extension-scrollbar): Auth [PM-32445] Extension Scrollbar Fix (#2… by @rr-bw in #21353
• [PM-39206] use block input to ensure radios are displayed stacked by @BryanCunningham in #21361
• use block input to ensure radios are displayed stacked (#21361) by @BryanCunningham in #21367
• [SM-1993][CL-1227] Fix textarea height and fix SM button spacing by @vleague2 in #21417
• [SM-1993][CL-1227] Fix textarea height and fix SM button spacing (#21417) by @vleague2 in #21418
• [PM-39392] Use readonly styles for fields intended to be readonly by @vleague2 in #21425
• [PM-39392] Use readonly styles for fields intended to be readonly (#21425) by @vleague2 in #21428

⚙️ Maintenance

• [CL-965] update spinner component by @iivins-livefront in #19017
• [PM-31084] - migrate badge to chip-action in vault components by @jaasen-livefront in #20606
• [PM-6796] implemented file reorg by @bmbitwarden in #20648
• refactor(platform): migrate Region enum to const object per ADR-0025 by @addisonbeck in #20887
• [PM-29440] Update onboarding checklist by @gbubemismith in #20890
• [PM-36408] Ts-strict: refactor vault-header and org layout components by @BTreston in #21081
• [PM-38766] Revert onPush change detection in org layout component by @BTreston in #21147
• [PM-36510] Remove dead "SDK not available" guards from SDK-backed services by @gbubemismith in #21173
• [BRE-2013] Add repository_dispatch trigger to sdk-update workflow by @vgrassia in #21187
• [BRE-2017] Pin snapcraft to 8.x/stable to fix Linux builds by @brandonbiete in #21217

📦 Dependency Updates

• [deps] Autofill: Update tldts to v7.4.2 by @renovate in #21112
• Bump SDK version for ECDSA key support by @neuronull in #21176

🔧 Other

• [BEEEP] [PM-38012] Add local feature flag overrides by @quexten in #20833
• Autosync Crowdin Translations for web by @bw-ghapp in #20905
• Bump client version(s) by @github-actions in #20940
• Improve claude.md by @Hinton in #20941
• Expand .claude/rules to cover i18n, Tailwind, testing, and Angular DI by @Hinton in #21051
• Autosync Crowdin Translations for web by @bw-ghapp in #21065
• Remove FF caching for dev env by default by @coltonhurst in #21131
• Change configRetrievalIntervalMs by @coltonhurst in #21143
• Autosync Crowdin Translations for web by @bw-ghapp in #21193
• Autosync Crowdin Translations for web by @bw-ghapp in #21221
• Auth - Add claude.md for libs/auth by @JaredSnider-Bitwarden in #21235
• Autosync Crowdin Translations for web by @bw-ghapp in #21262
• Bump client version(s) by @github-actions in #21271
• Bumped client version(s) (#21271) by @addisonbeck in #21274
• Bump client version(s) by @github-actions in #21420
• Bumped client version(s) (#21420) by @addisonbeck in #21422

Full Changelog: web-v2026.6.1...web-v2026.6.2

Original source

What's Changed

Feature Development

[CL-999] Update tabs by @lxiong-livefront in #20010

[CL-963] Update breadcrumb styles by @lxiong-livefront in #20085

[PM-35224] Add route provider parameters support to featureFlaggedRoute by @Banrion in #20235

BEEEP/Auth/PM-35338 - Auto Submit on OTP Paste by @JaredSnider-Bitwarden in #20250

[PM-34157] Wire up SDK to NewPolicyService by @eliykat in #20377

[PM-30213] Add key rotation UI by @Thomas-Avery in #20407

[PM-29067] Remove Feature Flag Code for PM-24032 by @sbrown-livefront in #20415

[PM-31942] Save Access Intelligence reports to files (pt. 3) by @lastbestdev in #20441

[PM-35228] Add Premium Status Changed Push Notification by @sbrown-livefront in #20498

