Overview

• Fixed issue where password-protected exports couldn't be imported
• Fixed passkey authentication issue when using PIN with Never Lock timeout setting
• Several under the hood performance and security improvements

What's Changed

✨ Community Highlight

• [PM-30260] Add WebLibre to the FIDO2 privileged community list by @lucasmz-dev in #6299
• [PM-30258] Remove CalyxOS Chromium from the FIDO2 privileged list by @lucasmz-dev in #6297

⚙️ Maintenance

• PM-29843: Record item org migration events by @SaintPatrck in #6275
• [deps]: Update actions/cache action to v5 by @renovate[bot] in #6288
• [deps]: Update actions/checkout action to v6 by @renovate[bot] in #6289
• [deps]: Update actions/upload-artifact action to v6 by @renovate[bot] in #6290
• [deps]: Lock file maintenance by @renovate[bot] in #6292
• [PM-30106] Updated sdk to a version that fixes the password protected export issues (1.0.0-4328-km-fix-cherry-pick) by @aj-rosado in #6300
• [PM-14880] ci: Adds categories for automated release notes by @vvolkgang in #6302
• [PM-14880] ci: Update labels of automated PRs; set labels for PRs created by the crowdin-pull.yml workflow by @vvolkgang in #6303
• [PM-14880] Label updates to fido2 privileged apps lists by @vvolkgang in #6304
• [PM-14880] Add pull-request trigger to PR Labeling workflow and address test findings by @vvolkgang in #6305
• Review Code Triggered by labeled event by @theMickster in #6307
• Crowdin Pull by @bw-ghapp[bot] in #6286
• Update SDK to 2.0.0-4254-6c954013 by @bw-ghapp[bot] in #6218
• [deps]: Update Google ProtoBuf dependencies by @SaintPatrck in #6308
• Revert review Code Triggered by labeled event by @theMickster in #6310
• Crowdin Pull by @bw-ghapp[bot] in #6317
• Move TestHelpers to core test-fixtures module by @david-livefront in #6314
• PM-30389: Allow for different auth tab schemes by @david-livefront in #6315
• [deps]: Lock file maintenance by @renovate[bot] in #6320
• Update Androidx dependencies by @david-livefront in #6322
• Update SDK to 2.0.0-4373-3c666766 by @bw-ghapp[bot] in #6311
• Update Firebase BOM to latest versions by @david-livefront in #6324
• [PM-28271] Rename validatePin to validatePinUserKey and update SDK usage by @SaintPatrck in #6323
• [VULN-362] Move Compose tooling dependency to debugImplementation by @SaintPatrck in #6327
• Allow trailing commas in JSON by @david-livefront in #6326
• Update generated SSO uri to be typed by @david-livefront in #6329
• Update SDK to 2.0.0-4408-ef987b96 by @bw-ghapp[bot] in #6331
• Add concrete FlightRecorderDiskSource by @david-livefront in #6281
• PM-30522: Add support for processing app links for Duo, WebAuthn, and SSO by @david-livefront in #6332
• Improve clock usage patterns by @david-livefront in #6336
• Add the Archive items feature flag by @david-livefront in #6337
• [PM-28468] Updated validation and navigation for MigrateToMyItems by @aj-rosado in #6279
• Update SDK to 2.0.0-4441-c5a3b833 by @bw-ghapp[bot] in #6333
• Document best practices for Clock/Time handling by @SaintPatrck in #6340
• Improve KDoc on StateFlowExtensions by @SaintPatrck in #6338
• [PM-30899] Store account keys on new user creation by @david-livefront in #6403

Full Changelog: v2025.12.1-bwpm...v2026.1.0-bwpm
Builds Source: https://github.com/bitwarden/android/actions/runs/21299199924