Bitwarden Release Notes

What's Changed

💙 Community Highlight

[PM-40131] fix(desktop): add Helium as Linux entry for NativeMessagingHosts by @0xk1f0 in #21748
[PM-39030] Fix Proton Pass import of item custom fields by @archit-goyal in #21253
[PM-19836] Add prefix to fastmail by @lucacome in #14105
[PM-40685] Fix forwarder settings cache collision by @cyfrit in #21980
[PM-39704] fix(send): restore increment/decrement buttons for max access count by @harikrishna2208 in #21527
[PM-39593] reduce calls to nodeIsElement in query (and by extension queryAutofillFormAndFieldElements) by @datdenkikniet in #21498
[PM-27495] Do not show true length of password in password mask by @Mauritz8 in #17052
[PM-37656] Resolve SSH agent caller name via libproc on macOS by @lnky102 in #20680
[PM-39312] Fix Proton Pass importer dropping custom, alias, and SSH key items by @theagg-18 in #21402

Feature Development

[PM-27060] feat: Call SDK for password prelogin by @ike-kottlowski in #21777
[PM-39815] feat: Add linksEnabled to invite-link status response model by @r-tome in #21820
[CL-1272] Support visually-hidden labels in bit-form-field by @willmartian in #21788
[PM-39778] Fix subtitles when using sdk by @jengstrom-bw in #21591
[PM-40286] - Add Vfo1TerminologyService and VFO1I18nPipe infrastructure by @nick-livefront in #21860
[PM-40060] Use native messaging dialog in browser extension settings by @quexten in #21705
[PM-37990] Add UriMatchDefaultPolicy components and stories by @JaredScar in #21827
[PM-38519] Add AutoConfirmPolicy V2 component and associated templates by @JaredScar in #21828
[PM-32384] Update copy new to create/add browser by @jengstrom-bw in #21524
[PM-40194] - add shared-folder icon by @jaasen-livefront in #21801
[PM-40283] Add v0.1.0 of the AppPairingData schema by @coltonhurst in #21814
[PM-40195] feat: add shared-folder localization keys by @jaasen-livefront in #21832
desktop-autofill: Add missing IPC methods by @iinuwa in #21775
Add generic HEC (SIEM) event integration card by @maxkpower in #21445
feat(llm): add claude note to make key-management aware of encryption related changes by @quexten in #21818
[PM-36007] Admin change email event logging by @BTreston in #21908
[PM-27844] Set email on sync by @ike-kottlowski in #21349
[CL-1273] Add bitMenuClose directive to decouple menu dismissal from ARIA roles by @willmartian in #21789
[PM-40104] Relabel "New organization" → "New vault" on org-switcher affordance (web) by @nick-livefront in #21871
[PM-32403] Update button copy desktop by @jengstrom-bw in #21528
[PM-38929] Add new design for edit member dialog by @BTreston in #21843
[INNO] - Passkey Report by @jrmccannon in #19787
[CL-1285] create Storybook feature-flags addon in new @bitwarden/storybook lib by @willmartian in #21913
[PM-37991] Implement Automatic App Login Policy v2 and associated components by @JaredScar in #21824
[PM-38749] Add OrganizationInviteLinkApiService.updateSupportsConfirmation by @JimmyVo16 in #21933
feat(register-finish-request): Add sales_assisted_token to request by @enmande in #21961
[PM-40381] Desktop Autofill Cancellation by @iinuwa in #21853
[PM-10383] - confirm before deleting a passkey by @jaasen-livefront in #21497
[PM-40193] feat: add vfo1Icon pipe for flag-gated icon swaps by @jaasen-livefront in #21876
[PM-35093] feat: Support bitwarden-gov.com deeplink redirects on web connectors by @enmande in #21752
[PM-40134] RoutedVaultFilterService accept a vaultId query parameter alongside organizationId by @jengstrom-bw in #21930
[PM-40216] feat: Scope organization invite link lookups by organization ID by @r-tome in #21815
[PM-35107] Remove Argon2Id option from UI in gov environment by @mzieniukbw in #21503
feat(shared-unlock): support trusted devices by @quexten in #21895
[PM-39997] desktop-autofill: Package Windows passkey plugin resources by @iinuwa in #21983
[PM-39387] fix: Auto-sync premium status after returning from Stripe checkout by @cyprain-okeke in #21518
[PM-38794] Add OrganizationInviteLinkApiService.getInvite by @JimmyVo16 in #21932
[PM-40682] desktop-autofill: Graceful Windows plugin registration by @iinuwa in #21982
desktop-autofill: Omit CTAP2 status code in assertion response by @iinuwa in #21978
[PM-40381] desktop-autofill: FIDO2 UI cancellation by @iinuwa in #21906
[CL-998] bit-table-v2 and related components by @willmartian in #20900
[PM-40449] create lit cipher items and list by @dan-livefront in #21984
feat(biometrics): add windows biometrics format based on sdk cryptography by @quexten in #21433
[PM-40089] Show a banner in the vault view when Fill Assist is active for the current page by @jprusik in #21754
[SM-1954] Show expiry status badge on access tokens list by @maxkpower in #20939
Autotype AppData path normalization by @neuronull in #21910
[PM-38813] - update offboarding survey by @jaasen-livefront in #21161
[PM-40111] Rename Owner to Vault field by @nick-livefront in #21897
Pm 38122 fastmail checkbox by @bmbitwarden in #21830
[PM-40255] Update collection icon to bwi-shared-folder by @nick-livefront in #21996
feat(data-recovery): add detection of field decryption ciphers by @quexten in #22065
[PM-39220] Add the At-Risk Gauge component by @AlexRubik in #21861
[PM-40682] desktop-autofill: Register Windows native passkey plugin by @iinuwa in #21986
[PM-40240][PM-40239] Updated card control features by @BryanCunningham in #21819
[PM-40252] feat: migrate shared vault components to shared-folder terminology by @jaasen-livefront in #21967
[PM-40165] feat(web): migrate vault components to shared-folder terminology by @jaasen-livefront in #21993
[PM-40335] PAM - Add access rules domain (1/2) by @Hinton in #21810
[PM-17584] Delinea XML parser by @mcamirault in #21620
[PM-41015] Add feature flag for Managed Device Framework by @djsmith85 in #22097
[PM-35157] Remove feature flagged logic for SDK decryption flag by @JaredScar in #22078
[PM-40654] feat: gate org-creation default collection name behind VFO1 terminology by @jaasen-livefront in #21969
[PM-40510] feat: rename vault-filter query param to sharedFolderId by @jaasen-livefront in #21968
[PM-40623] Update invite link service to match SDK by @eliykat in #22054
add problem detail support, wire up email changing by @BTreston in #21878
[CL-972] card updates by @BryanCunningham in #21776
[PM-35943] Browser: Add Health tab and navigation by @lastbestdev in #22045
desktop-autofill: Implement Windows native status command [PM-41025] by @iinuwa in #22138
[PM-39227] Add the browser vault-health reports service (categorize, score, emit) by @AlexRubik in #22009
[PM-40731] Implement VFO1 terminology updates across collection components by @JaredScar in #22104
[PM-39452] fix: Show premium membership status from desktop Account menu by @cyprain-okeke in #21992
[PM-40742] update SSO TDE copy by @BTreston in #22113
desktop-autofill: Implement Windows plugin credential sync [PM-41025] by @iinuwa in #22109
[PM-40734] Settings Collection Terminology changes by @JaredScar in #22107
[PM-40732] Groups terminology changes by @JaredScar in #22105
[PM-39075] Browser: Show Health tab berry until feature is visited by @lastbestdev in #22140
[PM-38799] Add translation for confirm flow audit events by @JimmyVo16 in #22117
[PM-38389] feat: Support sales-assisted trials by @enmande in #21929
[PM-40741] Reports terminology update by @BTreston in #22112
[PM-40733] members terminology update by @JaredScar in #22100
[PM-40335] PAM - Add access rules UI (2/2) by @Hinton in #21841
[PM-40448] create lit password generator by @dan-livefront in #22010
[PM-41312] Bump sdk-internal for Fill Assist policy type by @bensbits91 in #22206
[PM-40735] event logs terminology update by @JaredScar in #22133
[PM-39978] Add Item Send enum and fix resulting build errors by @mcamirault in #22135
[PM-40253] feat(browser): migrate vault components to shared-folder terminology by @gbubemismith in #22079
[PM-38248] Remove SendEventLogging feature flag by @harr1424 in #22131
[PM-39222] Browser: Add intro to Health feature by @lastbestdev in #22209
[PM-41438] - Add new errors for taken emails by @jrmccannon in #22220
added vault health reports by @maxkpower in #21432
[PM-40119] Assign Collection -> "Add to shared folder" action & dialog copy by @jengstrom-bw in #21874
[PM-40548] Web add quick copy icon setting by @jengstrom-bw in #22118
[PM-40549] Desktop add quick copy icon setting by @jengstrom-bw in #22120
desktop-autofill: Prepare native OS user verification [PM-29791] by @iinuwa in #22176
[PM-40254] feat(desktop): migrate vault components to shared-folder terminology by @gbubemismith in #22096
[PM-40944] Add Delinea CSV importer, improve types for Delinea XML by @mcamirault in #22207
[PM-40679] Autotype MVP Naming Refactor by @coltonhurst in #22201
SSH Agent contain edge case IPC failures by @neuronull in #22236
[PM-31619]Create feature-flag for inline menu component by @dan-livefront in #22234
[PM-38333] feat: Annual billing savings offer on cancel by @kdenney in #21939
[CL-51] create file upload component by @BryanCunningham in #20899

❗ Breaking Changes

Fix AuthEdit SDK break by @adudek-bw in #22071
introduce AutofillResult by @audreyality in #22161

🐛 Bug fixes

[PM-40820] Fix add access filter toggle style by @BTreston in #21816
[PM-16456] Add occupied seat count check when restoring user by @JaredScar in #21746
[PM-33228] Add screen reader only to enhance a11y behavior by @BryanCunningham in #21563
[PM-38940] Close Firefox/Safari Permissions-Policy gaps via webRequest by @bensbits91 in #21466
[PM-39137] Gate Access Intelligence report reads on new-architecture flag by @Banrion in #21315
[PM-16456] Add mock services for billing constraints to fix storybook by @JaredScar in #21833
[PM-39992] Add support for SDK IPC unreachability by @quexten in #21653
[PM-40303] Fix logout when underprivileged user accesses Manage Send policy by @harr1424 in #21836
[CL-1277] Add disabled and readonly variants to Textarea story by @willmartian in #21851
[PM-40377] Fix bug with form field to have textarea behave the same as an input when disabled by @jengstrom-bw in #21848
[PM-39825] Fix URI reordering, drag handle alignment by @jaasen-livefront in #21697
[PM-40444] Hide archive/unarchive from bulk bar in Admin Console by @nick-livefront in #21873
[PM-40457] Fix typos in the message catalogs by @jprusik in #21882
[PM-40370] Use decrypted ciphers cache when using SDK by @shane-melton in #21888
[PM-40484] Fix Autotype IPC channel mismatch by @coltonhurst in #21885
[PM-13643] Refactor user avatar rendering in bulk dialogs to utilize userId for correct color match by @JaredScar in #21884
[PM-40236] Logging out throws error mid-logout due to a race condition. User left in locked state by @mzieniukbw in #21858
Fix SSH Agent concurrent requests by @neuronull in #21881
[PM-40446] Enhance AutoConfirmWarningDialog by adding LinkModule to imports by @JaredScar in #21883
[PM-40482] Return to Default Filter After Revoking Last Staged User by @sven-bitwarden in #21911
[PM-39948][PM-40406] Fix native select issues with dark mode and arrow click handling by @vleague2 in #21877
[PM-13643] avatars in org member remove/revoke modal do not match members page fix by @JaredScar in #21931
[AppSec] AI Fix for Template Injection in GitHub Workflows Action by @aikido-autofix[bot] in #21787
[PM-40247] Fix vault item checkmarks disappearing after clearing a search by @nick-livefront in #21823
[PM-40201] SSH key items with a null public key or fingerprint fail to decrypt and break the vault by @gbubemismith in #21778
[PM-18638] Prevent collection/cipher creation for suspended organizations by @JaredScar in #21887
[PM-40432] Update Send Event Logs copy by @harr1424 in #21890
[PM-40502] communicate message extension payloads using symbol by @audreyality in #21909
[PM-40188] Apply deletion date policy to CLI-created Sends by @mcamirault in #21845
[CL-808] Support forced colors mode for form controls by @vleague2 in #21936
[PM-40543] Default new SCIM connections to staged by @sven-bitwarden in #21963
[CL-1282] use correct size for base icon tile by @BryanCunningham in #21856
fix(desktop): guard will-navigate against renderer escape by @addisonbeck in #21935
[PM-39845] Prevent Access Intelligence report freeze on oversized password values by @Banrion in #21987
[PM-39772] Detect shadow hosts created from iframes by @bensbits91 in #21857
[PM-40241] Bugfix - Rehydrate localData lastUsedDate on local cipher views by @jprusik in #21849
[PM-40440] fix: Source upgrade cart total from server invoice preview by @amorask-bitwarden in #21902
[PM-40375] Add per-item exception handling to 1Pux import by @harr1424 in #21941
[PM-39464] Fix ExpressionChangedAfterItHasBeenCheckedError when assigning collections by @nikwithak in #21743
fix(key-connector): fix sdk key-connector login not working by @quexten in #21957
[PM-38557] Netwrix Password Secure importer should map URL-like fields to Bitwarden website URI by @harr1424 in #21889
[PM-38189] Wire InitiationPath to Organizations to Correct Trial Metadata by @sbrown-livefront in #21769
[PM-40771] Update policy enabled method to accept PolicyStatusResponse by @JaredScar in #21997
fix: race condition leading to decryption errors by @quexten in #22063
fix(desktop): use x11 clipboard by default and only use portal as fallback by @quexten in #22062
[PM-24945] Fix bw send receive not recognizing --password parameter by @adudek-bw in #21872
[PM-38639] Fix scrollbar color in desktop light mode by @vleague2 in #22039
[PM-40800] re-add removed nested collection permissions checkbox by @BTreston in #22000
[PM-40961] fix: don't show no master password warning for staged users by @sven-bitwarden in #22075
fix(sdk): revert sdk lifecycle changes by @quexten in #22090
[PM-2803] Order collections alphabetically in collections dropdown for nested collections by @JaredScar in #22077
PM-36838 update template to show deviceName instead of deviceType by @voommen-livefront in #21600
[PM-40462] Fix checkbox being unchecked when clicking edit autotype shortcut by @shane-melton in #22085
[PM-25560] Align Safe In Cloud import to match native behavior by @harr1424 in #20717
[PM-26503] Bugfix - Allow inline menu to escape aria model focus traps by @jprusik in #22017
PM-41236 Add additional esccaping to shortcode text element by @mandreko-bitwarden in #22156
[PM-16160] Fixes CLI issue where passwords are show via get item command in CLI by @JaredScar in #22083
[PM-41027] fix: label add-item tile as shared folder under VFO1 terminology by @gbubemismith in #22137
[PM-40766] Handle punycode-unicode domain matching for "Host" URI matching strategy by @jprusik in #21994
Auth/PM-41303 - Direct Org Invite Acceptance - fix url paste scenario eternal spinner bug when org has MP policy by @JaredSnider-Bitwarden in #22184
[PM-40693] Hide copy button on file Sends by @mcamirault in #22015
[PM-41288] Fix bug preventing edits of existing File Sends by @mcamirault in #22203
SSH Agent: fix all-or-nothing key parsing by @neuronull in #22200
[PM-41256] User Is Unable to Create a Passport Cipher by @jengstrom-bw in #22181
[PM-40218] fix: stop autofill and save from deleting the TOTP key by @gbubemismith in #22175
[PM-30289] Fix for loss of focus on extension search input by @shane-melton in #18581
[PM-41539] fix: recognize both Keeper SSO callback URL forms (#22265) by @itsadrago in #22331
[PM-41691] Fix issue where edit item, hidden passwords wipes password, TOTP by @JaredScar in #22329
[PM-41880] Hotfix for edit members dialog dependencies (cherry-pick to rc) by @Banrion in #22417

⚙️ Maintenance

Bump client version(s) by @github-actions[bot] in #21811
Auth/PM-39905 - Restructure organization-invite into subfolders with barrel imports by @JaredSnider-Bitwarden in #21642
Auth/PM-3813 - 2FA Management Endpoints - User Verification Refactor by @JaredSnider-Bitwarden in #21385
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #21648
Fix/update CODEOWNERS by @djsmith85 in #21826
[PM-37476] Source canUseAccessIntelligence from server UseRiskInsights ability by @AlexRubik in #21760
[BRE-2044] Keep logic for bumping the Desktop version automatically in clients by @vgrassia in #21745
[BRE-1907] Add artifact manifest to build-web.yml by @gitclonebrian in #21726
[PM-40345] Ignore Storybook stories in code coverage by @Hinton in #21842
[PM-40138] desktop-autofill: refactor Autofill IPC Registration by @iinuwa in #21753
[PM-16487] Remove Add/edit v2 component by @jengstrom-bw in #21859
[PM-39259] Migrate auth token key generation to SDK by @quexten in #21706
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #21649
[PM-40456] Update cSpell settings by @jprusik in #21875
[PM-39259] Remove deprecated randomBytes/aesGenerateKey/createKey by @quexten in #21713
desktop-autofill: Move macOS-specific window position to macOS code by @iinuwa in #21852
chore(biometrics): extract biometrics to separate crate by @quexten in #21822
chore: rename biometric_v2 mod to biometric by @quexten in #21891
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #21903
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #21904
[PM-34857] Remove PoliciesInAcceptedState feature flag by @eliykat in #21761
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #21905
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #21915
[PM-36404] Refactor org guards for ts-strict by @BTreston in #21914
[PM-39966] Migrate from @angular/platform-browser-dynamic to @angular/platform-browser by @djsmith85 in #21866
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #21966
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #21916
chore(ci): skip platform-community signal for fork PRs by @addisonbeck in #21934
desktop-autofill: Add missing Skunkworks codeownership by @iinuwa in #21907
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #21917
[PM-40447] Create lit prompt component by @dan-livefront in #21892
[PM-40688] Run prettier to fix failing lint after prettier upgrade by @dan-livefront in #21981
chore: Add team-ai-sme as CODEOWNERS for .mcp.json by @SaintPatrck in #21985
build: allow sdk-internal crypto crates in dependency tooling by @quexten in #21925
refactor: gate desktop_native core allocator and windows deps by @quexten in #21926
DN Autotype: Move mockall and serial_test to be Dev Deps by @coltonhurst in #21999
refactor(login-strategy): clean up crypto-related functions and deprecation notices by @quexten in #21958
[BRE-2118] Adding publish CLI workflow for NPM provenance by @pixman20 in #22014
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22020
docs(vault): document deprecation of TypeScript vault item decryption by @quexten in #22004
Bump client version(s) by @github-actions[bot] in #22038
Bump client version(s) by @github-actions[bot] in #22069
[CL] mark bit-table-v2 as Beta in Storybook docs by @willmartian in #22072
[PM-40847] Add any missing inline menu renderings to storybook for QA by @dan-livefront in #22037
[PM-40590] Run chromatic workflow when the workflow file is updated, to enable dep testing by @vleague2 in #22076
[PM-40259] introduce AutofillOrchestrator by @audreyality in #21768
[PM-40680] chromium-importer: Replace deprecated LSFindApplicationForInfo function by @iinuwa in #21979
[PM-36403] Group view models ts strict by @BTreston in #21825
[PM-36405] collection dialog refactor by @BTreston in #21965
[PM-36405] Fix types in Storybook after adopting ts-strict by @eliykat in #22086
[CL-1292] update icon docs for filename-based build system by @BryanCunningham in #22108
Add t:deps label for SDK update PRs automatically by @trmartin4 in #22142
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22018
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22162
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22166
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22019
build: Fix Windows cross-compiled builds by @iinuwa in #22139
chore: remove checkmarx from repo by @sognefej in #22183
[PM-35791] Remove old Send access endpoints by @mcamirault in #22080
[BRE-2153] fix(ci): Stage bit-common for commercial browser builds by @fntyler in #22198
[PM-40846] Support Fido2 v4 server update by @ike-kottlowski in #22006
chore(kdf-change): port change kdf to sdk by @quexten in #22032
[PM-24097] - [Vault] Remove getOrgKey from the key service by @jaasen-livefront in #21480
Move browser Health tab files to commercial license by @lastbestdev in #22223
[PM-40107] Deprecate TS generator logic available in the SDK by @harr1424 in #22154
[BRE-2158] Add PR label to creation step for Crowdin Pull workflow by @vgrassia in #22228
mock missing observables to suppress console errors by @audienceality in #22174
[CL-1294] Add FormRecord stories for table-v2 by @willmartian in #22160
chore(crypto): port crypto sync handler to sdk by @quexten in #22217
SSH Agent: fix flaky integration test by @neuronull in #22238
Browser: Refactor client state definitions for Health feature by @lastbestdev in #22240
[BRE-2105] Updating build process for desktop and browser beta channels by @pixman20 in #22229
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22274
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22272
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22273
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22281
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22279
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22280
refactor(crypto): add legacy crypto module by @quexten in #22254
chore(native-messaging): rename native messaging plug to dot-native-messaging by @quexten in #22303
[BRE-2116] Bump actions/checkout to v7.0.1 in non-privileged workflows by @brandonbiete in #22157
Bump client version(s) by @github-actions[bot] in #22320

