Bitwarden Clients Updates & Release Notes

Overview

Hide Send from navigation for users subject to policy removing send

Bug fix for keyboard shortcuts

Various under-the-hood improvements and minor bug fixes

What's Changed

💙 Community Highlight

[PM-31854] fix: simplify switching unlock methods by @iHildy in #18826

[PM-38330] Fix per-request memory leak in bw serve (authStatusFor$) by @ggiesen in #20912

Feature Development

[Shared Unlock] [PM-35083] Shared Unlock for Web, Browser, Desktop by @quexten in #19698

[CL-1077] Update Menu Item styles by @lxiong-livefront in #19763

[Shared Unlock] [PM-34508] Default enable native messaging permission on browser by @quexten in #19907

[CL-999] Update tabs by @lxiong-livefront in #20010

[CL-963] Update breadcrumb styles by @lxiong-livefront in #20085

Add new SendApiServer that uses the SDK by @adudek-bw in #20170

[PM-23585] Migrate desktop settings dialog to CL by @Hinton in #20230

[PM-35224] Add route provider parameters support to featureFlaggedRoute by @Banrion in #20235

BEEEP/Auth/PM-35338 - Auto Submit on OTP Paste by @JaredSnider-Bitwarden in #20250

Desktop UI Cleanup milestone 3 & 4 by @Hinton in #20266

[PM-34157] Wire up SDK to NewPolicyService by @eliykat in #20377

[PM-31059] Implement SDK managed PIN unlock by @quexten in #20395

[CL-1042] Design system refresh: Milestone 3 by @vleague2 in #20425

[PM-35228] Add Premium Status Changed Push Notification by @sbrown-livefront in #20498

[Shared Unlock] [PM-35083] Add shared unlock typescript drivers and services by @quexten in #20589

[PM-36857] Add copy actions for bank account cipher type by @nick-livefront in #20605

[PM-27679] Remove flagged logic from clients/server and clients feature flag by @jengstrom-bw in #20609

[PM-34113] Add Passport to the desktop by @nick-livefront in #20617

[PM-34156] Add accepted-state organization sync by @eliykat in #20627

[PM-28192] Migrate Cipher Attachment Operations to use SDK instead of APIs by @gbubemismith in #20628

[PM-37295] Ignore upgrade key rotation logout based on feature flag by @Thomas-Avery in #20637

[PM-32016] - hide at-risk callout behind feature flag by @jaasen-livefront in #20639

[PM-31054] Add V2UpgradeToken handling to sync by @Thomas-Avery in #20641

SSH Agent v2: Sign Request by @neuronull in #20657

Remove feature flag check from password generation by @adudek-bw in #20671

[PM-2588] resolved sends root url conditionally by @bmbitwarden in #20684

[Shared Unlock] [PM-35083] Implement biometrics over sdk IPC by @quexten in #20689

[PM-37251] Add getStatus API method for public invite link status endpoint by @r-tome in #20695

[PM-35656] Update Copy functionality for new item types by @nick-livefront in #20708

[PM-36967] Update rotate_user_keys to use UpgradeTokenAction by @Thomas-Avery in #20711

[PM-37229] Add bwi-passport icon for passport cipher type by @nick-livefront in #20712

[PM-36229] Route bulk-collections, move, and assigned-cipher ops to SDK by @gbubemismith in #20718

[CL-1204] bulk actions bar by @BryanCunningham in #20735

[PM-36563] Send access event logs by @harr1424 in #20740

[PM-37797] Add API method to check if email is valid for a given organization invite link by @r-tome in #20749

SSH Agent v2: testing coverage for unsupported key types by @neuronull in #20789

[CL-1214] remove tabs min height by @BryanCunningham in #20796

[PM-30848] Key connector for user key rotation by @mzieniukbw in #20805

Add feature flag for SSH ecdsa by @neuronull in #20813

[PM-33753] Remove unlock-via-sdk-flag by @quexten in #20832

[PM-37875] Split out crypto verification UI by @quexten in #20856

[CL-1172] Improved non-color a11y for selected vs unselected nav items by @vleague2 in #20865

[CL-1201] update row selected state and hover state by @BryanCunningham in #20869

update contrast variant text color by @BryanCunningham in #20878

SSH Agent v2: agent forwarding by @neuronull in #20879

chore(platform): add FedRampGovRegion to client feature flag enum by @addisonbeck in #20880

[CL-1213] allow tab label to be anchor for spotlight by @BryanCunningham in #20882

[PM-37175] Preserve individual vault export folders when importing to My Items by @mcamirault in #20883

[PM-37800] Add VaultBatchBarService to libs/vault by @nick-livefront in #20885

[PM-38165] Limit Send Email character length by @harr1424 in #20895

PM-32577 implemeneted send policy check of nav for desktop and browser by @bmbitwarden in #20934

[PM-31625] Removes feature flag pm-30521-autofill-button-view-login-screen by @jengstrom-bw in #20968

SSH Agent support of ECDSA key type by @neuronull in #21028

[PM-18400] Update multi-select component to add title attribute for better accessibility by @JaredScar in #21031

Gate import of SSH key ECDSA type on FF by @neuronull in #21059

[PM-38163] Add getPoliciesByInviteLinkCode to PolicyApiService by @r-tome in #21075

[PM-38012] Initialize feature flag overrides state to empty object by @quexten in #21166

🐛 Bug fixes

[PM-35120] - Update user delete flows with org ownership by @jaasen-livefront in #20462

[PM-32445] Extension Scrollbar Fix by @rr-bw in #20478

[PM-36880] Filter Linked field type for Bank Account cipher type by @nick-livefront in #20564

[PM-36947] Restrict bank account PIN field to numeric characters only by @nick-livefront in #20598

PM-37554 resolved double cancel issue by @bmbitwarden in #20683

[CL-1046] Add no-bit-dialog-wrapper lint rule by @willmartian in #20698

Fix errors from UUID and yargs packages in the native messaging test runner by @differsthecat in #20706

[CL-1203] Place tab overflow More button next to last visible tab by @willmartian in #20709

[PM-36642] Fixing LastPass direct import for non-SSO accounts by @itsadrago in #20716

Disable Native popover use from Angular 21 by @nick-livefront in #20730

[PM-8123] Clearing import target selector as necessary by @itsadrago in #20739

[PM-37782] User with view permission cannot favorite or add an item to a folder by @jengstrom-bw in #20764

[PM-37798] Fix bank account section label to show "Bank account details" by @nick-livefront in #20779

[PM-37776] - fix empty vault on pin and touch id unlock by @jaasen-livefront in #20793

[PM-37825] Fix partial date validation blocking save and improve error count accuracy by @nick-livefront in #20799

[PM-24173] Fix credential generator constraint bypass by @harr1424 in #20810

[PM-37970] Fix vault list icons for Login and Identity with new item types flag by @nick-livefront in #20818

[PM-37479] Assign to collection dialog displays dummy string 0"> by @jengstrom-bw in #20819

PM-37696 resolved broswer popup when trying to close tab by @bmbitwarden in #20861

[PM-23564] Item view shows removed attachment/does not show added attachment temporarily by @jengstrom-bw in #20884

SSH Agent fix calling unregistered IPC handlers upon account switch by @neuronull in #20914

[PM-37948] Add back missing desktop shortcuts by @BryanCunningham in #20942

Fix: SSH Agent v1 no agent forwarding warning by @neuronull in #20944

[PM-38400] Fix avoid ambiguous character bug by @adudek-bw in #20953

PM-38423 - Fix unsavedSendEditsGuard blocking logout by @JaredSnider-Bitwarden in #20967

[PM-38405] Fix SDK ref leaking out of scope and add eslint rule by @quexten in #20999

[PM-35573] - Refocus login input on Desktop restore by @jaasen-livefront in #21012

[PM-38421] Remove duplicate copy actions by @nick-livefront in #21023

[PM-38544] Fix flatpak auto-start by @quexten in #21039

[PM-38547] Fix missing Flatpak desktop icon by @quexten in #21040

[PM-38026] Fix desktop client saturates gpu usage at 99% after start when using fallapart effect in KDE/KWIN by @quexten in #21043

[PM-38529] Fix virtual scroll after Angular 21 update by @vleague2 in #21055

[PM-37913] - fix cloning archived cipher by @jaasen-livefront in #21058

[PM-38357] Surface more descriptive error messages from server on Send edit failure by @mcamirault in #21067

[PM-38571] Fix shareReplay memory leaks by @nick-livefront in #21087

[CL-1217] Fix menu item role after menu item style changes by @vleague2 in #21091

[PM-38759] Fix desktop not launching by @quexten in #21140

[PM-38621] Fix desktop settings dialog saving stale form values by @nick-livefront in #21148

