Bitwarden Clients Updates & Release Notes

What's Changed

Added the option to share vault items through a secure link

Various under-the-hood improvements and minor bug fixes

💙 Community Highlight

• [PM-38402] fix(desktop): fix IPC listeners that were never getting removed by @fabiand93 in #20945
• [PM-42039] fix(desktop): access keyctl keys from their owning thread by @nurfed1 in #22449
• [PM-42093] Fix case-sensitive URI scheme checks by @jashkarangiya in #22477

Feature Development

• [PM-40320] feat: Add bulk action support to shared VaultItemsTableComponent by @jaasen-livefront in #22260
• Autotype: generate AppData from filtered, currenty running applications by @neuronull in #22656
• Remove SSH Agent v1 by @neuronull in #22762
• [PM-42170] feat: Wire quick copy icon setting to the new vault table by @jaasen-livefront in #22790
• [CL-1232] Show rounded corner in desktop layout for VFO1 by @vleague2 in #22832
• [CL-1240] side nav responsive behavior by @BryanCunningham in #22879
• [CL-998] filter menu and dialog spec follow-up by @willmartian in #22891
• desktop-autofill: Windows native passkey fixes by @iinuwa in #22894
• Autotype: move shortcut component to shared lib by @neuronull in #22898
• [CL-1312] Add accordion auto height option by @vleague2 in #22938
• [PM-43047] Introduce new import vendor icons by @harr1424 in #22953
• [PM-42897] Move the vault banner above the vault header and add to shared folder/my folder pages by @jengstrom-bw in #23014
• [PM-43249] Model changes to support temporary item sharing by @mcamirault in #23060
• [PM-42490] feat: Add right click menu to the VFO1 vault table by @jaasen-livefront in #23062
• [PM-42878] Add subscription ended callout to VFO1 archive view by @nick-livefront in #23066
• [PM-43267] Tools share library to support temporary item sharing by @mcamirault in #23079
• Auth/PM-43337 - Submit login form on Enter from the remember-email checkbox by @JaredSnider-Bitwarden in #23085
• [PM-34732] remove feature flag, add flag for callout feature by @BTreston in #23091
• Add beta templates for Github issue reports by @trmartin4 in #23095
• [PM-43257] Update and Consolidate Autotype MVP & GA FF Logic by @coltonhurst in #23099
• [PM-43088] Add My items chip filter to org vault's All vault items page by @gbubemismith in #23102
• [PM-39982] Wire temporary item sharing in all clients by @mcamirault in #23152
• Auth/PM-43265 - Password Prelogin - Adopt new SDK LoginClient Constructor by @JaredSnider-Bitwarden in #23183
• [PM-41885] Add render and main process autotype ga services by @coltonhurst in #23189
• [PM-37378] Extend vault filter memory to Desktop by @shane-melton in #23226
• Autotype: Generate AppData from active window by @neuronull in #23243
• [CL-1334] Add min-height to table toolbar and remove tooltips from filter menus by @vleague2 in #23258
• [PM-44120] Isolate Beta desktop keychain entries from stable by @trmartin4 in #23551

🐛 Bug fixes

• Fix success message never showing for large file Sends (PM-42901) by @adudek-bw in #22899
• [PM-42825] Filter out provider organizations by @nick-livefront in #23016
• [PM-43083][PM-43122] Show header breadcrumbs and identity tiles for every vault scope by @gbubemismith in #23021
• Retry pending Send deletes during full sync (PM-42963) by @adudek-bw in #23046
• [CL-1296] Ensure table content does not have clipped focus rings by @vleague2 in #23076
• [PM-43253] Show suspended organization icon in the Password Manager side nav by @jaasen-livefront in #23082
• align mark and measure with abstraction docs by @audreyality in #23090
• [PM-42971] Ensure area around nav collapse button is clickable by @vleague2 in #23100
• [CL-1321][CL-1322] misc filter dialog fixes by @willmartian in #23148
• PM-43471: Add missing enabled flag for vault-next storybooks by @nikwithak in #23159
• [PM-43374] Correct trash detection in desktop vault batch action bar by @gbubemismith in #23175
• [PM-43366] Improve tooltip support in filter menu and toolbar by @vleague2 in #23177
• [PM-43674] refactor(icon-tile): render glyph with bit-icon by @BryanCunningham in #23185
• [PM-43460, PM-43461] feat: Nest collections and folders in filter chips by @nick-livefront in #23190
• [PM-43348] Render live vault updates on the desktop list by @gbubemismith in #23191
• [PM-43681] With voiceover on and navigating by keyboard, highlighted button border persists when expanding/contracting show more/less by @jengstrom-bw in #23216
• [CL-1320] Update how multi filter menu chips are treated when selected by @vleague2 in #23218
• [PM-42963] Roll back an orphaned file Send when its creation is cancelled mid-upload by @adudek-bw in #23220
• [PM-43782] fix: uncheck select-all after clearing a capped selection by @jaasen-livefront in #23227
• fix(shared-unlock): Set destinations before starting shared unlock by @quexten in #23230
• [PM-43479] Allow horizontal scrolling in table-v2 on desktop by @willmartian in #23250
• [PM-43840] Update instances of collection to instead use shared folder by @harr1424 in #23254
• [PM-43838] fix: center empty vault description text on desktop by @gbubemismith in #23261
• [PM-43869] Disable at-risk password notifications in shared item Sends by @mcamirault in #23295

⚙️ Maintenance

• [deps]: Update actions/setup-node action to v7 by @renovate in #22473
• [PM-412222] Update sdk decryption failure dialog copy and design by @shane-melton in #22619
• Auth/PM-42704 - Rename auth icons to be generic for reuse by @JaredSnider-Bitwarden in #22786
• feat(desktop): Allow overriding the IPC socket directory by @quexten in #22911
• feat(desktop): Add an isolated debug run script for desktop by @quexten in #22912
• feat(desktop): Add development icon for desktop dev build by @quexten in #22915
• desktop: Refactor packing and signing build phases by @iinuwa in #23020
• build: Delete unused package.json scripts for desktop by @iinuwa in #23055
• [BRE-2213] Rename PR target workflows for clarity by @michalchecinski in #23087
• Autosync Crowdin Translations for desktop by @bw-ghapp in #23106
• [PM-34732] Clean up by @BTreston in #23176
• Update Cargo.toml by @iinuwa in #23179
• [PM-43366] Mute flaky filter menu popover test for now by @vleague2 in #23196
• [PM-43776] Fix circular dependency in view password history service by @shane-melton in #23215
• Autosync Crowdin Translations for desktop by @bw-ghapp in #23251
• Autosync Crowdin Translations for desktop by @bw-ghapp in #23267
• Bump client version(s) by @github-actions in #23332

📦 Dependency Updates

• [deps] UI Foundation: Update svgo to v4.0.2 [SECURITY] by @renovate in #22008
• Update sdk-internal to 0.2.0-main.1015 by @bw-ghapp in #22989
• Update sdk-internal to 0.2.0-main.1020 by @bw-ghapp in #23068
• Update sdk-internal to 0.2.0-main.1034 by @bw-ghapp in #23277

New Contributors

• @fabiand93 made their first contribution in #20945
• @jashkarangiya made their first contribution in #22477

Full Changelog: desktop-v2026.9.0...desktop-v2026.9.1

Original source

What's Changed

Various under-the-hood improvements and minor bug fixes

Feature Development

[PM-43249] Model changes to support temporary item sharing by @mcamirault in #23060

Auth/PM-43265 - Password Prelogin - Adopt new SDK LoginClient Constructor by @JaredSnider-Bitwarden in #23183

🐛 Bug fixes

Fix success message never showing for large file Sends (PM-42901) by @adudek-bw in #22899

Retry pending Send deletes during full sync (PM-42963) by @adudek-bw in #23046

align mark and measure with abstraction docs by @audreyality in #23090

[PM-42963] Roll back an orphaned file Send when its creation is cancelled mid-upload by @adudek-bw in #23220

⚙️ Maintenance

[deps]: Update actions/setup-node action to v7 by @renovate in #22473

[PM-42666] ts-strict for cli files by @BTreston in #22782

Use SEND_KDF_ITERATIONS instead of magic number by @djsmith85 in #23067

[BRE-2213] Rename PR target workflows for clarity by @michalchecinski in #23087

Bump client version(s) by @github-actions in #23332

📦 Dependency Updates

Update sdk-internal to 0.2.0-main.1015 by @bw-ghapp in #22989

Update sdk-internal to 0.2.0-main.1020 by @bw-ghapp in #23068

Update sdk-internal to 0.2.0-main.1034 by @bw-ghapp in #23277

Full Changelog: cli-v2026.9.0...cli-v2026.9.1

Original source

What's Changed

Added the option to share vault items through a secure link

Various under-the-hood improvements and minor bug fixes

💙 Community Highlight

[PM-39190] [PM-19354] fix(generator): restore catch-all website-name option by @esteve in #21338

[PM-42093] Fix case-sensitive URI scheme checks by @jashkarangiya in #22477

Feature Development

Add more support for DDG browser by @kspearrin in #22696

[PM-40904] feat: Add extension popup header item count and vault switcher by @jaasen-livefront in #22858

[PM-42902] wire inline menu prompt component by @dan-livefront in #22883

[CL-998] filter menu and dialog spec follow-up by @willmartian in #22891

[PM-40905] Extension - FAB implementation by @nick-livefront in #22897

[CL-1312] Add accordion auto height option by @vleague2 in #22938

[PM-43047] Introduce new import vendor icons by @harr1424 in #22953

[PM-43249] Model changes to support temporary item sharing by @mcamirault in #23060

[PM-43267] Tools share library to support temporary item sharing by @mcamirault in #23079

Auth/PM-43337 - Submit login form on Enter from the remember-email checkbox by @JaredSnider-Bitwarden in #23085

[PM-34732] remove feature flag, add flag for callout feature by @BTreston in #23091

Add beta templates for Github issue reports by @trmartin4 in #23095

[CL-1297] Use bit-item for table-v2 list presentation by @willmartian in #23097

[PM-39982] Wire temporary item sharing in all clients by @mcamirault in #23152

[CL-1249] extension scroll area updates by @BryanCunningham in #23154

[PM-42385] Add empty autofill section description by @shane-melton in #23182

Auth/PM-43265 - Password Prelogin - Adopt new SDK LoginClient Constructor by @JaredSnider-Bitwarden in #23183

[CL-1334] Add min-height to table toolbar and remove tooltips from filter menus by @vleague2 in #23258

🐛 Bug fixes

init runtime before autofill orchestrator by @addisonbeck in #22789

Fix success message never showing for large file Sends (PM-42901) by @adudek-bw in #22899

[PM-41548] Consider frame URLs when resolving blocked domain entries by @jprusik in #23018

Retry pending Send deletes during full sync (PM-42963) by @adudek-bw in #23046

fix(table-v2): do not accept undefined urlStore values as seeded filter values by @nick-livefront in #23051

[CL-1318] Prevent pages with small y-scroll from snapping back to top when scrolled by @vleague2 in #23058

[CL-1296] Ensure table content does not have clipped focus rings by @vleague2 in #23076

align mark and measure with abstraction docs by @audreyality in #23090

[CL-1321][CL-1322] misc filter dialog fixes by @willmartian in #23148

[PM-43363] fix: Wrap long unbroken text in status lockup by @jaasen-livefront in #23150

[PM-43451] fix: Rename and separate the no-folder filter option by @jaasen-livefront in #23153

[PM-41425] fix: apply untrusted iframe check to fill assist targeted fields by @bensbits91 in #23155

[PM-43450] bugfix: No items show up with 'Items with no folder' filter by @nikwithak in #23157

PM-43471: Add missing enabled flag for vault-next storybooks by @nikwithak in #23159

