What's Changed
Feature Development
- [PM-38923] feat: Add v2 UpdateOrganizationUser command with role-escalation validation by @jrmccannon in #7919
- [PM-38926] feat: Add admin change member email to v2 UpdateOrganizationUser command by @jrmccannon in #7964
- [PM-36011] feat: add member email change notification email by @jrmccannon in #8044
- [PM-39978] Add Item type Send support by @mcamirault in #8008
- [PM-41015] Create feature flag for managed-device-framework by @djsmith85 in #8072
- [PM-40509] Make sales-assisted trials always payment optional by @enmande in #8067
- [PM-40161] feat(admin-approval-email): Update copy by @enmande in #8079
- [PM-41065] Arch/seeder api additional auth accounts by @MGibson1 in #8077
- [PM-40515] Add the support confirmation check. by @JimmyVo16 in #8074
- Auth/PM-40521 - Registration - Optionally carry SealedOpenOrgInviteData through email verification by @JaredSnider-Bitwarden in #8037
- [PM-39430] Extract shared business-plan migration coordinator by @sbrown-livefront in #8050
- [PM-39894] fix: Exclude provider-linked organizations from add-existing-organization flow by @cyprain-okeke in #7988
- [PM-36007] add event logging for changed email by @BTreston in #8083
- [DIRT] Expose feature flag for browser extension Health tab by @lastbestdev in #8100
- [PM-38799] Add audit events for the confirm flow. by @JimmyVo16 in #8081
- [PM-40738] user facing error messages by @JaredScar in #8088
- [PM-39197] - improve vault sync performance by @gbubemismith in #8080
- [PM-41304] Add feature flag pm-40435-quick-copy-icon-setting by @jengstrom-bw in #8121
- [PM-39454] feat(km): add KeyId value type and user key id validation attribute by @quexten in #8107
- [PM-41259] Scaffold PAM cipher-lease endpoints by @Hinton in #8105
- [PM-40160] SecurityTasksNotification copy update by @jengstrom-bw in #7997
- [PM-40744] Update Server Error Messages for VFO1 by @BTreston in #8087
- [PM-40743] Update email copy for VFO1 by @BTreston in #8131
- [PM-38248] Remove SendEventLogging feature flag by @harr1424 in #8084
- [PM-41438] - Add new errors for taken emails by @jrmccannon in #8140
- [PM-41481] Fix policy enforcement when accepting invite link by @eliykat in #8146
- [PM-39454] feat(km): add UserKeyId column to the user row by @quexten in #8108
- [PM-41409] Introduce ImportRefresh Feature Flag by @harr1424 in #8126
- [PM-41311] Register Fill Assist policy by @bensbits91 in #8123
- feat(crypto): add key ids to request and response models by @quexten in #8124
- [PM-39431] feat: Implement SendInvoicePriceMigrationJob by @cyprain-okeke in #8086
- [PM-38333] feat: Annual billing savings offer on cancel by @kdenney in #8010
🐛 Bug fixes
- [PM-41066] fix: Preserve subscription schedule phase metadata on phase rebuilds by @amorask-bitwarden in #8078
- [PM-17000] fix: block self-host from autoscaling Secrets Manager seats on bulk enable by @jrmccannon in #8073
- [PM-17002] - Added self host guard to stop autoscale when self hosted and creating a service account. by @jrmccannon in #8085
- [PM-17012] - Update Org User Self Host SM Autoscale Guard by @jrmccannon in #8089
- [PM-40866] Fix Teams 2019 organization upgrades to Enterprise by @sbrown-livefront in #8057
- [PM-40507] Change Password Well Known URLs Issues by @gbubemismith in #8036
- PM-41426: PM and SM select for sales-assisted trials by @enmande in #8142
- [PM-39998] Omit org owner and admin Sends from policy enforcement by @mcamirault in #7982
- Add PendingProtection for safe protect-cert rotation when secrets land before non-secrets by @justindbaur in #8104