[CL-1208] Remove extra header space in desktop by @vleague2 in #21157

[PM-37913] - set archivedDate when cloning ciphers by @jaasen-livefront in #21160

[PM-38831] fix: defective SyncPolicy push notification parsing by @eliykat in #21189

[CL-1222] m3 fast follows by @BryanCunningham in #21202

fix(nx): clear build dependsOn workspace default by @addisonbeck in #21203

[PM-38867] Fix: add error toast if no owner for a new item by @eliykat in #21222

[PM-38012] Fix local override migration by @quexten in #21223

fix(extension-scrollbar): Auth [PM-32445] Extension Scrollbar Fix (#2… by @rr-bw in #21353

[SM-1993][CL-1227] Fix textarea height and fix SM button spacing by @vleague2 in #21417

[SM-1993][CL-1227] Fix textarea height and fix SM button spacing (#21417) by @vleague2 in #21418

[PM-39392] Use readonly styles for fields intended to be readonly by @vleague2 in #21425

[PM-39392] Use readonly styles for fields intended to be readonly (#21425) by @vleague2 in #21428

PM-39449 resolved root url issues by @itsadrago in #21481

⚙️ Maintenance

[CL-965] update spinner component by @iivins-livefront in #19017

[CL-1129] Enable @angular-eslint/template/elements-content lint rule by @willmartian in #19505

[PM-36363] Refactors org user view models and consumers to be ts-strict compliant by @BTreston in #20559

[PM-31084] - migrate badge to chip-action in vault components by @jaasen-livefront in #20606

[PM-6796] implemented file reorg by @bmbitwarden in #20648

PM-36952 - Improve code review workflow with added triggers by @theMickster in #20702

[PM-377730] Refactor unlock service & add decrypted user key method by @quexten in #20719

Desktop Native: Clean up SSH Agent v1 deps by @neuronull in #20733

fixed perms in cherry-pick workflow by @gitclonebrian in #20758

[BRE-1938] Simplify and optimize Retrieve Current Desktop Rollout workflow by @vgrassia in #20778

[bre-1942] improve native module cache busting logic by @aj-bw in #20791

Temporarily increase shared ownership of desktop SSH Agent owned files by @neuronull in #20806

refactor(platform): migrate Region enum to const object per ADR-0025 by @addisonbeck in #20887

Remove cargo-deny check from the pre-commit hooks by @neuronull in #21005

[BEEEP] [PM-38497] Dev-ex: Add attach VSCode debugger to desktop, web configs by @quexten in #21016

[PM-36510] Remove dead "SDK not available" guards from SDK-backed services by @gbubemismith in #21173

[BRE-2013] Add repository_dispatch trigger to sdk-update workflow by @vgrassia in #21187

[BRE-2017] Pin snapcraft to 8.x/stable to fix Linux builds by @brandonbiete in #21217

📦 Dependency Updates

[deps] Platform: Update Rust crate serde_with to v3.20.0 by @renovate in #18712

[CL-954] Upgrade to Angular 21 by @willmartian in #19725

[PM-36068] Update NAPI versions by @iinuwa in #20460

Update sdk-internal to 0.2.0-main.765 by @bw-ghapp in #20744

Update sdk-internal to 0.2.0-main.774 by @bw-ghapp in #20770

[PM-37729] SDK Bump by @nick-livefront in #20776

[bre-1942] fix package lock issue by @aj-bw in #20785

Update sdk-internal to 0.2.0-main.779 by @bw-ghapp in #20798

Update sdk-internal to 0.2.0-main.782 by @bw-ghapp in #20807

[deps] Architecture: Update lint-staged to v17 by @renovate in #20843

Update sdk-internal to 0.2.0-main.798 by @bw-ghapp in #20937

Add cargo deny ignore RUSTSEC-2026-0153 by @neuronull in #21003

[deps] KM: Pin dependencies by @renovate in #21111

[deps] Autofill: Update tldts to v7.4.2 by @renovate in #21112

[deps] Desktop Native: Update Rust crate serial_test to v3.5.0 by @renovate in #21113

Bump SDK version for ECDSA key support by @neuronull in #21176

🔧 Other

Bump client version(s) by @github-actions in #20690

Autosync Crowdin Translations for desktop by @bw-ghapp in #20691

[BEEEP] [PM-38012] Add local feature flag overrides by @quexten in #20833

Improve claude.md by @Hinton in #20941

[BEEEP] [PM-38497] Dev-ex: Add debugger attach rust desktop-native support by @quexten in #21036

Expand .claude/rules to cover i18n, Tailwind, testing, and Angular DI by @Hinton in #21051

Autosync Crowdin Translations for desktop by @bw-ghapp in #21063

Add flatpak manifest claude md by @quexten in #21078

Autosync Crowdin Translations for desktop by @bw-ghapp in #21109

[PM-38719] Add env var to override access token location by @quexten in #21125

Remove FF caching for dev env by default by @coltonhurst in #21131

Change configRetrievalIntervalMs by @coltonhurst in #21143

Bump client version(s) by @github-actions in #21145

Autosync Crowdin Translations for desktop by @bw-ghapp in #21194

Autosync Crowdin Translations for desktop by @bw-ghapp in #21219

Auth - Add claude.md for libs/auth by @JaredSnider-Bitwarden in #21235

Autosync Crowdin Translations for desktop by @bw-ghapp in #21260

Bump client version(s) by @github-actions in #21271

Bumped client version(s) (#21271) by @addisonbeck in #21274

Full Changelog: desktop-v2026.5.0...desktop-v2026.6.0

Original source

What's Changed

💙 Community Highlight

[PM-38330] Fix per-request memory leak in bw serve (authStatusFor$) by @ggiesen in #20912

Feature Development

Add new SendApiServer that uses the SDK by @adudek-bw in #20170

[PM-34157] Wire up SDK to NewPolicyService by @eliykat in #20377

[PM-31059] Implement SDK managed PIN unlock by @quexten in #20395

[PM-35228] Add Premium Status Changed Push Notification by @sbrown-livefront in #20498

[Shared Unlock] [PM-35083] Add shared unlock typescript drivers and services by @quexten in #20589

[PM-27679] Remove flagged logic from clients/server and clients feature flag by @jengstrom-bw in #20609

[PM-34114] Add Passport item type to the CLI by @nick-livefront in #20621

[PM-34156] Add accepted-state organization sync by @eliykat in #20627

[PM-28192] Migrate Cipher Attachment Operations to use SDK instead of APIs by @gbubemismith in #20628

[PM-37295] Ignore upgrade key rotation logout based on feature flag by @Thomas-Avery in #20637

[PM-31054] Add V2UpgradeToken handling to sync by @Thomas-Avery in #20641

Remove feature flag check from password generation by @adudek-bw in #20671

[PM-2588] resolved sends root url conditionally by @bmbitwarden in #20684

[Shared Unlock] [PM-35083] Implement biometrics over sdk IPC by @quexten in #20689

[PM-37251] Add getStatus API method for public invite link status endpoint by @r-tome in #20695

[PM-36967] Update rotate_user_keys to use UpgradeTokenAction by @Thomas-Avery in #20711

[PM-36229] Route bulk-collections, move, and assigned-cipher ops to SDK by @gbubemismith in #20718

[PM-36563] Send access event logs by @harr1424 in #20740

[PM-37797] Add API method to check if email is valid for a given organization invite link by @r-tome in #20749

Add feature flag for SSH ecdsa by @neuronull in #20813

[PM-33753] Remove unlock-via-sdk-flag by @quexten in #20832

chore(platform): add FedRampGovRegion to client feature flag enum by @addisonbeck in #20880

[PM-37175] Preserve individual vault export folders when importing to My Items by @mcamirault in #20883

[PM-31625] Removes feature flag pm-30521-autofill-button-view-login-screen by @jengstrom-bw in #20968

Gate import of SSH key ECDSA type on FF by @neuronull in #21059

[PM-38163] Add getPoliciesByInviteLinkCode to PolicyApiService by @r-tome in #21075

[PM-38012] Initialize feature flag overrides state to empty object by @quexten in #21166

🐛 Bug fixes

[PM-37782] User with view permission cannot favorite or add an item to a folder by @jengstrom-bw in #20764

[PM-37462] bw get attachment writes decrypted filename verbatim by @jengstrom-bw in #20790

[PM-37776] - fix empty vault on pin and touch id unlock by @jaasen-livefront in #20793

[PM-24173] Fix credential generator constraint bypass by @harr1424 in #20810

fix(cli): harden bw serve origin-protection against DNS rebinding [PM-36600] by @addisonbeck in #20881

[PM-38400] Fix avoid ambiguous character bug by @adudek-bw in #20953

[PM-38405] Fix SDK ref leaking out of scope and add eslint rule by @quexten in #20999