[PM-43366] Improve tooltip support in filter menu and toolbar by @vleague2 in #23177

[PM-43674] refactor(icon-tile): render glyph with bit-icon by @BryanCunningham in #23185

[PM-43676] harden tagAsExternal by @audreyality in #23187

[PM-43460, PM-43461] feat: Nest collections and folders in filter chips by @nick-livefront in #23190

[PM-43726] fix: filter browser type chip to only show vault-present types by @nick-livefront in #23202

[PM-43743] introduce IntraprocessMessagingSubject by @audreyality in #23203

[CL-1320] Update how multi filter menu chips are treated when selected by @vleague2 in #23218

[PM-42963] Roll back an orphaned file Send when its creation is cancelled mid-upload by @adudek-bw in #23220

[PM-43782] fix: uncheck select-all after clearing a capped selection by @jaasen-livefront in #23227

fix(shared-unlock): Set destinations before starting shared unlock by @quexten in #23230

[PM-43840] Update instances of collection to instead use shared folder by @harr1424 in #23254

[PM-43869] Disable at-risk password notifications in shared item Sends by @mcamirault in #23295

⚙️ Maintenance

[deps]: Update actions/setup-node action to v7 by @renovate in #22473

[PM-412222] Update sdk decryption failure dialog copy and design by @shane-melton in #22619

Auth/PM-42704 - Rename auth icons to be generic for reuse by @JaredSnider-Bitwarden in #22786

feat(browser): Add a Chrome debug launcher for the extension by @quexten in #22913

[BRE-2213] Rename PR target workflows for clarity by @michalchecinski in #23087

[PM-43269] Browser: Update Health category details button variant and intro CTA images by @lastbestdev in #23103

Autosync Crowdin Translations for browser by @bw-ghapp in #23105

[PM-34732] Clean up by @BTreston in #23176

[PM-42366] Reconstruct IPC content-script messages before relaying by @coroiu in #23192

[PM-43366] Mute flaky filter menu popover test for now by @vleague2 in #23196

[PM-43776] Fix circular dependency in view password history service by @shane-melton in #23215

[PM-42469] communicate sender only through trusted channels by @audreyality in #23249

Autosync Crowdin Translations for browser by @bw-ghapp in #23252

Autosync Crowdin Translations for browser by @bw-ghapp in #23268

Bump client version(s) by @github-actions in #23332

core-js removal from chrome and version bump by @addisonbeck in #23464

📦 Dependency Updates

[deps] UI Foundation: Update svgo to v4.0.2 [SECURITY] by @renovate in #22008

Update sdk-internal to 0.2.0-main.1015 by @bw-ghapp in #22989

Update sdk-internal to 0.2.0-main.1020 by @bw-ghapp in #23068

Update sdk-internal to 0.2.0-main.1034 by @bw-ghapp in #23277

New Contributors

@esteve made their first contribution in #21338

@jashkarangiya made their first contribution in #22477

Full Changelog: browser-v2026.9.2...browser-v2026.9.3

Original source

What's Changed

Added the option to share vault items through a secure link

Expanded Manage Send policies to control vault item sharing

Updated subscription pages to show your upcoming renewal amount, tax, and date

Various under-the-hood improvements and minor bug fixes

💙 Community Highlight

[PM-42093] Fix case-sensitive URI scheme checks by @jashkarangiya in #22477

Feature Development

[SM-1588] Secrets Versioning + feature flag by @cd-bitwarden in #19405

[PM-40320] feat: Add bulk action support to shared VaultItemsTableComponent by @jaasen-livefront in #22260

[PM-37378] VFO1 persist active filters by @shane-melton in #22533

Add more support for DDG browser by @kspearrin in #22696

[PM-42170] feat: Wire quick copy icon setting to the new vault table by @jaasen-livefront in #22790

[PM-38575] feat: hide payment modal for sales-assisted trials by @cyprain-okeke in #22805

Add breadcrumbs to Auth settings pages by @nikwithak in #22855

PM-40900: Add breadcrumbs to Admin-Console settings pages by @nikwithak in #22857

PM-40896: Add breadcrumbs to data recovery settings by @nikwithak in #22859

[CL-1240] side nav responsive behavior by @BryanCunningham in #22879

[CL-998] filter menu and dialog spec follow-up by @willmartian in #22891

[CL-1312] Add accordion auto height option by @vleague2 in #22938

PM-40898: Add breadcrumbs to Billing settings pages by @nikwithak in #22945

PM-40901: Add breadcrumbs to tools-owned settings pages by @nikwithak in #22951

[PM-43047] Introduce new import vendor icons by @harr1424 in #22953

[PM-42897] Move the vault banner above the vault header and add to shared folder/my folder pages by @jengstrom-bw in #23014

[PM-42838] Implement new dialog UI by @BTreston in #23056

[PM-42844] invite link dialog state and service by @BTreston in #23059

[PM-43249] Model changes to support temporary item sharing by @mcamirault in #23060

[PM-42845] add guided tour of invite link by @BTreston in #23061

[PM-42490] feat: Add right click menu to the VFO1 vault table by @jaasen-livefront in #23062

[PM-42878] Add subscription ended callout to VFO1 archive view by @nick-livefront in #23066

[PM-39929] Billing Error Card by @sbrown-livefront in #23070

[PM-39929] Subscription Card Updates for Subscription Preview by @sbrown-livefront in #23071

[PM-39929] Component Updates to Standalone by @sbrown-livefront in #23072

[PM-38770] Implements support for new toggle on Invite Link modal by @JaredScar in #23077

[PM-43267] Tools share library to support temporary item sharing by @mcamirault in #23079

Auth/PM-43337 - Submit login form on Enter from the remember-email checkbox by @JaredSnider-Bitwarden in #23085

[PM-40806] self host warning for invite link by @BTreston in #23088

[PM-34732] remove feature flag, add flag for callout feature by @BTreston in #23091

[PM-43088] Add My items chip filter to org vault's All vault items page by @gbubemismith in #23102

[PM-42298] Integrate vault dialogs and coachmarks with VFO1 UX by @shane-melton in #23104

[PM-39929] Cart translation keys and discount duration label by @sbrown-livefront in #23147

[PM-39929] Preview-driven organization subscription page by @sbrown-livefront in #23151

[PM-39982] Wire temporary item sharing in all clients by @mcamirault in #23152

[PM-42524] feat: Update vault name and billing email fields on the shared organization form by @cyprain-okeke in #23181

Auth/PM-43265 - Password Prelogin - Adopt new SDK LoginClient Constructor by @JaredSnider-Bitwarden in #23183

[CL-1334] Add min-height to table toolbar and remove tooltips from filter menus by @vleague2 in #23258

🐛 Bug fixes

[PM-16095] validation message updates by @JaredScar in #22807

[PM-42858] Implement changes for policy for vault banner info callout by @JaredScar in #22889

[PM-42854] bugs with policies drawers by @JaredScar in #22893

Fix success message never showing for large file Sends (PM-42901) by @adudek-bw in #22899

[PM-42853] bugs with policies list fixes by @JaredScar in #22931

[PM-42825] Filter out provider organizations by @nick-livefront in #23016

[PM-43083][PM-43122] Show header breadcrumbs and identity tiles for every vault scope by @gbubemismith in #23021

Retry pending Send deletes during full sync (PM-42963) by @adudek-bw in #23046

[PM-43245] fix: Apply container-type to side nav scroll container by @BryanCunningham in #23074

[CL-1296] Ensure table content does not have clipped focus rings by @vleague2 in #23076

[PM-42854] Fix terminology changes for VFO 1 by @JaredScar in #23080

[PM-42853] Fix header for policies by @JaredScar in #23081

[PM-43253] Show suspended organization icon in the Password Manager side nav by @jaasen-livefront in #23082

[PM-43292] feat: Allow creating folders and shared folders from the toolbar's new item menu by @nick-livefront in #23089

align mark and measure with abstraction docs by @audreyality in #23090

[PM-42364] Missing SSO external ID and external ID from members dialog by @JaredScar in #23096

[PM-42971] Ensure area around nav collapse button is clickable by @vleague2 in #23100

[PM-43432] fix DI by @BTreston in #23144

[CL-1321][CL-1322] misc filter dialog fixes by @willmartian in #23148

PM-43471: Add missing enabled flag for vault-next storybooks by @nikwithak in #23159

[PM-43374] Correct trash detection in desktop vault batch action bar by @gbubemismith in #23175

[PM-43366] Improve tooltip support in filter menu and toolbar by @vleague2 in #23177

[PM-43674] refactor(icon-tile): render glyph with bit-icon by @BryanCunningham in #23185

[PM-43631] fix: add breadcrumbs to the settings Add plan page by @jaasen-livefront in #23188

[PM-43460, PM-43461] feat: Nest collections and folders in filter chips by @nick-livefront in #23190

[PM-43681] With voiceover on and navigating by keyboard, highlighted button border persists when expanding/contracting show more/less by @jengstrom-bw in #23216

[CL-1320] Update how multi filter menu chips are treated when selected by @vleague2 in #23218

[PM-42963] Roll back an orphaned file Send when its creation is cancelled mid-upload by @adudek-bw in #23220

[PM-43791] fix: net line-item discounts into the cart summary subtotal by @sbrown-livefront in #23223

[PM-43632] custom user with manage user permission logged out when inviting user server direct call by @JaredScar in #23225

[PM-43782] fix: uncheck select-all after clearing a capped selection by @jaasen-livefront in #23227

fix(shared-unlock): Set destinations before starting shared unlock by @quexten in #23230

[PM-43840] Update instances of collection to instead use shared folder by @harr1424 in #23254

[PM-43727] fix: treat empty folderId as no folder in SDK move ciphers by @gbubemismith in #23257

[PM-43869] Disable at-risk password notifications in shared item Sends by @mcamirault in #23295

⚙️ Maintenance

Convert Secrets Manager integrations page to tabbed layout by @maxkpower in #21438

[deps]: Update actions/setup-node action to v7 by @renovate in #22473

[PM-412222] Update sdk decryption failure dialog copy and design by @shane-melton in #22619

[PM-42663] Update ts-strict for components by @BTreston in #22774

[PM-42664] Refactor libs/common for ts-strict by @BTreston in #22779

[PM-42662] Update ac models for ts-strict by @BTreston in #22783

Auth/PM-42704 - Rename auth icons to be generic for reuse by @JaredSnider-Bitwarden in #22786

[BRE-2213] Rename PR target workflows for clarity by @michalchecinski in #23087

[PM-43233] Instrument the Access Intelligence report flow by @Banrion in #23101

Autosync Crowdin Translations for web by @bw-ghapp in #23107

[BRE-2215] Add UAT environment web build and artifact by @michalchecinski in #23173

[PM-34732] Clean up by @BTreston in #23176

[PM-43366] Mute flaky filter menu popover test for now by @vleague2 in #23196

[PM-43776] Fix circular dependency in view password history service by @shane-melton in #23215

[PM-43773] Add server-side verification to HEC connect dialogs by @Banrion in #23222

Autosync Crowdin Translations for web by @bw-ghapp in #23253

Autosync Crowdin Translations for web by @bw-ghapp in #23255

Autosync Crowdin Translations for web by @bw-ghapp in #23269

Revert "[PM-43773] Add server-side verification to HEC connect dialogs" by @Banrion in #23296