📦 Dependency Updates

Update sdk-internal to 0.2.0-main.897 by @bw-ghapp[bot] in #21718
[deps]: Update GitHub Artifact Actions (major) by @renovate[bot] in #19586
Pin NPM 11 on CLI builds by @dani-garcia in #21838
[deps]: Update Rust by @renovate[bot] in #20390
[deps] Platform: Lock file maintenance by @renovate[bot] in #21796
[deps]: Update dtolnay/rust-toolchain digest to 4cda84d by @renovate[bot] in #21948
[deps] Platform: Update jest-preset-angular to v17 by @renovate[bot] in #21678
[deps] Autofill: Update prettier to v3.9.5 by @renovate[bot] in #21668
[deps] Platform: Update webpack-dev-server to v5.2.6 [SECURITY] by @renovate[bot] in #21972
[deps]: Update cargo-deny to 0.20.0 by @renovate[bot] in #21952
[deps] UI Foundation: Update chromatic to v18 by @renovate[bot] in #21954
[deps]: Update chromaui/action action to v18 by @renovate[bot] in #21956
Auth/PM-40520 - Bump SDK versions in clients to get new registration open org invite crypto APIs by @JaredSnider-Bitwarden in #22134
Update sdk-internal to 0.2.0-main.928 by @bw-ghapp[bot] in #21870
[deps]: Update Rust crate rusqlite to v0.40.1 by @renovate[bot] in #21115
[deps] Tools: Update Rust crate aes-gcm to v0.11.0 by @renovate[bot] in #21675
[deps] Tools: Update @bufbuild/protobuf to v2.13.0 by @renovate[bot] in #21950
fix: update sdk and add support for kdf in state bridge by @quexten in #22197
[deps] Vault: Update @koa/router to v15.7.0 by @renovate[bot] in #21951
[deps] Platform: Update electron to v43 by @renovate[bot] in #20844
[deps]: Update Rust crate rkyv to v0.8.17 by @renovate[bot] in #22215

🎨 Other

[PM-39560] [BEEEP] Add MCP server configuration for Chrome and Electron DevTools by @quexten in #21483

New Contributors

@0xk1f0 made their first contribution in #21748
@archit-goyal made their first contribution in #21253
@lucacome made their first contribution in #14105
@cyfrit made their first contribution in #21980
@harikrishna2208 made their first contribution in #21527
@datdenkikniet made their first contribution in #21498
@lnky102 made their first contribution in #20680
@theagg-18 made their first contribution in #21402

Full Changelog: cli-v2026.7.0...cli-v2026.8.0

Original source

What's Changed

💙 Community Highlight

[PM-40131] fix(desktop): add Helium as Linux entry for NativeMessagingHosts by @0xk1f0 in #21748
[PM-39030] Fix Proton Pass import of item custom fields by @archit-goyal in #21253
[PM-19836] Add prefix to fastmail by @lucacome in #14105
[PM-40685] Fix forwarder settings cache collision by @cyfrit in #21980
[PM-39704] fix(send): restore increment/decrement buttons for max access count by @harikrishna2208 in #21527
[PM-39593] reduce calls to nodeIsElement in query (and by extension queryAutofillFormAndFieldElements) by @datdenkikniet in #21498
[PM-27495] Do not show true length of password in password mask by @Mauritz8 in #17052
[PM-37656] Resolve SSH agent caller name via libproc on macOS by @lnky102 in #20680
[PM-39312] Fix Proton Pass importer dropping custom, alias, and SSH key items by @theagg-18 in #21402

Feature Development

[PM-27060] feat: Call SDK for password prelogin by @ike-kottlowski in #21777
[PM-39815] feat: Add linksEnabled to invite-link status response model by @r-tome in #21820
[CL-1272] Support visually-hidden labels in bit-form-field by @willmartian in #21788
[PM-39778] Fix subtitles when using sdk by @jengstrom-bw in #21591
[PM-40286] - Add Vfo1TerminologyService and VFO1I18nPipe infrastructure by @nick-livefront in #21860
[PM-40060] Use native messaging dialog in browser extension settings by @quexten in #21705
[PM-37990] Add UriMatchDefaultPolicy components and stories by @JaredScar in #21827
[PM-38519] Add AutoConfirmPolicy V2 component and associated templates by @JaredScar in #21828
[PM-32384] Update copy new to create/add browser by @jengstrom-bw in #21524
[PM-40194] - add shared-folder icon by @jaasen-livefront in #21801
[PM-40283] Add v0.1.0 of the AppPairingData schema by @coltonhurst in #21814
[PM-40195] feat: add shared-folder localization keys by @jaasen-livefront in #21832
desktop-autofill: Add missing IPC methods by @iinuwa in #21775
Add generic HEC (SIEM) event integration card by @maxkpower in #21445
feat(llm): add claude note to make key-management aware of encryption related changes by @quexten in #21818
[PM-36007] Admin change email event logging by @BTreston in #21908
[PM-27844] Set email on sync by @ike-kottlowski in #21349
[CL-1273] Add bitMenuClose directive to decouple menu dismissal from ARIA roles by @willmartian in #21789
[PM-40104] Relabel "New organization" → "New vault" on org-switcher affordance (web) by @nick-livefront in #21871
[PM-32403] Update button copy desktop by @jengstrom-bw in #21528
[PM-38929] Add new design for edit member dialog by @BTreston in #21843
[INNO] - Passkey Report by @jrmccannon in #19787
[CL-1285] create Storybook feature-flags addon in new @bitwarden/storybook lib by @willmartian in #21913
[PM-37991] Implement Automatic App Login Policy v2 and associated components by @JaredScar in #21824
[PM-38749] Add OrganizationInviteLinkApiService.updateSupportsConfirmation by @JimmyVo16 in #21933
feat(register-finish-request): Add sales_assisted_token to request by @enmande in #21961
[PM-40381] Desktop Autofill Cancellation by @iinuwa in #21853
[PM-10383] - confirm before deleting a passkey by @jaasen-livefront in #21497
[PM-40193] feat: add vfo1Icon pipe for flag-gated icon swaps by @jaasen-livefront in #21876
[PM-35093] feat: Support bitwarden-gov.com deeplink redirects on web connectors by @enmande in #21752
[PM-40134] RoutedVaultFilterService accept a vaultId query parameter alongside organizationId by @jengstrom-bw in #21930
[PM-40216] feat: Scope organization invite link lookups by organization ID by @r-tome in #21815
[PM-35107] Remove Argon2Id option from UI in gov environment by @mzieniukbw in #21503
feat(shared-unlock): support trusted devices by @quexten in #21895
[PM-39997] desktop-autofill: Package Windows passkey plugin resources by @iinuwa in #21983
[PM-39387] fix: Auto-sync premium status after returning from Stripe checkout by @cyprain-okeke in #21518
[PM-38794] Add OrganizationInviteLinkApiService.getInvite by @JimmyVo16 in #21932
[PM-40682] desktop-autofill: Graceful Windows plugin registration by @iinuwa in #21982
desktop-autofill: Omit CTAP2 status code in assertion response by @iinuwa in #21978
[PM-40381] desktop-autofill: FIDO2 UI cancellation by @iinuwa in #21906
[CL-998] bit-table-v2 and related components by @willmartian in #20900
[PM-40449] create lit cipher items and list by @dan-livefront in #21984
feat(biometrics): add windows biometrics format based on sdk cryptography by @quexten in #21433
[PM-40089] Show a banner in the vault view when Fill Assist is active for the current page by @jprusik in #21754
[SM-1954] Show expiry status badge on access tokens list by @maxkpower in #20939
Autotype AppData path normalization by @neuronull in #21910
[PM-38813] - update offboarding survey by @jaasen-livefront in #21161
[PM-40111] Rename Owner to Vault field by @nick-livefront in #21897
Pm 38122 fastmail checkbox by @bmbitwarden in #21830
[PM-40255] Update collection icon to bwi-shared-folder by @nick-livefront in #21996
feat(data-recovery): add detection of field decryption ciphers by @quexten in #22065
[PM-39220] Add the At-Risk Gauge component by @AlexRubik in #21861
[PM-40682] desktop-autofill: Register Windows native passkey plugin by @iinuwa in #21986
[PM-40240][PM-40239] Updated card control features by @BryanCunningham in #21819
[PM-40252] feat: migrate shared vault components to shared-folder terminology by @jaasen-livefront in #21967
[PM-40165] feat(web): migrate vault components to shared-folder terminology by @jaasen-livefront in #21993
[PM-40335] PAM - Add access rules domain (1/2) by @Hinton in #21810
[PM-17584] Delinea XML parser by @mcamirault in #21620
[PM-41015] Add feature flag for Managed Device Framework by @djsmith85 in #22097
[PM-35157] Remove feature flagged logic for SDK decryption flag by @JaredScar in #22078
[PM-40654] feat: gate org-creation default collection name behind VFO1 terminology by @jaasen-livefront in #21969
[PM-40510] feat: rename vault-filter query param to sharedFolderId by @jaasen-livefront in #21968
[PM-40623] Update invite link service to match SDK by @eliykat in #22054
add problem detail support, wire up email changing by @BTreston in #21878
[CL-972] card updates by @BryanCunningham in #21776
[PM-35943] Browser: Add Health tab and navigation by @lastbestdev in #22045
desktop-autofill: Implement Windows native status command [PM-41025] by @iinuwa in #22138
[PM-39227] Add the browser vault-health reports service (categorize, score, emit) by @AlexRubik in #22009
[PM-40731] Implement VFO1 terminology updates across collection components by @JaredScar in #22104
[PM-39452] fix: Show premium membership status from desktop Account menu by @cyprain-okeke in #21992
[PM-40742] update SSO TDE copy by @BTreston in #22113
desktop-autofill: Implement Windows plugin credential sync [PM-41025] by @iinuwa in #22109
[PM-40734] Settings Collection Terminology changes by @JaredScar in #22107
[PM-40732] Groups terminology changes by @JaredScar in #22105
[PM-39075] Browser: Show Health tab berry until feature is visited by @lastbestdev in #22140
[PM-38799] Add translation for confirm flow audit events by @JimmyVo16 in #22117
[PM-38389] feat: Support sales-assisted trials by @enmande in #21929
[PM-40741] Reports terminology update by @BTreston in #22112
[PM-40733] members terminology update by @JaredScar in #22100
[PM-40335] PAM - Add access rules UI (2/2) by @Hinton in #21841
[PM-40448] create lit password generator by @dan-livefront in #22010
[PM-41312] Bump sdk-internal for Fill Assist policy type by @bensbits91 in #22206
[PM-40735] event logs terminology update by @JaredScar in #22133
[PM-39978] Add Item Send enum and fix resulting build errors by @mcamirault in #22135
[PM-40253] feat(browser): migrate vault components to shared-folder terminology by @gbubemismith in #22079
[PM-38248] Remove SendEventLogging feature flag by @harr1424 in #22131
[PM-39222] Browser: Add intro to Health feature by @lastbestdev in #22209
[PM-41438] - Add new errors for taken emails by @jrmccannon in #22220
added vault health reports by @maxkpower in #21432
[PM-40119] Assign Collection -> "Add to shared folder" action & dialog copy by @jengstrom-bw in #21874
[PM-40548] Web add quick copy icon setting by @jengstrom-bw in #22118
[PM-40549] Desktop add quick copy icon setting by @jengstrom-bw in #22120
desktop-autofill: Prepare native OS user verification [PM-29791] by @iinuwa in #22176
[PM-40254] feat(desktop): migrate vault components to shared-folder terminology by @gbubemismith in #22096
[PM-40944] Add Delinea CSV importer, improve types for Delinea XML by @mcamirault in #22207
[PM-40679] Autotype MVP Naming Refactor by @coltonhurst in #22201
SSH Agent contain edge case IPC failures by @neuronull in #22236
[PM-31619]Create feature-flag for inline menu component by @dan-livefront in #22234
[PM-38333] feat: Annual billing savings offer on cancel by @kdenney in #21939
[CL-51] create file upload component by @BryanCunningham in #20899

❗ Breaking Changes

Fix AuthEdit SDK break by @adudek-bw in #22071
introduce AutofillResult by @audreyality in #22161

🐛 Bug fixes

[PM-40820] Fix add access filter toggle style by @BTreston in #21816
[PM-16456] Add occupied seat count check when restoring user by @JaredScar in #21746
[PM-33228] Add screen reader only to enhance a11y behavior by @BryanCunningham in #21563
[PM-38940] Close Firefox/Safari Permissions-Policy gaps via webRequest by @bensbits91 in #21466
[PM-39137] Gate Access Intelligence report reads on new-architecture flag by @Banrion in #21315
[PM-16456] Add mock services for billing constraints to fix storybook by @JaredScar in #21833
[PM-39992] Add support for SDK IPC unreachability by @quexten in #21653
[PM-40303] Fix logout when underprivileged user accesses Manage Send policy by @harr1424 in #21836
[CL-1277] Add disabled and readonly variants to Textarea story by @willmartian in #21851
[PM-40377] Fix bug with form field to have textarea behave the same as an input when disabled by @jengstrom-bw in #21848
[PM-39825] Fix URI reordering, drag handle alignment by @jaasen-livefront in #21697
[PM-40444] Hide archive/unarchive from bulk bar in Admin Console by @nick-livefront in #21873
[PM-40457] Fix typos in the message catalogs by @jprusik in #21882
[PM-40370] Use decrypted ciphers cache when using SDK by @shane-melton in #21888
[PM-40484] Fix Autotype IPC channel mismatch by @coltonhurst in #21885
[PM-13643] Refactor user avatar rendering in bulk dialogs to utilize userId for correct color match by @JaredScar in #21884
[PM-40236] Logging out throws error mid-logout due to a race condition. User left in locked state by @mzieniukbw in #21858
Fix SSH Agent concurrent requests by @neuronull in #21881
[PM-40446] Enhance AutoConfirmWarningDialog by adding LinkModule to imports by @JaredScar in #21883
[PM-40482] Return to Default Filter After Revoking Last Staged User by @sven-bitwarden in #21911
[PM-39948][PM-40406] Fix native select issues with dark mode and arrow click handling by @vleague2 in #21877
[PM-13643] avatars in org member remove/revoke modal do not match members page fix by @JaredScar in #21931
[AppSec] AI Fix for Template Injection in GitHub Workflows Action by @aikido-autofix[bot] in #21787
[PM-40247] Fix vault item checkmarks disappearing after clearing a search by @nick-livefront in #21823
[PM-40201] SSH key items with a null public key or fingerprint fail to decrypt and break the vault by @gbubemismith in #21778
[PM-18638] Prevent collection/cipher creation for suspended organizations by @JaredScar in #21887
[PM-40432] Update Send Event Logs copy by @harr1424 in #21890
[PM-40502] communicate message extension payloads using symbol by @audreyality in #21909
[PM-40188] Apply deletion date policy to CLI-created Sends by @mcamirault in #21845
[CL-808] Support forced colors mode for form controls by @vleague2 in #21936
[PM-40543] Default new SCIM connections to staged by @sven-bitwarden in #21963
[CL-1282] use correct size for base icon tile by @BryanCunningham in #21856
fix(desktop): guard will-navigate against renderer escape by @addisonbeck in #21935
[PM-39845] Prevent Access Intelligence report freeze on oversized password values by @Banrion in #21987
[PM-39772] Detect shadow hosts created from iframes by @bensbits91 in #21857
[PM-40241] Bugfix - Rehydrate localData lastUsedDate on local cipher views by @jprusik in #21849
[PM-40440] fix: Source upgrade cart total from server invoice preview by @amorask-bitwarden in #21902
[PM-40375] Add per-item exception handling to 1Pux import by @harr1424 in #21941
[PM-39464] Fix ExpressionChangedAfterItHasBeenCheckedError when assigning collections by @nikwithak in #21743
fix(key-connector): fix sdk key-connector login not working by @quexten in #21957
[PM-38557] Netwrix Password Secure importer should map URL-like fields to Bitwarden website URI by @harr1424 in #21889
[PM-38189] Wire InitiationPath to Organizations to Correct Trial Metadata by @sbrown-livefront in #21769
[PM-40771] Update policy enabled method to accept PolicyStatusResponse by @JaredScar in #21997
fix: race condition leading to decryption errors by @quexten in #22063
fix(desktop): use x11 clipboard by default and only use portal as fallback by @quexten in #22062
[PM-24945] Fix bw send receive not recognizing --password parameter by @adudek-bw in #21872
[PM-38639] Fix scrollbar color in desktop light mode by @vleague2 in #22039
[PM-40800] re-add removed nested collection permissions checkbox by @BTreston in #22000
[PM-40961] fix: don't show no master password warning for staged users by @sven-bitwarden in #22075
fix(sdk): revert sdk lifecycle changes by @quexten in #22090
[PM-2803] Order collections alphabetically in collections dropdown for nested collections by @JaredScar in #22077
PM-36838 update template to show deviceName instead of deviceType by @voommen-livefront in #21600
[PM-40462] Fix checkbox being unchecked when clicking edit autotype shortcut by @shane-melton in #22085
[PM-25560] Align Safe In Cloud import to match native behavior by @harr1424 in #20717
[PM-26503] Bugfix - Allow inline menu to escape aria model focus traps by @jprusik in #22017
PM-41236 Add additional esccaping to shortcode text element by @mandreko-bitwarden in #22156
[PM-16160] Fixes CLI issue where passwords are show via get item command in CLI by @JaredScar in #22083
[PM-41027] fix: label add-item tile as shared folder under VFO1 terminology by @gbubemismith in #22137
[PM-40766] Handle punycode-unicode domain matching for "Host" URI matching strategy by @jprusik in #21994
Auth/PM-41303 - Direct Org Invite Acceptance - fix url paste scenario eternal spinner bug when org has MP policy by @JaredSnider-Bitwarden in #22184
[PM-40693] Hide copy button on file Sends by @mcamirault in #22015
[PM-41288] Fix bug preventing edits of existing File Sends by @mcamirault in #22203
SSH Agent: fix all-or-nothing key parsing by @neuronull in #22200
[PM-41256] User Is Unable to Create a Passport Cipher by @jengstrom-bw in #22181
[PM-40218] fix: stop autofill and save from deleting the TOTP key by @gbubemismith in #22175
[PM-30289] Fix for loss of focus on extension search input by @shane-melton in #18581
[PM-41539] fix: recognize both Keeper SSO callback URL forms (#22265) by @itsadrago in #22331
[PM-41691] Fix issue where edit item, hidden passwords wipes password, TOTP by @JaredScar in #22329