[PM-37913] - fix cloning archived cipher by @jaasen-livefront in #21058

[PM-38571] Fix shareReplay memory leaks by @nick-livefront in #21087

[PM-37913] - set archivedDate when cloning ciphers by @jaasen-livefront in #21160

[PM-38831] fix: defective SyncPolicy push notification parsing by @eliykat in #21189

fix(nx): clear build dependsOn workspace default by @addisonbeck in #21203

[PM-38012] Fix local override migration by @quexten in #21223

PM-39449 resolved root url issues by @itsadrago in #21481

⚙️ Maintenance

[PM-36363] Refactors org user view models and consumers to be ts-strict compliant by @BTreston in #20559

[PM-6796] implemented file reorg by @bmbitwarden in #20648

PM-36952 - Improve code review workflow with added triggers by @theMickster in #20702

[PM-377730] Refactor unlock service & add decrypted user key method by @quexten in #20719

fixed perms in cherry-pick workflow by @gitclonebrian in #20758

[BRE-1938] Update Build Web workflow to run on published Web releases by @vgrassia in #20761

[BRE-1938] Simplify and optimize Retrieve Current Desktop Rollout workflow by @vgrassia in #20778

refactor(platform): migrate Region enum to const object per ADR-0025 by @addisonbeck in #20887

[PM-36510] Remove dead "SDK not available" guards from SDK-backed services by @gbubemismith in #21173

[BRE-2013] Add repository_dispatch trigger to sdk-update workflow by @vgrassia in #21187

📦 Dependency Updates

[deps] Vault: Update https-proxy-agent to v9 by @renovate in #20124

[deps] Vault: Update @koa/router to v15.5.0 by @renovate in #20580

Update sdk-internal to 0.2.0-main.765 by @bw-ghapp in #20744

Update sdk-internal to 0.2.0-main.774 by @bw-ghapp in #20770

[PM-37729] SDK Bump by @nick-livefront in #20776

[bre-1942] fix package lock issue by @aj-bw in #20785

Update sdk-internal to 0.2.0-main.779 by @bw-ghapp in #20798

Update sdk-internal to 0.2.0-main.782 by @bw-ghapp in #20807

[deps] Architecture: Update lint-staged to v17 by @renovate in #20843

Update sdk-internal to 0.2.0-main.798 by @bw-ghapp in #20937

[deps] Autofill: Update tldts to v7.4.2 by @renovate in #21112

Bump SDK version for ECDSA key support by @neuronull in #21176

🔧 Other

Bump client version(s) by @github-actions in #20690

[BEEEP] [PM-38012] Add local feature flag overrides by @quexten in #20833

Improve claude.md by @Hinton in #20941

[PM-38192] Collection Check for CLI Move by @nick-livefront in #21010

Expand .claude/rules to cover i18n, Tailwind, testing, and Angular DI by @Hinton in #21051

Remove FF caching for dev env by default by @coltonhurst in #21131

Change configRetrievalIntervalMs by @coltonhurst in #21143

Auth - Add claude.md for libs/auth by @JaredSnider-Bitwarden in #21235

Bump client version(s) by @github-actions in #21271

Bumped client version(s) (#21271) by @addisonbeck in #21274

Full Changelog: cli-v2026.5.0...cli-v2026.6.0

Original source

Overview

Hide Send from navigation for users subject to policy removing send

SSO redirect page will now auto-close on some browsers

Corrected login page UI to avoid scroll bar displaying by default

Users with pending confirmation are approved when admin logs in

Various under-the-hood improvements and minor bug fixes

What's Changed

💙 Community Highlight

[PM-26954] Disable 'sync vault now' button while busy by @henrebotha in #16868

[PM-31854] fix: simplify switching unlock methods by @iHildy in #18826

[PM-33781] fix(fido2): fall back to browser for hardware/CTAP1 keys not in vault by @nancysangani in #19606

Remove unused strings by @mKoonrad in #20608

[PM-38330] Fix per-request memory leak in bw serve (authStatusFor$) by @ggiesen in #20912

Feature Development

[Shared Unlock] [PM-35083] Shared Unlock for Web, Browser, Desktop by @quexten in #19698

[CL-1077] Update Menu Item styles by @lxiong-livefront in #19763

[Shared Unlock] [PM-34508] Default enable native messaging permission on browser by @quexten in #19907

[CL-999] Update tabs by @lxiong-livefront in #20010

[CL-963] Update breadcrumb styles by @lxiong-livefront in #20085

Add new SendApiServer that uses the SDK by @adudek-bw in #20170

[PM-33933] Update autofill dialog for 'never' match setting by @nikwithak in #20189

[PM-35224] Add route provider parameters support to featureFlaggedRoute by @Banrion in #20235

BEEEP/Auth/PM-35338 - Auto Submit on OTP Paste by @JaredSnider-Bitwarden in #20250

[PM-34157] Wire up SDK to NewPolicyService by @eliykat in #20377

[PM-31059] Implement SDK managed PIN unlock by @quexten in #20395

[PM-34497] Handle Same-Origin iframes in queryDeepSelector by @bensbits91 in #20401

[CL-1042] Design system refresh: Milestone 3 by @vleague2 in #20425

[PM-35228] Add Premium Status Changed Push Notification by @sbrown-livefront in #20498

[Shared Unlock] [PM-35083] Add shared unlock typescript drivers and services by @quexten in #20589

[PM-36857] Add copy actions for bank account cipher type by @nick-livefront in #20605

[PM-27679] Remove flagged logic from clients/server and clients feature flag by @jengstrom-bw in #20609

[PM-34156] Add accepted-state organization sync by @eliykat in #20627

[PM-28192] Migrate Cipher Attachment Operations to use SDK instead of APIs by @gbubemismith in #20628

[PM-37295] Ignore upgrade key rotation logout based on feature flag by @Thomas-Avery in #20637

[PM-32016] - hide at-risk callout behind feature flag by @jaasen-livefront in #20639

[PM-31054] Add V2UpgradeToken handling to sync by @Thomas-Avery in #20641

[PM-34112] Add Passport copy actions to browser extension by @nick-livefront in #20655

Remove feature flag check from password generation by @adudek-bw in #20671

[PM-2588] resolved sends root url conditionally by @bmbitwarden in #20684

[Shared Unlock] [PM-35083] Implement biometrics over sdk IPC by @quexten in #20689

[PM-37251] Add getStatus API method for public invite link status endpoint by @r-tome in #20695

[PM-35656] Update Copy functionality for new item types by @nick-livefront in #20708

[PM-36967] Update rotate_user_keys to use UpgradeTokenAction by @Thomas-Avery in #20711

[PM-37229] Add bwi-passport icon for passport cipher type by @nick-livefront in #20712

[PM-36229] Route bulk-collections, move, and assigned-cipher ops to SDK by @gbubemismith in #20718

[CL-1204] bulk actions bar by @BryanCunningham in #20735

[PM-36563] Send access event logs by @harr1424 in #20740

[PM-37797] Add API method to check if email is valid for a given organization invite link by @r-tome in #20749

[PM-37779] - Add notification bar confirmation mode for inline menu save flow by @jaasen-livefront in #20752

[CL-1214] remove tabs min height by @BryanCunningham in #20796

[PM-30848] Key connector for user key rotation by @mzieniukbw in #20805

Add feature flag for SSH ecdsa by @neuronull in #20813

[PM-33753] Remove unlock-via-sdk-flag by @quexten in #20832

[PM-37875] Split out crypto verification UI by @quexten in #20856

[CL-1172] Improved non-color a11y for selected vs unselected nav items by @vleague2 in #20865

[CL-1201] update row selected state and hover state by @BryanCunningham in #20869

update contrast variant text color by @BryanCunningham in #20878

chore(platform): add FedRampGovRegion to client feature flag enum by @addisonbeck in #20880

[CL-1213] allow tab label to be anchor for spotlight by @BryanCunningham in #20882

[PM-37175] Preserve individual vault export folders when importing to My Items by @mcamirault in #20883

[PM-37800] Add VaultBatchBarService to libs/vault by @nick-livefront in #20885

[PM-38243] performance metrics by @audreyality in #20888

[PM-37780] - Add "Save and fill" button to inline menu cipher creation by @jaasen-livefront in #20892

[PM-38165] Limit Send Email character length by @harr1424 in #20895

PM-32577 implemeneted send policy check of nav for desktop and browser by @bmbitwarden in #20934

[PM-31625] Removes feature flag pm-30521-autofill-button-view-login-screen by @jengstrom-bw in #20968

[PM-38458] Let the browser client assemble the targeting rules manifest.json URI by @jprusik in #21001

[PM-36016] Handle cross-origin iframes in queryDeepSelector by @bensbits91 in #21024

