bitwarden/clients web-v2026.9.0

Web v2026.9.0

on GitHub

What's Changed

Feature Development

• [PM-41689] Implement password generator lit components by @dan-livefront in #22406
• [PM-40316] Restructure the desktop side navigation by @gbubemismith in #22585
• [PM-41475] Add the My folders page to desktop by @gbubemismith in #22588
• [CL-998] table-v2 design review follow-up by @willmartian in #22520
• [PM-40398] Move desktop Import to the vault table toolbar by @gbubemismith in #22589
• feat(automation-driver): add automation-driver package by @quexten in #21919
• [PM-41909] Remove desktop UI settings dialog feature flag by @djsmith85 in #22402
• [PM-41313] Add Fill Assist Policy Admin Console UI by @bensbits91 in #22204
• [PM-40157] Change compile-time flags to default off by @trmartin4 in #22593
• [PM-35944] Extension Health Report: Upgrade to Premium by @Banrion in #22655
• [PM-41486] Autotype MVP & GA Feature Flag Abstraction by @coltonhurst in #22253
• [PM-40505] Detecting old attachments in diagnostics tool by @mzieniukbw in #22580
• Auth/PM-42167 - SSO - Add Staged Org User Support by @JaredSnider-Bitwarden in #22562
• [PM-39926] feat(billing): client foundation for preview-driven cart — types, adapter, translation, facades, HTTP clients by @cyprain-okeke in #22173
• [PM-41001] Create scaffold for libs/managed-settings lib by @djsmith85 in #22695
• [PM-29095] Move autofill attributes to gated settings by @jprusik in #22620
• feat(automation-driver): add automation biometrics service by @quexten in #21920
• [PM-42483] Render My vault as a non-expandable nav item by @gbubemismith in #22671
• Auth/PM-42267 - SSO Error Handling Improvement - Add no-seats-available error to sso-login-failed component by @JaredSnider-Bitwarden in #22705
• [PM-41001] Implement managed settings service by @djsmith85 in #22700
• [PM-41314] Apply Fill Assist policy by @bensbits91 in #22244
• [PM-40849] Render the shared folder grid on the web end user vault view by @jengstrom-bw in #22677
• Route remaining SDK-capable Send operations through the SDK by @adudek-bw in #22321
• [CL-979] Update web & desktop layout components for VFO1 by @vleague2 in #22491
• [CL-1244] icon tiles in menus by @BryanCunningham in #22611
• [PM-37197] feat: Move New organization entry points to Add plan under Settings by @cyprain-okeke in #22530
• [PM-40157] Add extension beta icons and badge by @trmartin4 in #22191
• [PM-32740] Add support for three new cipher types to importers by @mcamirault in #21267
• feat(shared-unlock): add browser destination filtering by @quexten in #22683
• [PM-42585] feat: Add Single org prerequisite to fill assist policy by @bensbits91 in #22759
• [CL-1236] Extension header changes by @BryanCunningham in #22484
• [PM-40329] Integrate VaultPopupListTableComponent into the Vault with Filters by @jaasen-livefront in #22288
• [PM-40323] Apply vault-type color tiles to the item table and vault selector by @jaasen-livefront in #22681
• [PM-40396] tools export routing change from tools to settings by @itsadrago in #22416
• [PM-42828] Extension Health Report: Update on changes and open details by @Banrion in #22831
• [PM-40851] Render the shared folder grid on the desktop vault view by @jengstrom-bw in #22535
• [PM-40324] Add upgrade callout to vfo1 side nav footer by @gbubemismith in #22765
• [PM-40159] Update remaining Add plan page copy under the VFO1 flag by @kdenney in #22657
• [PM-41001] Wire up ManagedSettingsService into dependency injection by @djsmith85 in #22806
• [CL-1308] sidenav fast follows by @BryanCunningham in #22616
• [PM-42586] Add translated beta name to desktop tray and about menu by @trmartin4 in #22595
• feat(automation-driver): wire-in automation-driver by @quexten in #21921
• [PM-39099] - Remove FF logic for Admin Member Email Change by @jrmccannon in #22772
• [PM-38574] feat: Set trialInitiationPath for sales-assisted trials by @cyprain-okeke in #22757
• [CL-998] filter chip and menu design review follow-up by @willmartian in #22587
• [CL-1176] Add bit-badge-group and deprecate bit-badge-list by @willmartian in #21070
• [PM-42880] Add CSS class directly to form control component by @harr1424 in #22839
• [PM-41309] Web: Update Passkey login report card SVG by @lastbestdev in #22785
• [PM-42211] Create reusable shared folders table component by @jengstrom-bw in #22652
• [PM-41004] Create BrowserManagedConfigReader by @djsmith85 in #22880
• [PM-42987] Introduce feature flag for temporary item sharing on clients by @djsmith85 in #22921
• [PM-42898] Add breadcrumbs to shared folders pages by @jengstrom-bw in #22887
• [CL-1175] Create chip group component by @vleague2 in #22823
• [PM-41308] Web: Passkey login report table updates by @lastbestdev in #22766
• [PM-42914] Browser: Update copy in delete item from Health at risk dialog by @lastbestdev in #22860
• [PM-41307] Web: Passkey report filter option label updates by @lastbestdev in #22780
• [PM-35381] Add final illustrations to the Access Intelligence onboarding dialogs by @AlexRubik in #22536
• [PM-43013] fix(vault): restore the "My items" side-nav entry by @gbubemismith in #22937
• [PM-43025] Make vault table row clickable by @shane-melton in #22939
• Create a DevManagedSettingsService, to override any reading of manage… by @djsmith85 in #22907
• [PM-39409] feat: Forward TS logs to Flight Recorder buffer by @dani-garcia in #22613
• [PM-39982] Create share-link icon by @djsmith85 in #22934
• [PM-39982] Create libs/tools/share using the nx lib generator plugin by @djsmith85 in #22926
• [PM-42988] Move Send decryption to SDK functions by @mcamirault in #22923
• [PM-41305] Web: Update header on all report pages by @lastbestdev in #22725
• [PM-41306] Web: Update Passkey report banner type to info by @lastbestdev in #22715
• [CL-982] update bit-item styles by @BryanCunningham in #22242
• [PM-42118] Migrate to the new bit-chip-group component by @shane-melton in #22952
• [PM-40325] feat: Restructure Admin Console side nav for VFO1 by @gbubemismith in #22890
• [PM-39703] Add colored vault icon support for new table filters by @shane-melton in #22944
• [CL-1293] add description and hideOnEmpty inputs to bit-row-group by @willmartian in #22129
• Add breadcrumbs to Shared Folder views by @nikwithak in #22717
• PM-40897: Add breadcrumbs to Appearance and Domain Rules settings pages by @nikwithak in #22787
• [PM-40322] [PM-40217] Account switcher moves to Footer by @ike-kottlowski in #22895
• [PM-37136] Empty vault states by @nick-livefront in #22827
• [PM-41981] Keep v1 users on TS key rotation when SDK key rotation is enabled by @mzieniukbw in #22849