Bump client version(s) by @github-actions in #23332

📦 Dependency Updates

[deps] UI Foundation: Update svgo to v4.0.2 [SECURITY] by @renovate in #22008

Update sdk-internal to 0.2.0-main.1015 by @bw-ghapp in #22989

Update sdk-internal to 0.2.0-main.1020 by @bw-ghapp in #23068

Update sdk-internal to 0.2.0-main.1034 by @bw-ghapp in #23277

New Contributors

@jashkarangiya made their first contribution in #22477

Full Changelog: web-v2026.9.0...web-v2026.9.1

Original source

What's Changed

Feature Development

• [CL-1176] Add bit-badge-group and deprecate bit-badge-list by @willmartian in #21070
• [PM-32740] Add support for three new cipher types to importers by @mcamirault in #21267
• feat(automation-driver): add automation-driver package by @quexten in #21919
• feat(automation-driver): wire-in automation-driver by @quexten in #21921
• [CL-1293] add description and hideOnEmpty inputs to bit-row-group by @willmartian in #22129
• [PM-39926] feat(billing): client foundation for preview-driven cart — types, adapter, translation, facades, HTTP clients by @cyprain-okeke in #22173
• [PM-41313] Add Fill Assist Policy Admin Console UI by @bensbits91 in #22204
• [CL-982] update bit-item styles by @BryanCunningham in #22242
• Route remaining SDK-capable Send operations through the SDK by @adudek-bw in #22321
• [PM-40396] tools export routing change from tools to settings by @itsadrago in #22416
• [CL-979] Update web & desktop layout components for VFO1 by @vleague2 in #22491
• [CL-998] table-v2 design review follow-up by @willmartian in #22520
• [PM-37197] feat: Move New organization entry points to Add plan under Settings by @cyprain-okeke in #22530
• [PM-35381] Add final illustrations to the Access Intelligence onboarding dialogs by @AlexRubik in #22536
• Auth/PM-42167 - SSO - Add Staged Org User Support by @JaredSnider-Bitwarden in #22562
• [PM-40505] Detecting old attachments in diagnostics tool by @mzieniukbw in #22580
• [CL-998] filter chip and menu design review follow-up by @willmartian in #22587
• [CL-1244] icon tiles in menus by @BryanCunningham in #22611
• [PM-39409] feat: Forward TS logs to Flight Recorder buffer by @dani-garcia in #22613
• [CL-1308] sidenav fast follows by @BryanCunningham in #22616
• [PM-42211] Create reusable shared folders table component by @jengstrom-bw in #22652
• [PM-40159] Update remaining Add plan page copy under the VFO1 flag by @kdenney in #22657
• [PM-42483] Render My vault as a non-expandable nav item by @gbubemismith in #22671
• Route Send sync and key rotation through the SDK by @adudek-bw in #22672
• [PM-40849] Render the shared folder grid on the web end user vault view by @jengstrom-bw in #22677
• [PM-40323] Apply vault-type color tiles to the item table and vault selector by @jaasen-livefront in #22681
• Auth/PM-42267 - SSO Error Handling Improvement - Add no-seats-available error to sso-login-failed component by @JaredSnider-Bitwarden in #22705
• [PM-41306] Web: Update Passkey report banner type to info by @lastbestdev in #22715
• Add breadcrumbs to Shared Folder views by @nikwithak in #22717
• [PM-33422] refactor: remove pm-31948-org-user-notification-banner feature flag by @jaasen-livefront in #22719
• [PM-41305] Web: Update header on all report pages by @lastbestdev in #22725
• [PM-38574] feat: Set trialInitiationPath for sales-assisted trials by @cyprain-okeke in #22757
• [PM-42585] feat: Add Single org prerequisite to fill assist policy by @bensbits91 in #22759
• [PM-40324] Add upgrade callout to vfo1 side nav footer by @gbubemismith in #22765
• [PM-41308] Web: Passkey login report table updates by @lastbestdev in #22766
• [PM-39099] - Remove FF logic for Admin Member Email Change by @jrmccannon in #22772
• [PM-41307] Web: Passkey report filter option label updates by @lastbestdev in #22780
• [PM-41309] Web: Update Passkey login report card SVG by @lastbestdev in #22785
• PM-40897: Add breadcrumbs to Appearance and Domain Rules settings pages by @nikwithak in #22787
• [CL-1175] Create chip group component by @vleague2 in #22823
• [PM-37136] Empty vault states by @nick-livefront in #22827
• [PM-41981] Keep v1 users on TS key rotation when SDK key rotation is enabled by @mzieniukbw in #22849
• [PM-42898] Add breadcrumbs to shared folders pages by @jengstrom-bw in #22887
• [PM-40325] feat: Restructure Admin Console side nav for VFO1 by @gbubemismith in #22890
• [PM-40322] [PM-40217] Account switcher moves to Footer by @ike-kottlowski in #22895
• [PM-42987] Introduce feature flag for temporary item sharing on clients by @djsmith85 in #22921
• [PM-42988] Move Send decryption to SDK functions by @mcamirault in #22923
• [PM-39982] Create libs/tools/share using the nx lib generator plugin by @djsmith85 in #22926
• [PM-39982] Create share-link icon by @djsmith85 in #22934
• [PM-43013] fix(vault): restore the "My items" side-nav entry by @gbubemismith in #22937
• [PM-43025] Make vault table row clickable by @shane-melton in #22939
• [PM-39703] Add colored vault icon support for new table filters by @shane-melton in #22944
• [PM-42118] Migrate to the new bit-chip-group component by @shane-melton in #22952

🐛 Bug fixes

• [SRE-2516] Do not event upload request bodies of unlimited size by @MGibson1 in #15190
• webauthn: Pass PRF input on unlock passkey creation by @iinuwa in #21998
• [PM-41487] Reuse a freshly built lunr index instead of rebuilding after the lock by @shane-melton in #22227
• feat(salt): [PM-27060] - Use SDK salt for MP Login by @Patrick-Pimentel-Bitwarden in #22381
• [PM-27010] fix: Resolve tax ID type from country and value, with format guidance by @amorask-bitwarden in #22388
• [PM-13373] Fix Enpass CSV Importer by @harr1424 in #22561
• [PM-42239] Access Intelligence v2 match request password change button behavior to v1 by @lastbestdev in #22641
• fix(login-decryption-options): [PM-42457] -… by @Patrick-Pimentel-Bitwarden in #22649
• SSH Agent import: log on failure by @neuronull in #22676
• [PM-42470] Add cooldown to user key id backfill migration by @quexten in #22682
• fix(key-management): Clear key id backfill cooldown on logout by @quexten in #22698
• [PM-42443] Include member items when fetching org ciphers in Access Intelligence by @Banrion in #22749
• [PM-42631] Fix flaky storybook tests for shared folder card grid by @jengstrom-bw in #22760
• [PM-42394] Show Vault and Shared Folders filter chips when vault is empty by @nick-livefront in #22761
• [PM-42468] fix: Prevent crash from null active account in cipher row menu services by @nick-livefront in #22776
• [PM-36618] Web: Fix end icon in export button on events pages by @lastbestdev in #22788
• [PM-42932] fix: normalize null hostname from getUriHostname to prevent search crash by @nick-livefront in #22882
• [PM-42854] bugs with policies drawers by @JaredScar in #22893
• Rolled back changes for set-password by @Patrick-Pimentel-Bitwarden in #22900
• [PM-42525] Vault side nav query param preservation by @shane-melton in #22932
• [PM-42994] Shared folders grid and Items table needs standard spacing by @jengstrom-bw in #22933
• [PM-42991] After selecting a pagination size option the dropdown selection and pagination is no longer clickable by @jengstrom-bw in #22942
• [PM-42854] bugs with policies drawers for RC by @JaredScar in #23044

⚙️ Maintenance

• [PM-35599] Update Password Request Models (Auth) by @rr-bw in #20643
• [PM-35601] Update Password Request Models (Admin Console) by @rr-bw in #20664
• Auth/PM-41523 - Organization Invite Service - Introduce NoOp and make DI match client support for org invites by @JaredSnider-Bitwarden in #22494
• chore(shared-unlock): update to new shared unlock implementation by @quexten in #22540
• tests: add test for device trust / shared unlock / unlock ordering by @quexten in #22600
• refactor(unlock): extract AutoUnlockService by @quexten in #22602
• [PM-40024] Remove obsolete keys used in messages.json for old components since we removed V2 components already by @JaredScar in #22617
• refactor(km): simplify process reload service by @quexten in #22646
• [PM-39460] Add v2_encrypted_migrations_grace_period_start to state bridge by @eligrubb in #22653
• fix build failures on main caused by out-of-date import by @audreyality in #22666
• ci: Fix not reporting test results on push and workflow_dispatch by @eliykat in #22679
• key service flaky cipherDecryptionKeys$ tests by @mzieniukbw in #22680
• Fix IPC doc comment by @coltonhurst in #22754
• [PM-42443] Test cases for including My Items in Access Intelligence by @Banrion in #22755
• Autosync Crowdin Translations for web by @bw-ghapp in #22770
• [BRE-2166] Add metadata to container images by @vgrassia in #22804
• disabling failing key service test by @mzieniukbw in #22875
• [BRE-2230] fix(ci): derive web build git hash from checked-out HEAD by @aj-bw in #22881
• Mute flaky chip-filter test by @vleague2 in #22925
• Autosync Crowdin Translations for web by @bw-ghapp in #22984
• Bump client version(s) by @github-actions in #23038

📦 Dependency Updates

• [deps] Platform: Update postcss to v8.5.23 [SECURITY] by @renovate in #22324
• Update sdk-internal to 0.2.0-main.983 by @bw-ghapp in #22592
• Update sdk-internal to 0.2.0-main.1001 by @bw-ghapp in #22651
• [deps] Platform: Update nx to v22.7.7 [SECURITY] by @renovate in #22693
• Update sdk-internal to 0.2.0-main.1008 by @bw-ghapp in #22841
• Update sdk-internal to 0.2.0-main.1011 by @bw-ghapp in #22892
• Update sdk-internal to 0.2.0-main.1012 by @bw-ghapp in #22922
• Update sdk-internal to 0.2.0-main.1013 by @bw-ghapp in #22985

🎨 Other

• [AI-94] llm: Evaluate SDK update PRs against the upstream commit range by @SaintPatrck in #22697

Full Changelog: web-v2026.8.1...web-v2026.9.0

Original source

What's Changed

Feature Development

[PM-32740] Add support for three new cipher types to importers by @mcamirault in #21267

feat(automation-driver): add automation-driver package by @quexten in #21919

[PM-41273] Extend ImportService to expose per-vendor metadata by @harr1424 in #22297

Route remaining SDK-capable Send operations through the SDK by @adudek-bw in #22321

[PM-39408] feat: Tee TS logs into LogRecorder sink by @dani-garcia in #22379

[PM-40814] Add key id support by @quexten in #22444

[PM-39455] Use v2 upgrade token when asserting organization public key trust. by @mzieniukbw in #22490

[PM-39409] feat: Forward TS logs to Flight Recorder buffer by @dani-garcia in #22613

Route Send sync and key rotation through the SDK by @adudek-bw in #22672

[PM-37136] Empty vault states by @nick-livefront in #22827

[PM-42988] Move Send decryption to SDK functions by @mcamirault in #22923

🐛 Bug fixes

[SRE-2516] Do not event upload request bodies of unlimited size by @MGibson1 in #15190

[PM-40120] Prompt CLI user for divergent domain access by @harr1424 in #22216

[PM-8711] inconsistent casing between vault management api feedback and api docs by @JaredScar in #22232

[PM-41691] Fix issue where edit item, hidden passwords wipes password, TOTP by @JaredScar in #22287

feat(salt): [PM-27060] - Use SDK salt for MP Login by @Patrick-Pimentel-Bitwarden in #22381

Auth / PM-32421 - CLI - Login Command - Validate SSO account has a CLI-supported decryption path by @JaredSnider-Bitwarden in #22411

fix(key-connector): fix sdk-based unlock with key-connector on jit provisioning by @quexten in #22545