[PM-35357] Update Trial Length Parameter by @sbrown-livefront in #20544

[PM-36857] Add copy actions for bank account cipher type by @nick-livefront in #20605

[PM-27679] Remove flagged logic from clients/server and clients feature flag by @jengstrom-bw in #20609

[PM-36878] Update Existing User Trail Flow by @sbrown-livefront in #20610

[PM-31312] Remove Flagged logic from clients pm-29437-welcome-dialog feature flag by @jengstrom-bw in #20618

[PM-36359] Include splunk integration by @voommen-livefront in #20625

[PM-34156] Add accepted-state organization sync by @eliykat in #20627

[PM-37295] Ignore upgrade key rotation logout based on feature flag by @Thomas-Avery in #20637

[PM-35134] Change assign tasks to send notifications by @voommen-livefront in #20640

[PM-34112] Add Passport copy actions to browser extension by @nick-livefront in #20655

Remove feature flag check from password generation by @adudek-bw in #20671

[PM-35058]welcome modal post scan state by @voommen-livefront in #20672

[Shared Unlock] [PM-35083] Implement biometrics over sdk IPC by @quexten in #20689

[PM-37251] Add getStatus API method for public invite link status endpoint by @r-tome in #20695

[PM-34407] Allow deleting domains by @BTreston in #20699

[PM-34404] Prefill allowed domains by @BTreston in #20704

[PM-35656] Update Copy functionality for new item types by @nick-livefront in #20708

[PM-36967] Update rotate_user_keys to use UpgradeTokenAction by @Thomas-Avery in #20711

[PM-37229] Add bwi-passport icon for passport cipher type by @nick-livefront in #20712

[PM-36229] Route bulk-collections, move, and assigned-cipher ops to SDK by @gbubemismith in #20718

[PM-36067] Add stories for invite link and invite member dialog by @BTreston in #20731

[PM-34724] Access Intelligence Carousel for first time admins by @voommen-livefront in #20734

[CL-1204] bulk actions bar by @BryanCunningham in #20735

[PM-36563] Send access event logs by @harr1424 in #20740

[PM-37797] Add API method to check if email is valid for a given organization invite link by @r-tome in #20749

[PM-28781] Remove Send UI refresh feature flag by @mcamirault in #20753

[CL-1214] remove tabs min height by @BryanCunningham in #20796

[PM-30848] Key connector for user key rotation by @mzieniukbw in #20805

Add feature flag for SSH ecdsa by @neuronull in #20813

[PM-33753] Remove unlock-via-sdk-flag by @quexten in #20832

[CL-1172] Improved non-color a11y for selected vs unselected nav items by @vleague2 in #20865

[CL-1201] update row selected state and hover state by @BryanCunningham in #20869

update contrast variant text color by @BryanCunningham in #20878

[CL-1213] allow tab label to be anchor for spotlight by @BryanCunningham in #20882

[PM-37175] Preserve individual vault export folders when importing to My Items by @mcamirault in #20883

🐛 Bug fixes

[SM-1926] If user sends bad data over for secrets, make sure the bad data don… by @cd-bitwarden in #19893

[SM-1927] Updating code so that if the machine acct name is corrupted data by @cd-bitwarden in #19898

[PM-35120] - Update user delete flows with org ownership by @jaasen-livefront in #20462

[PM-36880] Filter Linked field type for Bank Account cipher type by @nick-livefront in #20564

[PM-36947] Restrict bank account PIN field to numeric characters only by @nick-livefront in #20598

PM-37554 resolved double cancel issue by @bmbitwarden in #20683

[CL-1046] Add no-bit-dialog-wrapper lint rule by @willmartian in #20698

[CL-1203] Place tab overflow More button next to last visible tab by @willmartian in #20709

Disable Native popover use from Angular 21 by @nick-livefront in #20730

[PM-37720] Fixes org switch issue on AC collections page by @JaredScar in #20732

[PM-37782] User with view permission cannot favorite or add an item to a folder by @jengstrom-bw in #20764