❗ Breaking Changes

• Route Send sync and key rotation through the SDK by @adudek-bw in #22672

🐛 Bug fixes

• [PM-40120] Prompt CLI user for divergent domain access by @harr1424 in #22216
• [PM-27010] fix: Resolve tax ID type from country and value, with format guidance by @amorask-bitwarden in #22388
• [PM-42239] Access Intelligence v2 match request password change button behavior to v1 by @lastbestdev in #22641
• webauthn: Pass PRF input on unlock passkey creation by @iinuwa in #21998
• fix(updater): disable AppImage in-app auto-update by @addisonbeck in #22689
• [PM-42470] Add cooldown to user key id backfill migration by @quexten in #22682
• [PM-42414] Browser health UI follow up tweaks by @lastbestdev in #22678
• fix(key-management): Clear key id backfill cooldown on logout by @quexten in #22698
• [PM-41333] Remove IPC fingerprint and client key half by @quexten in #22645
• [PM-42443] Include member items when fetching org ciphers in Access Intelligence by @Banrion in #22749
• [PM-36960] fix: TOTP not copied to clipboard on stripe settings in Chrome by @bensbits91 in #20780
• [PM-42465] Fix batch bar Clear not unchecking vault by @nick-livefront in #22706
• [SRE-2516] Do not event upload request bodies of unlimited size by @MGibson1 in #15190
• [PM-42631] Fix flaky storybook tests for shared folder card grid by @jengstrom-bw in #22760
• [PM-42468] fix: Prevent crash from null active account in cipher row menu services by @nick-livefront in #22776
• [PM-42203] Gate basic auth listeners behind a feature flag by @jprusik in #22612
• [PM-42394] Show Vault and Shared Folders filter chips when vault is empty by @nick-livefront in #22761
• Vault Storybook - Remove org notification banner feature flag reference by @nick-livefront in #22833
• SSH Agent import: log on failure by @neuronull in #22676
• [PM-41487] Reuse a freshly built lunr index instead of rebuilding after the lock by @shane-melton in #22227
• feat(salt): [PM-27060] - Use SDK salt for MP Login by @Patrick-Pimentel-Bitwarden in #22381
• [PM-42932] fix: normalize null hostname from getUriHostname to prevent search crash by @nick-livefront in #22882
• fix(login-decryption-options): [PM-42457] -… by @Patrick-Pimentel-Bitwarden in #22649
• Fix: SSH Agent sign approval requests for non-forwarded hosts by @neuronull in #22836
• [PM-36618] Web: Fix end icon in export button on events pages by @lastbestdev in #22788
• Fix/autofill toplayer listener dedup by @blackwood in #21511
• fix(snap): add hardware-observe plug for FIDO HID enumeration by @addisonbeck in #22885
• Fix: SSH sign request handling of non-active account by @neuronull in #22856
• [PM-42912] Filter Icons by @nick-livefront in #22920
• [PM-42903] Browser: Add virtual scrolling to health at risk category view by @lastbestdev in #22850
• Rolled back changes for set-password by @Patrick-Pimentel-Bitwarden in #22900
• [PM-42913] Reuse the health scan when returning to the overview by @Banrion in #22927
• [PM-13373] Fix Enpass CSV Importer by @harr1424 in #22561
• [PM-42994] Shared folders grid and Items table needs standard spacing by @jengstrom-bw in #22933
• [PM-42851] Fail the vault health scan when the exposed-password check errors by @AlexRubik in #22848
• [PM-42525] Vault side nav query param preservation by @shane-melton in #22932
• [PM-42970] Fix folder filter restore race condition by @nick-livefront in #23013
• [PM-43064] Look up fill assist targeting rules with frame URL instead of tab URL by @jprusik in #22990
• [PM-42991] After selecting a pagination size option the dropdown selection and pagination is no longer clickable by @jengstrom-bw in #22942
• [PM-42937] Clear vault filters when active account changes by @nick-livefront in #22904
• [PM-42854] bugs with policies drawers for RC by @JaredScar in #23044

