Overview

• Fixed an issue where 2FA emails were not sent when it was the only 2FA method configured.
• Enforced HTTPS for self-hosted deployments to ensure encrypted, secure connections.
• Resolved an issue where sync checks were preventing timely vault synchronization.
• Various bug fixes, UI improvements, and internal code improvements for Android.

What's Changed

• [PM- 22735] Unsafe deserialization parcel data intent by @LRNcardozoWDF in #5419
• [PM-23546] Update 2FA verification code accept any length by @andrebispo5 in #5500
• Update to AGP v8.11.1 by @david-livefront in #5522
• Update to Junit v5.13.3 by @david-livefront in #5523
• Update OkHttp to v5.1.0 by @david-livefront in #5524
• [PM-23608] Add SDK method for generating TOTP for CipherListView by @SaintPatrck in #5519
• PM-23666: Construct unique SDK client for Authenticator Sync feature by @david-livefront in #5510
• Update the Androidx Crypto library by @david-livefront in #5527
• PM-23774: Simplify AuthenticatorBridgeRepositoryImpl by @david-livefront in #5529
• [PM-23696] Hide cards from export when policy is enabled. by @andrebispo5 in #5520
• [PM-22399] Send 2FA email when view appears by @andrebispo5 in #5498
• [BRE-831] migrate secrets akv by @pixman20 in #5347
• Update authenticatorbridge README by @SaintPatrck in #5423
• [PM-22335] Support fastlane dev via rbenv by @mpbw2 in #5390
• [BRE-769] Use Fastlane to keep github releases in sync with mobile deploy versions by @michalchecinski in #5219
• Fix unmockkStatic usage in SdkCipherRepositoryTest by @SaintPatrck in #5534
• [PM-23681] Update TotpCodeManager to use CipherListView by @SaintPatrck in #5532
• [PM-23314] Enforce HTTPS by @andrebispo5 in #5533
• [PM-23871] Update Bitwarden SDK to 1.0.0-20250715.111352-243 by @LRNcardozoWDF in #5537
• Crowdin Pull - Authenticator by @bw-ghapp[bot] in #5541
• Crowdin Pull - Password Manager by @bw-ghapp[bot] in #5542
• VULN-261: Filter out send intents that use our own content provider by @david-livefront in #5539
• PM-18405: Update the AboutScreen copy info by @david-livefront in #5538
• PM-23910: Disallow file sends for non-premium users by @david-livefront in #5544
• PM-23878: Add filter touches when obscured by @david-livefront in #5545
• PM-23878: Move filterTouchesWhenObscured to avoid actionbar issues by @david-livefront in #5546
• [BRE-768] Automate Google Play publishing by @AmyLGalles in #5256
• [deps]: Lock file maintenance by @renovate[bot] in #5548
• Allow asterisk in email validation by @SaintPatrck in #5549
• PM-24004: Push notification for sync should bypass 30 minute interval by @david-livefront in #5552
• [BRE-831] Switching to use AKV instead of GitHub secrets by @pixman20 in #5553
• [PM-22744] Refactor to use CipherListView as primary cipher source by @SaintPatrck in #5494
• PM-19185: Persist pin after a soft-logout by @david-livefront in #5555
• Disable MissingTranslation and ExtraTranslation lint checks in UI module by @SaintPatrck in #5558
• PM-24035: Add tooltip for website icons by @david-livefront in #5554
• PM-24075: Update Dynamic colors copy by @david-livefront in #5560
• [PM-23817] Move PM string to UI module and update Crowdin configuration by @SaintPatrck in #5550
• Update Firebase to v34.0.0 by @david-livefront in #5561
• Update Mockk to v1.14.5 by @david-livefront in #5562
• Update Androidx and Hilt dependencies by @david-livefront in #5563
• PM-24087: Update the add/edit ssh key title by @david-livefront in #5564
• PM-24088: Remove the MobileErrorReporting feature flag by @david-livefront in #5565
• PM-24089: Remove Mutual TLS feature flag by @david-livefront in #5566
• PM-24090: Remove ChromeAutofill feature flag by @david-livefront in #5567
• [PM-13789] add credential manager provider for passwords by @Nailik in #4110
• Update the version name to 2025.7.0 by @david-livefront in #5572
• [PM-24111] Copy Password Manager strings to ui module by @SaintPatrck in #5569
• PM-24137, PM-24138: Remove host alias feature flags by @david-livefront in #5575
• [PM-24002] Copy Authenticator strings to ui module by @SaintPatrck in #5576
• Crowdin Pull - Password Manager by @bw-ghapp[bot] in #5578
• Crowdin Pull - Authenticator by @bw-ghapp[bot] in #5581
• Crowdin Pull - Password Manager by @bw-ghapp[bot] in #5582
• PM-20152: Remove import logins flow feature flag by @david-livefront in #5580
• Crowdin Pull - Authenticator by @bw-ghapp[bot] in #5584
• 🍒 PM-24182: Fix crash in Android 13 by @david-livefront in #5591
• 🍒 [PM-24204] Correct TOTP generation to use cipherId instead of totpCode by @SaintPatrck in #5603
• 🍒 [PM-24205] Fix Fido2CredentialStore to save new credentials correctly by @SaintPatrck in #5604
• 🍒[PM-24206] Fix filtered verification code search by @SaintPatrck in #5622
• 🍒 Add Biometric logging by @david-livefront in #5645

Full Changelog: v2025.7.1-bwpm...v2025.7.2-bwpm
Builds Source: https://github.com/bitwarden/android/actions/runs/16758228945