[PM-13373] Fix Enpass CSV Importer by @harr1424 in #22561

[PM-42470] Add cooldown to user key id backfill migration by @quexten in #22682

fix(key-management): Clear key id backfill cooldown on logout by @quexten in #22698

[PM-42932] fix: normalize null hostname from getUriHostname to prevent search crash by @nick-livefront in #22882

⚙️ Maintenance

refactor(crypto): split out legacy compat key service by @quexten in #22319

refactor(key-management): read the user key via userKey$ by @quexten in #22353

refactor(auth): unlock via UnlockService in login strategies by @quexten in #22354

refactor(key-management): unlock via UnlockService in key connector conversion by @quexten in #22358

refactor(unlock): replace UserAutoUnlockKeyService with UnlockService by @quexten in #22359

[PM-41874] refactor(crypto): move key-management callers to @bitwarden/legacy-crypto by @quexten in #22362

[PM-41874] refactor(crypto): move auth callers to @bitwarden/legacy-crypto by @quexten in #22363

[PM-41874] refactor(crypto): move tools callers to @bitwarden/legacy-crypto by @quexten in #22364

[PM-41874] refactor(crypto): move vault callers to @bitwarden/legacy-crypto by @quexten in #22365

[PM-41874] refactor(crypto): move shared client wiring callers to @bitwarden/legacy-crypto by @quexten in #22368

[PM-41874] refactor(crypto): move platform callers to @bitwarden/legacy-crypto by @quexten in #22369

[BRE-2116] Bump actions/checkout to v7.0.1 + add bypass flag in client build workflows by @brandonbiete in #22385

widen engines pin to include Node 24 by @addisonbeck in #22480

chore(lock): Move LockService into libs/unlock and add lock/unlock source tracking by @quexten in #22539

[PM-41874] Remove legacy-crypto shims (key management) by @quexten in #22578

[PM-41874] Remove legacy-crypto shims (platform) by @quexten in #22579

refactor(crypto): drop electron key service by @quexten in #22601

refactor(unlock): extract AutoUnlockService by @quexten in #22602

refactor(km): simplify process reload service by @quexten in #22646

[PM-39460] Add v2_encrypted_migrations_grace_period_start to state bridge by @eligrubb in #22653

ci: Fix not reporting test results on push and workflow_dispatch by @eliykat in #22679

key service flaky cipherDecryptionKeys$ tests by @mzieniukbw in #22680

Fix IPC doc comment by @coltonhurst in #22754

[BRE-2219] Replace 'checksum' usage with 'Get-FileHash' cmdlet for Desktop/CLI builds by @vgrassia in #22825

chore(km): Add browser and CLI process reload to codecov component by @quexten in #22869

disabling failing key service test by @mzieniukbw in #22875

Mute flaky chip-filter test by @vleague2 in #22925

Bump client version(s) by @github-actions in #23038

📦 Dependency Updates

Update sdk-internal to 0.2.0-main.956 by @bw-ghapp in #22146

[deps] Platform: Update @types/node to v22.20.1 by @renovate in #22218

Update sdk-internal to 0.2.0-main.967 by @bw-ghapp in #22326

Update sdk-internal to 0.2.0-main.970 by @bw-ghapp in #22442

[deps]: Update dtolnay/rust-toolchain digest to 4360b52 by @renovate in #22459

[deps] AC: Update core-js to v3.50.0 by @renovate in #22460

[deps]: Update actions/stale action to v11 by @renovate in #22475

Update sdk-internal to 0.2.0-main.971 by @bw-ghapp in #22512

Update sdk-internal to 0.2.0-main.978 by @bw-ghapp in #22518

Update sdk-internal to 0.2.0-main.979 by @bw-ghapp in #22581

Update sdk-internal to 0.2.0-main.983 by @bw-ghapp in #22592

Update sdk-internal to 0.2.0-main.1001 by @bw-ghapp in #22651

[deps] Platform: Update nx to v22.7.7 [SECURITY] by @renovate in #22693

Update sdk-internal to 0.2.0-main.1008 by @bw-ghapp in #22841

Update sdk-internal to 0.2.0-main.1011 by @bw-ghapp in #22892

Update sdk-internal to 0.2.0-main.1012 by @bw-ghapp in #22922

Update sdk-internal to 0.2.0-main.1013 by @bw-ghapp in #22985

🎨 Other

[AI-88] llm: Remove .claude/CONTRIBUTING.md by @SaintPatrck in #22532

[AI-94] llm: Evaluate SDK update PRs against the upstream commit range by @SaintPatrck in #22697

Full Changelog: cli-v2026.8.0...cli-v2026.9.0

Original source

What's Changed

💙 Community Highlight

[PM-29036] fix(desktop): set desktopName for Wayland app_id to display correct icon by @thisisryanswift in #17764
[PM-38964] Remove obsolete LockScreen config from AppX manifest by @hammadxcm in #21229

Feature Development

[CL-1176] Add bit-badge-group and deprecate bit-badge-list by @willmartian in #21070
[PM-32740] Add support for three new cipher types to importers by @mcamirault in #21267
[CL-1210] use overflow directive to pack primary actions when needed by @BryanCunningham in #21589
[CL-1194] responsive breadcrumbs by @BryanCunningham in #21742
[CL-1237] sidenav updates by @BryanCunningham in #21855
feat(automation-driver): add automation-driver package by @quexten in #21919
feat(automation-driver): add automation biometrics service by @quexten in #21920
feat(automation-driver): wire-in automation-driver by @quexten in #21921
[PM-40127] Item history redesign using bit-card-segmented by @nick-livefront in #21940
[CL-1245] updated icon tile colors by @BryanCunningham in #22102
PM-40304: Add the conditional Vaults nav-section logic and vault-type color mapping by @nikwithak in #22119
[CL-1293] add description and hideOnEmpty inputs to bit-row-group by @willmartian in #22129
desktop-autofill: Verify user without UI on assertion when possible [PM-29791] by @iinuwa in #22177
desktop-autofill: macOS native user verification [PM-29791] by @iinuwa in #22178
desktop-autofill: Windows native user verification [PM-29791] by @iinuwa in #22179
[PM-40312] Introduce vault items table component by @shane-melton in #22237
[CL-982] update bit-item styles by @BryanCunningham in #22242
[PM-41486] Autotype MVP & GA Feature Flag Abstraction by @coltonhurst in #22253
[CL-998] table-v2 polish by @willmartian in #22255
desktop-autofill: Refactor UV reprompt and window management [PM-29791] by @iinuwa in #22257
desktop-autofill: Define the desktop FIDO2 user verification service [PM-29791] by @iinuwa in #22258
desktop-autofill: Implement FIDO2 user verification logic [PM-29791] by @iinuwa in #22259
[PM-41273] Extend ImportService to expose per-vendor metadata by @harr1424 in #22297
Route remaining SDK-capable Send operations through the SDK by @adudek-bw in #22321
[PM-41856] Update tooltip wording for icons by @jengstrom-bw in #22345
[PM-39408] feat: Tee TS logs into LogRecorder sink by @dani-garcia in #22379
[PM-40330] Add vault list table to desktop behind VFO1Foundation flag by @nick-livefront in #22383
[CL-988] Update no items component to status lockup design by @vleague2 in #22386
[PM-40848] Add the shared folder card grid component (libs/vault) by @jengstrom-bw in #22390
[PM-41909] Remove desktop UI settings dialog feature flag by @djsmith85 in #22402
desktop-autofill: Refactor FIDO2 modals by @iinuwa in #22433
[PM-40333] Hide side-nav vault filter on desktop by @nick-livefront in #22434
desktop-autofill: Skip registration confirmation by @iinuwa in #22435
desktop-autofill: FIDO2 selection modal UI improvements by @iinuwa in #22436
[PM-40331] Vault Param Redirect by @nick-livefront in #22438
[PM-40395] Add Import button to new vault table by @nikwithak in #22439
[PM-40814] Add key id support by @quexten in #22444
[PM-39455] Use v2 upgrade token when asserting organization public key trust. by @mzieniukbw in #22490
[CL-979] Update web & desktop layout components for VFO1 by @vleague2 in #22491
[CL-998] table-v2 design review follow-up by @willmartian in #22520
[CL-1248] Add FAB button component to vault by @nick-livefront in #22523
[PM-40851] Render the shared folder grid on the desktop vault view by @jengstrom-bw in #22535
[PM-40316] Restructure the desktop side navigation by @gbubemismith in #22585
[CL-998] filter chip and menu design review follow-up by @willmartian in #22587
[PM-41475] Add the My folders page to desktop by @gbubemismith in #22588
[PM-40398] Move desktop Import to the vault table toolbar by @gbubemismith in #22589
[PM-42586] Add translated beta name to desktop tray and about menu by @trmartin4 in #22595
[CL-1244] icon tiles in menus by @BryanCunningham in #22611
[PM-39409] feat: Forward TS logs to Flight Recorder buffer by @dani-garcia in #22613
[CL-1308] sidenav fast follows by @BryanCunningham in #22616
[PM-42211] Create reusable shared folders table component by @jengstrom-bw in #22652
[PM-42483] Render My vault as a non-expandable nav item by @gbubemismith in #22671
Route Send sync and key rotation through the SDK by @adudek-bw in #22672
[PM-40849] Render the shared folder grid on the web end user vault view by @jengstrom-bw in #22677
[PM-40323] Apply vault-type color tiles to the item table and vault selector by @jaasen-livefront in #22681
[PM-41001] Create scaffold for libs/managed-settings lib by @djsmith85 in #22695
[PM-41001] Implement managed settings service by @djsmith85 in #22700
[CL-1175] Create chip group component by @vleague2 in #22823
[PM-37136] Empty vault states by @nick-livefront in #22827
[PM-42880] Add CSS class directly to form control component by @harr1424 in #22839
[PM-42898] Add breadcrumbs to shared folders pages by @jengstrom-bw in #22887
[PM-40322] [PM-40217] Account switcher moves to Footer by @ike-kottlowski in #22895
Create a DevManagedSettingsService, to override any reading of manage… by @djsmith85 in #22907
[PM-42987] Introduce feature flag for temporary item sharing on clients by @djsmith85 in #22921
[PM-42988] Move Send decryption to SDK functions by @mcamirault in #22923
[PM-39982] Create libs/tools/share using the nx lib generator plugin by @djsmith85 in #22926
[PM-39982] Create share-link icon by @djsmith85 in #22934
[PM-43013] fix(vault): restore the "My items" side-nav entry by @gbubemismith in #22937
[PM-43025] Make vault table row clickable by @shane-melton in #22939
[PM-39703] Add colored vault icon support for new table filters by @shane-melton in #22944
[PM-42118] Migrate to the new bit-chip-group component by @shane-melton in #22952