⚙️ Maintenance

Bump client version(s) by @github-actions[bot] in #21811
Auth/PM-39905 - Restructure organization-invite into subfolders with barrel imports by @JaredSnider-Bitwarden in #21642
Auth/PM-3813 - 2FA Management Endpoints - User Verification Refactor by @JaredSnider-Bitwarden in #21385
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #21648
Fix/update CODEOWNERS by @djsmith85 in #21826
[PM-37476] Source canUseAccessIntelligence from server UseRiskInsights ability by @AlexRubik in #21760
[BRE-2044] Keep logic for bumping the Desktop version automatically in clients by @vgrassia in #21745
[BRE-1907] Add artifact manifest to build-web.yml by @gitclonebrian in #21726
[PM-40345] Ignore Storybook stories in code coverage by @Hinton in #21842
[PM-40138] desktop-autofill: refactor Autofill IPC Registration by @iinuwa in #21753
[PM-16487] Remove Add/edit v2 component by @jengstrom-bw in #21859
[PM-39259] Migrate auth token key generation to SDK by @quexten in #21706
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #21649
[PM-40456] Update cSpell settings by @jprusik in #21875
[PM-39259] Remove deprecated randomBytes/aesGenerateKey/createKey by @quexten in #21713
desktop-autofill: Move macOS-specific window position to macOS code by @iinuwa in #21852
chore(biometrics): extract biometrics to separate crate by @quexten in #21822
chore: rename biometric_v2 mod to biometric by @quexten in #21891
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #21903
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #21904
[PM-34857] Remove PoliciesInAcceptedState feature flag by @eliykat in #21761
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #21905
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #21915
[PM-36404] Refactor org guards for ts-strict by @BTreston in #21914
[PM-39966] Migrate from @angular/platform-browser-dynamic to @angular/platform-browser by @djsmith85 in #21866
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #21966
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #21916
chore(ci): skip platform-community signal for fork PRs by @addisonbeck in #21934
desktop-autofill: Add missing Skunkworks codeownership by @iinuwa in #21907
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #21917
[PM-40447] Create lit prompt component by @dan-livefront in #21892
[PM-40688] Run prettier to fix failing lint after prettier upgrade by @dan-livefront in #21981
chore: Add team-ai-sme as CODEOWNERS for .mcp.json by @SaintPatrck in #21985
build: allow sdk-internal crypto crates in dependency tooling by @quexten in #21925
refactor: gate desktop_native core allocator and windows deps by @quexten in #21926
DN Autotype: Move mockall and serial_test to be Dev Deps by @coltonhurst in #21999
refactor(login-strategy): clean up crypto-related functions and deprecation notices by @quexten in #21958
[BRE-2118] Adding publish CLI workflow for NPM provenance by @pixman20 in #22014
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22020
docs(vault): document deprecation of TypeScript vault item decryption by @quexten in #22004
Bump client version(s) by @github-actions[bot] in #22038
Bump client version(s) by @github-actions[bot] in #22069
[CL] mark bit-table-v2 as Beta in Storybook docs by @willmartian in #22072
[PM-40847] Add any missing inline menu renderings to storybook for QA by @dan-livefront in #22037
[PM-40590] Run chromatic workflow when the workflow file is updated, to enable dep testing by @vleague2 in #22076
[PM-40259] introduce AutofillOrchestrator by @audreyality in #21768
[PM-40680] chromium-importer: Replace deprecated LSFindApplicationForInfo function by @iinuwa in #21979
[PM-36403] Group view models ts strict by @BTreston in #21825
[PM-36405] collection dialog refactor by @BTreston in #21965
[PM-36405] Fix types in Storybook after adopting ts-strict by @eliykat in #22086
[CL-1292] update icon docs for filename-based build system by @BryanCunningham in #22108
Add t:deps label for SDK update PRs automatically by @trmartin4 in #22142
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22018
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22162
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22166
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22019
build: Fix Windows cross-compiled builds by @iinuwa in #22139
chore: remove checkmarx from repo by @sognefej in #22183
[PM-35791] Remove old Send access endpoints by @mcamirault in #22080
[BRE-2153] fix(ci): Stage bit-common for commercial browser builds by @fntyler in #22198
[PM-40846] Support Fido2 v4 server update by @ike-kottlowski in #22006
chore(kdf-change): port change kdf to sdk by @quexten in #22032
[PM-24097] - [Vault] Remove getOrgKey from the key service by @jaasen-livefront in #21480
Move browser Health tab files to commercial license by @lastbestdev in #22223
[PM-40107] Deprecate TS generator logic available in the SDK by @harr1424 in #22154
[BRE-2158] Add PR label to creation step for Crowdin Pull workflow by @vgrassia in #22228
mock missing observables to suppress console errors by @audreyality in #22174
[CL-1294] Add FormRecord stories for table-v2 by @willmartian in #22160
chore(crypto): port crypto sync handler to sdk by @quexten in #22217
SSH Agent: fix flaky integration test by @neuronull in #22238
Browser: Refactor client state definitions for Health feature by @lastbestdev in #22240
[BRE-2105] Updating build process for desktop and browser beta channels by @pixman20 in #22229
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22274
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22272
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22273
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22281
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22279
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22280
refactor(crypto): add legacy crypto module by @quexten in #22254
chore(native-messaging): rename native messaging plug to dot-native-messaging by @quexten in #22303
[BRE-2116] Bump actions/checkout to v7.0.1 in non-privileged workflows by @brandonbiete in #22157
Bump client version(s) by @github-actions[bot] in #22320

📦 Dependency Updates

Update sdk-internal to 0.2.0-main.897 by @bw-ghapp[bot] in #21718
[deps]: Update GitHub Artifact Actions (major) by @renovate[bot] in #19586
Pin NPM 11 on CLI builds by @dani-garcia in #21838
[deps]: Update Rust by @renovate[bot] in #20390
[deps] Platform: Lock file maintenance by @renovate[bot] in #21796
[deps]: Update dtolnay/rust-toolchain digest to 4cda84d by @renovate[bot] in #21948
[deps] Platform: Update jest-preset-angular to v17 by @renovate[bot] in #21678
[deps] Autofill: Update prettier to v3.9.5 by @renovate[bot] in #21668
[deps] Platform: Update webpack-dev-server to v5.2.6 [SECURITY] by @renovate[bot] in #21972
[deps]: Update cargo-deny to 0.20.0 by @renovate[bot] in #21952
[deps] UI Foundation: Update chromatic to v18 by @renovate[bot] in #21954
[deps]: Update chromaui/action action to v18 by @renovate[bot] in #21956
Auth/PM-40520 - Bump SDK versions in clients to get new registration open org invite crypto APIs by @JaredSnider-Bitwarden in #22134
Update sdk-internal to 0.2.0-main.928 by @bw-ghapp[bot] in #21870
[deps]: Update Rust crate rusqlite to v0.40.1 by @renovate[bot] in #21115
[deps] Tools: Update Rust crate aes-gcm to v0.11.0 by @renovate[bot] in #21675
[deps] Tools: Update @bufbuild/protobuf to v2.13.0 by @renovate[bot] in #21950
fix: update sdk and add support for kdf in state bridge by @quexten in #22197
[deps] Vault: Update @koa/router to v15.7.0 by @renovate[bot] in #21951
[deps] Platform: Update electron to v43 by @renovate[bot] in #20844
[deps]: Update Rust crate rkyv to v0.8.17 by @renovate[bot] in #22215

🎨 Other

[PM-39560] [BEEEP] Add MCP server configuration for Chrome and Electron DevTools by @quexten in #21483

New Contributors

@0xk1f0 made their first contribution in #21748
@archit-goyal made their first contribution in #21253
@lucacome made their first contribution in #14105
@cyfrit made their first contribution in #21980
@harikrishna2208 made their first contribution in #21527
@datdenkikniet made their first contribution in #21498
@lnky102 made their first contribution in #20680
@theagg-18 made their first contribution in #21402

Full Changelog: desktop-v2026.7.0...desktop-v2026.8.0

Original source

What's Changed

💙 Community Highlight

[PM-40131] fix(desktop): add Helium as Linux entry for NativeMessagingHosts by @0xk1f0 in #21748
[PM-39030] Fix Proton Pass import of item custom fields by @archit-goyal in #21253
[PM-19836] Add prefix to fastmail by @lucacome in #14105
[PM-40685] Fix forwarder settings cache collision by @cyfrit in #21980
[PM-39704] fix(send): restore increment/decrement buttons for max access count by @harikrishna2208 in #21527
[PM-39593] reduce calls to nodeIsElement in query (and by extension queryAutofillFormAndFieldElements) by @datdenkikniet in #21498
[PM-27495] Do not show true length of password in password mask by @Mauritz8 in #17052
[PM-37656] Resolve SSH agent caller name via libproc on macOS by @lnky102 in #20680
[PM-39312] Fix Proton Pass importer dropping custom, alias, and SSH key items by @theagg-18 in #21402

Feature Development

[PM-27060] feat: Call SDK for password prelogin by @ike-kottlowski in #21777
[PM-39815] feat: Add linksEnabled to invite-link status response model by @r-tome in #21820
[CL-1272] Support visually-hidden labels in bit-form-field by @willmartian in #21788
[PM-39778] Fix subtitles when using sdk by @jengstrom-bw in #21591
[PM-40286] - Add Vfo1TerminologyService and VFO1I18nPipe infrastructure by @nick-livefront in #21860
[PM-40060] Use native messaging dialog in browser extension settings by @quexten in #21705
[PM-37990] Add UriMatchDefaultPolicy components and stories by @JaredScar in #21827
[PM-38519] Add AutoConfirmPolicy V2 component and associated templates by @JaredScar in #21828
[PM-32384] Update copy new to create/add browser by @jengstrom-bw in #21524
[PM-40194] - add shared-folder icon by @jaasen-livefront in #21801
[PM-40283] Add v0.1.0 of the AppPairingData schema by @coltonhurst in #21814
[PM-40195] feat: add shared-folder localization keys by @jaasen-livefront in #21832
desktop-autofill: Add missing IPC methods by @iinuwa in #21775
Add generic HEC (SIEM) event integration card by @maxkpower in #21445
feat(llm): add claude note to make key-management aware of encryption related changes by @quexten in #21818
[PM-36007] Admin change email event logging by @BTreston in #21908
[PM-27844] Set email on sync by @ike-kottlowski in #21349
[CL-1273] Add bitMenuClose directive to decouple menu dismissal from ARIA roles by @willmartian in #21789
[PM-40104] Relabel "New organization" → "New vault" on org-switcher affordance (web) by @nick-livefront in #21871
[PM-32403] Update button copy desktop by @jengstrom-bw in #21528
[PM-38929] Add new design for edit member dialog by @BTreston in #21843
[INNO] - Passkey Report by @jrmccannon in #19787
[CL-1285] create Storybook feature-flags addon in new @bitwarden/storybook lib by @willmartian in #21913
[PM-37991] Implement Automatic App Login Policy v2 and associated components by @JaredScar in #21824
[PM-38749] Add OrganizationInviteLinkApiService.updateSupportsConfirmation by @JimmyVo16 in #21933
feat(register-finish-request): Add sales_assisted_token to request by @enmande in #21961
[PM-40381] Desktop Autofill Cancellation by @iinuwa in #21853
[PM-10383] - confirm before deleting a passkey by @jaasen-livefront in #21497
[PM-40193] feat: add vfo1Icon pipe for flag-gated icon swaps by @jaasen-livefront in #21876
[PM-35093] feat: Support bitwarden-gov.com deeplink redirects on web connectors by @enmande in #21752
[PM-40134] RoutedVaultFilterService accept a vaultId query parameter alongside organizationId by @jengstrom-bw in #21930
[PM-40216] feat: Scope organization invite link lookups by organization ID by @r-tome in #21815
[PM-35107] Remove Argon2Id option from UI in gov environment by @mzieniukbw in #21503
feat(shared-unlock): support trusted devices by @quexten in #21895
[PM-39997] desktop-autofill: Package Windows passkey plugin resources by @iinuwa in #21983
[PM-39387] fix: Auto-sync premium status after returning from Stripe checkout by @cyprain-okeke in #21518
[PM-38794] Add OrganizationInviteLinkApiService.getInvite by @JimmyVo16 in #21932
[PM-40682] desktop-autofill: Graceful Windows plugin registration by @iinuwa in #21982
desktop-autofill: Omit CTAP2 status code in assertion response by @iinuwa in #21978
[PM-40381] desktop-autofill: FIDO2 UI cancellation by @iinuwa in #21906
[CL-998] bit-table-v2 and related components by @willmartian in #20900
[PM-40449] create lit cipher items and list by @dan-livefront in #21984
feat(biometrics): add windows biometrics format based on sdk cryptography by @quexten in #21433
[PM-40089] Show a banner in the vault view when Fill Assist is active for the current page by @jprusik in #21754
[SM-1954] Show expiry status badge on access tokens list by @maxkpower in #20939
Autotype AppData path normalization by @neuronull in #21910
[PM-38813] - update offboarding survey by @jaasen-livefront in #21161
[PM-40111] Rename Owner to Vault field by @nick-livefront in #21897
Pm 38122 fastmail checkbox by @bmbitwarden in #21830
[PM-40255] Update collection icon to bwi-shared-folder by @nick-livefront in #21996
feat(data-recovery): add detection of field decryption ciphers by @quexten in #22065
[PM-39220] Add the At-Risk Gauge component by @AlexRubik in #21861
[PM-40682] desktop-autofill: Register Windows native passkey plugin by @iinuwa in #21986
[PM-40240][PM-40239] Updated card control features by @BryanCunningham in #21819
[PM-40252] feat: migrate shared vault components to shared-folder terminology by @jaasen-livefront in #21967
[PM-40165] feat(web): migrate vault components to shared-folder terminology by @jaasen-livefront in #21993
[PM-40335] PAM - Add access rules domain (1/2) by @Hinton in #21810
[PM-17584] Delinea XML parser by @mcamirault in #21620
[PM-41015] Add feature flag for Managed Device Framework by @djsmith85 in #22097
[PM-35157] Remove feature flagged logic for SDK decryption flag by @JaredScar in #22078
[PM-40654] feat: gate org-creation default collection name behind VFO1 terminology by @jaasen-livefront in #21969
[PM-40510] feat: rename vault-filter query param to sharedFolderId by @jaasen-livefront in #21968
[PM-40623] Update invite link service to match SDK by @eliykat in #22054
add problem detail support, wire up email changing by @BTreston in #21878
[CL-972] card updates by @BryanCunningham in #21776
[PM-35943] Browser: Add Health tab and navigation by @lastbestdev in #22045
desktop-autofill: Implement Windows native status command [PM-41025] by @iinuwa in #22138
[PM-39227] Add the browser vault-health reports service (categorize, score, emit) by @AlexRubik in #22009
[PM-40731] Implement VFO1 terminology updates across collection components by @JaredScar in #22104
[PM-39452] fix: Show premium membership status from desktop Account menu by @cyprain-okeke in #21992
[PM-40742] update SSO TDE copy by @BTreston in #22113
desktop-autofill: Implement Windows plugin credential sync [PM-41025] by @iinuwa in #22109
[PM-40734] Settings Collection Terminology changes by @JaredScar in #22107
[PM-40732] Groups terminology changes by @JaredScar in #22105
[PM-39075] Browser: Show Health tab berry until feature is visited by @lastbestdev in #22140
[PM-38799] Add translation for confirm flow audit events by @JimmyVo16 in #22117
[PM-38389] feat: Support sales-assisted trials by @enmande in #21929
[PM-40741] Reports terminology update by @BTreston in #22112
[PM-40733] members terminology update by @JaredScar in #22100
[PM-40335] PAM - Add access rules UI (2/2) by @Hinton in #21841
[PM-40448] create lit password generator by @dan-livefront in #22010
[PM-41312] Bump sdk-internal for Fill Assist policy type by @bensbits91 in #22206
[PM-40735] event logs terminology update by @JaredScar in #22133
[PM-39978] Add Item Send enum and fix resulting build errors by @mcamirault in #22135
[PM-40253] feat(browser): migrate vault components to shared-folder terminology by @gbubemismith in #22079
[PM-38248] Remove SendEventLogging feature flag by @harr1424 in #22131
[PM-39222] Browser: Add intro to Health feature by @lastbestdev in #22209
[PM-41438] - Add new errors for taken emails by @jrmccannon in #22220
added vault health reports by @maxkpower in #21432
[PM-40119] Assign Collection -> "Add to shared folder" action & dialog copy by @jengstrom-bw in #21874
[PM-40548] Web add quick copy icon setting by @jengstrom-bw in #22118
[PM-40549] Desktop add quick copy icon setting by @jengstrom-bw in #22120
desktop-autofill: Prepare native OS user verification [PM-29791] by @iinuwa in #22176
[PM-40254] feat(desktop): migrate vault components to shared-folder terminology by @gbubemismith in #22096
[PM-40944] Add Delinea CSV importer, improve types for Delinea XML by @mcamirault in #22207
[PM-40679] Autotype MVP Naming Refactor by @coltonhurst in #22201
SSH Agent contain edge case IPC failures by @neuronull in #22236
[PM-31619]Create feature-flag for inline menu component by @dan-livefront in #22234
[PM-38333] feat: Annual billing savings offer on cancel by @kdenney in #21939
[CL-51] create file upload component by @BryanCunningham in #20899

❗ Breaking Changes

Fix AuthEdit SDK break by @adudek-bw in #22071
introduce AutofillResult by @audreyality in #22161

🐛 Bug fixes

[PM-40820] Fix add access filter toggle style by @BTreston in #21816
[PM-16456] Add occupied seat count check when restoring user by @JaredScar in #21746
[PM-33228] Add screen reader only to enhance a11y behavior by @BryanCunningham in #21563
[PM-38940] Close Firefox/Safari Permissions-Policy gaps via webRequest by @bensbits91 in #21466
[PM-39137] Gate Access Intelligence report reads on new-architecture flag by @Banrion in #21315
[PM-16456] Add mock services for billing constraints to fix storybook by @JaredScar in #21833
[PM-39992] Add support for SDK IPC unreachability by @quexten in #21653
[PM-40303] Fix logout when underprivileged user accesses Manage Send policy by @harr1424 in #21836
[CL-1277] Add disabled and readonly variants to Textarea story by @willmartian in #21851
[PM-40377] Fix bug with form field to have textarea behave the same as an input when disabled by @jengstrom-bw in #21848
[PM-39825] Fix URI reordering, drag handle alignment by @jaasen-livefront in #21697
[PM-40444] Hide archive/unarchive from bulk bar in Admin Console by @nick-livefront in #21873
[PM-40457] Fix typos in the message catalogs by @jprusik in #21882
[PM-40370] Use decrypted ciphers cache when using SDK by @shane-melton in #21888
[PM-40484] Fix Autotype IPC channel mismatch by @coltonhurst in #21885
[PM-13643] Refactor user avatar rendering in bulk dialogs to utilize userId for correct color match by @JaredScar in #21884
[PM-40236] Logging out throws error mid-logout due to a race condition. User left in locked state by @mzieniukbw in #21858
Fix SSH Agent concurrent requests by @neuronull in #21881
[PM-40446] Enhance AutoConfirmWarningDialog by adding LinkModule to imports by @JaredScar in #21883
[PM-40482] Return to Default Filter After Revoking Last Staged User by @sven-bitwarden in #21911
[PM-39948][PM-40406] Fix native select issues with dark mode and arrow click handling by @vleague2 in #21877
[PM-13643] avatars in org member remove/revoke modal do not match members page fix by @JaredScar in #21931
[AppSec] AI Fix for Template Injection in GitHub Workflows Action by @aikido-autofix[bot] in #21787
[PM-40247] Fix vault item checkmarks disappearing after clearing a search by @nick-livefront in #21823
[PM-40201] SSH key items with a null public key or fingerprint fail to decrypt and break the vault by @gbubemismith in #21778
[PM-18638] Prevent collection/cipher creation for suspended organizations by @JaredScar in #21887
[PM-40432] Update Send Event Logs copy by @harr1424 in #21890
[PM-40502] communicate message extension payloads using symbol by @audreyality in #21909
[PM-40188] Apply deletion date policy to CLI-created Sends by @mcamirault in #21845
[CL-808] Support forced colors mode for form controls by @vleague2 in #21936
[PM-40543] Default new SCIM connections to staged by @sven-bitwarden in #21963
[CL-1282] use correct size for base icon tile by @BryanCunningham in #21856
fix(desktop): guard will-navigate against renderer escape by @addisonbeck in #21935
[PM-39845] Prevent Access Intelligence report freeze on oversized password values by @Banrion in #21987
[PM-39772] Detect shadow hosts created from iframes by @bensbits91 in #21857
[PM-40241] Bugfix - Rehydrate localData lastUsedDate on local cipher views by @jprusik in #21849
[PM-40440] fix: Source upgrade cart total from server invoice preview by @amorask-bitwarden in #21902
[PM-40375] Add per-item exception handling to 1Pux import by @harr1424 in #21941
[PM-39464] Fix ExpressionChangedAfterItHasBeenCheckedError when assigning collections by @nikwithak in #21743
fix(key-connector): fix sdk key-connector login not working by @quexten in #21957
[PM-38557] Netwrix Password Secure importer should map URL-like fields to Bitwarden website URI by @harr1424 in #21889
[PM-38189] Wire InitiationPath to Organizations to Correct Trial Metadata by @sbrown-livefront in #21769
[PM-40771] Update policy enabled method to accept PolicyStatusResponse by @JaredScar in #21997
fix: race condition leading to decryption errors by @quexten in #22063
fix(desktop): use x11 clipboard by default and only use portal as fallback by @quexten in #22062
[PM-24945] Fix bw send receive not recognizing --password parameter by @adudek-bw in #21872
[PM-38639] Fix scrollbar color in desktop light mode by @vleague2 in #22039
[PM-40800] re-add removed nested collection permissions checkbox by @BTreston in #22000
[PM-40961] fix: don't show no master password warning for staged users by @sven-bitwarden in #22075
fix(sdk): revert sdk lifecycle changes by @quexten in #22090
[PM-2803] Order collections alphabetically in collections dropdown for nested collections by @JaredScar in #22077
PM-36838 update template to show deviceName instead of deviceType by @voommen-livefront in #21600
[PM-40462] Fix checkbox being unchecked when clicking edit autotype shortcut by @shane-melton in #22085
[PM-25560] Align Safe In Cloud import to match native behavior by @harr1424 in #20717
[PM-26503] Bugfix - Allow inline menu to escape aria model focus traps by @jprusik in #22017
PM-41236 Add additional esccaping to shortcode text element by @mandreko-bitwarden in #22156
[PM-16160] Fixes CLI issue where passwords are show via get item command in CLI by @JaredScar in #22083
[PM-41027] fix: label add-item tile as shared folder under VFO1 terminology by @gbubemismith in #22137
[PM-40766] Handle punycode-unicode domain matching for "Host" URI matching strategy by @jprusik in #21994
Auth/PM-41303 - Direct Org Invite Acceptance - fix url paste scenario eternal spinner bug when org has MP policy by @JaredSnider-Bitwarden in #22184
[PM-40693] Hide copy button on file Sends by @mcamirault in #22015
[PM-41288] Fix bug preventing edits of existing File Sends by @mcamirault in #22203
SSH Agent: fix all-or-nothing key parsing by @neuronull in #22200
[PM-41256] User Is Unable to Create a Passport Cipher by @jengstrom-bw in #22181
[PM-40218] fix: stop autofill and save from deleting the TOTP key by @gbubemismith in #22175
[PM-30289] Fix for loss of focus on extension search input by @shane-melton in #18581
[PM-41539] fix: recognize both Keeper SSO callback URL forms (#22265) by @itsadrago in #22331
[PM-41691] Fix issue where edit item, hidden passwords wipes password, TOTP by @JaredScar in #22329