[PM-18400] Update multi-select component to add title attribute for better accessibility by @JaredScar in #21031

[PM-32245] Update toggle for targeting rules in Autofill Settings view with designed experience by @dan-livefront in #21049

Gate import of SSH key ECDSA type on FF by @neuronull in #21059

[PM-38163] Add getPoliciesByInviteLinkCode to PolicyApiService by @r-tome in #21075

[PM-38012] Initialize feature flag overrides state to empty object by @quexten in #21166

🐛 Bug fixes

[PM-32445] Extension Scrollbar Fix by @rr-bw in #20478

[PM-36880] Filter Linked field type for Bank Account cipher type by @nick-livefront in #20564

[PM-36947] Restrict bank account PIN field to numeric characters only by @nick-livefront in #20598

PM-37554 resolved double cancel issue by @bmbitwarden in #20683

[CL-1046] Add no-bit-dialog-wrapper lint rule by @willmartian in #20698

[CL-1203] Place tab overflow More button next to last visible tab by @willmartian in #20709

[PM-36642] Fixing LastPass direct import for non-SSO accounts by @itsadrago in #20716

Disable Native popover use from Angular 21 by @nick-livefront in #20730

[PM-37759] Unable to use passkey that is stored in my vault to log in by @jengstrom-bw in #20738

[PM-8123] Clearing import target selector as necessary by @itsadrago in #20739

[CL-1207] Fix missing provideZoneChangeDetection() in bit-browser bootstrap by @willmartian in #20750

[PM-37782] User with view permission cannot favorite or add an item to a folder by @jengstrom-bw in #20764

[PM-37798] Fix bank account section label to show "Bank account details" by @nick-livefront in #20779

[PM-37776] - fix empty vault on pin and touch id unlock by @jaasen-livefront in #20793

[PM-37825] Fix partial date validation blocking save and improve error count accuracy by @nick-livefront in #20799

[PM-24173] Fix credential generator constraint bypass by @harr1424 in #20810

[PM-36277]Save login notification not appearing on Facebook by @dan-livefront in #20814

[PM-37970] Fix vault list icons for Login and Identity with new item types flag by @nick-livefront in #20818

[PM-37479] Assign to collection dialog displays dummy string 0"> by @jengstrom-bw in #20819

[PM-37932] Recover browser IPC after process reload by @coroiu in #20848

PM-37696 resolved broswer popup when trying to close tab by @bmbitwarden in #20861

[PM-36823] ensure browser uses Inter font by @BryanCunningham in #20864

[PM-35196] Mutation memory management by @blackwood in #20871

[BRE-1949] Removing duplicate messages keys by @pixman20 in #20916

Improve consistency of popout closure by @trmartin4 in #20924

[PM-38400] Fix avoid ambiguous character bug by @adudek-bw in #20953

[PM-38185] Safari numeric values translations by @nick-livefront in #20964

[PM-38405] Fix SDK ref leaking out of scope and add eslint rule by @quexten in #20999

[PM-35573] - Refocus login input on Desktop restore by @jaasen-livefront in #21012

[PM-37913] - fix cloning archived cipher by @jaasen-livefront in #21058

[PM-38357] Surface more descriptive error messages from server on Send edit failure by @mcamirault in #21067

Adjust size variant for spinner by @nick-livefront in #21080

[PM-38571] Fix shareReplay memory leaks by @nick-livefront in #21087

[CL-1217] Fix menu item role after menu item style changes by @vleague2 in #21091

[PM-38617] Fix Targeting Rules not respecting Fill Assist setting changes in some cases by @jprusik in #21094

[PM-38744] Bugfix - Do not trigger Targeting Rules sync on scheduled vault syncs by @jprusik in #21132

[PM-37913] - set archivedDate when cloning ciphers by @jaasen-livefront in #21160

[PM-38856] Match targeting rules against frame over tab URI by @jprusik in #21178

[PM-38831] fix: defective SyncPolicy push notification parsing by @eliykat in #21189

[CL-1222] m3 fast follows by @BryanCunningham in #21202

fix(nx): clear build dependsOn workspace default by @addisonbeck in #21203

[PM-38867] Fix: add error toast if no owner for a new item by @eliykat in #21222

[PM-38012] Fix local override migration by @quexten in #21223

[PM-38992] Fix Targeting Rules autofilling new password inputs with current password values by @jprusik in #21238

[PM-39000] Fix targeted new password field not filling upon click on generate password inline menu by @jprusik in #21239

[PM-39009] Do not do heuristic filtering on targeted fields by @jprusik in #21245

[PM-39200] - fix notification bar behavior with save and fill by @jaasen-livefront in #21351

fix(extension-scrollbar): Auth [PM-32445] Extension Scrollbar Fix (#2… by @rr-bw in #21353

[PM-39200] - fix notification bar behavior with save and fill (#21351) by @jaasen-livefront in #21369

[SM-1993][CL-1227] Fix textarea height and fix SM button spacing by @vleague2 in #21417

[SM-1993][CL-1227] Fix textarea height and fix SM button spacing (#21417) by @vleague2 in #21418

[PM-39392] Use readonly styles for fields intended to be readonly by @vleague2 in #21425

[PM-39392] Use readonly styles for fields intended to be readonly (#21425) by @vleague2 in #21428

PM-39449 resolved root url issues by @itsadrago in #21481

⚙️ Maintenance

[PM-31832] Update *ngIf/*ngFor to @if/@for in vault browser components by @jengstrom-bw in #18818

[CL-965] update spinner component by @iivins-livefront in #19017

[CL-1129] Enable @angular-eslint/template/elements-content lint rule by @willmartian in #19505

[PM-36363] Refactors org user view models and consumers to be ts-strict compliant by @BTreston in #20559

[PM-31084] - migrate badge to chip-action in vault components by @jaasen-livefront in #20606

[PM-6796] implemented file reorg by @bmbitwarden in #20648

PM-36952 - Improve code review workflow with added triggers by @theMickster in #20702

[PM-377730] Refactor unlock service & add decrypted user key method by @quexten in #20719

[PM-33906] Use PureCrypto::new_guid for FIDO2 credential ID by @dereknance in #20736

fixed perms in cherry-pick workflow by @gitclonebrian in #20758

refactor(platform): migrate Region enum to const object per ADR-0025 by @addisonbeck in #20887

[PM-36510] Remove dead "SDK not available" guards from SDK-backed services by @gbubemismith in #21173

[BRE-2013] Add repository_dispatch trigger to sdk-update workflow by @vgrassia in #21187

📦 Dependency Updates

[CL-954] Upgrade to Angular 21 by @willmartian in #19725

Update sdk-internal to 0.2.0-main.765 by @bw-ghapp in #20744

Update sdk-internal to 0.2.0-main.774 by @bw-ghapp in #20770

[PM-37729] SDK Bump by @nick-livefront in #20776

[bre-1942] fix package lock issue by @aj-bw in #20785

Update sdk-internal to 0.2.0-main.779 by @bw-ghapp in #20798

Update sdk-internal to 0.2.0-main.782 by @bw-ghapp in #20807

[deps] Autofill: Update @lit-labs/signals to v0.3.0 by @renovate in #20841

[deps] Architecture: Update lint-staged to v17 by @renovate in #20843

Update sdk-internal to 0.2.0-main.798 by @bw-ghapp in #20937

[deps] Autofill: Update tldts to v7.4.2 by @renovate in #21112

Bump SDK version for ECDSA key support by @neuronull in #21176

🔧 Other

Autosync Crowdin Translations for browser by @bw-ghapp in #20692

[BEEEP] [PM-38012] Add local feature flag overrides by @quexten in #20833

[PM-36085] - add autofillVerb and autofillNoun by @jaasen-livefront in #20904

Improve claude.md by @Hinton in #20941

Bump client version(s) by @github-actions in #20950

Expand .claude/rules to cover i18n, Tailwind, testing, and Angular DI by @Hinton in #21051

[PM-37768] VULN - webauthn honor permissions policy by @bensbits91 in #21054

Autosync Crowdin Translations for browser by @bw-ghapp in #21064

Autosync Crowdin Translations for browser by @bw-ghapp in #21110

Remove FF caching for dev env by default by @coltonhurst in #21131

Change configRetrievalIntervalMs by @coltonhurst in #21143

Autosync Crowdin Translations for browser by @bw-ghapp in #21192

Autosync Crowdin Translations for browser by @bw-ghapp in #21220

Auth - Add claude.md for libs/auth by @JaredSnider-Bitwarden in #21235

Autosync Crowdin Translations for browser by @bw-ghapp in #21261

Bump client version(s) by @github-actions in #21271

Bumped client version(s) (#21271) by @addisonbeck in #21274

Full Changelog: browser-v2026.5.1...browser-v2026.6.0

Original source

What's Changed

💙 Community Highlight

• [PM-31854] fix: simplify switching unlock methods by @iHildy in #18826
• [PM-38330] Fix per-request memory leak in bw serve (authStatusFor$) by @ggiesen in #20912