🐛 Bug fixes

[SRE-2516] Do not event upload request bodies of unlimited size by @MGibson1 in #15190
[PM-40258]: AuthRequestResponse refactor by @enmande in #22182
[PM-41487] Reuse a freshly built lunr index instead of rebuilding after the lock by @shane-melton in #22227
[PM-41559] [PM-41539] Recognize both Keeper SSO callback URL forms by @detunized in #22265
fix(biometrics): change the biometric persistent encryption migration to handle the case where the aes-cbc-hmac key has a key id by @quexten in #22336
feat(salt): [PM-27060] - Use SDK salt for MP Login by @Patrick-Pimentel-Bitwarden in #22381
[PM-41905] Add Autotype MVP Window Validity Check by @coltonhurst in #22398
[PM-41830] Shrinking Window Causes Buttons to Overlap Owner Element and Pushes More Options Menu Offscreen by @jengstrom-bw in #22419
[PM-41979] [PM-41899] [VULN-735] Validate profileId in Chromium importer by @detunized in #22432
fix(key-connector): fix sdk-based unlock with key-connector on jit provisioning by @quexten in #22545
[PM-13373] Fix Enpass CSV Importer by @harr1424 in #22561
[PM-41333] Remove IPC fingerprint and client key half by @quexten in #22645
SSH Agent import: log on failure by @neuronull in #22676
[PM-42470] Add cooldown to user key id backfill migration by @quexten in #22682
fix(updater): disable AppImage in-app auto-update by @addisonbeck in #22689
fix(key-management): Clear key id backfill cooldown on logout by @quexten in #22698
[PM-42465] Fix batch bar Clear not unchecking vault by @nick-livefront in #22706
[PM-42631] Fix flaky storybook tests for shared folder card grid by @jengstrom-bw in #22760
[PM-42394] Show Vault and Shared Folders filter chips when vault is empty by @nick-livefront in #22761
[PM-42468] fix: Prevent crash from null active account in cipher row menu services by @nick-livefront in #22776
Fix: SSH Agent sign approval requests for non-forwarded hosts by @neuronull in #22836
Fix: SSH sign request handling of non-active account by @neuronull in #22856
[PM-42932] fix: normalize null hostname from getUriHostname to prevent search crash by @nick-livefront in #22882
fix(snap): add hardware-observe plug for FIDO HID enumeration by @addisonbeck in #22885
Rolled back changes for set-password by @Patrick-Pimentel-Bitwarden in #22900
[PM-42525] Vault side nav query param preservation by @shane-melton in #22932
[PM-42994] Shared folders grid and Items table needs standard spacing by @jengstrom-bw in #22933
[PM-42991] After selecting a pagination size option the dropdown selection and pagination is no longer clickable by @jengstrom-bw in #22942

⚙️ Maintenance

[PM-35599] Update Password Request Models (Auth) by @rr-bw in #20643
[PM-38767] Adopt cargo-run-bin for binary tool version pinning in desktop_native by @coroiu in #21169
[PM-38187] Improve isSnapStore detection by @djsmith85 in #21195
[PM-41684] Remove unused Autotype MVP IPC channels by @coltonhurst in #22285
Autosync Crowdin Translations for desktop by @bw-ghapp in #22300
refactor(crypto): split out legacy compat key service by @quexten in #22319
[PM-41801] Switch to using policyAppliesToUser$ for the Autotype Default Policy by @coltonhurst in #22322
Autosync Crowdin Translations for desktop by @bw-ghapp in #22338
refactor(key-management): read the user key via userKey$ by @quexten in #22353
refactor(auth): unlock via UnlockService in login strategies by @quexten in #22354
refactor(key-management-ui): stop re-setting the user key after unlock by @quexten in #22355
refactor(auth): unlock via UnlockService when setting an initial password by @quexten in #22356
refactor(key-management): unlock via UnlockService in key connector conversion by @quexten in #22358
refactor(unlock): replace UserAutoUnlockKeyService with UnlockService by @quexten in #22359
[PM-41874] refactor(crypto): move key-management callers to @bitwarden/legacy-crypto by @quexten in #22362
[PM-41874] refactor(crypto): move auth callers to @bitwarden/legacy-crypto by @quexten in #22363
[PM-41874] refactor(crypto): move tools callers to @bitwarden/legacy-crypto by @quexten in #22364
[PM-41874] refactor(crypto): move vault callers to @bitwarden/legacy-crypto by @quexten in #22365
[PM-41874] refactor(crypto): move shared client wiring callers to @bitwarden/legacy-crypto by @quexten in #22368
[PM-41874] refactor(crypto): move platform callers to @bitwarden/legacy-crypto by @quexten in #22369
[PM-41874] refactor(crypto): move desktop-native callers to @bitwarden/legacy-crypto by @quexten in #22372
[BRE-2116] Bump actions/checkout to v7.0.1 + add bypass flag in client build workflows by @brandonbiete in #22385
[PM-38455] Remove unused premiumRequired from app.components by @djsmith85 in #22403
Remove unused loginApprovalModelRef by @djsmith85 in #22405
Autosync Crowdin Translations for desktop by @bw-ghapp in #22422
[PM-42196] Update Native Passkey Ownership by @coltonhurst in #22529
chore(lock): Move LockService into libs/unlock and add lock/unlock source tracking by @quexten in #22539
chore(shared-unlock): update to new shared unlock implementation by @quexten in #22540
Sign Windows Beta Appx in CI by @iinuwa in #22563
ci: Beta Appx manifest changes by @iinuwa in #22564
Autosync Crowdin Translations for desktop by @bw-ghapp in #22568
[PM-41874] Remove legacy-crypto shims (key management) by @quexten in #22578
[PM-41874] Remove legacy-crypto shims (platform) by @quexten in #22579
[BRE-2208] Turning off auto bump for beta releases by @pixman20 in #22582
[BRE-2208] Adding an MS store check for beta releases to fail-fast if beta version > 1 by @pixman20 in #22583
tests: add test for device trust / shared unlock / unlock ordering by @quexten in #22600
refactor(crypto): drop electron key service by @quexten in #22601
refactor(unlock): extract AutoUnlockService by @quexten in #22602
Autosync Crowdin Translations for desktop by @bw-ghapp in #22605
ci: Copy macOS autofill extension in after-pack to avoid re-signing by @iinuwa in #22621
refactor(km): simplify process reload service by @quexten in #22646
[PM-39460] Add v2_encrypted_migrations_grace_period_start to state bridge by @eligrubb in #22653
ci: Fix not reporting test results on push and workflow_dispatch by @eliykat in #22679
key service flaky cipherDecryptionKeys$ tests by @mzieniukbw in #22680
Fix IPC doc comment by @coltonhurst in #22754
Autosync Crowdin Translations for desktop by @bw-ghapp in #22768
[BRE-2219] Replace 'checksum' usage with 'Get-FileHash' cmdlet for Desktop/CLI builds by @vgrassia in #22825
disabling failing key service test by @mzieniukbw in #22875
Mute flaky chip-filter test by @vleague2 in #22925
Autosync Crowdin Translations for desktop by @bw-ghapp in #22982
Bump client version(s) by @github-actions in #23038

📦 Dependency Updates

Update sdk-internal to 0.2.0-main.956 by @bw-ghapp in #22146
[deps] Platform: Update @types/node to v22.20.1 by @renovate in #22218
[deps] Platform: Update postcss to v8.5.23 [SECURITY] by @renovate in #22324
Update sdk-internal to 0.2.0-main.967 by @bw-ghapp in #22326
Update sdk-internal to 0.2.0-main.970 by @bw-ghapp in #22442
[deps]: Update dtolnay/rust-toolchain digest to 4360b52 by @renovate in #22459
[deps] Autofill: Update wait-on to v9.1.0 by @renovate in #22461
[deps] Platform: Update Rust crate serde_with to v3.22.0 by @renovate in #22462
[deps]: Update Rust to v1.97.1 by @renovate in #22467
[deps] Desktop Native: Update Rust crate serial_test to v4 by @renovate in #22469
[deps]: Update actions/stale action to v11 by @renovate in #22475
Update sdk-internal to 0.2.0-main.971 by @bw-ghapp in #22512
Address RUSTSEC-2026-0258 by @coltonhurst in #22514
Update sdk-internal to 0.2.0-main.978 by @bw-ghapp in #22518
Automated update from source run 32391882332 by @bre-deploy in #22558
Update sdk-internal to 0.2.0-main.979 by @bw-ghapp in #22581
Update sdk-internal to 0.2.0-main.983 by @bw-ghapp in #22592
Update sdk-internal to 0.2.0-main.1001 by @bw-ghapp in #22651
[deps] Platform: Update nx to v22.7.7 [SECURITY] by @renovate in #22693
Update sdk-internal to 0.2.0-main.1008 by @bw-ghapp in #22841
Update sdk-internal to 0.2.0-main.1011 by @bw-ghapp in #22892
Update sdk-internal to 0.2.0-main.1012 by @bw-ghapp in #22922
Update sdk-internal to 0.2.0-main.1013 by @bw-ghapp in #22985

🎨 Other

[AI-88] llm: Remove .claude/CONTRIBUTING.md by @SaintPatrck in #22532
[AI-94] llm: Evaluate SDK update PRs against the upstream commit range by @SaintPatrck in #22697

New Contributors

@thisisryanswift made their first contribution in #17764
@hammadxcm made their first contribution in #21229