⚙️ Maintenance

Bump client version(s) by @github-actions[bot] in #21811
Auth/PM-39905 - Restructure organization-invite into subfolders with barrel imports by @JaredSnider-Bitwarden in #21642
Auth/PM-3813 - 2FA Management Endpoints - User Verification Refactor by @JaredSnider-Bitwarden in #21385
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #21648
Fix/update CODEOWNERS by @djsmith85 in #21826
[PM-37476] Source canUseAccessIntelligence from server UseRiskInsights ability by @AlexRubik in #21760
[BRE-2044] Keep logic for bumping the Desktop version automatically in clients by @vgrassia in #21745
[BRE-1907] Add artifact manifest to build-web.yml by @gitclonebrian in #21726
[PM-40345] Ignore Storybook stories in code coverage by @Hinton in #21842
[PM-40138] desktop-autofill: refactor Autofill IPC Registration by @iinuwa in #21753
[PM-16487] Remove Add/edit v2 component by @jengstrom-bw in #21859
[PM-39259] Migrate auth token key generation to SDK by @quexten in #21706
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #21649
[PM-40456] Update cSpell settings by @jprusik in #21875
[PM-39259] Remove deprecated randomBytes/aesGenerateKey/createKey by @quexten in #21713
desktop-autofill: Move macOS-specific window position to macOS code by @iinuwa in #21852
chore(biometrics): extract biometrics to separate crate by @quexten in #21822
chore: rename biometric_v2 mod to biometric by @quexten in #21891
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #21903
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #21904
[PM-34857] Remove PoliciesInAcceptedState feature flag by @eliykat in #21761
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #21905
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #21915
[PM-36404] Refactor org guards for ts-strict by @BTreston in #21914
[PM-39966] Migrate from @angular/platform-browser-dynamic to @angular/platform-browser by @djsmith85 in #21866
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #21966
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #21916
chore(ci): skip platform-community signal for fork PRs by @addisonbeck in #21934
desktop-autofill: Add missing Skunkworks codeownership by @iinuwa in #21907
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #21917
[PM-40447] Create lit prompt component by @dan-livefront in #21892
[PM-40688] Run prettier to fix failing lint after prettier upgrade by @dan-livefront in #21981
chore: Add team-ai-sme as CODEOWNERS for .mcp.json by @SaintPatrck in #21985
build: allow sdk-internal crypto crates in dependency tooling by @quexten in #21925
refactor: gate desktop_native core allocator and windows deps by @quexten in #21926
DN Autotype: Move mockall and serial_test to be Dev Deps by @coltonhurst in #21999
refactor(login-strategy): clean up crypto-related functions and deprecation notices by @quexten in #21958
[BRE-2118] Adding publish CLI workflow for NPM provenance by @pixman20 in #22014
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22020
docs(vault): document deprecation of TypeScript vault item decryption by @quexten in #22004
Bump client version(s) by @github-actions[bot] in #22038
Bump client version(s) by @github-actions[bot] in #22069
[CL] mark bit-table-v2 as Beta in Storybook docs by @willmartian in #22072
[PM-40847] Add any missing inline menu renderings to storybook for QA by @dan-livefront in #22037
[PM-40590] Run chromatic workflow when the workflow file is updated, to enable dep testing by @vleague2 in #22076
[PM-40259] introduce AutofillOrchestrator by @audacityality in #21768
[PM-40680] chromium-importer: Replace deprecated LSFindApplicationForInfo function by @iinuwa in #21979
[PM-36403] Group view models ts strict by @BTreston in #21825
[PM-36405] collection dialog refactor by @BTreston in #21965
[PM-36405] Fix types in Storybook after adopting ts-strict by @eliykat in #22086
[CL-1292] update icon docs for filename-based build system by @BryanCunningham in #22108
Add t:deps label for SDK update PRs automatically by @trmartin4 in #22142
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22018
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22162
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22166
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22019
build: Fix Windows cross-compiled builds by @iinuwa in #22139
chore: remove checkmarx from repo by @sognefej in #22183
[PM-35791] Remove old Send access endpoints by @mcamirault in #22080
[BRE-2153] fix(ci): Stage bit-common for commercial browser builds by @fntyler in #22198
[PM-40846] Support Fido2 v4 server update by @ike-kottlowski in #22006
chore(kdf-change): port change kdf to sdk by @quexten in #22032
[PM-24097] - [Vault] Remove getOrgKey from the key service by @jaasen-livefront in #21480
Move browser Health tab files to commercial license by @lastbestdev in #22223
[PM-40107] Deprecate TS generator logic available in the SDK by @harr1424 in #22154
[BRE-2158] Add PR label to creation step for Crowdin Pull workflow by @vgrassia in #22228
mock missing observables to suppress console errors by @audacityality in #22174
[CL-1294] Add FormRecord stories for table-v2 by @willmartian in #22160
chore(crypto): port crypto sync handler to sdk by @quexten in #22217
SSH Agent: fix flaky integration test by @neuronull in #22238
Browser: Refactor client state definitions for Health feature by @lastbestdev in #22240
[BRE-2105] Updating build process for desktop and browser beta channels by @pixman20 in #22229
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22274
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22272
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22273
Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22281
Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22279
Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22280
refactor(crypto): add legacy crypto module by @quexten in #22254
chore(native-messaging): rename native messaging plug to dot-native-messaging by @quexten in #22303
[BRE-2116] Bump actions/checkout to v7.0.1 in non-privileged workflows by @brandonbiete in #22157
Bump client version(s) by @github-actions[bot] in #22320

📦 Dependency Updates

Update sdk-internal to 0.2.0-main.897 by @bw-ghapp[bot] in #21718
[deps]: Update GitHub Artifact Actions (major) by @renovate[bot] in #19586
Pin NPM 11 on CLI builds by @dani-garcia in #21838
[deps]: Update Rust by @renovate[bot] in #20390
[deps] Platform: Lock file maintenance by @renovate[bot] in #21796
[deps]: Update dtolnay/rust-toolchain digest to 4cda84d by @renovate[bot] in #21948
[deps] Platform: Update jest-preset-angular to v17 by @renovate[bot] in #21678
[deps] Autofill: Update prettier to v3.9.5 by @renovate[bot] in #21668
[deps] Platform: Update webpack-dev-server to v5.2.6 [SECURITY] by @renovate[bot] in #21972
[deps]: Update cargo-deny to 0.20.0 by @renovate[bot] in #21952
[deps] UI Foundation: Update chromatic to v18 by @renovate[bot] in #21954
[deps]: Update chromaui/action action to v18 by @renovate[bot] in #21956
Auth/PM-40520 - Bump SDK versions in clients to get new registration open org invite crypto APIs by @JaredSnider-Bitwarden in #22134
Update sdk-internal to 0.2.0-main.928 by @bw-ghapp[bot] in #21870
[deps]: Update Rust crate rusqlite to v0.40.1 by @renovate[bot] in #21115
[deps] Tools: Update Rust crate aes-gcm to v0.11.0 by @renovate[bot] in #21675
[deps] Tools: Update @bufbuild/protobuf to v2.13.0 by @renovate[bot] in #21950
fix: update sdk and add support for kdf in state bridge by @quexten in #22197
[deps] Vault: Update @koa/router to v15.7.0 by @renovate[bot] in #21951
[deps] Platform: Update electron to v43 by @renovate[bot] in #20844
[deps]: Update Rust crate rkyv to v0.8.17 by @renovate[bot] in #22215

🎨 Other

[PM-39560] [BEEEP] Add MCP server configuration for Chrome and Electron DevTools by @quexten in #21483

New Contributors

@0xk1f0 made their first contribution in #21748
@archit-goyal made their first contribution in #21253
@lucacome made their first contribution in #14105
@cyfrit made their first contribution in #21980
@harikrishna2208 made their first contribution in #21527
@datdenkikniet made their first contribution in #21498
@lnky102 made their first contribution in #20680
@theagg-18 made their first contribution in #21402

Full Changelog: browser-v2026.7.0...browser-v2026.8.0

Original source

(The listed release number is for the Bitwarden Server. Other version numbers released in this cycle include Web 2026.8.0, Browser Extension 2026.8.0, Desktop 2026.8.0, Mobile 2026.8.0, and CLI 2026.8.0.)

Password Manager

• Action bar on desktop: The action bar is now available on the Bitwarden desktop app. Use the action bar to perform bulk vault activities such as sharing item(s) to a collection or folder, and archiving vault items.
• Fill assist for mobile apps: Activate fill assist to improve autofill accuracy on a Bitwarden-curated selection of websites known to cause widespread autofill issues.
• Devices list now available on iOS: The Devices list, used to surface devices that your account has been used on, is now available on iOS.
• Import from Delinea: You can now import .csv and .xml files from Delinea to quickly transfer your data to Bitwarden.

Admin Console

• Manage Send policy: Organizations can now control all Send-related functions with the Manage Send policy in the Admin Console. The new policy replaces the previous set of separate Send policies.
• Generic HEC integration: Bitwarden Teams and Enterprise organizations can now integrate with any HTTP event collector compatible platform for security information and event management (SIEM). Set up an HEC integration.
• Change members' email and name: Administrators can now update a member's account email address and name directly from the Admin Console. This only applies to claimed accounts without a master password, such as those using Key Connector or trusted devices. Users with a master password can still self-serve update their email address.

Self-host

• Helm Chart identity certificate password rotation: Customers self-hosting with the Helm chart who first deployed with version 2.0.0 or earlier may be required to rotate their server's identity certificate password. Learn whether you will be required to and, if so, how to rotate you certificate password.

Note

When importing secrets from Delinea Secret Server, any item with a URL associated with it will automatically take the Login item type. All other imported data will take the Secure Note type with custom fields to accommodate your data.

Original source

What's Changed

💙 Community Highlight

[PM-27495] Do not show true length of password in password mask by @Mauritz8 in #17052

[PM-37656] Resolve SSH agent caller name via libproc on macOS by @lnky102 in #20680

[PM-39312] Fix Proton Pass importer dropping custom, alias, and SSH key items by @theagg-18 in #21402

Feature Development

[PM-40255] Update collection icon to bwi-shared-folder by @nick-livefront in #21996

feat(data-recovery): add detection of field decryption ciphers by @quexten in #22065

[PM-39220] Add the At-Risk Gauge component by @AlexRubik in #21861

[PM-40682] desktop-autofill: Register Windows native passkey plugin by @iinuwa in #21986

[PM-40240][PM-40239] Updated card control features by @BryanCunningham in #21819

[PM-40252] feat: migrate shared vault components to shared-folder terminology by @jaasen-livefront in #21967

[PM-40165] feat(web): migrate vault components to shared-folder terminology by @jaasen-livefront in #21993

[PM-40335] PAM - Add access rules domain (1/2) by @Hinton in #21810

[PM-17584] Delinea XML parser by @mcamirault in #21620

[PM-41015] Add feature flag for Managed Device Framework by @djsmith85 in #22097

[PM-35157] Remove feature flagged logic for SDK decryption flag by @JaredScar in #22078

[PM-40654] feat: gate org-creation default collection name behind VFO1 terminology by @jaasen-livefront in #21969

[PM-40510] feat: rename vault-filter query param to sharedFolderId by @jaasen-livefront in #21968

[PM-40623] Update invite link service to match SDK by @eliykat in #22054

add problem detail support, wire up email changing by @BTreston in #21878

[CL-972] card updates by @BryanCunningham in #21776

[PM-35943] Browser: Add Health tab and navigation by @lastbestdev in #22045

desktop-autofill: Implement Windows native status command [PM-41025] by @iinuwa in #22138

[PM-39227] Add the browser vault-health reports service (categorize, score, emit) by @AlexRubik in #22009

[PM-40731] Implement VFO1 terminology updates across collection components by @JaredScar in #22104

[PM-39452] fix: Show premium membership status from desktop Account menu by @cyprain-okeke in #21992

[PM-40742] update SSO TDE copy by @BTreston in #22113

desktop-autofill: Implement Windows plugin credential sync [PM-41025] by @iinuwa in #22109

[PM-40734] Settings Collection Terminology changes by @JaredScar in #22107

[PM-40732] Groups terminology changes by @JaredScar in #22105

[PM-39075] Browser: Show Health tab berry until feature is visited by @lastbestdev in #22140

[PM-38799] Add translation for confirm flow audit events by @JimmyVo16 in #22117

[PM-38389] feat: Support sales-assisted trials by @enmande in #21929

[PM-40741] Reports terminology update by @BTreston in #22112

[PM-40733] members terminology update by @JaredScar in #22100

[PM-40335] PAM - Add access rules UI (2/2) by @Hinton in #21841

[PM-40448] create lit password generator by @dan-livefront in #22010

[PM-41312] Bump sdk-internal for Fill Assist policy type by @bensbits91 in #22206

[PM-40735] event logs terminology update by @JaredScar in #22133

[PM-39978] Add Item Send enum and fix resulting build errors by @mcamirault in #22135

[PM-40253] feat(browser): migrate vault components to shared-folder terminology by @gbubemismith in #22079

[PM-38248] Remove SendEventLogging feature flag by @harr1424 in #22131

[PM-39222] Browser: Add intro to Health feature by @lastbestdev in #22209

[PM-41438] - Add new errors for taken emails by @jrmccannon in #22220

added vault health reports by @maxkpower in #21432

[PM-40119] Assign Collection -> "Add to shared folder" action & dialog copy by @jengstrom-bw in #21874

[PM-40548] Web add quick copy icon setting by @jengstrom-bw in #22118

[PM-40549] Desktop add quick copy icon setting by @jengstrom-bw in #22120

desktop-autofill: Prepare native OS user verification [PM-29791] by @iinuwa in #22176

[PM-40254] feat(desktop): migrate vault components to shared-folder terminology by @gbubemismith in #22096

[PM-40944] Add Delinea CSV importer, improve types for Delinea XML by @mcamirault in #22207

[PM-40679] Autotype MVP Naming Refactor by @coltonhurst in #22201

SSH Agent contain edge case IPC failures by @neuronull in #22236

[PM-31619]Create feature-flag for inline menu component by @dan-livefront in #22234

[PM-38333] feat: Annual billing savings offer on cancel by @kdenney in #21939

[CL-51] create file upload component by @BryanCunningham in #20899

❗ Breaking Changes

Fix AuthEdit SDK break by @adudek-bw in #22071

introduce AutofillResult by @audreyality in #22161

🐛 Bug fixes

[PM-38639] Fix scrollbar color in desktop light mode by @vleague2 in #22039

[PM-40800] re-add removed nested collection permissions checkbox by @BTreston in #22000

[PM-40961] fix: don't show no master password warning for staged users by @sven-bitwarden in #22075

fix(sdk): revert sdk lifecycle changes by @quexten in #22090

[PM-2803] Order collections alphabetically in collections dropdown for nested collections by @JaredScar in #22077

PM-36838 update template to show deviceName instead of deviceType by @voommen-livefront in #21600

[PM-40462] Fix checkbox being unchecked when clicking edit autotype shortcut by @shane-melton in #22085

[PM-25560] Align Safe In Cloud import to match native behavior by @harr1424 in #20717

[PM-26503] Bugfix - Allow inline menu to escape aria model focus traps by @jprusik in #22017

PM-41236 Add additional esccaping to shortcode text element by @mandreko-bitwarden in #22156

[PM-16160] Fixes CLI issue where passwords are show via get item command in CLI by @JaredScar in #22083

[PM-41027] fix: label add-item tile as shared folder under VFO1 terminology by @gbubemismith in #22137

[PM-40766] Handle punycode-unicode domain matching for "Host" URI matching strategy by @jprusik in #21994

Auth/PM-41303 - Direct Org Invite Acceptance - fix url paste scenario eternal spinner bug when org has MP policy by @JaredSnider-Bitwarden in #22184

[PM-40693] Hide copy button on file Sends by @mcamirault in #22015

[PM-41288] Fix bug preventing edits of existing File Sends by @mcamirault in #22203

SSH Agent: fix all-or-nothing key parsing by @neuronull in #22200

[PM-41256] User Is Unable to Create a Passport Cipher by @jengstrom-bw in #22181

[PM-40218] fix: stop autofill and save from deleting the TOTP key by @gbubemismith in #22175

[PM-30289] Fix for loss of focus on extension search input by @shane-melton in #18581

[PM-41539] fix: recognize both Keeper SSO callback URL forms (#22265) by @itsadrago in #22331

[PM-41691] Fix issue where edit item, hidden passwords wipes password, TOTP by @JaredScar in #22329

[PM-41880] Hotfix for edit members dialog dependencies (cherry-pick to rc) by @Banrion in #22417

⚙️ Maintenance

[PM-40847] Add any missing inline menu renderings to storybook for QA by @dan-livefront in #22037

[PM-40590] Run chromatic workflow when the workflow file is updated, to enable dep testing by @vleague2 in #22076

[PM-40259] introduce AutofillOrchestrator by @audreyality in #21768

[PM-40680] chromium-importer: Replace deprecated LSFindApplicationForInfo function by @iinuwa in #21979

[PM-36403] Group view models ts strict by @BTreston in #21825

[PM-36405] collection dialog refactor by @BTreston in #21965

[PM-36405] Fix types in Storybook after adopting ts-strict by @eliykat in #22086

[CL-1292] update icon docs for filename-based build system by @BryanCunningham in #22108