[PM-37776] - fix empty vault on pin and touch id unlock by @jaasen-livefront in #20793

[PM-37825] Fix partial date validation blocking save and improve error count accuracy by @nick-livefront in #20799

[PM-24173] Fix credential generator constraint bypass by @harr1424 in #20810

[PM-37970] Fix vault list icons for Login and Identity with new item types flag by @nick-livefront in #20818

[PM-37479] Assign to collection dialog displays dummy string 0"> by @jengstrom-bw in #20819

[PM-37840] Fix hanging observables causing blank access intelligence page by @Banrion in #20822

PM-37696 resolved broswer popup when trying to close tab by @bmbitwarden in #20861

[PM-23564] Item view shows removed attachment/does not show added attachment temporarily by @jengstrom-bw in #20884

[PM-37079] Fix applicationName empty save and fetch in Access Intelligence by @Banrion in #20886

[PM-38113] In AC, when item filter is selected and user add new item, it does not default the creation form to selected item type by @jengstrom-bw in #20901

[PM-38400] Fix avoid ambiguous character bug by @adudek-bw in #20966

PM-38423 - Fix unsavedSendEditsGuard blocking logout by @JaredSnider-Bitwarden in #20967

[PM-38423] fix for perpetual spinner while logging out on send listing page by @itsadrago in #20972

⚙️ Maintenance

[CL-1129] Enable @angular-eslint/template/elements-content lint rule by @willmartian in #19505

[PM-36363] Refactors org user view models and consumers to be ts-strict compliant by @BTreston in #20559

[PM-37074] Add test ids for automation by @BTreston in #20674

PM-36952 - Improve code review workflow with added triggers by @theMickster in #20702

[PM-377730] Refactor unlock service & add decrypted user key method by @quexten in #20719

fixed perms in cherry-pick workflow by @gitclonebrian in #20758

[BRE-1938] Update Build Web workflow to run on published Web releases by @vgrassia in #20761

[BRE-1938] Simplify and optimize Retrieve Current Desktop Rollout workflow by @vgrassia in #20778

[BRE-1938] Cleanup build web logic and fix web deploy by @pixman20 in #20794

📦 Dependency Updates

[CL-954] Upgrade to Angular 21 by @willmartian in #19725

Update sdk-internal to 0.2.0-main.765 by @bw-ghapp in #20744

Update sdk-internal to 0.2.0-main.774 by @bw-ghapp in #20770

[PM-37729] SDK Bump by @nick-livefront in #20776

[bre-1942] fix package lock issue by @aj-bw in #20785

Update sdk-internal to 0.2.0-main.779 by @bw-ghapp in #20798

Update sdk-internal to 0.2.0-main.782 by @bw-ghapp in #20807

[deps] Architecture: Update lint-staged to v17 by @renovate in #20843

Update sdk-internal to 0.2.0-main.798 by @bw-ghapp in #20937

🔧 Other

Remove Claude Plan File by @rr-bw in #20662

Bump client version(s) by @github-actions in #20690

Autosync Crowdin Translations for web by @bw-ghapp in #20693

Bump client version(s) by @github-actions in #20940

Bumped client version(s) (#20940) by @addisonbeck in #21086

Original source

Overview

Faster, more secure sign-in with app links

Passport numbers now hidden for privacy

Refreshed password and account screens

Fixed an issue with master password update prompt

Resolved an autofill-related crash

Stability and security improvements

What's Changed

✨ Community Highlight

[PM-38918] fix: PM-38644, UI/UX inconsistency: Passport number in Identity items is not a hidden field by @dev-sharma3624 in #7053

Feature Development

PM-26577: Feat: Support multiple schemes for Duo, WebAuthn, and SSO callbacks by @david-livefront in #6339

PM-38479: Feat: Update the RemovePasswordScreen UI by @david-livefront in #7010

PM-37887: Feat: Update the Key Connector vault unlock to use the SDK by @david-livefront in #6999

[PM-37571] feat: Map Passport and License to SDK types by @SaintPatrck in #7009

PM-38587: Feat: Add accessibility service disclaimer at startup by @david-livefront in #7018