Full Changelog: desktop-v2026.8.0...desktop-v2026.9.0

Original source

What's Changed
Feature Development
[CL-1176] Add bit-badge-group and deprecate bit-badge-list by @willmartian in #21070
[PM-32740] Add support for three new cipher types to importers by @mcamirault in #21267
feat(browser): Add autofill for SSH keys by @quexten in #21289
Fix/late hydration shadow detection by @blackwood in #21370
[CL-1210] use overflow directive to pack primary actions when needed by @BryanCunningham in #21589
Feature/webmapper integration by @blackwood in #21738
[CL-1194] responsive breadcrumbs by @BryanCunningham in #21742
feat(automation-driver): add automation-driver package by @quexten in #21919
feat(automation-driver): wire-in automation-driver by @quexten in #21921
[PM-40127] Item history redesign using bit-card-segmented by @nick-livefront in #21940
[CL-1245] updated icon tile colors by @BryanCunningham in #22102
VaultPopupListTableComponent + Storybook by @nick-livefront in #22106
[CL-1293] add description and hideOnEmpty inputs to bit-row-group by @willmartian in #22129
[PM-41313] Add Fill Assist Policy Admin Console UI by @bensbits91 in #22204
[PM-40945] add testing to relevant components by @dan-livefront in #22224
[PM-35945] Browser: Show the Health Overview after a scan (gauge and risk categories) by @AlexRubik in #22235
[PM-40312] Introduce vault items table component by @shane-melton in #22237
[CL-982] update bit-item styles by @BryanCunningham in #22242
[PM-41314] Apply Fill Assist policy by @bensbits91 in #22244
[PM-35946] Browser: Health report at risk category detail view by @lastbestdev in #22246
[CL-998] table-v2 polish by @willmartian in #22255
[PM-37839] Browser: Delete item from at risk category view by @lastbestdev in #22268
[PM-41686]Implement plumbing for inline menu lit components by @dan-livefront in #22286
[PM-40329] Integrate VaultPopupListTableComponent into the Vault with Filters by @jaasen-livefront in #22288
[PM-41273] Extend ImportService to expose per-vendor metadata by @harr1424 in #22297
Route remaining SDK-capable Send operations through the SDK by @adudek-bw in #22321
[PM-41856] Update tooltip wording for icons by @jengstrom-bw in #22345
[PM-39223] Browser: Run the vault scan and show its progress and failure states by @AlexRubik in #22346
[PM-41687]Implement locked and saved login lit components by @dan-livefront in #22348
[PM-41688] Implement cipher list lit components by @dan-livefront in #22378
[PM-39408] feat: Tee TS logs into LogRecorder sink by @dani-garcia in #22379
[CL-988] Update no items component to status lockup design by @vleague2 in #22386
[PM-40848] Add the shared folder card grid component (libs/vault) by @jengstrom-bw in #22390
[PM-36628] Browser: Add clean state to Health at risk category detail view by @lastbestdev in #22396
[PM-41689] Implement password generator lit components by @dan-livefront in #22406
[PM-40814] Add key id support by @quexten in #22444
[CL-1236] Extension header changes by @BryanCunningham in #22484
Browser: Add dark mode image to Health tab intro CTA by @lastbestdev in #22487
[PM-39455] Use v2 upgrade token when asserting organization public key trust. by @mzieniukbw in #22490
[CL-998] table-v2 design review follow-up by @willmartian in #22520
[CL-1248] Add FAB button component to vault by @nick-livefront in #22523
[CL-998] filter chip and menu design review follow-up by @willmartian in #22587
[CL-1244] icon tiles in menus by @BryanCunningham in #22611
[PM-39409] feat: Forward TS logs to Flight Recorder buffer by @dani-garcia in #22613
[PM-29095] Move autofill attributes to gated settings by @jprusik in #22620
[PM-42211] Create reusable shared folders table component by @jengstrom-bw in #22652
[PM-35944] Extension Health Report: Upgrade to Premium by @Banrion in #22655
Route Send sync and key rotation through the SDK by @adudek-bw in #22672
[PM-40323] Apply vault-type color tiles to the item table and vault selector by @jaasen-livefront in #22681
feat(shared-unlock): add browser destination filtering by @quexten in #22683
[PM-41001] Create scaffold for libs/managed-settings lib by @djsmith85 in #22695
[PM-41001] Implement managed settings service by @djsmith85 in #22700
[PM-41001] Wire up ManagedSettingsService into dependency injection by @djsmith85 in #22806
[CL-1175] Create chip group component by @vleague2 in #22823
[PM-37136] Empty vault states by @nick-livefront in #22827
[PM-42828] Extension Health Report: Update on changes and open details by @Banrion in #22831
[PM-42914] Browser: Update copy in delete item from Health at risk dialog by @lastbestdev in #22860
[PM-41004] Create BrowserManagedConfigReader by @djsmith85 in #22880
Create a DevManagedSettingsService, to override any reading of manage… by @djsmith85 in #22907
[PM-42987] Introduce feature flag for temporary item sharing on clients by @djsmith85 in #22921
[PM-42988] Move Send decryption to SDK functions by @mcamirault in #22923
[PM-39982] Create libs/tools/share using the nx lib generator plugin by @djsmith85 in #22926
[PM-39982] Create share-link icon by @djsmith85 in #22934
[PM-39703] Add colored vault icon support for new table filters by @shane-melton in #22944
🐛 Bug fixes
[SRE-2516] Do not event upload request bodies of unlimited size by @MGibson1 in #15190
[PM-36960] fix: TOTP not copied to clipboard on stripe settings in Chrome by @bensbits91 in #20780
Fix/autofill toplayer listener dedup by @blackwood in #21511
[PM-40258]: AuthRequestResponse refactor by @enmande in #22182
[PM-41487] Reuse a freshly built lunr index instead of rebuilding after the lock by @shane-melton in #22227
[PM-41559] [PM-41539] Recognize both Keeper SSO callback URL forms by @detunized in #22265
feat(salt): [PM-27060] - Use SDK salt for MP Login by @Patrick-Pimentel-Bitwarden in #22381
[PM-42235] Browser: Health at risk category empty state fixes by @lastbestdev in #22538
fix(key-connector): fix sdk-based unlock with key-connector on jit provisioning by @quexten in #22545
[PM-13373] Fix Enpass CSV Importer by @harr1424 in #22561
[PM-42203] Gate basic auth listeners behind a feature flag by @jprusik in #22612
[PM-41333] Remove IPC fingerprint and client key half by @quexten in #22645
SSH Agent import: log on failure by @neuronull in #22676
[PM-42414] Browser health UI follow up tweaks by @lastbestdev in #22678
[PM-42470] Add cooldown to user key id backfill migration by @quexten in #22682
fix(key-management): Clear key id backfill cooldown on logout by @quexten in #22698
[PM-42631] Fix flaky storybook tests for shared folder card grid by @jengstrom-bw in #22760
[PM-42394] Show Vault and Shared Folders filter chips when vault is empty by @nick-livefront in #22761
[PM-42468] fix: Prevent crash from null active account in cipher row menu services by @nick-livefront in #22776
Vault Storybook - Remove org notification banner feature flag reference by @nick-livefront in #22833
[PM-42851] Fail the vault health scan when the exposed-password check errors by @AlexRubik in #22848
[PM-42903] Browser: Add virtual scrolling to health at risk category view by @lastbestdev in #22850
[PM-42932] fix: normalize null hostname from getUriHostname to prevent search crash by @nick-livefront in #22882
[PM-42937] Clear vault filters when active account changes by @nick-livefront in #22904
[PM-42912] Filter Icons by @nick-livefront in #22920
[PM-42913] Reuse the health scan when returning to the overview by @Banrion in #22927
[PM-43064] Look up fill assist targeting rules with frame URL instead of tab URL by @jprusik in #22990
[PM-42970] Fix folder filter restore race condition by @nick-livefront in #23013
⚙️ Maintenance
Autosync Crowdin Translations for browser by @bw-ghapp in #22301
refactor(crypto): split out legacy compat key service by @quexten in #22319
[chore] Add CODEOWNERS entry for the licensed browser DIRT directory by @AlexRubik in #22325
Autosync Crowdin Translations for browser by @bw-ghapp in #22339
refactor(key-management): read the user key via userKey$ by @quexten in #22353
refactor(auth): unlock via UnlockService in login strategies by @quexten in #22354
refactor(key-management-ui): stop re-setting the user key after unlock by @quexten in #22355
refactor(key-management): unlock via UnlockService in key connector conversion by @quexten in #22358
refactor(unlock): replace UserAutoUnlockKeyService with UnlockService by @quexten in #22359
[PM-41874] refactor(crypto): move key-management callers to @bitwarden/legacy-crypto by @quexten in #22362
[PM-41874] refactor(crypto): move auth callers to @bitwarden/legacy-crypto by @quexten in #22363
[PM-41874] refactor(crypto): move tools callers to @bitwarden/legacy-crypto by @quexten in #22364
[PM-41874] refactor(crypto): move vault callers to @bitwarden/legacy-crypto by @quexten in #22365
[PM-41874] refactor(crypto): move shared client wiring callers to @bitwarden/legacy-crypto by @quexten in #22368
[PM-41874] refactor(crypto): move platform callers to @bitwarden/legacy-crypto by @quexten in #22369
[BRE-2116] Bump actions/checkout to v7.0.1 + add bypass flag in client build workflows by @brandonbiete in #22385
Autosync Crowdin Translations for browser by @bw-ghapp in #22423
chore(lock): Move LockService into libs/unlock and add lock/unlock source tracking by @quexten in #22539
chore(shared-unlock): update to new shared unlock implementation by @quexten in #22540
Autosync Crowdin Translations for browser by @bw-ghapp in #22569
[PM-41874] Remove legacy-crypto shims (key management) by @quexten in #22578
[PM-41874] Remove legacy-crypto shims (platform) by @quexten in #22579
tests: add test for device trust / shared unlock / unlock ordering by @quexten in #22600
refactor(crypto): drop electron key service by @quexten in #22601
refactor(unlock): extract AutoUnlockService by @quexten in #22602
Autosync Crowdin Translations for browser by @bw-ghapp in #22606
refactor(km): simplify process reload service by @quexten in #22646
[PM-39460] Add v2_encrypted_migrations_grace_period_start to state bridge by @eligrubb in #22653
ci: Fix not reporting test results on push and workflow_dispatch by @eliykat in #22679
key service flaky cipherDecryptionKeys$ tests by @mzieniukbw in #22680
Fix IPC doc comment by @coltonhurst in #22754
Autosync Crowdin Translations for browser by @bw-ghapp in #22769
chore(km): Add browser and CLI process reload to codecov component by @quexten in #22869
disabling failing key service test by @mzieniukbw in #22875
Mute flaky chip-filter test by @vleague2 in #22925
Autosync Crowdin Translations for browser by @bw-ghapp in #22983
[PM-43089] Browser: Update Health intro CTA images by @lastbestdev in #23015
Bump client version(s) by @github-actions in #23038
📦 Dependency Updates
Update sdk-internal to 0.2.0-main.956 by @bw-ghapp in #22146
[deps] Platform: Update postcss to v8.5.23 [SECURITY] by @renovate in #22324
Update sdk-internal to 0.2.0-main.967 by @bw-ghapp in #22326
Update sdk-internal to 0.2.0-main.970 by @bw-ghapp in #22442
[deps]: Update dtolnay/rust-toolchain digest to 4360b52 by @renovate in #22459
[deps]: Update actions/stale action to v11 by @renovate in #22475
Update sdk-internal to 0.2.0-main.971 by @bw-ghapp in #22512
Update sdk-internal to 0.2.0-main.978 by @bw-ghapp in #22518
Update sdk-internal to 0.2.0-main.979 by @bw-ghapp in #22581
Update sdk-internal to 0.2.0-main.983 by @bw-ghapp in #22592
Update sdk-internal to 0.2.0-main.1001 by @bw-ghapp in #22651
[deps] Platform: Update nx to v22.7.7 [SECURITY] by @renovate in #22693
Update sdk-internal to 0.2.0-main.1008 by @bw-ghapp in #22841
Update sdk-internal to 0.2.0-main.1011 by @bw-ghapp in #22892
Update sdk-internal to 0.2.0-main.1012 by @bw-ghapp in #22922
Update sdk-internal to 0.2.0-main.1013 by @bw-ghapp in #22985
🎨 Other
[AI-88] llm: Remove .claude/CONTRIBUTING.md by @SaintPatrck in #22532
[AI-94] llm: Evaluate SDK update PRs against the upstream commit range by @SaintPatrck in #22697
Full Changelog: browser-v2026.8.0...browser-v2026.9.0

Original source

What's Changed

Feature Development

[PM-32211] fix private key before key rotation by @mzieniukbw in #20392
Auth/PM-39706 - Open Org Invite Link Support by @JaredSnider-Bitwarden in #21574
[CL-1210] use overflow directive to pack primary actions when needed by @BryanCunningham in #21589
[CL-1194] responsive breadcrumbs by @BryanCunningham in #21742
[CL-1237] sidenav updates by @BryanCunningham in #21855
[PM-40127] Item history redesign using bit-card-segmented by @nick-livefront in #21940
[CL-1245] updated icon tile colors by @BryanCunningham in #22102
[PM-40736] billing terminology update by @JaredScar in #22114
PM-40304: Add the conditional Vaults nav-section logic and vault-type color mapping by @nikwithak in #22119
[PM-40312] Introduce vault items table component by @shane-melton in #22237
[CL-998] table-v2 polish by @willmartian in #22255
[PM-41472] feat(web): add the My folders page by @gbubemismith in #22267
[PM-40313] Restructure the Password Manager side navigation (web) by @gbubemismith in #22283
[PM-41273] Extend ImportService to expose per-vendor metadata by @harr1424 in #22297
Auth / PM-41503 & PM-41533 - Registration - Wire new open org invite data into register start and finish by @JaredSnider-Bitwarden in #22333
[PM-34808] Step 1 remove flagged logic for policy drawers by @JaredScar in #22342
[PM-41856] Update tooltip wording for icons by @jengstrom-bw in #22345
[PM-40740] Policies list & drawers terminology updates by @JaredScar in #22377
[PM-39408] feat: Tee TS logs into LogRecorder sink by @dani-garcia in #22379
[CL-988] Update no items component to status lockup design by @vleague2 in #22386
[PM-40848] Add the shared folder card grid component (libs/vault) by @jengstrom-bw in #22390
[PM-41902] Member Access Report terminology changes by @JaredScar in #22410
[PM-41949] Enhance SecretsManagerSubscribeComponent with feature flag support by @JaredScar in #22412
[PM-40318] Introduce Web's VaultNextComponet for VFO1 by @shane-melton in #22425
[PM-40395] Add Import button to new vault table by @nikwithak in #22439
[PM-40814] Add key id support by @quexten in #22444
[PM-40212] Enable-PAM UI (member toggle + bulk Activate PAM) by @Hinton in #22478
[PM-39455] Use v2 upgrade token when asserting organization public key trust. by @mzieniukbw in #22490
[PM-40318] VFO1 Web vault query param handling by @shane-melton in #22501
[CL-1248] Add FAB button component to vault by @nick-livefront in #22523
[PM-42183] VFO1 Side nav vault scoping by @shane-melton in #22567