Feature Development

• [Shared Unlock] [PM-35083] Shared Unlock for Web, Browser, Desktop by @quexten in #19698
• [CL-1077] Update Menu Item styles by @lxiong-livefront in #19763
• Add new SendApiServer that uses the SDK by @adudek-bw in #20170
• [PM-34615] - add ability to toggle interstitial prompts by @jaasen-livefront in #20293
• [PM-33407] Add organizationusernotificationpolicy component by @jengstrom-bw in #20362
• [PM-31059] Implement SDK managed PIN unlock by @quexten in #20395
• [CL-1042] Design system refresh: Milestone 3 by @vleague2 in #20425
• [Shared Unlock] [PM-35083] Add shared unlock typescript drivers and services by @quexten in #20589
• [PM-30365] Account recovery salt fallback by @ike-kottlowski in #20603
• [PM-28192] Migrate Cipher Attachment Operations to use SDK instead of APIs by @gbubemismith in #20628
• [PM-32016] - hide at-risk callout behind feature flag by @jaasen-livefront in #20639
• [PM-31054] Add V2UpgradeToken handling to sync by @Thomas-Avery in #20641
• [PM-35133] Update empty state copy in Access Intelligence critical apps widget by @lastbestdev in #20675
• [PM-2588] resolved sends root url conditionally by @bmbitwarden in #20684
• [PM-37875] Split out crypto verification UI by @quexten in #20856
• [PM-37173] - Add churn-offer dialog to organization cancel flow by @jaasen-livefront in #20866
• [PM-36406] Edit member dialog by @BTreston in #20868
• chore(platform): add FedRampGovRegion to client feature flag enum by @addisonbeck in #20880
• [PM-37800] Add VaultBatchBarService to libs/vault by @nick-livefront in #20885
• [PM-37780] - Add "Save and fill" button to inline menu cipher creation by @jaasen-livefront in #20892
• [PM-38165] Limit Send Email character length by @harr1424 in #20895
• [PM-30146] Support TDE user key rotation by @eligrubb in #20938
• [PM-37977] Implement SimpleTogglePolicyComponent by @JaredScar in #20947
• [PM-37806] Add batch action bar to individual vault by @nick-livefront in #20954
• [CL-1200] remove visible label from table header checkboxes by @BryanCunningham in #20961
• [PM-31625] Removes feature flag pm-30521-autofill-button-view-login-screen by @jengstrom-bw in #20968
• [PM-18400] Update multi-select component to add title attribute for better accessibility by @JaredScar in #21031
• Gate import of SSH key ECDSA type on FF by @neuronull in #21059
• [PM-38163] Add getPoliciesByInviteLinkCode to PolicyApiService by @r-tome in #21075
• BRE-1965 feat(web): add usqa2 environment build and artifact by @fntyler in #21088
• [PM-37228] feat: Add price increase callout to organization subscription page by @amorask-bitwarden in #21153
• [PM-38012] Initialize feature flag overrides state to empty object by @quexten in #21166
• Revert "Revert "[PM-36835] implement logging in the weak-passwords component"" by @voommen-livefront in #21344
• [PM-36835] implement logging in the weak-passwords report by @voommen-livefront in #21346

🐛 Bug fixes

• [PM-35323] Fix Risk Over Time chart X-axis when All time has a narrow data span by @AlexRubik in #20374
• [sm-1928] Undecryptable Access Tokens by @cd-bitwarden in #20423
• [PM-32445] Extension Scrollbar Fix by @rr-bw in #20478
• [PM-36534] - fixes to coachmarks by @jaasen-livefront in #20533
• [PM-8123] Clearing import target selector as necessary by @itsadrago in #20739
• [PM-37798] Fix bank account section label to show "Bank account details" by @nick-livefront in #20779
• [PM-37610] - immediately clear onboarding tasks after completing them by @jaasen-livefront in #20921
• [PM-38400] Fix avoid ambiguous character bug by @adudek-bw in #20953
• PM-38423 - Fix unsavedSendEditsGuard blocking logout by @JaredSnider-Bitwarden in #20967
• [PM-38405] Fix SDK ref leaking out of scope and add eslint rule by @quexten in #20999
• [PM-35573] - Refocus login input on Desktop restore by @jaasen-livefront in #21012
• [PM-38522] Fix styling of new admin welcome dialog text by @Banrion in #21025
• [PM-32089] Sync after collection deletion by @nick-livefront in #21029
• [PM-38529] Fix virtual scroll after Angular 21 update by @vleague2 in #21055
• [PM-33813] Wrap danger zone buttons in a conditional to prevent rendering by @JaredScar in #21057
• [PM-37913] - fix cloning archived cipher by @jaasen-livefront in #21058
• [PM-38357] Surface more descriptive error messages from server on Send edit failure by @mcamirault in #21067
• [PM-38571] Fix shareReplay memory leaks by @nick-livefront in #21087
• [CL-1217] Fix localization string after menu style updates by @vleague2 in #21089
• [CL-1217] Fix menu item role after menu item style changes by @vleague2 in #21091
• [PM-38530] Fix marking critical applications in Access Intelligence reports stored as files by @lastbestdev in #21095
• [PM-38182] Fix Trend Chart not appearing in Access Intelligence V2 path by @Banrion in #21152
• [PM-38274] Fix help text in At-Risk drawers not appearing in Access Intelligence V2 path by @Banrion in #21155
• [PM-37913] - set archivedDate when cloning ciphers by @jaasen-livefront in #21160
• [PM-38833] - properly set billing cycle in offer/success. by @jaasen-livefront in #21179
• [PM-38274] Fix help text size in At-Risk drawer views in Access Intelligence v2 by @Banrion in #21183
• [PM-38831] fix: defective SyncPolicy push notification parsing by @eliykat in #21189
• [CL-1222] m3 fast follows by @BryanCunningham in #21202
• fix(nx): clear build dependsOn workspace default by @addisonbeck in #21203
• [PM-38891] fix: Bind subscription strikethrough price to actual billing interval by @amorask-bitwarden in #21205
• [PM-38867] Fix: add error toast if no owner for a new item by @eliykat in #21222
• [PM-38012] Fix local override migration by @quexten in #21223
• [PM- 38988] Fix Trial Dialog Dismissal Caching by @sbrown-livefront in #21240
• 🍒 🤏 [PM- 38988] Fix Trial Dialog Dismissal Caching (#21240) by @sbrown-livefront in #21306
• fix(extension-scrollbar): Auth [PM-32445] Extension Scrollbar Fix (#2… by @rr-bw in #21353
• [PM-39206] use block input to ensure radios are displayed stacked by @BryanCunningham in #21361
• use block input to ensure radios are displayed stacked (#21361) by @BryanCunningham in #21367
• [SM-1993][CL-1227] Fix textarea height and fix SM button spacing by @vleague2 in #21417
• [SM-1993][CL-1227] Fix textarea height and fix SM button spacing (#21417) by @vleague2 in #21418
• [PM-39392] Use readonly styles for fields intended to be readonly by @vleague2 in #21425
• [PM-39392] Use readonly styles for fields intended to be readonly (#21425) by @vleague2 in #21428

⚙️ Maintenance

• [CL-965] update spinner component by @iivins-livefront in #19017
• [PM-31084] - migrate badge to chip-action in vault components by @jaasen-livefront in #20606
• [PM-6796] implemented file reorg by @bmbitwarden in #20648
• refactor(platform): migrate Region enum to const object per ADR-0025 by @addisonbeck in #20887
• [PM-29440] Update onboarding checklist by @gbubemismith in #20890
• [PM-36408] Ts-strict: refactor vault-header and org layout components by @BTreston in #21081
• [PM-38766] Revert onPush change detection in org layout component by @BTreston in #21147
• [PM-36510] Remove dead "SDK not available" guards from SDK-backed services by @gbubemismith in #21173
• [BRE-2013] Add repository_dispatch trigger to sdk-update workflow by @vgrassia in #21187
• [BRE-2017] Pin snapcraft to 8.x/stable to fix Linux builds by @brandonbiete in #21217

📦 Dependency Updates

• [deps] Autofill: Update tldts to v7.4.2 by @renovate in #21112
• Bump SDK version for ECDSA key support by @neuronull in #21176