- [PM-41579] Update email copy by @BTreston in #8166
- [PM-41628] Update email copy by @BTreston in #8167
- [PM-40694] fix: Derive Stripe tax ID type server-side by @amorask-bitwarden in #8122
⚙️ Maintenance
- Stabilize RelayPushRegistration tests by @justindbaur in #8041
- Remove unneeded RequireFeature filter by @justindbaur in #8062
- PM-40665 - Back out the hardcoded local-sso org GUID so the preset can be reseeded by @theMickster in #8060
- docs: note ISNULL rolling-deploy pattern for JSON/TVP NOT NULL columns by @Hinton in #7991
- [PM-40946] refactor: Remove unauthenticated Stripe event recovery endpoints and Admin tool by @amorask-bitwarden in #8070
- [PM-36838] Render DeviceType display name in event integration templates by @lastbestdev in #8011
- [PM-41079] Extract SSRF protection into src/Libraries/SsrfProtection by @justindbaur in #8066
- Seeder/Add billing gateway to SingleUserScene by @nthompson-bitwarden in #8069
- Aspire: add parameter for idp configuration by @eliykat in #8082
- Seeder: Add UsePam organization override by @Hinton in #8093
- PM-40996 - Add async and post-commit step support to the seeder pipeline by @theMickster in #8094
- [PM-41220] add integration tests capturing current middleware behavior by @justindbaur in #8096
- [PM-41225] Extract exception handling into src/Libraries/ExceptionHandling by @justindbaur in #8090
- chore: remove checkmarx from repo by @sognefej in #8120
- [PM-41272] Extract organization authorization into a new library by @Hinton in #8095
- [PM-39454] refactor(users): make UpdateUserData provider-agnostic and enlist EF delegates by @quexten in #8106
- Add steps to build and push gov container images by @gitclonebrian in #7822
- [PM-35791] Remove email verification FF and legacy Send access endpoints by @mcamirault in #8065
- [BRE] Add login step for Chainguard repo by @gitclonebrian in #8129
- Move the shared exception handler to Bit.ExceptionHandling and use it for PAM endpoints by @Hinton in #8118
- [PM-41451] Migrate AC files off off
AssemblyHelpers.GetVersion()by @justindbaur in #8133 - [PM-16936] Fix double HTML encoding by @JimmyVo16 in #8047
- Update registry to FedRAMP-specific ACR by @gitclonebrian in #8148
- [PM-41451] Migrate Dirt files off of
AssemblyHelpers.GetVersion()by @justindbaur in #8136 - [PM-41451] Migrate Auth files off of
AssemblyHelpers.GetVersion()by @justindbaur in #8134 - [BRE-2158] Add PR label to _move_edd_db_scripts workflow by @vgrassia in #8145
- [PM-41451] Migrate Billing files off of
AssemblyHelpers.GetVersion()by @justindbaur in #8135 - Extract Serilog file logging into Libraries/SerilogFileLogging by @justindbaur in #8149
- QA-2270: add OrganizationGroupScene to the seeder by @awiester-bw in #8150
- [BRE-2157] ci(build): Centralize Docker image tag sanitization by @fntyler in #8144
- [PM-33046] Drop obsolete ReadAbilities stored procedures by @JimmyVo16 in #7961
- Refactor Seeder Factories by @theMickster in #8152
- Add GlobalSettingsBridge library by @justindbaur in #8156
- [BRE-2116] Bump actions/checkout to v7.0.1 in non-privileged workflows by @brandonbiete in #8101
- Bump version to 2026.8.0 by @github-actions[bot] in #8179
📦 Dependency Updates
- [deps] Platform: Lock file maintenance by @renovate[bot] in #6336
- [deps]: Update Testcontainers to v4.13.0 by @renovate[bot] in #7776
- Server update sdk by @justindbaur in #8128
- [deps] Vault: Update AngleSharp to v1.5.2 [SECURITY] by @renovate[bot] in #8012
- nginx alpine bump by @keithhubner in #8147
- [SHOT-251] build: update Dockerfile to use Ubuntu 22.04 by @mimartin12 in #8195
Full Changelog: v2026.7.2...v2026.8.0