🐛 Bug fixes

[PM-40258]: AuthRequestResponse refactor by @enmande in #22182
[PM-11607] AC Event Log Buttons vertical alignment by @JaredScar in #22222
[PM-41559] [PM-41539] Recognize both Keeper SSO callback URL forms by @detunized in #22265
[PM-41854] fix: skip collections coachmark step for users without collections by @gbubemismith in #22376
Auth/ PM-41535 & PM-41897 - Open Org Invite Link - Update accept-error classifier for new SDK API error format by @JaredSnider-Bitwarden in #22393
Auth & KM / PM-41538 - Organization Invite Acceptance - Show invite accepted toast on TDE and KC SSO JIT flows by @JaredSnider-Bitwarden in #22394
[PM-41880] Quick fix for edit members dialog dependencies by @ttalty in #22407
[PM-41829] Login Buttons Overlap Owner and Name Elements When Resizing Browser by @jengstrom-bw in #22418
[PM-40350] Revert early return introduced in #21836 by @harr1424 in #22453
Auth/PM-41978 - Open Org Invite Acceptance - update error copy for vfo1-foundation vault terminology change by @JaredSnider-Bitwarden in #22485
[PM-42006] Self Host Premium Upgrade Copy Change by @JaredScar in #22493
[PM-42166] Update member access report terminology by @JaredScar in #22522
[PM-42239] Access Intelligence: Match v2 request password change button behavior to v1 by @lastbestdev in #22537
fix(key-connector): fix sdk-based unlock with key-connector on jit provisioning by @quexten in #22545
Revert "[PM-42239] Access Intelligence: Match v2 request password change button behavior to v1" by @lastbestdev in #22590
[PM-42470] Add cooldown to user key id backfill migration by @quexten in #22682
[PM-42443] Include member items when fetching org ciphers in Access Intelligence by @Banrion in #22749
[PM-42470] Add cooldown to user key id backfill migration (#22682) by @quexten in #22750
🍒 [PM-42443] Include member items when fetching org ciphers in Access Intelligence by @Banrion in #22751

⚙️ Maintenance

chore: remove grype scanning by @sognefej in #22289
Autosync Crowdin Translations for web by @bw-ghapp in #22302
refactor(crypto): split out legacy compat key service by @quexten in #22319
Autosync Crowdin Translations for web by @bw-ghapp in #22340
refactor(key-management): read the user key via userKey$ by @quexten in #22353
refactor(auth): unlock via UnlockService in login strategies by @quexten in #22354
refactor(auth): unlock via UnlockService when setting an initial password by @quexten in #22356
refactor(auth): unlock via UnlockService during TDE JIT registration by @quexten in #22357
refactor(key-management): unlock via UnlockService in key connector conversion by @quexten in #22358
refactor(unlock): replace UserAutoUnlockKeyService with UnlockService by @quexten in #22359
[PM-41874] refactor(crypto): move key-management callers to @bitwarden/legacy-crypto by @quexten in #22362
[PM-41874] refactor(crypto): move auth callers to @bitwarden/legacy-crypto by @quexten in #22363
[PM-41874] refactor(crypto): move tools callers to @bitwarden/legacy-crypto by @quexten in #22364
[PM-41874] refactor(crypto): move vault callers to @bitwarden/legacy-crypto by @quexten in #22365
[PM-41874] refactor(crypto): move dirt callers to @bitwarden/legacy-crypto by @quexten in #22366
[PM-41874] refactor(crypto): move admin-console callers to @bitwarden/legacy-crypto by @quexten in #22367
[PM-41874] refactor(crypto): move shared client wiring callers to @bitwarden/legacy-crypto by @quexten in #22368
[PM-41874] refactor(crypto): move platform callers to @bitwarden/legacy-crypto by @quexten in #22369
[PM-41874] refactor(crypto): move secrets-manager callers to @bitwarden/legacy-crypto by @quexten in #22370
[PM-41874] refactor(crypto): move billing callers to @bitwarden/legacy-crypto by @quexten in #22371
Add PAM Allium specification by @abergs in #22373
[BRE-2116] Bump actions/checkout to v7.0.1 + add bypass flag in client build workflows by @brandonbiete in #22385
[PM-36409] Enhance type safety across various components by @JaredScar in #22391
[PM-35785] Fix SDK breaking change: missing asUuid by @eliykat in #22392
Autosync Crowdin Translations for web by @bw-ghapp in #22424
Fix: breaking SDK change - use asUuid in tests by @eliykat in #22443
chore(lock): Move LockService into libs/unlock and add lock/unlock source tracking by @quexten in #22539
Autosync Crowdin Translations for web by @bw-ghapp in #22570
[PM-41874] Remove legacy-crypto shims (key management) by @quexten in #22578
[PM-41874] Remove legacy-crypto shims (platform) by @quexten in #22579
refactor(crypto): drop electron key service by @quexten in #22601
Autosync Crowdin Translations for web by @bw-ghapp in #22607
Bump client version(s) by @github-actions in #22608

📦 Dependency Updates

Update sdk-internal to 0.2.0-main.956 by @bw-ghapp in #22146
Update sdk-internal to 0.2.0-main.967 by @bw-ghapp in #22326
Update sdk-internal to 0.2.0-main.970 by @bw-ghapp in #22442
[deps]: Update dtolnay/rust-toolchain digest to 4360b52 by @renovate in #22459
[deps]: Update actions/stale action to v11 by @renovate in #22475
Update sdk-internal to 0.2.0-main.971 by @bw-ghapp in #22512
Update sdk-internal to 0.2.0-main.978 by @bw-ghapp in #22518
Update sdk-internal to 0.2.0-main.979 by @bw-ghapp in #22581

🎨 Other

[AI-88] llm: Remove .claude/CONTRIBUTING.md by @SaintPatrck in #22532

Full Changelog: web-v2026.8.0...web-v2026.8.1

Original source

What's Changed

💙 Community Highlight

[PM-27495] Do not show true length of password in password mask by @Mauritz8 in #17052
[PM-39312] Fix Proton Pass importer dropping custom, alias, and SSH key items by @theagg-18 in #21402
[PM-41559] [PM-41539] Recognize both Keeper SSO callback URL forms by @detunized in #22265

Feature Development

[CL-51] create file upload component by @BryanCunningham in #20899
[PM-17584] Delinea XML parser by @mcamirault in #21620
[CL-972] card updates by @BryanCunningham in #21776
[PM-40335] PAM - Add access rules domain (1/2) by @Hinton in #21810
[PM-40240][PM-40239] Updated card control features by @BryanCunningham in #21819
[PM-40335] PAM - Add access rules UI (2/2) by @Hinton in #21841
[PM-40119] Assign Collection -> "Add to shared folder" action & dialog copy by @jengstrom-bw in #21874
add problem detail support, wire up email changing by @BTreston in #21878
[PM-38389] feat: Support sales-assisted trials by @enmande in #21929
[PM-38333] feat: Annual billing savings offer on cancel by @kdenney in #21939
[PM-40252] feat: migrate shared vault components to shared-folder terminology by @jaasen-livefront in #21967
[PM-40510] feat: rename vault-filter query param to sharedFolderId by @jaasen-livefront in #21968
[PM-40654] feat: gate org-creation default collection name behind VFO1 terminology by @jaasen-livefront in #21969
[PM-40165] feat(web): migrate vault components to shared-folder terminology by @jaasen-livefront in #21993
[PM-40255] Update collection icon to bwi-shared-folder by @nick-livefront in #21996
[PM-39227] Add the browser vault-health reports service (categorize, score, emit) by @AlexRubik in #22009
[PM-40623] Update invite link service to match SDK by @eliykat in #22054
feat(data-recovery): add detection of field decryption ciphers by @quexten in #22065
[PM-35157] Remove feature flagged logic for SDK decryption flag by @JaredScar in #22078
[PM-40254] feat(desktop): migrate vault components to shared-folder terminology by @gbubemismith in #22096
[PM-41015] Add feature flag for Managed Device Framework by @djsmith85 in #22097
[PM-40733] members terminology update by @JaredScar in #22100
[PM-40731] Implement VFO1 terminology updates across collection components by @JaredScar in #22104
[PM-40732] Groups terminology changes by @JaredScar in #22105
[PM-40734] Settings Collection Terminology changes by @JaredScar in #22107
[PM-40741] Reports terminology update by @BTreston in #22112
[PM-40742] update SSO TDE copy by @BTreston in #22113
[PM-38799] Add translation for confirm flow audit events by @JimmyVo16 in #22117
[PM-40548] Web add quick copy icon setting by @jengstrom-bw in #22118
[PM-40549] Desktop add quick copy icon setting by @jengstrom-bw in #22120
[PM-38248] Remove SendEventLogging feature flag by @harr1424 in #22131
[PM-40735] event logs terminology update by @JaredScar in #22133
[PM-39978] Add Item Send enum and fix resulting build errors by @mcamirault in #22135
[PM-41312] Bump sdk-internal for Fill Assist policy type by @bensbits91 in #22206
[PM-40944] Add Delinea CSV importer, improve types for Delinea XML by @mcamirault in #22207
[PM-41438] - Add new errors for taken emails by @jrmccannon in #22220
[PM-31619]Create feature-flag for inline menu component by @dan-livefront in #22234

❗ Breaking Changes

Fix AuthEdit SDK break by @adudek-bw in #22071

🐛 Bug fixes

[PM-30289] Fix for loss of focus on extension search input by @shane-melton in #18581
PM-36838 update template to show deviceName instead of deviceType by @voommen-livefront in #21600
[PM-40766] Handle punycode-unicode domain matching for "Host" URI matching strategy by @jprusik in #21994
[PM-40800] re-add removed nested collection permissions checkbox by @BTreston in #22000
[PM-40693] Hide copy button on file Sends by @mcamirault in #22015
[PM-38639] Fix scrollbar color in desktop light mode by @vleague2 in #22039
[PM-40961] fix: don't show no master password warning for staged users by @sven-bitwarden in #22075
[PM-2803] Order collections alphabetically in collections dropdown for nested collections by @JaredScar in #22077
fix(sdk): revert sdk lifecycle changes by @quexten in #22090
[PM-41027] fix: label add-item tile as shared folder under VFO1 terminology by @gbubemismith in #22137
PM-41236 Add additional esccaping to shortcode text element by @mandreko-bitwarden in #22156
[PM-41256] User Is Unable to Create a Passport Cipher by @jengstrom-bw in #22181
Auth/PM-41303 - Direct Org Invite Acceptance - fix url paste scenario eternal spinner bug when org has MP policy by @JaredSnider-Bitwarden in #22184
fix: update sdk and add support for kdf in state bridge by @quexten in #22197
[PM-41288] Fix bug preventing edits of existing File Sends by @mcamirault in #22203
[PM-41539] fix: recognize both Keeper SSO callback URL forms (#22265) by @itsadrago in #22331
[PM-41880] Quick fix for edit members dialog dependencies by @ttalty in #22407
[PM-41880] Hotfix for edit members dialog dependencies (cherry-pick to rc) by @Banrion in #22417