🔧 Other

• [BEEEP] [PM-38012] Add local feature flag overrides by @quexten in #20833
• Autosync Crowdin Translations for web by @bw-ghapp in #20905
• Bump client version(s) by @github-actions in #20940
• Improve claude.md by @Hinton in #20941
• Expand .claude/rules to cover i18n, Tailwind, testing, and Angular DI by @Hinton in #21051
• Autosync Crowdin Translations for web by @bw-ghapp in #21065
• Remove FF caching for dev env by default by @coltonhurst in #21131
• Change configRetrievalIntervalMs by @coltonhurst in #21143
• Autosync Crowdin Translations for web by @bw-ghapp in #21193
• Autosync Crowdin Translations for web by @bw-ghapp in #21221
• Auth - Add claude.md for libs/auth by @JaredSnider-Bitwarden in #21235
• Autosync Crowdin Translations for web by @bw-ghapp in #21262
• Bump client version(s) by @github-actions in #21271
• Bumped client version(s) (#21271) by @addisonbeck in #21274
• Bump client version(s) by @github-actions in #21420
• Bumped client version(s) (#21420) by @addisonbeck in #21422

Full Changelog: web-v2026.6.1...web-v2026.6.2

Original source

What's Changed

Feature Development

[CL-999] Update tabs by @lxiong-livefront in #20010

[CL-963] Update breadcrumb styles by @lxiong-livefront in #20085

[PM-35224] Add route provider parameters support to featureFlaggedRoute by @Banrion in #20235

BEEEP/Auth/PM-35338 - Auto Submit on OTP Paste by @JaredSnider-Bitwarden in #20250

[PM-34157] Wire up SDK to NewPolicyService by @eliykat in #20377

[PM-30213] Add key rotation UI by @Thomas-Avery in #20407

[PM-29067] Remove Feature Flag Code for PM-24032 by @sbrown-livefront in #20415

[PM-31942] Save Access Intelligence reports to files (pt. 3) by @lastbestdev in #20441

[PM-35228] Add Premium Status Changed Push Notification by @sbrown-livefront in #20498

[PM-35357] Update Trial Length Parameter by @sbrown-livefront in #20544

[PM-36857] Add copy actions for bank account cipher type by @nick-livefront in #20605

[PM-27679] Remove flagged logic from clients/server and clients feature flag by @jengstrom-bw in #20609

[PM-36878] Update Existing User Trail Flow by @sbrown-livefront in #20610

[PM-31312] Remove Flagged logic from clients pm-29437-welcome-dialog feature flag by @jengstrom-bw in #20618

[PM-36359] Include splunk integration by @voommen-livefront in #20625

[PM-34156] Add accepted-state organization sync by @eliykat in #20627

[PM-37295] Ignore upgrade key rotation logout based on feature flag by @Thomas-Avery in #20637

[PM-35134] Change assign tasks to send notifications by @voommen-livefront in #20640

[PM-34112] Add Passport copy actions to browser extension by @nick-livefront in #20655

Remove feature flag check from password generation by @adudek-bw in #20671

[PM-35058]welcome modal post scan state by @voommen-livefront in #20672

[Shared Unlock] [PM-35083] Implement biometrics over sdk IPC by @quexten in #20689

[PM-37251] Add getStatus API method for public invite link status endpoint by @r-tome in #20695

[PM-34407] Allow deleting domains by @BTreston in #20699

[PM-34404] Prefill allowed domains by @BTreston in #20704

[PM-35656] Update Copy functionality for new item types by @nick-livefront in #20708

[PM-36967] Update rotate_user_keys to use UpgradeTokenAction by @Thomas-Avery in #20711

[PM-37229] Add bwi-passport icon for passport cipher type by @nick-livefront in #20712

[PM-36229] Route bulk-collections, move, and assigned-cipher ops to SDK by @gbubemismith in #20718

[PM-36067] Add stories for invite link and invite member dialog by @BTreston in #20731

[PM-34724] Access Intelligence Carousel for first time admins by @voommen-livefront in #20734

[CL-1204] bulk actions bar by @BryanCunningham in #20735

[PM-36563] Send access event logs by @harr1424 in #20740

[PM-37797] Add API method to check if email is valid for a given organization invite link by @r-tome in #20749

[PM-28781] Remove Send UI refresh feature flag by @mcamirault in #20753

[CL-1214] remove tabs min height by @BryanCunningham in #20796

[PM-30848] Key connector for user key rotation by @mzieniukbw in #20805

Add feature flag for SSH ecdsa by @neuronull in #20813

[PM-33753] Remove unlock-via-sdk-flag by @quexten in #20832

[CL-1172] Improved non-color a11y for selected vs unselected nav items by @vleague2 in #20865

[CL-1201] update row selected state and hover state by @BryanCunningham in #20869

update contrast variant text color by @BryanCunningham in #20878

[CL-1213] allow tab label to be anchor for spotlight by @BryanCunningham in #20882

[PM-37175] Preserve individual vault export folders when importing to My Items by @mcamirault in #20883

🐛 Bug fixes

[SM-1926] If user sends bad data over for secrets, make sure the bad data don… by @cd-bitwarden in #19893

[SM-1927] Updating code so that if the machine acct name is corrupted data by @cd-bitwarden in #19898

[PM-35120] - Update user delete flows with org ownership by @jaasen-livefront in #20462

[PM-36880] Filter Linked field type for Bank Account cipher type by @nick-livefront in #20564

[PM-36947] Restrict bank account PIN field to numeric characters only by @nick-livefront in #20598

PM-37554 resolved double cancel issue by @bmbitwarden in #20683

[CL-1046] Add no-bit-dialog-wrapper lint rule by @willmartian in #20698

[CL-1203] Place tab overflow More button next to last visible tab by @willmartian in #20709

Disable Native popover use from Angular 21 by @nick-livefront in #20730

[PM-37720] Fixes org switch issue on AC collections page by @JaredScar in #20732

[PM-37782] User with view permission cannot favorite or add an item to a folder by @jengstrom-bw in #20764

[PM-37776] - fix empty vault on pin and touch id unlock by @jaasen-livefront in #20793

[PM-37825] Fix partial date validation blocking save and improve error count accuracy by @nick-livefront in #20799

[PM-24173] Fix credential generator constraint bypass by @harr1424 in #20810

[PM-37970] Fix vault list icons for Login and Identity with new item types flag by @nick-livefront in #20818

[PM-37479] Assign to collection dialog displays dummy string 0"> by @jengstrom-bw in #20819

[PM-37840] Fix hanging observables causing blank access intelligence page by @Banrion in #20822

PM-37696 resolved broswer popup when trying to close tab by @bmbitwarden in #20861

[PM-23564] Item view shows removed attachment/does not show added attachment temporarily by @jengstrom-bw in #20884

[PM-37079] Fix applicationName empty save and fetch in Access Intelligence by @Banrion in #20886

[PM-38113] In AC, when item filter is selected and user add new item, it does not default the creation form to selected item type by @jengstrom-bw in #20901

[PM-38400] Fix avoid ambiguous character bug by @adudek-bw in #20966

PM-38423 - Fix unsavedSendEditsGuard blocking logout by @JaredSnider-Bitwarden in #20967

[PM-38423] fix for perpetual spinner while logging out on send listing page by @itsadrago in #20972

⚙️ Maintenance

[CL-1129] Enable @angular-eslint/template/elements-content lint rule by @willmartian in #19505

[PM-36363] Refactors org user view models and consumers to be ts-strict compliant by @BTreston in #20559

[PM-37074] Add test ids for automation by @BTreston in #20674

PM-36952 - Improve code review workflow with added triggers by @theMickster in #20702

[PM-377730] Refactor unlock service & add decrypted user key method by @quexten in #20719

fixed perms in cherry-pick workflow by @gitclonebrian in #20758

[BRE-1938] Update Build Web workflow to run on published Web releases by @vgrassia in #20761

[BRE-1938] Simplify and optimize Retrieve Current Desktop Rollout workflow by @vgrassia in #20778

[BRE-1938] Cleanup build web logic and fix web deploy by @pixman20 in #20794

📦 Dependency Updates

[CL-954] Upgrade to Angular 21 by @willmartian in #19725

Update sdk-internal to 0.2.0-main.765 by @bw-ghapp in #20744

Update sdk-internal to 0.2.0-main.774 by @bw-ghapp in #20770

[PM-37729] SDK Bump by @nick-livefront in #20776

[bre-1942] fix package lock issue by @aj-bw in #20785

Update sdk-internal to 0.2.0-main.779 by @bw-ghapp in #20798

Update sdk-internal to 0.2.0-main.782 by @bw-ghapp in #20807

[deps] Architecture: Update lint-staged to v17 by @renovate in #20843

Update sdk-internal to 0.2.0-main.798 by @bw-ghapp in #20937

🔧 Other

Remove Claude Plan File by @rr-bw in #20662

Bump client version(s) by @github-actions in #20690

Autosync Crowdin Translations for web by @bw-ghapp in #20693

Bump client version(s) by @github-actions in #20940

Bumped client version(s) (#20940) by @addisonbeck in #21086

Original source

What's Changed

💙 Community Highlight

[PM-32698] feat(vault): add copy button for cardholder name in card detail view by @Sebastianhayashi in #19216