Add t:deps label for SDK update PRs automatically by @trmartin4 in #22142

Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22018

Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22162

Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22166

Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22019

build: Fix Windows cross-compiled builds by @iinuwa in #22139

chore: remove checkmarx from repo by @sognefej in #22183

[PM-35791] Remove old Send access endpoints by @mcamirault in #22080

[BRE-2153] fix(ci): Stage bit-common for commercial browser builds by @fntyler in #22198

[PM-40846] Support Fido2 v4 server update by @ike-kottlowski in #22006

chore(kdf-change): port change kdf to sdk by @quexten in #22032

[PM-24097] - [Vault] Remove getOrgKey from the key service by @jaasen-livefront in #21480

Move browser Health tab files to commercial license by @lastbestdev in #22223

[PM-40107] Deprecate TS generator logic available in the SDK by @harr1424 in #22154

[BRE-2158] Add PR label to creation step for Crowdin Pull workflow by @vgrassia in #22228

mock missing observables to suppress console errors by @audreyality in #22174

[CL-1294] Add FormRecord stories for table-v2 by @willmartian in #22160

chore(crypto): port crypto sync handler to sdk by @quexten in #22217

SSH Agent: fix flaky integration test by @neuronull in #22238

Browser: Refactor client state definitions for Health feature by @lastbestdev in #22240

[BRE-2105] Updating build process for desktop and browser beta channels by @pixman20 in #22229

Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22274

Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22272

Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22273

Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22281

Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22279

Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22280

refactor(crypto): add legacy crypto module by @quexten in #22254

chore(native-messaging): rename native messaging plug to dot-native-messaging by @quexten in #22303

[BRE-2116] Bump actions/checkout to v7.0.1 in non-privileged workflows by @brandonbiete in #22157

Bump client version(s) by @github-actions[bot] in #22320

📦 Dependency Updates

[deps] UI Foundation: Update chromatic to v18 by @renovate[bot] in #21954

[deps]: Update chromaui/action action to v18 by @renovate[bot] in #21956

Auth/PM-40520 - Bump SDK versions in clients to get new registration open org invite crypto APIs by @JaredSnider-Bitwarden in #22134

Update sdk-internal to 0.2.0-main.928 by @bw-ghapp[bot] in #21870

[deps]: Update Rust crate rusqlite to v0.40.1 by @renovate[bot] in #21115

[deps] Tools: Update Rust crate aes-gcm to v0.11.0 by @renovate[bot] in #21675

[deps] Tools: Update @bufbuild/protobuf to v2.13.0 by @renovate[bot] in #21950

fix: update sdk and add support for kdf in state bridge by @quexten in #22197

[deps] Vault: Update @koa/router to v15.7.0 by @renovate[bot] in #21951

[deps] Platform: Update electron to v43 by @renovate[bot] in #20844

[deps]: Update Rust crate rkyv to v0.8.17 by @renovate[bot] in #22215

New Contributors

@lnky102 made their first contribution in #20680

@theagg-18 made their first contribution in #21402

Full Changelog: web-v2026.7.1...web-v2026.8.0

Original source

Overview

Fixed sync prompt appearing incorrectly during autofill

Improved account security

What's Changed

✨ Community Highlight

[PM-40274] fix(authenticator): force LTR text direction for TOTP code display by @jatinkumar2409 in #7162

Feature Development

PM-39349: feat: Update Plan Screen by @david-livefront in #7155

[PM-27903] feat: Remove Credential Exchange (CXF) dependency on f-droid builds by @vvolkgang in #7154

tool: Improve Gradle Sync performance with 'org.gradle.tooling.parallel' flag by @david-livefront in #7174

[PM-37255] feat: Integrate fill-assist targeting rules into autofill parser by @aj-rosado in #7066

[PM-38966] feat: Add fill assist opt-in setting and privacy gate by @aj-rosado in #7075

[PM-39564] feat: Fill Assist support email field key for email-based login forms by @aj-rosado in #7107

PM-40657: feat: Restructure Environment to better handle FedRamp requirements by @david-livefront in #7182

[PM-40631] feat: Display personal vault as "My vault" instead of email address by @andrebispo5 in #7183

PM-40657: feat: Add support for disableUserRegistration boolean by @david-livefront in #7186

PM-39902: feat: Update app to support blob encryption by @david-livefront in #7173

PM-40699: feat: Add FedRamp base urls to EnvironmentScreen autocomplete by @david-livefront in #7190

[PM-40635] feat: Update "collection" to "shared folder" by @andrebispo5 in #7189

[PM-40638] feat: Rename "organization" to "vault" by @andrebispo5 in #7192

PM-39902: feat: Add data field for updating a cipher with Blob encryption by @david-livefront in #7198

PM-40727: feat: Add encryption layer for new KeystoreEncryptedSharedPreferences by @david-livefront in #7191

🐛 Bug fixes

PM-40317: bug: All users must follow Master Password policies by @david-livefront in #7163

PM-40497: bug: Update the plan price row announcement for accessibility by @david-livefront in #7170

PM-40278: bug: Freeze public key and fingerprint during auth request and validate against updates by @david-livefront in #7166

fix: Revert VFO-1 naming changes (#7183, #7189, #7192) by @andrebispo5 in #7195

PM-40885: bug: Support overriding the colorscheme by @david-livefront in #7206

🍒 [PM-41100] fix: Complete the VFO-1 organization-to-vault revert by @andrebispo5 in #7221

⚙️ Maintenance

Add getLivePlayStoreVersion Fastlane lane by @AmyLGalles in #7156

Crowdin Pull by @bw-ghapp[bot] in #7160

[PM-32685] Add PR to message if available by @mpbw2 in #7164

[QA-2177] Enabling testTagsAsResourceId flag to make BlockedURI testTag visible… by @ifernandezdiaz in #7172

Crowdin Pull by @bw-ghapp[bot] in #7177

[PM-32685] enhancements for testing by @mpbw2 in #7168

[PM-38570] New signing keystore for testharness by @mpbw2 in #7188

Chore: Consolidate functions for setting the MasterPasswordUnlock data by @david-livefront in #7203

📦 Dependency Updates

Update SDK to 3.0.0-7824-f0ac1382 by @bw-ghapp[bot] in #7145

Update SDK to 3.0.0-7895-3831dfe2 by @bw-ghapp[bot] in #7180

Update Google privileged browsers list by @github-actions[bot] in #7176

Update SDK to 3.0.0-7896-62f4decd by @bw-ghapp[bot] in #7187

Update SDK to 3.0.0-7926-a9b0e184 by @bw-ghapp[bot] in #7202

New Contributors

@jatinkumar2409 made their first contribution in #7162

Full Changelog: v2026.7.0-bwpm...v2026.7.1-bwpm

Builds Source: https://github.com/bitwarden/android/actions/runs/30475765167

Original source

Overview

Various under-the-hood bug fixes and improvements

What's Changed

✨ Community Highlight

[PM-40274] fix(authenticator): force LTR text direction for TOTP code display by @jatinkumar2409 in #7162

Feature Development

PM-39349: feat: Update Plan Screen by @david-livefront in #7155

[PM-27903] feat: Remove Credential Exchange (CXF) dependency on f-droid builds by @vvolkgang in #7154

tool: Improve Gradle Sync performance with 'org.gradle.tooling.parallel' flag by @david-livefront in #7174

[PM-37255] feat: Integrate fill-assist targeting rules into autofill parser by @aj-rosado in #7066

[PM-38966] feat: Add fill assist opt-in setting and privacy gate by @aj-rosado in #7075

[PM-39564] feat: Fill Assist support email field key for email-based login forms by @aj-rosado in #7107

PM-40657: feat: Restructure Environment to better handle FedRamp requirements by @david-livefront in #7182

[PM-40631] feat: Display personal vault as "My vault" instead of email address by @andrebispo5 in #7183

PM-40657: feat: Add support for disableUserRegistration boolean by @david-livefront in #7186

PM-39902: feat: Update app to support blob encryption by @david-livefront in #7173

PM-40699: feat: Add FedRamp base urls to EnvironmentScreen autocomplete by @david-livefront in #7190

[PM-40635] feat: Update "collection" to "shared folder" by @andrebispo5 in #7189

[PM-40638] feat: Rename "organization" to "vault" by @andrebispo5 in #7192

PM-39902: feat: Add data field for updating a cipher with Blob encryption by @david-livefront in #7198

PM-40727: feat: Add encryption layer for new KeystoreEncryptedSharedPreferences by @david-livefront in #7191

🐛 Bug fixes

PM-40317: bug: All users must follow Master Password policies by @david-livefront in #7163

PM-40497: bug: Update the plan price row announcement for accessibility by @david-livefront in #7170

PM-40278: bug: Freeze public key and fingerprint during auth request and validate against updates by @david-livefront in #7166

fix: Revert VFO-1 naming changes (#7183, #7189, #7192) by @andrebispo5 in #7195

PM-40885: bug: Support overriding the colorscheme by @david-livefront in #7206

🍒 [PM-41100] fix: Complete the VFO-1 organization-to-vault revert by @andrebispo5 in #7221

⚙️ Maintenance

Add getLivePlayStoreVersion Fastlane lane by @AmyLGalles in #7156

Crowdin Pull by @bw-ghapp[bot] in #7160

[PM-32685] Add PR to message if available by @mpbw2 in #7164

[QA-2177] Enabling testTagsAsResourceId flag to make BlockedURI testTag visible… by @ifernandezdiaz in #7172

Crowdin Pull by @bw-ghapp[bot] in #7177

[PM-32685] enhancements for testing by @mpbw2 in #7168

[PM-38570] New signing keystore for testharness by @mpbw2 in #7188

Chore: Consolidate functions for setting the MasterPasswordUnlock data by @david-livefront in #7203

📦 Dependency Updates

Update SDK to 3.0.0-7824-f0ac1382 by @bw-ghapp[bot] in #7145

Update SDK to 3.0.0-7895-3831dfe2 by @bw-ghapp[bot] in #7180

Update Google privileged browsers list by @github-actions[bot] in #7176

Update SDK to 3.0.0-7896-62f4decd by @bw-ghapp[bot] in #7187

Update SDK to 3.0.0-7926-a9b0e184 by @bw-ghapp[bot] in #7202

New Contributors

@jatinkumar2409 made their first contribution in #7162

Full Changelog: v2026.7.0-bwa...v2026.7.1-bwa

Builds Source: https://github.com/bitwarden/android/actions/runs/30475765619

Original source

Overview

Fixed an issue preventing attachment downloads for some business accounts

Improved account security

What's Changed

Feature Development

[PM-40133] feat: Add Send Controls policy support and AnyCodable array/dictionary decoding by @matt-livefront in #2868

[PM-38443] feat: Add FillAssistRepository and sync integration by @andrebispo5 in #2812

[PM-38866] feat: Integrate SDK-based password generation into AutoFill extension by @fedemkr in #2828

[PM-39348] feat: Redesign Premium upgrade screen with benefit-led messaging by @KatherineInCode in #2884

[PM-38360] feat: Add reusable DateFieldPicker component by @SaintPatrck in #2731

🐛 Bug fixes

[PM-40163] fix: Update text for TOTP Login premium alert. by @morganzellers-bw in #2881

[PM-39358] fix: Reject partial card scans via Luhn and brand-length validation by @fedemkr in #2845

[PM-39812] fix: Apply SSO cookie request handlers to HTTPService download functions by @fedemkr in #2848

[PM-39708] fix: Show correct UI for unpaid subscription status by @KatherineInCode in #2862

[PM-39767] fix: Show upgrade pending alert when upgrading via Settings > Plan by @KatherineInCode in #2873

[PM-39361] fix: Restart card scanner after camera interruption or reopen by @fedemkr in #2847

[PM-40755] fix: App crash when fill assist toggle enabled by @andrebispo5 in #2902

⚙️ Maintenance

Add get_live_version lane for checking published App Store versions by @AmyLGalles in #2875

[PM-32685] Add PR to message if available by @mpbw2 in #2883

[PM-35680] chore: Convert ServerCommunicationConfigClientProtocol to AutoMockable by @matt-livefront in #2853

Crowdin Pull by @bw-ghapp[bot] in #2854

ci: Remove ignoring logs on upload to TestFlight by @fedemkr in #2864

[PM-40043] chore: Exclude .build and .claude folders from lint by @fedemkr in #2860

[PM-29049] refactor: Validate PIN against pinProtectedUserKeyEnvelope by @matt-livefront in #2863

[PM-32685] enhancements for testing by @mpbw2 in #2885

Crowdin Pull by @bw-ghapp[bot] in #2891

[PM-40225] chore: Update filtered files in spellchecking by @LRNcardozoWDF in #2887

📦 Dependency Updates

Update SDK to d4ac798 (3.0.0-6989-a4fae39) by @bw-ghapp[bot] in #2838

Update public suffix list by @github-actions[bot] in #2892

🎨 Other

llm: Add Step 7 verify/lint/format section to implementing-ios-code skill by @KatherineInCode in #2859

[PM-39748] llm: Add skill to fix flaky tests by @fedemkr in #2839

Full Changelog: v2026.7.0-bwpm...v2026.7.1-bwpm

Builds Source: https://github.com/bitwarden/ios/actions/runs/30112623804

Original source

Overview

Various under-the-hood bug fixes and improvements

What's Changed

Feature Development

[PM-40133] feat: Add Send Controls policy support and AnyCodable array/dictionary decoding by @matt-livefront in #2868

[PM-38443] feat: Add FillAssistRepository and sync integration by @andrebispo5 in #2812

[PM-38866] feat: Integrate SDK-based password generation into AutoFill extension by @fedemkr in #2828

[PM-39348] feat: Redesign Premium upgrade screen with benefit-led messaging by @KatherineInCode in #2884

[PM-38360] feat: Add reusable DateFieldPicker component by @SaintPatrck in #2731

🐛 Bug fixes

[PM-40163] fix: Update text for TOTP Login premium alert. by @morganzellers-bw in #2881

[PM-39358] fix: Reject partial card scans via Luhn and brand-length validation by @fedemkr in #2845

[PM-39812] fix: Apply SSO cookie request handlers to HTTPService download functions by @fedemkr in #2848

[PM-39708] fix: Show correct UI for unpaid subscription status by @KatherineInCode in #2862

[PM-39767] fix: Show upgrade pending alert when upgrading via Settings > Plan by @KatherineInCode in #2873

[PM-39361] fix: Restart card scanner after camera interruption or reopen by @fedemkr in #2847

[PM-40755] fix: App crash when fill assist toggle enabled by @andrebispo5 in #2902

⚙️ Maintenance

Add get_live_version lane for checking published App Store versions by @AmyLGalles in #2875

[PM-32685] Add PR to message if available by @mpbw2 in #2883

[PM-35680] chore: Convert ServerCommunicationConfigClientProtocol to AutoMockable by @matt-livefront in #2853

Crowdin Pull by @bw-ghapp[bot] in #2854

ci: Remove ignoring logs on upload to TestFlight by @fedemkr in #2864

[PM-40043] chore: Exclude .build and .claude folders from lint by @fedemkr in #2860

[PM-29049] refactor: Validate PIN against pinProtectedUserKeyEnvelope by @matt-livefront in #2863

[PM-32685] enhancements for testing by @mpbw2 in #2885

Crowdin Pull by @bw-ghapp[bot] in #2891

[PM-40225] chore: Update filtered files in spellchecking by @LRNcardozoWDF in #2887

📦 Dependency Updates

Update SDK to d4ac798 (3.0.0-6989-a4fae39) by @bw-ghapp[bot] in #2838

Update public suffix list by @github-actions[bot] in #2892

🎨 Other

llm: Add Step 7 verify/lint/format section to implementing-ios-code skill by @KatherineInCode in #2859

[PM-39748] llm: Add skill to fix flaky tests by @fedemkr in #2839

Full Changelog: v2026.7.0-bwa...v2026.7.1-bwa

Builds Source: https://github.com/bitwarden/ios/actions/runs/30112689608

Original source

What's Changed

Update policies UI

Added new confirmation when deleting a passkey

Updated 1Password importer to be more fault tolerant

Updated send event logs copy

Various under-the-hood improvements and minor bug fixes

💙 Community Highlight

[PM-19836] Add prefix to fastmail by @lucacome in #14105

[PM-39030] Fix Proton Pass import of item custom fields by @archit-goyal in #21253

[PM-39704] fix(send): restore increment/decrement buttons for max access count by @harikrishna2208 in #21527

[PM-40685] Fix forwarder settings cache collision by @cyfrit in #21980

Feature Development

[INNO] - Passkey Report by @jrmccannon in #19787

[CL-998] bit-table-v2 and related components by @willmartian in #20900

[SM-1954] Show expiry status badge on access tokens list by @maxkpower in #20939

[PM-38813] - update offboarding survey by @jaasen-livefront in #21161

[PM-27844] Set email on sync by @ike-kottlowski in #21349

Add generic HEC (SIEM) event integration card by @maxkpower in #21445

[PM-10383] - confirm before deleting a passkey by @jaasen-livefront in #21497

[PM-35107] Remove Argon2Id option from UI in gov environment by @mzieniukbw in #21503

[PM-39387] fix: Auto-sync premium status after returning from Stripe checkout by @cyprain-okeke in #21518

[PM-32384] Update copy new to create/add browser by @jengstrom-bw in #21524

[PM-32403] Update button copy desktop by @jengstrom-bw in #21528

[PM-39778] Fix subtitles when using sdk by @jengstrom-bw in #21591

[PM-35093] feat: Support bitwarden-gov.com deeplink redirects on web connectors by @enmande in #21752

[PM-40089] Show a banner in the vault view when Fill Assist is active for the current page by @jprusik in #21754

[PM-27060] feat: Call SDK for password prelogin by @ike-kottlowski in #21777

[CL-1272] Support visually-hidden labels in bit-form-field by @willmartian in #21788

[CL-1273] Add bitMenuClose directive to decouple menu dismissal from ARIA roles by @willmartian in #21789

[PM-40194] - add shared-folder icon by @jaasen-livefront in #21801

[PM-40216] feat: Scope organization invite link lookups by organization ID by @r-tome in #21815

feat(llm): add claude note to make key-management aware of encryption related changes by @quexten in #21818

[PM-39815] feat: Add linksEnabled to invite-link status response model by @r-tome in #21820

[PM-37991] Implement Automatic App Login Policy v2 and associated components by @JaredScar in #21824

[PM-37990] Add UriMatchDefaultPolicy components and stories by @JaredScar in #21827

[PM-38519] Add AutoConfirmPolicy V2 component and associated templates by @JaredScar in #21828

Pm 38122 fastmail checkbox by @bmbitwarden in #21830

[PM-40195] feat: add shared-folder localization keys by @jaasen-livefront in #21832

[PM-38929] Add new design for edit member dialog by @BTreston in #21843

[PM-40286] - Add Vfo1TerminologyService and VFO1I18nPipe infrastructure by @nick-livefront in #21860

[PM-40104] Relabel "New organization" → "New vault" on org-switcher affordance (web) by @nick-livefront in #21871

[PM-40193] feat: add vfo1Icon pipe for flag-gated icon swaps by @jaasen-livefront in #21876

feat(shared-unlock): support trusted devices by @quexten in #21895

[PM-40111] Rename Owner to Vault field by @nick-livefront in #21897

[PM-36007] Admin change email event logging by @BTreston in #21908

[CL-1285] create Storybook feature-flags addon in new @bitwarden/storybook lib by @willmartian in #21913

[PM-40134] RoutedVaultFilterService accept a vaultId query parameter alongside organizationId by @jengstrom-bw in #21930

[PM-38794] Add OrganizationInviteLinkApiService.getInvite by @JimmyVo16 in #21932

[PM-38749] Add OrganizationInviteLinkApiService.updateSupportsConfirmation by @JimmyVo16 in #21933

feat(register-finish-request): Add sales_assisted_token to request by @enmande in #21961

feat(data-recovery): add detection of field decryption ciphers by @quexten in #22065

feat(data-recovery): add detection of field decryption ciphers (#22065) by @quexten in #22074

🐛 Bug fixes

[PM-39137] Gate Access Intelligence report reads on new-architecture flag by @Banrion in #21315

[PM-33228] Add screen reader only to enhance a11y behavior by @BryanCunningham in #21563