⚙️ Maintenance

• tests: add test for device trust / shared unlock / unlock ordering by @quexten in #22600
• [BRE-2208] Adding an MS store check for beta releases to fail-fast if beta version > 1 by @pixman20 in #22583
• refactor(unlock): extract AutoUnlockService by @quexten in #22602
• Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22605
• Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22606
• fix build failures on main caused by out-of-date import by @audreyality in #22666
• Auth/PM-41523 - Organization Invite Service - Introduce NoOp and make DI match client support for org invites by @JaredSnider-Bitwarden in #22494
• key service flaky cipherDecryptionKeys$ tests by @mzieniukbw in #22680
• chore(shared-unlock): update to new shared unlock implementation by @quexten in #22540
• [PM-40024] Remove obsolete keys used in messages.json for old components since we removed V2 components already by @JaredScar in #22617
• ci: Fix not reporting test results on push and workflow_dispatch by @eliykat in #22679
• Fix IPC doc comment by @coltonhurst in #22754
• [BRE-2208] Turning off auto bump for beta releases by @pixman20 in #22582
• [PM-33422] refactor: remove pm-31948-org-user-notification-banner feature flag by @jaasen-livefront in #22719
• [BRE-2166] Add metadata to container images by @vgrassia in #22804
• [PM-42443] Test cases for including My Items in Access Intelligence by @Banrion in #22755
• [BRE-2219] Replace 'checksum' usage with 'Get-FileHash' cmdlet for Desktop/CLI builds by @vgrassia in #22825
• [PM-35599] Update Password Request Models (Auth) by @rr-bw in #20643
• [PM-35601] Update Password Request Models (Admin Console) by @rr-bw in #20664
• refactor(km): simplify process reload service by @quexten in #22646
• disabling failing key service test by @mzieniukbw in #22875
• chore(km): Add browser and CLI process reload to codecov component by @quexten in #22869
• ci: Copy macOS autofill extension in after-pack to avoid re-signing by @iinuwa in #22621
• [PM-39460] Add v2_encrypted_migrations_grace_period_start to state bridge by @eligrubb in #22653
• Mute flaky chip-filter test by @vleague2 in #22925
• [BRE-2230] fix(ci): derive web build git hash from checked-out HEAD by @aj-bw in #22881
• Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22770
• Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22768
• Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22769
• Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22984
• Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22983
• Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22982
• [PM-43089] Browser: Update Health intro CTA images by @lastbestdev in #23015
• Bump client version(s) by @github-actions[bot] in #23038

📦 Dependency Updates

• [deps] AC: Update core-js to v3.50.0 by @renovate[bot] in #22460
• Update sdk-internal to 0.2.0-main.983 by @bw-ghapp[bot] in #22592
• [deps] Autofill: Update wait-on to v9.1.0 by @renovate[bot] in #22461
• Address RUSTSEC-2026-0258 by @coltonhurst in #22514
• [deps] Platform: Update postcss to v8.5.23 [SECURITY] by @renovate[bot] in #22324
• [deps] Platform: Update nx to v22.7.7 [SECURITY] by @renovate[bot] in #22693
• Automated update from source run 32391882332 by @bre-deploy[bot] in #22558
• Update sdk-internal to 0.2.0-main.1001 by @bw-ghapp[bot] in #22651
• Update sdk-internal to 0.2.0-main.1008 by @bw-ghapp[bot] in #22841
• Update sdk-internal to 0.2.0-main.1011 by @bw-ghapp[bot] in #22892
• Update sdk-internal to 0.2.0-main.1012 by @bw-ghapp[bot] in #22922
• Update sdk-internal to 0.2.0-main.1013 by @bw-ghapp[bot] in #22985

🎨 Other

• [AI-94] llm: Evaluate SDK update PRs against the upstream commit range by @SaintPatrck in #22697

New Contributors

• @bre-deploy[bot] made their first contribution in #22558

Full Changelog: web-v2026.8.1...web-v2026.9.0