PM-38618: Feat: Update Accessibility Service disclosure text by @david-livefront in #7026

PM-38745: feat: Update accessibility UI by @david-livefront in #7037

🐛 Bug fixes

[PM-38364] fix: Multiply subscription line-item cost by quantity by @SaintPatrck in #7012

PM-38280: Fix: Update collection API to V2 by @david-livefront in #7014

BWA-252: bug: Empty string totp codes should not be counted as a totp code by @david-livefront in #7015

PM-38534: bug: Update LoginResult to use friendly error message by @david-livefront in #7017

PM-38513: Bug: Do not emit policies before we have recieved them by @david-livefront in #7023

PM-38610: Bug: Update BitwardenBasicDialog to allow scrolling content by @david-livefront in #7028

PM-38637: Bug: Add additional CRL distrobution server to clear-text permitted list by @david-livefront in #7045

PM-38779: Bug: Update cursor logic to avoid exception by @david-livefront in #7044

⚙️ Maintenance

[PM-38411] tech-debt: Update deprecated argument in actions/create-github-app-token by @vvolkgang in #7003

Crowdin Pull by @bw-ghapp[bot] in #7001

PM-38358: Chore: Remove user key by @david-livefront in #7004

Chore: Add gradle lockfiles by @david-livefront in #7008

[AppSec] AI Fix for Template Injection in GitHub Workflows Action by @aikido-autofix[bot] in #6784

[PM-37571] chore: Remove unused isSdkSupported guard by @SaintPatrck in #7011

Crowdin Pull by @bw-ghapp[bot] in #7032

PM-38625: Chore: Store the WrappedAccountCryptographicState by @david-livefront in #7030

[QA-1911] Add testTag to Flight Recorder logging duration dropdown by @Corbet-BW in #7040

Chore: Add a VaultUnlockResult helper method to handle successes by @david-livefront in #7041

Chore: Update the local app version by @david-livefront in #7043

Chore: Create a Overlay Navigation Screen by @david-livefront in #7049

Chore: Isolate the MainActivity composable content from onCreate by @david-livefront in #7051

Chore: Ensure UI it using common components and themeing by @david-livefront in #7052

📦 Dependency Updates

Update Google privileged browsers list by @github-actions[bot] in #7000

Update SDK to 3.0.0-7198-7bca9fca by @bw-ghapp[bot] in #6983

Deps: Update the Gradle Wrapper to v9.5.1 by @david-livefront in #7006

[deps]: Update mockk to v1.14.11 by @renovate[bot] in #7035

[deps]: Update kotlin to v2.3.9 by @renovate[bot] in #7034

Update SDK to 3.0.0-7338-5bdc976f by @bw-ghapp[bot] in #7007

New Contributors

@aikido-autofix[bot] made their first contribution in #6784

@Corbet-BW made their first contribution in #7040

Full Changelog: v2026.5.1-bwpm...v2026.6.0-bwpm

Builds Source: https://github.com/bitwarden/android/actions/runs/27437870956

Original source

Overview

Various under-the-hood bug fixes and improvements

What's Changed

✨ Community Highlight

[PM-38918] fix: PM-38644, UI/UX inconsistency: Passport number in Identity items is not a hidden field by @dev-sharma3624 in #7053

Feature Development

PM-26577: Feat: Support multiple schemes for Duo, WebAuthn, and SSO callbacks by @david-livefront in #6339

PM-38479: Feat: Update the RemovePasswordScreen UI by @david-livefront in #7010

PM-37887: Feat: Update the Key Connector vault unlock to use the SDK by @david-livefront in #6999

[PM-37571] feat: Map Passport and License to SDK types by @SaintPatrck in #7009

PM-38587: Feat: Add accessibility service disclaimer at startup by @david-livefront in #7018

PM-38618: Feat: Update Accessibility Service disclosure text by @david-livefront in #7026