[PM-39992] Add support for SDK IPC unreachability by @quexten in #21653

[PM-39825] Fix URI reordering, drag handle alignment by @jaasen-livefront in #21697

[PM-39464] Fix ExpressionChangedAfterItHasBeenCheckedError when assigning collections by @nikwithak in #21743

[PM-16456] Add occupied seat count check when restoring user by @JaredScar in #21746

[PM-38189] Wire InitiationPath to Organizations to Correct Trial Metadata by @sbrown-livefront in #21769

[PM-40201] SSH key items with a null public key or fingerprint fail to decrypt and break the vault by @gbubemismith in #21778

[AppSec] AI Fix for Template Injection in GitHub Workflows Action by @aikido-autofix in #21787

[PM-40820] Fix add access filter toggle style by @BTreston in #21816

[PM-40247] Fix vault item checkmarks disappearing after clearing a search by @nick-livefront in #21823

[PM-16456] Add mock services for billing constraints to fix storybook by @JaredScar in #21833

[PM-40303] Fix logout when underprivileged user accesses Manage Send policy by @harr1424 in #21836

[PM-40377] Fix bug with form field to have textarea behave the same as an input when disabled by @jengstrom-bw in #21848

[PM-40241] Bugfix - Rehydrate localData lastUsedDate on local cipher views by @jprusik in #21849

[CL-1277] Add disabled and readonly variants to Textarea story by @willmartian in #21851

[CL-1282] use correct size for base icon tile by @BryanCunningham in #21856

[PM-40444] Hide archive/unarchive from bulk bar in Admin Console by @nick-livefront in #21873

[PM-39948][PM-40406] Fix native select issues with dark mode and arrow click handling by @vleague2 in #21877

[PM-40457] Fix typos in the message catalogs by @jprusik in #21882

[PM-40446] Enhance AutoConfirmWarningDialog by adding LinkModule to imports by @JaredScar in #21883

[PM-13643] Refactor user avatar rendering in bulk dialogs to utilize userId for correct color match by @JaredScar in #21884

[PM-18638] Prevent collection/cipher creation for suspended organizations by @JaredScar in #21887

[PM-40370] Use decrypted ciphers cache when using SDK by @shane-melton in #21888

[PM-38557] Netwrix Password Secure importer should map URL-like fields to Bitwarden website URI by @harr1424 in #21889

[PM-40432] Update Send Event Logs copy by @harr1424 in #21890

[PM-40440] fix: Source upgrade cart total from server invoice preview by @amorask-bitwarden in #21902

[PM-40482] Return to Default Filter After Revoking Last Staged User by @sven-bitwarden in #21911

[PM-13643] avatars in org member remove/revoke modal do not match members page fix by @JaredScar in #21931

[CL-808] Support forced colors mode for form controls by @vleague2 in #21936

[PM-40375] Add per-item exception handling to 1Pux import by @harr1424 in #21941

fix(key-connector): fix sdk key-connector login not working by @quexten in #21957

[PM-40543] Default new SCIM connections to staged by @sven-bitwarden in #21963

[PM-39845] Prevent Access Intelligence report freeze on oversized password values by @Banrion in #21987

[PM-40771] Update policy enabled method to accept PolicyStatusResponse by @JaredScar in #21997

fix: race condition leading to decryption errors by @quexten in #22063

⚙️ Maintenance

Auth/PM-3813 - 2FA Management Endpoints - User Verification Refactor by @JaredSnider-Bitwarden in #21385

Auth/PM-39905 - Restructure organization-invite into subfolders with barrel imports by @JaredSnider-Bitwarden in #21642

Autosync Crowdin Translations for web by @bw-ghapp in #21649

[PM-39259] Migrate auth token key generation to SDK by @quexten in #21706

[PM-39259] Remove deprecated randomBytes/aesGenerateKey/createKey by @quexten in #21713

[BRE-1907] Add artifact manifest to build-web.yml by @gitclonebrian in #21726

[PM-37476] Source canUseAccessIntelligence from server UseRiskInsights ability by @AlexRubik in #21760

[PM-34857] Remove PoliciesInAcceptedState feature flag by @eliykat in #21761

Bump client version(s) by @github-actions in #21811

Fix/update CODEOWNERS by @djsmith85 in #21826

[PM-40345] Ignore Storybook stories in code coverage by @Hinton in #21842

[PM-16487] Remove Add/edit v2 component by @jengstrom-bw in #21859

[PM-39966] Migrate from @angular/platform-browser-dynamic to @angular/platform-browser by @djsmith85 in #21866

[PM-40456] Update cSpell settings by @jprusik in #21875

Autosync Crowdin Translations for web by @bw-ghapp in #21905

desktop-autofill: Add missing Skunkworks codeownership by @iinuwa in #21907

[PM-36404] Refactor org guards for ts-strict by @BTreston in #21914

Autosync Crowdin Translations for web by @bw-ghapp in #21917

chore(ci): skip platform-community signal for fork PRs by @addisonbeck in #21934

refactor(login-strategy): clean up crypto-related functions and deprecation notices by @quexten in #21958

chore: Add team-ai-sme as CODEOWNERS for .mcp.json by @SaintPatrck in #21985

docs(vault): document deprecation of TypeScript vault item decryption by @quexten in #22004

[BRE-2118] Adding publish CLI workflow for NPM provenance by @pixman20 in #22014

Autosync Crowdin Translations for web by @bw-ghapp in #22020

Bump client version(s) by @github-actions in #22069

[CL] mark bit-table-v2 as Beta in Storybook docs by @willmartian in #22072

📦 Dependency Updates

[deps]: Update GitHub Artifact Actions (major) by @renovate in #19586

[deps] Autofill: Update prettier to v3.9.5 by @renovate in #21668

[deps] Platform: Update jest-preset-angular to v17 by @renovate in #21678

Update sdk-internal to 0.2.0-main.897 by @bw-ghapp in #21718

[deps]: Update dtolnay/rust-toolchain digest to 4cda84d by @renovate in #21948

[deps] Platform: Update webpack-dev-server to v5.2.6 [SECURITY] by @renovate in #21972

🎨 Other

[PM-39560] [BEEEP] Add MCP server configuration for Chrome and Electron DevTools by @quexten in #21483

New Contributors

@SaintPatrck made their first contribution in #21985

@archit-goyal made their first contribution in #21253

@lucacome made their first contribution in #14105

@cyfrit made their first contribution in #21980

@harikrishna2208 made their first contribution in #21527

Full Changelog: web-v2026.7.0...web-v2026.7.1

Original source

What's Changed

Added direct Keepass import

Various under-the-hood improvements and minor bug fixes

💙 Community Highlight

[PM-33285] Enhance privacy in password leak detection with response padding by @TheDcoder in #19439
[PM-38123] [bug] Preserve 1Password archive state on 1pux import (closes #20694) by @999purple999 in #20867
[PM-39177] fix(libs): correct various typos in shared libraries and documentation by @luojiyin1987 in #21320

Feature Development

[PM-33198] Keeper direct importer by @detunized in #19395
[PM-31884] implemented controls for send policy access dropdown by @bmbitwarden in #19777
[PM-32696] Add data field to Cipher object to support blob encryption by @nikwithak in #20765
[PM-37875] Automatic V2 Upgrade Migration by @quexten in #20831
Auth/PM-38298 - Org Invite Acceptance Refactor by @JaredSnider-Bitwarden in #21011
[PM-38565] Replace tray settings with "Keep Bitwarden running in the background" by @quexten in #21044
[PM-38387] Introduce KeePass KDBX importer by @harr1424 in #21052
[PM-33408] Add OrganizationUserNotification banner to vault by @jengstrom-bw in #21209
feat: add Region.Gov to available environments by @addisonbeck in #21211
[PM-39048] Feat: scaffold @bitwarden/pam library by @Hinton in #21259
[PM-34779] Add accept method to OrganizationInviteLinkApiService by @r-tome in #21266
[PM-34023] Remove 2FA account recovery flag by @eliykat in #21291
[PM-33054] Remove feature flag cipher-key-encryption by @jengstrom-bw in #21309
[PM-34053] Swap verify trust to new SDK method by @Thomas-Avery in #21347
feat(platform): introduce GovModeService for FedRAMP region gating by @addisonbeck in #21366
[PM-34580] Rename "Note" to "Secure note" for SecureNote cipher type by @nick-livefront in #21423
[PM-33740] Remove unlock service for password flagged logic by @mzieniukbw in #21427
[PM-20344] Disallow multiple attachments with the same name, handle existing in zip export format by @mcamirault in #21596

🐛 Bug fixes

[PM-39731] Hotfix: Revert "[Shared Unlock] [PM-34508] Default enable native messaging permission on browser (#19907) by @mzieniukbw in #21559
[PM-34926] Allow single-character CJK vault searches by @jaasen-livefront in #21013
Auth/PM-35783 - Fix Org Invite Policy State Pollution and State Clearing Issue by @JaredSnider-Bitwarden in #21218
[PM-38608] [PM-38560] Fix diacritic normalization and multi-word query handling in searchCiphersBasic by @nick-livefront in #21232
[PM-27041] - CLI - respect passphrase param in /generate by @jaasen-livefront in #21290
fix(platform): remove hardcoded vault.bitwarden.com checks in getSendUrl and getScimUrl by @addisonbeck in #21373
[SM-1483] Fix self-hosted environment URLs in Secrets Manager config by @vincentsalucci in #21375
[PM-39204] Add extra spacing to vault items when batch bar is visible by @nick-livefront in #21390
[PM-38940] Close Firefox/Safari Permissions-Policy gaps via webRequest by @bensbits91 in #21466
[PM-7036] Add support for latest LogMeOnce CSV import format, add folder mapping by @mcamirault in #21473
Revert "[PM-38760] Recursively create directory when writing manifest (#21141)" by @addisonbeck in #21568
[PM-31068] Wire send SDK repository for edit/removePassword by @adudek-bw in #21579
[PM-39380] Bitwarden unencrypted JSON files containing cipher keys prevent import by @harr1424 in #21587
[PM-39556] Fix access selector not saving changes when the dialog field is modified by @BTreston in #21640
Revert "[Shared Unlock] [PM-34508] Default enable native messaging pe… by @quexten in #21687
[PM-38392] Route password-protected Send saves through the SDK by @adudek-bw in #21725
[PM-38595] Update local collections from server response by @BTreston in #21744
[PM-40303] Fix logout when underprivileged user accesses Manage Send policy by @harr1424 in #21836
[PM-40303] Cherry-pick to rc: Fix user logout when missing permissions by @harr1424 in #21846
[PM-40236][RC] Logging out throws error mid-logout due to a race condition. User left in locked state by @mzieniukbw in #21869

⚙️ Maintenance

[PM-35600] Update Password Request Models (Key Management) by @rr-bw in #20665
[PM-38958] Add ESLint no package self import rule by @quexten in #21198
[BRE-2013] Fix repo name in PR description link by @vgrassia in #21276
fix(codeowners): Added environment selector to auth's responsibilities by @Patrick-Pimentel-Bitwarden in #21284
[PM-39182] Migrate to relative imports - @bitwarden/team-billing-dev by @quexten in #21325
[PM-39182] Migrate to relative imports - @bitwarden/team-data-insights-and-reporting-dev by @quexten in #21327
[PM-39182] Migrate to relative imports - @bitwarden/team-admin-console-dev by @quexten in #21329
[PM-39182] Migrate to relative imports - @bitwarden/team-auth-dev by @quexten in #21330
[PM-39182] Migrate to relative imports - @bitwarden/team-vault-dev by @quexten in #21331
[PM-39182] Migrate to relative imports - @bitwarden/team-key-management-dev by @quexten in #21333
[PM 34708] Use new shared enforce label workflow by @djsmith85 in #21365
[PM-9420] - add cipher$ observable to cipher service by @jaasen-livefront in #21383
[deps]: Pin dependencies by @renovate in #21406
[VULN-649] ci: Remove deprecated scan workflow by @theMickster in #21429
[PM-38904] - Managed to Claimed Rename by @jrmccannon in #21430
[deps] Fix Rust nightly toolchain reference in lint workflow by @coroiu in #21457
[PM-39182] Enable no relative imports rule by @quexten in #21515
[PM-39259] Migrate key-management consumers to SDK key generation by @quexten in #21707
[PM-39259] Migrate vault export and generator to SDK random number client by @quexten in #21708
[PM-39259] Remove typescript cipherkey generation by @quexten in #21729
[PM-34458] Add release.yml to bitwarden/clients by @djsmith85 in #21732
chore(ci): add platform-community code-review signal by @addisonbeck in #21751
Bump client version(s) by @github-actions in #21811
Bumped client version(s) (#21811) by @addisonbeck in #21817
[BRE-2118] Adding publish CLI workflow for NPM provenance by @pixman20 in #22014

📦 Dependency Updates

[PM-35903] Update clients to node 24 by @dani-garcia in #20400
[deps] Vault: Update @koa/router to v15.6.0 by @renovate in #21114
Update sdk-internal to 0.2.0-main.843 by @bw-ghapp in #21233
[deps] Platform: Update @babel/core to v7.29.6 [SECURITY] by @renovate in #21277
[deps] Vault: Update form-data to v4.0.6 [SECURITY] by @renovate in #21279
Update sdk-internal to 0.2.0-main.849 by @bw-ghapp in #21299
Update sdk-internal to 0.2.0-main.857 by @bw-ghapp in #21393
[deps] Vault: Update multer to v2.2.0 [SECURITY] by @renovate in #21396
[deps] Platform: Update webpack-dev-server to v5.2.5 [SECURITY] by @renovate in #21404
[deps] Vault: Update https-proxy-agent to v9.1.0 by @renovate in #21408
[deps]: Update codecov/codecov-action action to v7 by @renovate in #21409
Update sdk-internal to 0.2.0-main.859 by @bw-ghapp in #21475
Update sdk-internal to 0.2.0-main.870 by @bw-ghapp in #21482
Update sdk-internal to 0.2.0-main.872 by @bw-ghapp in #21651
[deps]: Update dtolnay/rust-toolchain digest to 4be7066 by @renovate in #21667
[deps] Platform: Update @types/node to v22.20.0 by @renovate in #21673
Update sdk-internal to 0.2.0-main.883 by @bw-ghapp in #21686
chore(deps): move rand to KM Renovate ownership by @addisonbeck in #21719
Fix lockfile by @dani-garcia in #21763

🎨 Other

Bump client version(s) by @github-actions in #21271
Auth/Add CLAUDE.md files to angular/src/auth and common/src/auth on file organization + barrel files by @JaredSnider-Bitwarden in #21283
Disable self import rule by @quexten in #21410
Add claude snap permissions rule by @quexten in #21514

New Contributors

@TheDcoder made their first contribution in #19439
@luojiyin1987 made their first contribution in #21322
@999purple999 made their first contribution in #20867

Full Changelog: cli-v2026.6.0...cli-v2026.7.0

Original source

What's Changed

💙 Community Highlight

[PM-32423] Add a less confusing argument and environment variable name to disable updates by @marcquark in #19045
[PM-33285] Enhance privacy in password leak detection with response padding by @TheDcoder in #19439
[PM-38123] [bug] Preserve 1Password archive state on 1pux import (closes #20694) by @999purple999 in #20867
[PM-38362] fix(powermonitor): Improve connection handling and remove unwraps by @ChihweiLHBird in #20919
[PM-38760] Recursively create directory when writing manifest by @pschlan in #21141
[PM-39177] fix(libs): correct various typos in shared libraries and documentation by @luojiyin1987 in #21320
[PM-39179] fix(desktop): correct various typos in desktop application by @luojiyin1987 in #21322

Feature Development

[PM-33198] Keeper direct importer by @detunized in #19395
[PM-31884] implemented controls for send policy access dropdown by @bmbitwarden in #19777
[CL-1138] Add stacked drawer support with back button by @willmartian in #19804
[Shared Unlock] [PM-34508] Default enable native messaging permission on browser by @quexten in #19907
IPC Desktop <-> Browser transport by @coroiu in #19908
Pm 31929 new send policy for deletion days by @bmbitwarden in #20128
PM-32187 implemented restrict send type by @bmbitwarden in #20129
[PM-29785] Abstract Windows Passkey Plugin Authenticator COM implementation by @iinuwa in #20285
[CL-1001] adding new toggle group styles by @BryanCunningham in #20403
PM 35229 [Browser/Desktop] Stripe Checkout from upgrade dialog by @cyprain-okeke in #20592
[PM-32696] Add data field to Cipher object to support blob encryption by @nikwithak in #20765
[PM-37875] Automatic V2 Upgrade Migration by @quexten in #20831
[BEEEP] [PM-38226] Add disable auto-start option for snap by @quexten in #20855
Auth/PM-38298 - Org Invite Acceptance Refactor by @JaredSnider-Bitwarden in #21011
[PM-38565] Replace tray settings with "Keep Bitwarden running in the background" by @quexten in #21044
[PM-38387] Introduce KeePass KDBX importer by @harr1424 in #21052
Auth/PM-38742 - SSO Invited Existing User Flow Improvement - Show SSO redirect error notification on LoginComponent by @JaredSnider-Bitwarden in #21134
[PM-38787] Pin vault bulk-actions bar to the viewport on scroll by @nick-livefront in #21154
[PM-33408] Add OrganizationUserNotification banner to vault by @jengstrom-bw in #21209
feat: add Region.Gov to available environments by @addisonbeck in #21211
[PM-39048] Feat: scaffold @bitwarden/pam library by @Hinton in #21259
[PM-34779] Add accept method to OrganizationInviteLinkApiService by @r-tome in #21266
[PM-34023] Remove 2FA account recovery flag by @eliykat in #21291
[PM-37808] Bulk Selection + Batch Bar for Desktop by @nick-livefront in #21308
[PM-33054] Remove feature flag cipher-key-encryption by @jengstrom-bw in #21309
[PM-37807] Implement VaultBatchBarComponent on organization vault by @gbubemismith in #21345
[PM-34053] Swap verify trust to new SDK method by @Thomas-Avery in #21347
[PM-32402] Update copy from new to add/create web app by @jengstrom-bw in #21355
feat(platform): introduce GovModeService for FedRAMP region gating by @addisonbeck in #21366
[PM-34580] Rename "Note" to "Secure note" for SecureNote cipher type by @nick-livefront in #21423
[PM-33740] Remove unlock service for password flagged logic by @mzieniukbw in #21427
[PM-33410] Add organizationusernotification banners to vault desktop by @jengstrom-bw in #21462
[PM-33362] Autotype Edit Cipher Initial Changes by @coltonhurst in #21500
[PM-35106] Make AES-GCM the default algorithm in crypto.rs for secure memory by @mzieniukbw in #21553
[PM-29785] CTAP2 CBOR Parser by @iinuwa in #21584
[PM-20344] Disallow multiple attachments with the same name, handle existing in zip export format by @mcamirault in #21596
[PM-39147] Batch bar copy fixes — singular/plural toasts and dialog title by @nick-livefront in #21602
[PM-29785] Allow waiting for Autofill IPC connection in Windows authenticator by @iinuwa in #21615
[PM-29790] Prepare for separate Windows Passkey Plugin Authenticator exe by @iinuwa in #21616
[PM-29790] Add credential request processing for Windows passkey plugin by @iinuwa in #21618
[PM-29790] Wire up authenticator IPC and COM server for Windows passkey plugin by @iinuwa in #21622
[PM-29790] Windows passkey plugin: unify signature verification by @iinuwa in #21634
windows-plugin: Add plugin entrypoint by @iinuwa in #21635
[PM-36505] Finalize Send Controls policy design, adjust base policy component enabled display logic by @mcamirault in #21739
[CL-1274] Add bit-page layout region for bit-layout main content by @willmartian in #21790