Feature Development

Allow change-login-password invocation in non-Angular contexts by @blackwood in #15150

[PM-28190] Migrate clients to use SDK for cipher sharing operations. by @nikwithak in #18548

[PM-32686] Add bank account item type by @gbubemismith in #19302

[PM-33174] Remove master key from auth request login by @quexten in #19372

[PM-31112] Decouple local tools crypto from user key by @mzieniukbw in #19433

[CL-1108] Migrate billing CTAs to new icon API by @BryanCunningham in #19483

[CL-1111] Migrate key management CTAs to new icon API by @BryanCunningham in #19486

[PM-14820] CLI: Replace legacy generator service with credential generator service by @harr1424 in #19607

[PM-32586] Add readonly view to Send edit flow by @mcamirault in #19688

Auth/Innovation/PM-34210 - Desktop - Add devices dialog by @JaredSnider-Bitwarden in #19797

[PM-30483] Remove feature flagged logic for passkey unlock by @eligrubb in #19798

[PM-29956] Add logging to sponsorship redemption flow by @connerbw in #19947

[CL-989] updating popover component by @iivins-livefront in #20021

[CL-962] update banner component styles by @iivins-livefront in #20045

[PM-28091] - Add copy and quick launch action items by @jaasen-livefront in #20059

[PM-33797] AIV2: Standardize Models and Services: Wire Up by @Banrion in #20081

[PM-34830][POC] Atomic writes for SDK client managed state by @mzieniukbw in #20095

[PM-31364] discard edits dialog to policies page by @JaredScar in #20096

[PM-34887] - Improve responsiveness of AC collection table by @jaasen-livefront in #20104

[PM-31061] Implement biometrics migration by @quexten in #20127

[PM-34918] use sdk for collection decryption by @JaredScar in #20136

[PM-31635] Update emergency access takeover to use new separate salt by @enmande in #20139

PM-19944 - remove feature flag pm-19941-migrate-cipher-domain-to-sdk by @nikwithak in #20147

Autotriage merge candidate by @blackwood in #20149

PM-24328 Remove feature flag pm-22136-sdk-cipher-encryption by @nikwithak in #20150

[PM-34408] Refactor invite member dialog and access selector by @BTreston in #20161

[PM-33314] Add FlightRecorder at @bitwarden/logging by @dani-garcia in #20171

[PM-33875] Revocation Reason Messages by @sven-bitwarden in #20177

[PM-33315] Create @bitwarden/logging by @dani-garcia in #20197

[PM 34174]Do not show renewal reminder banners to exempt organizations by @cyprain-okeke in #20201

[PM-35253] Add organization ability UseInviteLinks by @r-tome in #20227

[PM-34409] Create new SCIM UI by @BTreston in #20272

[CL-1171] remove berry default limit by @BryanCunningham in #20283

[PM-29073] Remove Premium Badge Opens New Premium Upgrade Feature Flag by @sbrown-livefront in #20287

[PM-31942] Add FileReportPersistenceService implementation to store Access Intelligence reports as files (pt. 2) by @lastbestdev in #20289

[PM-34775] Generate Invite Link Lib and API Service by @BTreston in #20301

[PM-32833] Remove Input Password Feature Flag by @rr-bw in #20306

[PM-33473] Remove pm-29594-update-individual-subscription-page feature flag by @amorask-bitwarden in #20311

[PM-34159] - Decouple Auto Confrim and Single Org by @jrmccannon in #20330

[PM-33951] automatically confirm pending users on admin login by @JaredScar in #20331

[PM-34155] Enhance policy service with accepted policies retrieval and update sync response structure for new sync response by @JaredScar in #20336

[PM-34158] - Confirmed User Migrate Items by @jrmccannon in #20337

[PM-35264] Add org ability, hide UI if UseInviteLink is false by @BTreston in #20358

[PM-28191] Replace SaveCollectionsWithServerAdmin API calls to use SDK by @nikwithak in #20359

[PM-28346] Use SDK for attachment delete operations by @gbubemismith in #20361

[PM-34394] Organization invite service by @BTreston in #20367

[PM-35268] tech req for push based event delivery splunk by @voommen-livefront in #20369

[PM-26202] Refactor vault page to subcomponents to make it more wieldy by @JaredScar in #20373

[PM-31059] Implement state bridge support by @quexten in #20394

PM-29657: Shift PUT Policy/VNext -> PUT Policy, Finalize MigrateItemsVault FF by @sven-bitwarden in #20404

[PM-29067] Remove Feature Flag Code for PM-24032 by @sbrown-livefront in #20415

[PM-30942] Allow user to download logs from a user-initiated button click by @harr1424 in #20420

PM-35060 specify import return path by @voommen-livefront in #20422

[PM-34388] Add API method to update organization invite link allowed domains by @r-tome in #20431

Minimal implementation of DL and Passport by @nick-livefront in #20438

[PM-33887] Add Revocation Reasons to Member Page UI by @sven-bitwarden in #20442

[PM-36048] - redirect back to vault after coachmark tour ends by @jaasen-livefront in #20445

[PM-36106] add test ids and re-add role multiselect by @BTreston in #20450

[PM-32743] Convert collections to folders when importing into My Items by @mcamirault in #20453

Revert "[PM-31061] Implement biometrics migration" by @quexten in #20455

[PM-36187] Refactor sm section by @BTreston in #20457

[PM-32693] Driver's License for the Web by @nick-livefront in #20461

[PM-36233] Revert "[PM-14820] CLI: Replace legacy generator service with credential generator service" by @harr1424 in #20465

[PM-35153] Revert collection encrypt implementation by @eliykat in #20477

PM-29781 removed feature flag and corresponding code by @bmbitwarden in #20487

[PM-36629] Cipher Filter Refactor + Feature Flags by @nick-livefront in #20491

[PM-35201] Enhance password reset logic in MemberActionsService by @JaredScar in #20504

[PM-31061] Implement biometrics migration by @quexten in #20506

[CL-1115] accordion component by @BryanCunningham in #20508

[PM-34397] Allowed domains field by @BTreston in #20513

[PM-32738] Passport Web by @nick-livefront in #20514

[PM-34389] Wire refreshInviteLink to dedicated server refresh endpoint by @r-tome in #20522

[CL-1193] document banner dismiss button binding behavior by @willmartian in #20532

PM-34680 include enriched tags in the HEC template by @voommen-livefront in #20539

[PM-36617] Enhance PoliciesComponent: Add focus restoration for active element by @JaredScar in #20550

[PM-34405 | PM-34406] Invite url field by @BTreston in #20557

[PM-36560] Create Send event logs by @harr1424 in #20567

Disable state bridge by @quexten in #20615

[PM-31317] Remove flagged logic from clients feature flag pm-29438-welcome-dialog-with-extension-prompt by @jengstrom-bw in #20619

[PM-31054] Add state service for V2UpgradeToken by @Thomas-Avery in #20636

[PM-36972] [PM-37468] Update revocation reason tooltips by @vincentsalucci in #20649

🍒 🤏 [PM-29067] Remove Feature Flag Code for PM-24032 (#20415) by @sbrown-livefront in #20737

🐛 Bug fixes

[PM-29199] fix not clear only 20 emails input by @JaredScar in #18950

[PM-32784] Increase search service search performance by 50x and defer indexing by @quexten in #19251

[PM-30447] ssoRequiredCache fix by @rr-bw in #19879

[CL-1130] Fix storybook a11y and console errors for dirt files by @vleague2 in #19919

[CL-1130] Fix a11y and storybook errors in UIF-owned code by @vleague2 in #19921

[PM-28045] - Validate Organization Key Population by @jrmccannon in #19954

[PM-34036] Skip corrupted attachments during zip vault export by @gbubemismith in #19976

[CL-1128] Fix OnPush Lit Ignore Kitchen Sink Stories by @iivins-livefront in #20044

[PM-851] custom field reordering not keyboard accessible by @jengstrom-bw in #20099

[PM-34822] Consistency in handling 400 and 404 in Org Integrations by @voommen-livefront in #20131

PM-34920 updated icons to be contrast friendly by @voommen-livefront in #20154

[PM-34788] Fix silent error swallowing in saveRiskInsightsReport$ by @AlexRubik in #20180

[PM-34669] Fix premium modal dismissal not persisting across browser restarts by @amorask-bitwarden in #20182