⚙️ Maintenance

[PM-24097] - [Vault] Remove getOrgKey from the key service by @jaasen-livefront in #21480
[PM-36403] Group view models ts strict by @BTreston in #21825
[PM-36405] collection dialog refactor by @BTreston in #21965
[PM-40846] Support Fido2 v4 server update by @ike-kottlowski in #22006
chore(kdf-change): port change kdf to sdk by @quexten in #22032
[PM-40590] Run chromatic workflow when the workflow file is updated, to enable dep testing by @vleague2 in #22076
[PM-35791] Remove old Send access endpoints by @mcamirault in #22080
[PM-36405] Fix types in Storybook after adopting ts-strict by @eliykat in #22086
[CL-1292] update icon docs for filename-based build system by @BryanCunningham in #22108
Add t:deps label for SDK update PRs automatically by @trmartin4 in #22142
[PM-40107] Deprecate TS generator logic available in the SDK by @harr1424 in #22154
[CL-1294] Add FormRecord stories for table-v2 by @willmartian in #22160
Autosync Crowdin Translations for web by @bw-ghapp in #22162
chore: remove checkmarx from repo by @sognefej in #22183
[BRE-2153] fix(ci): Stage bit-common for commercial browser builds by @fntyler in #22198
chore(crypto): port crypto sync handler to sdk by @quexten in #22217
[BRE-2158] Add PR label to creation step for Crowdin Pull workflow by @vgrassia in #22228
Browser: Refactor client state definitions for Health feature by @lastbestdev in #22240
refactor(crypto): add legacy crypto module by @quexten in #22254
Autosync Crowdin Translations for web by @bw-ghapp in #22274
Autosync Crowdin Translations for web by @bw-ghapp in #22280
Bump client version(s) by @github-actions in #22320

📦 Dependency Updates

Update sdk-internal to 0.2.0-main.928 by @bw-ghapp in #21870
[deps] Tools: Update @bufbuild/protobuf to v2.13.0 by @renovate in #21950
[deps] UI Foundation: Update chromatic to v18 by @renovate in #21954
[deps]: Update chromaui/action action to v18 by @renovate in #21956
Auth/PM-40520 - Bump SDK versions in clients to get new registration open org invite crypto APIs by @JaredSnider-Bitwarden in #22134
[BRE-2116] Bump actions/checkout to v7.0.1 in non-privileged workflows by @brandonbiete in #22157

New Contributors

@Mauritz8 made their first contribution in #17052
@theagg-18 made their first contribution in #21402

Full Changelog: web-v2026.7.1...web-v2026.8.0

Original source

What's Changed

💙 Community Highlight

[PM-19836] Add prefix to fastmail by @lucacome in #14105
[PM-39030] Fix Proton Pass import of item custom fields by @archit-goyal in #21253
[PM-39312] Fix Proton Pass importer dropping custom, alias, and SSH key items by @theagg-18 in #21402
[PM-40685] Fix forwarder settings cache collision by @cyfrit in #21980

Feature Development

[PM-27844] Set email on sync by @ike-kottlowski in #21349
added vault health reports by @maxkpower in #21432
[PM-39778] Fix subtitles when using sdk by @jengstrom-bw in #21591
[PM-17584] Delinea XML parser by @mcamirault in #21620
[PM-34857] Remove PoliciesInAcceptedState feature flag by @eliykat in #21761
[PM-27060] feat: Call SDK for password prelogin by @ike-kottlowski in #21777
[PM-40335] PAM - Add access rules domain (1/2) by @Hinton in #21810
[PM-40216] feat: Scope organization invite link lookups by organization ID by @r-tome in #21815
feat(llm): add claude note to make key-management aware of encryption related changes by @quexten in #21818
[PM-39815] feat: Add linksEnabled to invite-link status response model by @r-tome in #21820
Pm 38122 fastmail checkbox by @bmbitwarden in #21830
[PM-40195] feat: add shared-folder localization keys by @jaasen-livefront in #21832
[PM-40286] - Add Vfo1TerminologyService and VFO1I18nPipe infrastructure by @nick-livefront in #21860
add problem detail support, wire up email changing by @BTreston in #21878
feat(shared-unlock): support trusted devices by @quexten in #21895
[PM-40111] Rename Owner to Vault field by @nick-livefront in #21897
[PM-36007] Admin change email event logging by @BTreston in #21908
[PM-40134] RoutedVaultFilterService accept a vaultId query parameter alongside organizationId by @jengstrom-bw in #21930
[PM-38794] Add OrganizationInviteLinkApiService.getInvite by @JimmyVo16 in #21932
[PM-38749] Add OrganizationInviteLinkApiService.updateSupportsConfirmation by @JimmyVo16 in #21933
[PM-38333] feat: Annual billing savings offer on cancel by @kdenney in #21939
[PM-40252] feat: migrate shared vault components to shared-folder terminology by @jaasen-livefront in #21967
[PM-40510] feat: rename vault-filter query param to sharedFolderId by @jaasen-livefront in #21968
[PM-40654] feat: gate org-creation default collection name behind VFO1 terminology by @jaasen-livefront in #21969
[PM-40255] Update collection icon to bwi-shared-folder by @nick-livefront in #21996
[PM-40623] Update invite link service to match SDK by @eliykat in #22054
[PM-35157] Remove feature flagged logic for SDK decryption flag by @JaredScar in #22078
[PM-41015] Add feature flag for Managed Device Framework by @djsmith85 in #22097
[PM-38799] Add translation for confirm flow audit events by @JimmyVo16 in #22117
[PM-38248] Remove SendEventLogging feature flag by @harr1424 in #22131
[PM-39978] Add Item Send enum and fix resulting build errors by @mcamirault in #22135
[PM-41312] Bump sdk-internal for Fill Assist policy type by @bensbits91 in #22206
[PM-40944] Add Delinea CSV importer, improve types for Delinea XML by @mcamirault in #22207
[PM-31619]Create feature-flag for inline menu component by @dan-livefront in #22234

❗ Breaking Changes

Fix AuthEdit SDK break by @adudek-bw in #22071

🐛 Bug fixes

[PM-39387] fix: Auto-sync premium status after returning from Stripe checkout by @cyprain-okeke in #21518
[PM-39992] Add support for SDK IPC unreachability by @quexten in #21653
[PM-38189] Wire InitiationPath to Organizations to Correct Trial Metadata by @sbrown-livefront in #21769
[PM-40201] SSH key items with a null public key or fingerprint fail to decrypt and break the vault by @gbubemismith in #21778
[PM-40188] Apply deletion date policy to CLI-created Sends by @mcamirault in #21845
[PM-40241] Bugfix - Rehydrate localData lastUsedDate on local cipher views by @jprusik in #21849
[PM-24945] Fix bw send receive not recognizing --password parameter by @adudek-bw in #21872
[PM-40457] Fix typos in the message catalogs by @jprusik in #21882
[PM-40370] Use decrypted ciphers cache when using SDK by @shane-melton in #21888
[PM-38557] Netwrix Password Secure importer should map URL-like fields to Bitwarden website URI by @harr1424 in #21889
[PM-40440] fix: Source upgrade cart total from server invoice preview by @amorask-bitwarden in #21902
[PM-40375] Add per-item exception handling to 1Pux import by @harr1424 in #21941
fix(key-connector): fix sdk key-connector login not working by @quexten in #21957
[PM-39845] Prevent Access Intelligence report freeze on oversized password values by @Banrion in #21987
[PM-40766] Handle punycode-unicode domain matching for "Host" URI matching strategy by @jprusik in #21994
fix: race condition leading to decryption errors by @quexten in #22063
[PM-16160] Fixes CLI issue where passwords are show via get item command in CLI by @JaredScar in #22083
fix(sdk): revert sdk lifecycle changes by @quexten in #22090
Auth/PM-41303 - Direct Org Invite Acceptance - fix url paste scenario eternal spinner bug when org has MP policy by @JaredSnider-Bitwarden in #22184
fix: update sdk and add support for kdf in state bridge by @quexten in #22197
[PM-41288] Fix bug preventing edits of existing File Sends by @mcamirault in #22203
[PM-41691] Fix issue where edit item, hidden passwords wipes password, TOTP by @JaredScar in #22329

⚙️ Maintenance

Auth/PM-3813 - 2FA Management Endpoints - User Verification Refactor by @JaredSnider-Bitwarden in #21385
[PM-24097] - [Vault] Remove getOrgKey from the key service by @jaasen-livefront in #21480
Auth/PM-39905 - Restructure organization-invite into subfolders with barrel imports by @JaredSnider-Bitwarden in #21642
[PM-39259] Migrate auth token key generation to SDK by @quexten in #21706
[PM-39259] Remove deprecated randomBytes/aesGenerateKey/createKey by @quexten in #21713
[PM-37476] Source canUseAccessIntelligence from server UseRiskInsights ability by @AlexRubik in #21760
[AppSec] AI Fix for Template Injection in GitHub Workflows Action by @aikido-autofix in #21787
Bump client version(s) by @github-actions in #21811
Fix/update CODEOWNERS by @djsmith85 in #21826
Pin NPM 11 on CLI builds by @dani-garcia in #21838
[PM-40345] Ignore Storybook stories in code coverage by @Hinton in #21842
[PM-40456] Update cSpell settings by @jprusik in #21875
chore(ci): skip platform-community signal for fork PRs by @addisonbeck in #21934
refactor(login-strategy): clean up crypto-related functions and deprecation notices by @quexten in #21958
chore: Add team-ai-sme as CODEOWNERS for .mcp.json by @SaintPatrck in #21985
docs(vault): document deprecation of TypeScript vault item decryption by @quexten in #22004
[PM-40846] Support Fido2 v4 server update by @ike-kottlowski in #22006
[BRE-2118] Adding publish CLI workflow for NPM provenance by @pixman20 in #22014
chore(kdf-change): port change kdf to sdk by @quexten in #22032
[PM-40590] Run chromatic workflow when the workflow file is updated, to enable dep testing by @vleague2 in #22076
[PM-35791] Remove old Send access endpoints by @mcamirault in #22080
Add t:deps label for SDK update PRs automatically by @trmartin4 in #22142
[PM-40107] Deprecate TS generator logic available in the SDK by @harr1424 in #22154
chore: remove checkmarx from repo by @sognefej in #22183
[BRE-2153] fix(ci): Stage bit-common for commercial browser builds by @fntyler in #22198
chore(crypto): port crypto sync handler to sdk by @quexten in #22217
[BRE-2158] Add PR label to creation step for Crowdin Pull workflow by @vgrassia in #22228
Browser: Refactor client state definitions for Health feature by @lastbestdev in #22240
refactor(crypto): add legacy crypto module by @quexten in #22254
Bump client version(s) by @github-actions in #22320

📦 Dependency Updates

[deps]: Update GitHub Artifact Actions (major) by @renovate in #19586
[deps] Autofill: Update prettier to v3.9.5 by @renovate in #21668
[deps] Platform: Update jest-preset-angular to v17 by @renovate in #21678
Update sdk-internal to 0.2.0-main.897 by @bw-ghapp in #21718
Update sdk-internal to 0.2.0-main.928 by @bw-ghapp in #21870
[deps]: Update dtolnay/rust-toolchain digest to 4cda84d by @renovate in #21948
[deps] Tools: Update @bufbuild/protobuf to v2.13.0 by @renovate in #21950
[deps] Vault: Update @koa/router to v15.7.0 by @renovate in #21951
[deps] UI Foundation: Update chromatic to v18 by @renovate in #21954
[deps]: Update chromaui/action action to v18 by @renovate in #21956
[deps] Platform: Update webpack-dev-server to v5.2.6 [SECURITY] by @renovate in #21972
Auth/PM-40520 - Bump SDK versions in clients to get new registration open org invite crypto APIs by @JaredSnider-Bitwarden in #22134
[BRE-2116] Bump actions/checkout to v7.0.1 in non-privileged workflows by @brandonbiete in #22157

New Contributors

@archit-goyal made their first contribution in #21253
@lucacome made their first contribution in #14105
@cyfrit made their first contribution in #21980
@theagg-18 made their first contribution in #21402

Full Changelog: cli-v2026.7.0...cli-v2026.8.0

Original source