🐛 Bug fixes

[PM-39731] Hotfix: Revert "[Shared Unlock] [PM-34508] Default enable native messaging permission on browser (#19907) by @mzieniukbw in #21559
[PM-32445] Extension Scrollbar Fix by @rr-bw in #20478
[PM-37752] - fix collections control when extension loses focus by @jaasen-livefront in #20812
[PM-34926] Allow single-character CJK vault searches by @jaasen-livefront in #21013
[PM-38643] Fix default broken on wayland only systems by @quexten in #21079
[PM-38581] - disable drag for single custom fields by @jaasen-livefront in #21136
[PM-38409] - update custom field value on reorder by @jaasen-livefront in #21137
[PM-25277] SSH Key desktop translations by @nick-livefront in #21208
Auth/PM-35783 - Fix Org Invite Policy State Pollution and State Clearing Issue by @JaredSnider-Bitwarden in #21218
[PM-38608] [PM-38560] Fix diacritic normalization and multi-word query handling in searchCiphersBasic by @nick-livefront in #21232
Fix SSH Agent v2 behavior before first unlock by @neuronull in #21273
fix(platform): remove hardcoded vault.bitwarden.com checks in getSendUrl and getScimUrl by @addisonbeck in #21373
[SM-1483] Fix self-hosted environment URLs in Secrets Manager config by @vincentsalucci in #21375
[PM-39295] Fix SDK IPC messages being parsed by legacy IPC, resetting the connection by @quexten in #21387
[PM-39204] Add extra spacing to vault items when batch bar is visible by @nick-livefront in #21390
[SM-1993][CL-1227] Fix textarea height and fix SM button spacing by @vleague2 in #21417
[PM-39392] Use readonly styles for fields intended to be readonly by @vleague2 in #21425
[CL-1228] hide actions container if empty and always render button outside by @BryanCunningham in #21440
[PM-39429] remeasure bulk actions bar width when actions change by @BryanCunningham in #21443
[PM-39447] [Shared Unlock] Shared unlock stuck on lock component by @quexten in #21446
[PM-39450] [Shared Unlock] Scan Secure Preferences when detecting installed Chrome extensions by @quexten in #21449
[PM-38940] Close Firefox/Safari Permissions-Policy gaps via webRequest by @bensbits91 in #21466
[PM-7036] Add support for latest LogMeOnce CSV import format, add folder mapping by @mcamirault in #21473
manually recompile select css by @BryanCunningham in #21488
[CL-1225] Berry should hide when count is 0 in toggle group by @vleague2 in #21491
[PM-39349]] - make ssh key cipher fields readonly by @jaasen-livefront in #21505
[PM-38771] - add missing i18n strings for button labels by @jaasen-livefront in #21509
[PM-18344] Remove XDG_CURRENT_DESKTOP Unity override to fix clipboard on wayland by @quexten in #21513
[PM-39610] Keyboard shortcuts only work once by @gbubemismith in #21520
reduce select label font size by @BryanCunningham in #21525
[PM-39695] Send fields are unexpectedly editable and changes cannot be saved by @harr1424 in #21542
[PM-39746] Exclude search and select components from legacy global desktop css by @vleague2 in #21556
Revert "[PM-38760] Recursively create directory when writing manifest (#21141)" by @addisonbeck in #21568
[PM-39380] Bitwarden unencrypted JSON files containing cipher keys prevent import by @harr1424 in #21587
[PM-39841] Fix unlocking crashing the desktop app by @quexten in #21610
[PM-31138] Perform full sync on other clients after upgrade key rotation by @quexten in #21628
[PM-39556] Fix access selector not saving changes when the dialog field is modified by @BTreston in #21640
[PM-37196] Tooltip expand max-width by @JaredScar in #21646
[PM-39974] Remove Biometric Integration Setting Fully by @quexten in #21684
Revert "[Shared Unlock] [PM-34508] Default enable native messaging pe… by @quexten in #21687
[PM-39977] Fix broken shared unlock for browser-desktop in non-dev mode by @quexten in #21688
[PM-39570] use correct fill for bup logo by @BryanCunningham in #21694
[PM-38392] Route password-protected Send saves through the SDK by @adudek-bw in #21725
fix(vault): archive and unarchive missing from bulk bar for org items by @nick-livefront in #21741
Render native form control UI in dark theme with color-scheme: dark by @maxkpower in #21771
fix(desktop): fix crash generating DuckDuckGo native messaging manifests by @quexten in #21783
fix(desktop): fix Firefox native messaging host manifest directory creation by @quexten in #21784
[PM-40303] Fix logout when underprivileged user accesses Manage Send policy by @harr1424 in #21836
[PM-40303] Cherry-pick to rc: Fix user logout when missing permissions by @harr1424 in #21846
[PM-40236][RC] Logging out throws error mid-logout due to a race condition. User left in locked state by @mzieniukbw in #21869

⚙️ Maintenance

[PM-23485] Share types between autofill_provider and napi crates by @iinuwa in #18787
[PM-32249] Electron custom file protocol by @dani-garcia in #19208
[PM-35600] Update Password Request Models (Key Management) by @rr-bw in #20665
[PM-4439] Replace oidc-client-ts with oauth4webapi by @harr1424 in #20824
[PM-12043] Remove usage of ActiveUserState from biometric-state.service by @mzieniukbw in #20860
[PM-38892] Remove unused methods invokeMenu and openContextMenu by @djsmith85 in #21197
[PM-38958] Add ESLint no package self import rule by @quexten in #21198
Auth/BEEEP/PM-21301 - Move SelfHostedEnvConfigDialog out of libs/auth by @JaredSnider-Bitwarden in #21268
[BRE-2013] Fix repo name in PR description link by @vgrassia in #21276
[CL-1223] simplify banner component by @BryanCunningham in #21301
[PM-36841] Align Subtitles for all new Item Types by @jengstrom-bw in #21316
[PM-39182] Migrate to relative imports - @bitwarden/team-billing-dev by @quexten in #21325
[PM-39182] Migrate to relative imports - @bitwarden/team-data-insights-and-reporting-dev by @quexten in #21327
[PM-39182] Migrate to relative imports - @bitwarden/team-ui-foundation by @quexten in #21328
[PM-39182] Migrate to relative imports - @bitwarden/team-admin-console-dev by @quexten in #21329
[PM-39182] Migrate to relative imports - @bitwarden/team-auth-dev by @quexten in #21330
[PM-39182] Migrate to relative imports - @bitwarden/team-vault-dev by @quexten in #21331
[PM-39182] Migrate to relative imports - @bitwarden/team-key-management-dev by @quexten in #21333
Remove unneeded import for ChipActionComponent by @jengstrom-bw in #21342
[PM-38190] Improve sanitization of storybook args helper by @vleague2 in #21362
[PM 34708] Use new shared enforce label workflow by @djsmith85 in #21365
[PM-9420] - add cipher$ observable to cipher service by @jaasen-livefront in #21383
[deps]: Pin dependencies by @renovate in #21406
[VULN-649] ci: Remove deprecated scan workflow by @theMickster in #21429
[PM-38904] - Managed to Claimed Rename by @jrmccannon in #21430
[deps] Fix Rust nightly toolchain reference in lint workflow by @coroiu in #21457
add data-testids to log in elements by @nthompson-bitwarden in #21458
[PM-23485] Use a staticlib for UniFFI by @iinuwa in #21495
[PM-39182] Enable no relative imports rule by @quexten in #21515
[PM-35812] Remove feature flag by @JaredScar in #21567
[PM-28139] Remove V1 Linux Biometrics by @quexten in #21571
Bump client version(s) by @github-actions in #21580
build: Add arm64-only MacOS pack step by @iinuwa in #21588
[PM-39898] desktop_core: Don't compile objc when cross-compiling for non-macOS by @iinuwa in #21636
[PM-33362] Use signals for the app label by @coltonhurst in #21638
[BRE-2044] Migrate Auto Bump Desktop Version workflow logic to the deploy repo by @vgrassia in #21641
Autosync Crowdin Translations for desktop by @bw-ghapp in #21647
SSH Agent v2: restructure the SignRequest by @neuronull in #21654
Fix clippy lint by @iinuwa in #21691
[CL-1258] Add NumberInput story to bit-form-field by @willmartian in #21692
[PM-39889] Acknowledge quick-xml advisory by @iinuwa in #21693
[CL-1261] Add date input form field story by @willmartian in #21695
[PM-39259] Migrate key-management consumers to SDK key generation by @quexten in #21707
[PM-39259] Migrate vault export and generator to SDK random number client by @quexten in #21708
[PM-39259] Migrate DuckDuckGo secure channel to SDK key generation by @quexten in #21711
[PM-39259] Migrate FIDO2 credential id to SDK random by @quexten in #21712
[PM-39259] Remove typescript cipherkey generation by @quexten in #21729
[PM-34458] Add release.yml to bitwarden/clients by @djsmith85 in #21732
[BRE-2018] Add snapcraft compatibility note to electron-builder PRs by @brandonbiete in #21735
Tidy Desktop Autofill Service by @iinuwa in #21736
[PM-23485] Use strong types for autofill IPC request parsing by @iinuwa in #21737
chore(ci): add platform-community code-review signal by @addisonbeck in #21751
Autosync Crowdin Translations for desktop by @bw-ghapp in #21779
refactor(desktop_native): extract secure_memory into its own crate by @quexten in #21780
SSH Agent v2: add README by @neuronull in #21791
Bump client version(s) by @github-actions in #21811
Bumped client version(s) (#21811) by @addisonbeck in #21817

📦 Dependency Updates

[deps] UI Foundation: Update @storybook/test-runner to v0.24.4 by @renovate in #17854
[deps]: Update @napi-rs/cli to v3.7.2 by @renovate in #20121
[deps] Platform: Update macOS/iOS bindings by @renovate in #20344
[PM-35903] Update clients to node 24 by @dani-garcia in #20400
[PM-34331] Update electron to 41 by @dani-garcia in #20448
[deps]: Update Rust crate pbkdf2 to v0.13.0 by @renovate in #20581
[PM-18344] Implement Clipboard Support on Wayland/Gnome via RemoteDesktop Portal by @quexten in #21068
Update sdk-internal to 0.2.0-main.843 by @bw-ghapp in #21233
[deps] Platform: Update @babel/core to v7.29.6 [SECURITY] by @renovate in #21277
Update sdk-internal to 0.2.0-main.849 by @bw-ghapp in #21299
[PM-39351][PM-39353][PM-39369] Update Angular to 21.2.17 by @vleague2 in #21377
Update sdk-internal to 0.2.0-main.857 by @bw-ghapp in #21393
[deps] Platform: Update webpack-dev-server to v5.2.5 [SECURITY] by @renovate in #21404
[deps] Platform: Update Rust crate serde_with to v3.21.0 by @renovate in #21407
[deps]: Update codecov/codecov-action action to v7 by @renovate in #21409
Update sdk-internal to 0.2.0-main.859 by @bw-ghapp in #21475
Update sdk-internal to 0.2.0-main.870 by @bw-ghapp in #21482
Address RUSTSEC-2026-0190 by @neuronull in #21558
Bump client version(s) by @github-actions in #21644
Update sdk-internal to 0.2.0-main.872 by @bw-ghapp in #21651
[deps]: Update dtolnay/rust-toolchain digest to 4be7066 by @renovate in #21667
[deps] Desktop Native: Update Rust crate mockall to v0.15.0 by @renovate in #21671
[deps] Platform: Update @types/node to v22.20.0 by @renovate in #21673
[deps] Platform: Update Rust crate itertools to v0.15.0 by @renovate in #21674
[deps]: Update actions/cache action to v6 by @renovate in #21681
Update sdk-internal to 0.2.0-main.883 by @bw-ghapp in #21686
chore(deps): move rand to KM Renovate ownership by @addisonbeck in #21719
Fix lockfile by @dani-garcia in #21763

🎨 Other

Bump client version(s) by @github-actions in #21271
Auth/Add CLAUDE.md files to angular/src/auth and common/src/auth on file organization + barrel files by @JaredSnider-Bitwarden in #21283
Autosync Crowdin Translations for desktop by @bw-ghapp in #21379
Disable self import rule by @quexten in #21410
Autosync Crowdin Translations for desktop by @bw-ghapp in #21506
Add claude snap permissions rule by @quexten in #21514

New Contributors

@ChihweiLHBird made their first contribution in #20919
@marcquark made their first contribution in #19045
@pschlan made their first contribution in #21141
@TheDcoder made their first contribution in #19439
@luojiyin1987 made their first contribution in #21322
@999purple999 made their first contribution in #20867

Full Changelog: desktop-v2026.6.1...desktop-v2026.7.0

Original source

What's Changed

New installs will now prompt users to allow Bitwarden to manage their browser password manager settings

Added new save and fill flow

Added direct Keepass import

Various under-the-hood improvements and minor bug fixes

💙 Community Highlight

[PM-33285] Enhance privacy in password leak detection with response padding by @TheDcoder in #19439
[PM-35288] feat: auto-close sso tab after authentication completes by @sander-adamse in #20213
[PM-36443] fix microsoft totp autofill by @danysigha in #20481
[PM-38109] fix(browser): use direct clipboard API when popup has DOM access by @RobinAngele in #20859
[PM-38123] [bug] Preserve 1Password archive state on 1pux import (closes #20694) by @999purple999 in #20867
[PM-39177] fix(libs): correct various typos in shared libraries and documentation by @luojiyin1987 in #21320
[PM-39180] fix(browser): correct various typos in browser extension by @luojiyin1987 in #21323

Feature Development

[PM-33198] Keeper direct importer by @detunized in #19395
[PM-31884] implemented controls for send policy access dropdown by @bmbitwarden in #19777
[CL-1138] Add stacked drawer support with back button by @willmartian in #19804
[Shared Unlock] [PM-34508] Default enable native messaging permission on browser by @quexten in #19907
IPC Desktop <-> Browser transport by @coroiu in #19908
Pm 31929 new send policy for deletion days by @bmbitwarden in #20128
PM-32187 implemented restrict send type by @bmbitwarden in #20129
[CL-1001] adding new toggle group styles by @BryanCunningham in #20403
PM 35229 [Browser/Desktop] Stripe Checkout from upgrade dialog by @cyprain-okeke in #20592
[PM-32696] Add data field to Cipher object to support blob encryption by @nikwithak in #20765
[PM-37875] Automatic V2 Upgrade Migration by @quexten in #20831
[PM-37555] add autofill lifecycle by @audreyality in #20949
Auth/PM-38298 - Org Invite Acceptance Refactor by @JaredSnider-Bitwarden in #21011
[PM-38565] Replace tray settings with "Keep Bitwarden running in the background" by @quexten in #21044
[PM-38387] Introduce KeePass KDBX importer by @harr1424 in #21052
Auth/PM-38742 - SSO Invited Existing User Flow Improvement - Show SSO redirect error notification on LoginComponent by @JaredSnider-Bitwarden in #21134
[PM-38778]Make Bitwarden default password manager, callout implementation. by @dan-livefront in #21156
[PM-38834]Allow programmatic changes to Firefox settings by @dan-livefront in #21177
[PM-33408] Add OrganizationUserNotification banner to vault by @jengstrom-bw in #21209
feat: add Region.Gov to available environments by @addisonbeck in #21211
[PM-39048] Feat: scaffold @bitwarden/pam library by @Hinton in #21259
[PM-34779] Add accept method to OrganizationInviteLinkApiService by @r-tome in #21266
[PM-34023] Remove 2FA account recovery flag by @eliykat in #21291
[PM-33054] Remove feature flag cipher-key-encryption by @jengstrom-bw in #21309
[PM-39070] Create new permissions screen by @dan-livefront in #21311
[PM-37807] Implement VaultBatchBarComponent on organization vault by @gbubemismith in #21345
[PM-34053] Swap verify trust to new SDK method by @Thomas-Avery in #21347
[PM-32402] Update copy from new to add/create web app by @jengstrom-bw in #21355
feat(platform): introduce GovModeService for FedRAMP region gating by @addisonbeck in #21366
[PM-39071]Wire new permissions screen by @dan-livefront in #21391
[PM-34580] Rename "Note" to "Secure note" for SecureNote cipher type by @nick-livefront in #21423
[PM-33740] Remove unlock service for password flagged logic by @mzieniukbw in #21427
[PM-33409] Add organizationusernotification banner to vault browser by @jengstrom-bw in #21461
[PM-38828]Change settings order and copy by @dan-livefront in #21464
[PM-39472] Note -> Secure Note by @nick-livefront in #21469
[PM-33362] Autotype Edit Cipher Initial Changes by @coltonhurst in #21500
[PM-20344] Disallow multiple attachments with the same name, handle existing in zip export format by @mcamirault in #21596
[PM-39147] Batch bar copy fixes — singular/plural toasts and dialog title by @nick-livefront in #21602
[CL-1158] update browser footer by @BryanCunningham in #21612
[PM-40060] Add native messaging permission dialog by @quexten in #21703
[PM-40060] Split shared unlock setting into desktop and web by @quexten in #21704
[PM-39876] Implement targeting rules form category by @jprusik in #21715
[CL-1274] Add bit-page layout region for bit-layout main content by @willmartian in #21790

🐛 Bug fixes

[PM-39731] Hotfix: Revert "[Shared Unlock] [PM-34508] Default enable native messaging permission on browser (#19907) by @mzieniukbw in #21559
[PM-32445] Extension Scrollbar Fix by @rr-bw in #20478
[PM-37752] - fix collections control when extension loses focus by @jaasen-livefront in #20812
[PM-34926] Allow single-character CJK vault searches by @jaasen-livefront in #21013
[PM-38581] - disable drag for single custom fields by @jaasen-livefront in #21136
[PM-38409] - update custom field value on reorder by @jaasen-livefront in #21137
Auth/PM-35783 - Fix Org Invite Policy State Pollution and State Clearing Issue by @JaredSnider-Bitwarden in #21218
[PM-38608] [PM-38560] Fix diacritic normalization and multi-word query handling in searchCiphersBasic by @nick-livefront in #21232
[PM-38836] harden calculateSubFramePositioning by @audreyality in #21282
[PM-39200] - fix notification bar behavior with save and fill by @jaasen-livefront in #21351
PM-37236 resolved password button issue on browser by @bmbitwarden in #21359
fix(platform): remove hardcoded vault.bitwarden.com checks in getSendUrl and getScimUrl by @addisonbeck in #21373
[SM-1483] Fix self-hosted environment URLs in Secrets Manager config by @vincentsalucci in #21375
[PM-39204] Add extra spacing to vault items when batch bar is visible by @nick-livefront in #21390
[SM-1993][CL-1227] Fix textarea height and fix SM button spacing by @vleague2 in #21417
[PM-39392] Use readonly styles for fields intended to be readonly by @vleague2 in #21425
[CL-1228] hide actions container if empty and always render button outside by @BryanCunningham in #21440
[PM-39429] remeasure bulk actions bar width when actions change by @BryanCunningham in #21443
[PM-39447] [Shared Unlock] Shared unlock stuck on lock component by @quexten in #21446
[PM-37932] Make IPC content script re-injection idempotent by @coroiu in #21451
[PM-38940] Close Firefox/Safari Permissions-Policy gaps via webRequest by @bensbits91 in #21466
[PM-7036] Add support for latest LogMeOnce CSV import format, add folder mapping by @mcamirault in #21473
manually recompile select css by @BryanCunningham in #21488
[CL-1225] Berry should hide when count is 0 in toggle group by @vleague2 in #21491
[PM-39349]] - make ssh key cipher fields readonly by @jaasen-livefront in #21505
reduce select label font size by @BryanCunningham in #21525
[PM-39695] Send fields are unexpectedly editable and changes cannot be saved by @harr1424 in #21542
Revert "[PM-38760] Recursively create directory when writing manifest (#21141)" by @addisonbeck in #21568
[PM-39380] Bitwarden unencrypted JSON files containing cipher keys prevent import by @harr1424 in #21587
[PM-36888] Do auto confirm when setting is enabled by @BTreston in #21614
[PM-31138] Perform full sync on other clients after upgrade key rotation by @quexten in #21628
[PM-39556] Fix access selector not saving changes when the dialog field is modified by @BTreston in #21640
[PM-37196] Tooltip expand max-width by @JaredScar in #21646
Revert "[Shared Unlock] [PM-34508] Default enable native messaging pe… by @quexten in #21687
[PM-39977] Fix broken shared unlock for browser-desktop in non-dev mode by @quexten in #21688
[PM-39570] use correct fill for bup logo by @BryanCunningham in #21694
Prevent connect to desktop in ipc background if native messaging permission is missing by @quexten in #21702
[PM-38392] Route password-protected Send saves through the SDK by @adudek-bw in #21725
fix(biometrics): Biometric unlock does not work over SDK by @quexten in #21730
fix(unlock): Biometric unlock shows error dialog when cancelling by @quexten in #21731
fix(vault): archive and unarchive missing from bulk bar for org items by @nick-livefront in #21741
Render native form control UI in dark theme with color-scheme: dark by @maxkpower in #21771
[CL-1263] Increase active bottom navigation label font weight by @BryanCunningham in #21772
fix(browser): Fix biometrics setup and connection issues by @quexten in #21782
[PM-38940] Cherry-pick to rc: Fix Permissions-Policy VULN-582 (#21466) by @bensbits91 in #21834
[PM-40303] Fix logout when underprivileged user accesses Manage Send policy by @harr1424 in #21836
[PM-40303] Cherry-pick to rc: Fix user logout when missing permissions by @harr1424 in #21846
[PM-40236][RC] Logging out throws error mid-logout due to a race condition. User left in locked state by @mzieniukbw in #21869