PM-38745: feat: Update accessibility UI by @david-livefront in #7037

🐛 Bug fixes

[PM-38364] fix: Multiply subscription line-item cost by quantity by @SaintPatrck in #7012

PM-38280: Fix: Update collection API to V2 by @david-livefront in #7014

BWA-252: bug: Empty string totp codes should not be counted as a totp code by @david-livefront in #7015

PM-38534: bug: Update LoginResult to use friendly error message by @david-livefront in #7017

PM-38513: Bug: Do not emit policies before we have recieved them by @david-livefront in #7023

PM-38610: Bug: Update BitwardenBasicDialog to allow scrolling content by @david-livefront in #7028

PM-38637: Bug: Add additional CRL distrobution server to clear-text permitted list by @david-livefront in #7045

PM-38779: Bug: Update cursor logic to avoid exception by @david-livefront in #7044

⚙️ Maintenance

[PM-38411] tech-debt: Update deprecated argument in actions/create-github-app-token by @vvolkgang in #7003

Crowdin Pull by @bw-ghapp[bot] in #7001

PM-38358: Chore: Remove user key by @david-livefront in #7004

Chore: Add gradle lockfiles by @david-livefront in #7008

[AppSec] AI Fix for Template Injection in GitHub Workflows Action by @aikido-autofix[bot] in #6784

[PM-37571] chore: Remove unused isSdkSupported guard by @SaintPatrck in #7011

Crowdin Pull by @bw-ghapp[bot] in #7032

PM-38625: Chore: Store the WrappedAccountCryptographicState by @david-livefront in #7030

[QA-1911] Add testTag to Flight Recorder logging duration dropdown by @Corbet-BW in #7040

Chore: Add a VaultUnlockResult helper method to handle successes by @david-livefront in #7041

Chore: Update the local app version by @david-livefront in #7043

Chore: Create a Overlay Navigation Screen by @david-livefront in #7049

Chore: Isolate the MainActivity composable content from onCreate by @david-livefront in #7051

Chore: Ensure UI it using common components and themeing by @david-livefront in #7052

📦 Dependency Updates

Update Google privileged browsers list by @github-actions[bot] in #7000

Update SDK to 3.0.0-7198-7bca9fca by @bw-ghapp[bot] in #6983

Deps: Update the Gradle Wrapper to v9.5.1 by @david-livefront in #7006

[deps]: Update mockk to v1.14.11 by @renovate[bot] in #7035

[deps]: Update kotlin to v2.3.9 by @renovate[bot] in #7034

Update SDK to 3.0.0-7338-5bdc976f by @bw-ghapp[bot] in #7007

New Contributors

@aikido-autofix[bot] made their first contribution in #6784

@Corbet-BW made their first contribution in #7040

Full Changelog: v2026.5.1-bwa...v2026.6.0-bwa

Builds Source: https://github.com/bitwarden/android/actions/runs/27437872499

Original source

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle include Web 2026.6.2, Browser Extension 2026.6.0, Desktop 2026.6.0, Mobile 2026.6.1, and CLI 2026.6.0)

Password Manager

• Fill assist for browser extensions: Activate fill assist to improve autofill accuracy on a Bitwarden-curated selection of websites known to cause widespread autofill issues.
• Biometrics on Linux simplified: Setting up biometrics on Linux to unlock the Bitwarden desktop no longer requires a secret service daemon.
• Desktop app settings UI update: The Desktop app settings dialogue has been updated. Learn more about the Desktop app.
• Send recipient limit: When creating a Send restricted to specific people, the email address field now supports up to 2,500 characters.
• At-risk password notification UI update: The at-risk password label below the password field on View Login remains, but the banner that previously appeared at the top of the view was removed. The banner that appears in your vault when Access Intelligence is used to request a password change did not change.
• Vault sync UI update in browser extension: The Sync vault now text is now greyed out while a sync is in progress and becomes clickable again once the sync is complete.

Admin Console

• Organization policies now enforced for accepted members: Once a user accepts an organization invite, all configured organization policies apply to their account.

Original source