[PM-31441] Improve long attachment file name handling by @shane-melton in #20183

[PM-35240] Add sync before forced kdf migration by @quexten in #20193

[PM-35318] Desktop v3/4 - Showing two "Archived" badge by @gbubemismith in #20239

[PM-23355] - use MP reprompt in bulk assign to collections by @jaasen-livefront in #20249

[PM-35330] Fix state not being updated on change kdf by @quexten in #20259

PM-30396 resolved zoho importer by @bmbitwarden in #20265

[PM-35335] Fix bug making discard edits dialog show on navigate after… by @mcamirault in #20267

Fix typechecking issue in CipherService tests by @nikwithak in #20288

PM-35363 resolved stale child controllers by @bmbitwarden in #20295

[PM-26417] Remove eager AccessIntelligenceModule import to enable proper lazy loading by @AlexRubik in #20305

[PM-35458] fix status check by @BTreston in #20312

Desktop: Fix ssh import key button by @neuronull in #20314

[PM-35216] Align at-risk members CSV header with drawer label by @AlexRubik in #20315

[CL-1130] Fix usage of export message key by @djsmith85 in #20324

[PM-35354] Fix empty error toast when DisableHideEmail policy is not respected on browser by @harr1424 in #20332

Auth/PM-35336 - TokenService - prevent stale access token retrieval to fix logout on org user confirm by @JaredSnider-Bitwarden in #20334

[PM-35698] filters not rendering on page load by @JaredScar in #20357

[PM-35761] Default sort in PM Vault incorrect by @gbubemismith in #20364

[PM-35826][PM-35797] SSH Key fixes for new item grid by @nick-livefront in #20378

[PM-35484] Remove exemption for owners/admins for mp policy by @BTreston in #20398

[PM-35655] - escape html in new item nudge component by @jaasen-livefront in #20409

[PM-35038] Fix Link SSO button not rendering in org options menu by @jaasen-livefront in #20410

Auth/DeviceManagement - Fix flaky test by @JaredSnider-Bitwarden in #20429

[PM-36015] Fix dialog size for 1-column add-item grid layout by @nick-livefront in #20446

[PM-36090] Fix placeholder by @BTreston in #20451

Auth/PM-36080 by @JaredSnider-Bitwarden in #20452

[PM-29654] Hide copy button when custom field has no value by @gbubemismith in #20459

[PM-36090] add dynamic seat validation, fix copy by @BTreston in #20470

[PM-36186] use mousedown for ng-select outside-click detection by @BryanCunningham in #20474

[PM-36571] Custom field hidden field right buttons are in the wrong place by @jengstrom-bw in #20509

[PM-31364] Discard edit bug fixes by @JaredScar in #20511

[PM-34832] Update event logging messages for account recovery by @JaredScar in #20512

[CL-1191] - spotlight and popover fixes by @jaasen-livefront in #20519

PM-36610 derive users from cache after import by @voommen-livefront in #20526

[CL-1192] Improve spotlight behavior and test coverage by @vleague2 in #20527

PM-36834 Fixes OrganizationId Missing From Access Intelligence API Calls When Switching Tabs. by @prograhamming in #20531

[PM-34791] fix duplicate call to i18n removing pricing term for non-english languages by @kdenney in #20542

[PM-31945] Fix missing group access to collections in Access Intelligence V2 by @lastbestdev in #20545

[PM-21374] Wrong notification is displayed when copying a passphrase from the generator history by @harr1424 in #20546

Add autocomplete current-password to master password input by @differsthecat in #20552

[PM-36565] creating new item from new dialog is not working by @JaredScar in #20560

[PM-36877] Remove nudge from bank account cipher type by @nick-livefront in #20561

[PM-36858] Fix routing number copy toast showing generic message by @nick-livefront in #20562

[PM-37065] Failed-to-decrypt vault items are not displayed at the top of the vault list by @gbubemismith in #20616

[PM-37234] - fix launch button by @jaasen-livefront in #20629

[PM-37521] Refactor password strength component for improved performance and to properly work by @JaredScar in #20650

[PM-37560] Respect lock or logout signal during Send edits by @harr1424 in #20669

PM-37554 resolved double cancel issue by @bmbitwarden in #20683

PM-37554 resolved double cancel issue (#20683) by @bmbitwarden in #20707

[PM-37720] Fixes vault changing of orgs by @JaredScar in #20786

⚙️ Maintenance

[deps]: Update ruby to v4 by @renovate in #18203

[PM-31826] Update *ngIf to @if and *ngFor to @for in vault lib components by @jengstrom-bw in #18817

[CL-1106] Migrate vault CTAs to new icon API by @BryanCunningham in #19481

[CL-1109] Migrate DIRT CTAs to new icon API by @BryanCunningham in #19484

[deps]: Update nrwl/nx-set-shas action to v5 by @renovate in #19856

[PM-34380] Remove SASS from apps/web by @Hinton in #19859

[PM-32598] - Remove Unused sso/details Endpoint by @sven-bitwarden in #20012

[PM-34577] Refactor Vault Filter Component by @JaredScar in #20098

[CL-1141] Improve tailwind config structure across apps and libs by @vleague2 in #20102

[PM-34890] Update icon usage to bit icon by @voommen-livefront in #20181

[PM-34891] Use star end icons in buttons by @voommen-livefront in #20232

[PM-35052] Address Access Intelligence refactor feedback by @AlexRubik in #20271

[BRE-1841] Fix truncate logic for container images tags in Build Web workflow by @vgrassia in #20335

[deps]: Update actions/github-script action to v9 by @renovate in #20391

BRE-1844 - Change Choco API Key secret name by @vgrassia in #20396

chore(deps): group electron in Renovate config by @addisonbeck in #20405

[BRE-1844] Remove legacy failure check job by @vgrassia in #20408

BRE-1854: Add actions:write permission to build-web-target workflow by @brandonbiete in #20428

PM-35200 - Create contributing guide for Claude tooling by @theMickster in #20430

[PM-36047] Add tech-leads group as owners of the CODEOWNERS file by @coltonhurst in #20435

[BRE-1851] - Update Crowdin API token by @vgrassia in #20456

[BRE-1851] Update to use official Crowdin action latest version by @vgrassia in #20464

[BRE-1845] Triggering web deploy by @pixman20 in #20466

[PM-28727] Update web docker file to match .NET 10 upgrade done in server by @justindbaur in #20476

Remove unused NgIf import from SetupExtensionComponent by @nick-livefront in #20490

[BRE-1851] Remove GPG signing by @vgrassia in #20497

[BRE-1851] Move all release publish deploy workflows by @vgrassia in #20518

Remove BW-GHAPP tokens and GPG from repository-management workflow by @AmyLGalles in #20624

📦 Dependency Updates

[deps] Tools: Update @types/jsdom to v28 [PM-32324] by @renovate in #19002

[deps] Platform: Update jest-preset-angular to v16.1.4 by @renovate in #20202

[PM-35365] [deps] Platform: Update nx monorepo to v22.6.5 by @renovate in #20269

[PM-35668] [deps] Platform: Update jest-mock-extended to v4.0.1 by @renovate in #20343

[deps] Architecture: Update Minor and patch linting updates by @renovate in #20345

[deps] Platform: Update Minor and patch webpack updates by @renovate in #20346

Update sdk-internal to 0.2.0-main.712 by @bw-ghapp in #20351

Update sdk-internal to 0.2.0-main.721 by @bw-ghapp in #20488

Update sdk-internal to 0.2.0-main.723 by @bw-ghapp in #20507

PM-36583 - Add override for 'tmp' library to 0.2.4 by @nikwithak in #20528

[deps] Architecture: Update Minor and patch linting updates to v8.59.1 by @renovate in #20576

[deps] Autofill: Update prettier-plugin-tailwindcss to v0.8.0 by @renovate in #20577

[deps] Platform: Update jest-junit to v17 by @renovate in #20584

Update sdk-internal to 0.2.0-main.733 by @bw-ghapp in #20587

Update sdk-internal to 0.2.0-main.737 by @bw-ghapp in #20590

[PM-37069] Move rust dep to autofill-desktop-dev ownership by @jprusik in #20597

Update sdk-internal to 0.2.0-main.757 by @bw-ghapp in #20663

🔧 Other

Migrate client specific skills into correct location by @theMickster in #20233

Autosync Crowdin Translations for web by @bw-ghapp in #20323

Autosync Crowdin Translations for web by @bw-ghapp in #20328

Nx telemetry setting (analytics: false). by @blackwood in #20433

Autosync Crowdin Translations for web by @bw-ghapp in #20501

Autosync Crowdin Translations for web by @bw-ghapp in #20555

Autosync Crowdin Translations for web by @bw-ghapp in #20661

Bump client version(s) by @github-actions in #20690

Original source