⚙️ Maintenance

[PM-35600] Update Password Request Models (Key Management) by @rr-bw in #20665
[PM-4439] Replace oidc-client-ts with oauth4webapi by @harr1424 in #20824
[PM-12043] Remove usage of ActiveUserState from biometric-state.service by @mzieniukbw in #20860
Stop cosmetic mutations in light DOM from doing rebuild work by @blackwood in #21084
[PM-38958] Add ESLint no package self import rule by @quexten in #21198
Auth/BEEEP/PM-21301 - Move SelfHostedEnvConfigDialog out of libs/auth by @JaredSnider-Bitwarden in #21268
[BRE-2013] Fix repo name in PR description link by @vgrassia in #21276
[CL-1223] simplify banner component by @BryanCunningham in #21301
[PM-39141] Fail Safari packaging script on xcodebuild/codesign errors and missing executable by @quexten in #21307
[PM-36841] Align Subtitles for all new Item Types by @jengstrom-bw in #21316
[PM-39182] Migrate to relative imports - @bitwarden/team-billing-dev by @quexten in #21325
[PM-39182] Migrate to relative imports - @bitwarden/team-data-insights-and-reporting-dev by @quexten in #21327
[PM-39182] Migrate to relative imports - @bitwarden/team-ui-foundation by @quexten in #21328
[PM-39182] Migrate to relative imports - @bitwarden/team-admin-console-dev by @quexten in #21329
[PM-39182] Migrate to relative imports - @bitwarden/team-auth-dev by @quexten in #21330
[PM-39182] Migrate to relative imports - @bitwarden/team-vault-dev by @quexten in #21331
[PM-39182] Migrate to relative imports - @bitwarden/team-key-management-dev by @quexten in #21333
Remove unneeded import for ChipActionComponent by @jengstrom-bw in #21342
[PM-38190] Improve sanitization of storybook args helper by @vleague2 in #21362
[PM 34708] Use new shared enforce label workflow by @djsmith85 in #21365
[PM-9420] - add cipher$ observable to cipher service by @jaasen-livefront in #21383
[deps]: Pin dependencies by @renovate in #21406
[VULN-649] ci: Remove deprecated scan workflow by @theMickster in #21429
[PM-38904] - Managed to Claimed Rename by @jrmccannon in #21430
[deps] Fix Rust nightly toolchain reference in lint workflow by @coroiu in #21457
add data-testids to log in elements by @nthompson-bitwarden in #21458
[PM-39182] Enable no relative imports rule by @quexten in #21515
introduce AutofillLifecycleService by @audreyality in #21530
[PM-35812] Remove feature flag by @JaredScar in #21567
[PM-33362] Use signals for the app label by @coltonhurst in #21638
[CL-1258] Add NumberInput story to bit-form-field by @willmartian in #21692
[CL-1261] Add date input form field story by @willmartian in #21695
[PM-39259] Migrate key-management consumers to SDK key generation by @quexten in #21707
[PM-39259] Migrate vault export and generator to SDK random number client by @quexten in #21708
[PM-39259] Migrate FIDO2 credential id to SDK random by @quexten in #21712
[PM-39259] Remove typescript cipherkey generation by @quexten in #21729
[PM-34458] Add release.yml to bitwarden/clients by @djsmith85 in #21732
chore(ci): add platform-community code-review signal by @addisonbeck in #21751
Bump client version(s) by @github-actions in #21811
Bumped client version(s) (#21811) by @addisonbeck in #21817

📦 Dependency Updates

[deps] UI Foundation: Update @storybook/test-runner to v0.24.4 by @renovate in #17854
[PM-35903] Update clients to node 24 by @dani-garcia in #20400
Update sdk-internal to 0.2.0-main.843 by @bw-ghapp in #21233
[deps] Platform: Update @babel/core to v7.29.6 [SECURITY] by @renovate in #21277
Update sdk-internal to 0.2.0-main.849 by @bw-ghapp in #21299
[PM-39351][PM-39353][PM-39369] Update Angular to 21.2.17 by @vleague2 in #21377
Update sdk-internal to 0.2.0-main.857 by @bw-ghapp in #21393
[deps] Platform: Update webpack-dev-server to v5.2.5 [SECURITY] by @renovate in #21404
[deps]: Update codecov/codecov-action action to v7 by @renovate in #21409
Update sdk-internal to 0.2.0-main.859 by @bw-ghapp in #21475
Update sdk-internal to 0.2.0-main.870 by @bw-ghapp in #21482
Update sdk-internal to 0.2.0-main.872 by @bw-ghapp in #21651
[deps]: Update dtolnay/rust-toolchain digest to 4be7066 by @renovate in #21667
Update sdk-internal to 0.2.0-main.883 by @bw-ghapp in #21686
chore(deps): move rand to KM Renovate ownership by @addisonbeck in #21719
Fix lockfile by @dani-garcia in #21763

🎨 Other

[PM-39008] Do not show save new password inline menu over generate password menu if a new password has not been filled by @jprusik in #21244
Bump client version(s) by @github-actions in #21271
Auth/Add CLAUDE.md files to angular/src/auth and common/src/auth on file organization + barrel files by @JaredSnider-Bitwarden in #21283
Autosync Crowdin Translations for browser by @bw-ghapp in #21380
Disable self import rule by @quexten in #21410
Autosync Crowdin Translations for browser by @bw-ghapp in #21507
Add claude snap permissions rule by @quexten in #21514

New Contributors

@sander-adamse made their first contribution in #20213
@danysigha made their first contribution in #20481
@TheDcoder made their first contribution in #19439
@RobinAngele made their first contribution in #20859
@luojiyin1987 made their first contribution in #21322
@999purple999 made their first contribution in #20867

Full Changelog: browser-v2026.6.1...browser-v2026.7.0

Original source

What's Changed

💙 Community Highlight

[PM-38123] [bug] Preserve 1Password archive state on 1pux import (closes #20694) by @999purple999 in #20867
[PM-39177] fix(libs): correct various typos in shared libraries and documentation by @luojiyin1987 in #21320

Feature Development

[PM-33198] Keeper direct importer by @detunized in #19395
[CL-1138] Add stacked drawer support with back button by @willmartian in #19804
Pm 31929 new send policy for deletion days by @bmbitwarden in #20128
PM-32187 implemented restrict send type by @bmbitwarden in #20129
[CL-1001] adding new toggle group styles by @BryanCunningham in #20403
[PM-37944] Differentiate Send events according to domain by @harr1424 in #20787
[PM-35796] Use SDK bindings for invite link generation by @BTreston in #21004
[PM-38387] Introduce KeePass KDBX importer by @harr1424 in #21052
feat: add Region.Gov to available environments by @addisonbeck in #21211
[PM-33054] Remove feature flag cipher-key-encryption by @jengstrom-bw in #21309
[PM-37978] update UI for MP policy, refactor org lookup by @BTreston in #21313
[PM-34393] Show invite link events in event log by @r-tome in #21335
[PM-32402] Update copy from new to add/create web app by @jengstrom-bw in #21355
feat(platform): introduce GovModeService for FedRAMP region gating by @addisonbeck in #21366
[PM-38210] Remove access-intelligence-trend-chart feature flag by @lastbestdev in #21376
[PM-38481] Add Staged Filter for Organization Members by @sven-bitwarden in #21394
[PM-39472] Note -> Secure Note by @nick-livefront in #21469
[PM-38480] Add Staged Event Message by @sven-bitwarden in #21499
[PM-33362] Autotype Edit Cipher Initial Changes by @coltonhurst in #21500
[PM-37988] Add SessionTimeoutPolicyV2 component usage for new policy drawers by @JaredScar in #21561
[PM-37989] update drawer UI for password generator policy by @JaredScar in #21564
[PM-37987] update drawer UI for account recovery administration policy by @JaredScar in #21565
Auth/PM-39774 - SSO - Improve error for existing users without org membership by @JaredSnider-Bitwarden in #21573
[PM-38346] Single Org and Autofill into SimpleTogglePolicyComponent by @JaredScar in #21595
[PM-20344] Disallow multiple attachments with the same name, handle existing in zip export format by @mcamirault in #21596
[PM-37963] - Add Staged Member Actions by @sven-bitwarden in #21597
[PM-39147] Batch bar copy fixes — singular/plural toasts and dialog title by @nick-livefront in #21602
[PM-40074] Refactor policy definitions to remove deprecated versions and streamline components by @JaredScar in #21717
[PM-36505] Finalize Send Controls policy design, adjust base policy component enabled display logic by @mcamirault in #21739
[PM-40126] Update organizationusernotificationpolicy for policy drawer by @jengstrom-bw in #21747
[PM-37964] Add Ability to Disable Automatic Invitations in SCIM by @sven-bitwarden in #21756
Finalize Manage Send policy description by @mcamirault in #21786
[CL-1274] Add bit-page layout region for bit-layout main content by @willmartian in #21790

🐛 Bug fixes

[PM-38763] Exclude sponsorship redemption from premium-to-org upgrade flow by @sbrown-livefront in #21180
[PM-38608] [PM-38560] Fix diacritic normalization and multi-word query handling in searchCiphersBasic by @nick-livefront in #21232
[PM-38761] Fix hard-coded families plan price in revoke sponsorship dialog by @sbrown-livefront in #21243
[PM-38896] Enhance DefaultCollectionService tests and improve decryption by @JaredScar in #21439
[PM-39447] [Shared Unlock] Shared unlock stuck on lock component by @quexten in #21446
[PM-38940] Close Firefox/Safari Permissions-Policy gaps via webRequest by @bensbits91 in #21466
[PM-7036] Add support for latest LogMeOnce CSV import format, add folder mapping by @mcamirault in #21473
[PM-38262] Apply tolerant-validator pattern to V2 read path in Access Intelligence by @Banrion in #21474
[PM-39269] Fix At-Risk Members CSV export including extra columns by @AlexRubik in #21477
[PM-39349]] - make ssh key cipher fields readonly by @jaasen-livefront in #21505
[PM-38771] - add missing i18n strings for button labels by @jaasen-livefront in #21509
[PM-39695] Send fields are unexpectedly editable and changes cannot be saved by @harr1424 in #21542
[PM-37978] Fix stories by @BTreston in #21566
Revert "[PM-38760] Recursively create directory when writing manifest (#21141)" by @addisonbeck in #21568
[PM-39799] Fix type errors by @BTreston in #21583
[PM-39380] Bitwarden unencrypted JSON files containing cipher keys prevent import by @harr1424 in #21587
[PM-39796] Fix bug in new Send dropdown component that prevented navigation after Send creation by @mcamirault in #21590
[PM-39060] Fix new org button not showing up by @BTreston in #21594
[PM-39805] fix: Exclude permanent migration-grace machine accounts from billable count by @amorask-bitwarden in #21598
[PM-39780] Toast text is incorrect when editing collection access by @gbubemismith in #21601
[PM-31138] Perform full sync on other clients after upgrade key rotation by @quexten in #21628
[PM-39554] Create default collection when admin is demoted to user by @BTreston in #21632
[PM-39891] Fix edit member dialog badge by @BTreston in #21637
[PM-39900] Enhance PoliciesComponent to clear drawer reference after closing by @JaredScar in #21639
[PM-39556] Fix access selector not saving changes when the dialog field is modified by @BTreston in #21640
[PM-37196] Tooltip expand max-width by @JaredScar in #21646
[PM-39123] Fix members page filters flicker by @JaredScar in #21656
[PM-37489] Fixes issue where checkbox label does not enable checkbox by @JaredScar in #21657
Revert "[Shared Unlock] [PM-34508] Default enable native messaging pe… by @quexten in #21687
[PM-39570] use correct fill for bup logo by @BryanCunningham in #21694
[PM-38392] Route password-protected Send saves through the SDK by @adudek-bw in #21725
fix(vault): archive and unarchive missing from bulk bar for org items by @nick-livefront in #21741
Render native form control UI in dark theme with color-scheme: dark by @maxkpower in #21771
[PM-39705] Edit Access Modal Does Not Display Members With Access When Going Through Bulk Actions by @gbubemismith in #21773
[PM-40820] fix style by @BTreston in #21821
[PM-40303] Fix logout when underprivileged user accesses Manage Send policy by @harr1424 in #21836
[PM-40303] Cherry-pick to rc: Fix user logout when missing permissions by @harr1424 in #21846
[PM-40236][RC] Logging out throws error mid-logout due to a race condition. User left in locked state by @mzieniukbw in #21869

⚙️ Maintenance

[PM-35600] Update Password Request Models (Key Management) by @rr-bw in #20665
[PM-9420] - add cipher$ observable to cipher service by @jaasen-livefront in #21383
[VULN-649] ci: Remove deprecated scan workflow by @theMickster in #21429
[PM-36407] Ts strict bulk member components by @BTreston in #21455
Autosync Crowdin Translations for web by @bw-ghapp in #21508
Auth/PM-39619 - Rename AcceptOrganizationComponent to AcceptOrgDirectInviteComponent by @JaredSnider-Bitwarden in #21522
Bump client version(s) by @github-actions in #21554
[PM-35812] Remove feature flag by @JaredScar in #21567
[PM-39398] Refactor Vault Component back to OG naming by @JaredScar in #21569
[BRE-1533] Trigger Bitwarden Lite from web vault build by @vgrassia in #21605
test: add Gov region to parametrized environment service test suite by @addisonbeck in #21619
[PM-33362] Use signals for the app label by @coltonhurst in #21638
[CL-1258] Add NumberInput story to bit-form-field by @willmartian in #21692
[CL-1261] Add date input form field story by @willmartian in #21695
[PM-39259] Migrate key-management consumers to SDK key generation by @quexten in #21707
[PM-39259] Migrate vault export and generator to SDK random number client by @quexten in #21708
[PM-39259] Migrate risk-insights encryption to SDK key generation by @quexten in #21709
[PM-39259] Remove typescript cipherkey generation by @quexten in #21729
[PM-34458] Add release.yml to bitwarden/clients by @djsmith85 in #21732
chore(ci): add platform-community code-review signal by @addisonbeck in #21751
Bump client version(s) by @github-actions in #21811
Bumped client version(s) (#21811) by @addisonbeck in #21817

📦 Dependency Updates

[deps] UI Foundation: Update @storybook/test-runner to v0.24.4 by @renovate in #17854
[PM-35903] Update clients to node 24 by @dani-garcia in #20400
[deps]: Update codecov/codecov-action action to v7 by @renovate in #21409
Update sdk-internal to 0.2.0-main.870 by @bw-ghapp in #21482
Update sdk-internal to 0.2.0-main.872 by @bw-ghapp in #21651
[deps]: Update dtolnay/rust-toolchain digest to 4be7066 by @renovate in #21667
Update sdk-internal to 0.2.0-main.883 by @bw-ghapp in #21686
chore(deps): move rand to KM Renovate ownership by @addisonbeck in #21719
Fix lockfile by @dani-garcia in #21763

🎨 Other

Add claude snap permissions rule by @quexten in #21514
[PM-39731] Hotfix: Revert "[Shared Unlock] [PM-34508] Default enable native messaging permission on browser (#19907) by @mzieniukbw in #21559

New Contributors

@999purple999 made their first contribution in #20867

Full Changelog: web-v2026.6.4...web-v2026.7.0

Original source

Overview

New action card guides you when your vault is empty

Better error messages when unlocking or syncing fails

Smoother autofill on more apps

Fixed unwanted prompt appearing during app use

Fixed autofill not working on certain apps

Improved account security

What's Changed

✨ Community Highlight

[PM-39461] bug: Fix QR scan reliability by using Y plane rowStride in analyzer by @koenyskout in #7097

[PM-39762] bug: Fix RTL divider padding by @helpingstar in #7115

Feature Development

[PM-37255] feat: Add fill-assist targeting rules data layer by @aj-rosado in #6991

[PM-37255] feat: Wire fill-assist manager into vault sync and app startup by @aj-rosado in #6992

PM-39758: feat: Improve sync failure dialog by @david-livefront in #7114

PM-39707: feat: Display unique unpaid subscription UI by @david-livefront in #7117

PM-40651: feat: Add feature flag for FedRAMP by @david-livefront in #7136

PM-39888: feat: ViewModel controls Environment Selector options by @david-livefront in #7135

PM-35191: feat: Add support for FedRAMP applinks by @david-livefront in #7137

PM-35112: feat: Add underlying FedRAMP environment by @david-livefront in #7138

🐛 Bug fixes

PM-39599: Bug: Must be unlocked to reset your password by @david-livefront in #7106

PM-39441: Bug: KeyConnector user should see SetPassword UI when elevated to Admin by @david-livefront in #7105

[PM-39807] fix: Gate fill-assist rules sync on user settings by @aj-rosado in #7123

PM-39765: bug: Improve error parsing for vault unlock by @david-livefront in #7124

PM-37177: bug: Update subscriptionStatusStateFlow for each getSubscription call by @david-livefront in #7125

[PM-39840] fix: Use dedicated OkHttpClient for fill-assist to prevent load-balancer prompt by @aj-rosado in #7131

[PM-39612] fix: resolve autofill container-hint redirect to autofillable child by @aj-rosado in #7146

⚙️ Maintenance

Chore: Simplify reset password APIs by @david-livefront in #7103

tech-debt: Trust user certificates in debug builds by @david-livefront in #7108

Crowdin Pull by @bw-ghapp[bot] in #7110

[PM-18403] tech-debt: Consolidate Authenticator minSDK version, increasing it to API 29 by @vvolkgang in #7104

[BRE-1952] Remove migrated workflows by @AmyLGalles in #7095

[VULN-649] ci: Remove deprecated scan workflow by @theMickster in #7091

Crowdin Pull by @bw-ghapp[bot] in #7143

chore: Update renovate.json file by @david-livefront in #7130

[QA-2081] Part 1 - Add testTags to Block Auto-fill settings row and blocked-URI field by @Corbet-BW in #7149

[PM-32685] Send cherry-pick slack message to QA by @mpbw2 in #7151

[PM-32685] Change slack user group in message by @mpbw2 in #7153

Chore: Account Summaries list in UI should be immutable by @david-livefront in #7147

📦 Dependency Updates

[deps]: Update gh minor by @renovate[bot] in #6973

Update SDK to 3.0.0-7585-87e9ad18 by @bw-ghapp[bot] in #7101

deps: Update to gradle v9.6.1 by @david-livefront in #7122

Update SDK to 3.0.0-7612-ce786c52 by @bw-ghapp[bot] in #7128

[deps]: Update kotlin by @renovate[bot] in #7086

[deps]: Update org.sonarqube to v7.3.1.8318 by @renovate[bot] in #7084

Update SDK to 3.0.0-7616-cbecfb7f by @bw-ghapp[bot] in #7129

Deps: Update Firbase dependencies by @david-livefront in #7132

Update SDK to 3.0.0-7673-101364a4 by @bw-ghapp[bot] in #7133

Update Google privileged browsers list by @github-actions[bot] in #7142

[deps]: Update fastlane to v2.236.1 by @renovate[bot] in #6972

[deps]: Update androidx.core:core-ktx to v1.19.0 by @renovate[bot] in #7085

🎨 Other

doc: Update MinSdk Docs by @david-livefront in #7118

PM-39821: feat: Vault empty state can display action cards by @david-livefront in #7126

New Contributors

@koenyskout made their first contribution in #7097

@helpingstar made their first contribution in #7115

Full Changelog: v2026.6.1-bwpm...v2026.7.0-bwpm

Builds Source: https://github.com/bitwarden/android/actions/runs/29108828120

Original source