What's Changed
💙 Community Highlight
- [PM-41468] Fix thread-unsafe StringBuilder in Setup Helpers.Exec by @cttech-io in #8141
Feature Development
- Auth/PM-41503 and PM-41533 - Registration - Add open org invite flow support by @JaredSnider-Bitwarden in #8159
- [PM-41268] Declare the PartialData cipher response field by @Hinton in #8114
- [PM-40209] Add PAM access claim and ManageAccessRules permission by @Hinton in #8160
- [PM-32211] fix private key before key rotation by @mzieniukbw in #7548
- [PM-40336] Access Rules: domain, persistence & schema by @Hinton in #7981
- [PM-40210] Add single + bulk PAM enable flows for AccessPam by @Hinton in #8161
- [PM-40211] Authorize Access Rule endpoints with IOrganizationRequirement by @Hinton in #8162
- [PM-40336] Access Rules: API by @Hinton in #7983
- [PM-40525] PAM access rule evaluation engine by @Hinton in #7992
- feat: wire-in key id on registration and key rotation flows by @quexten in #8164
- [PM-40526] Access Leasing: domain by @Hinton in #8001
- [PM-40526] Access Leasing: persistence & schema by @Hinton in #8002
- [PM-41472] feat: add bulk folder delete endpoint by @gbubemismith in #8157
- feat(vault): add key id validation by @quexten in #8184
- [PM-39455] Set Upgrade Tokens for Organizations by @mzieniukbw in #8158
- [PM-39455] Let the organization rotate the account recovery key by @mzieniukbw in #8174
- [PM-41871] Add Chrome extension beta to allowed passkey origins by @trmartin4 in #8197
- [PM-40640] Adjust error messages for Send policy enforcement by @mcamirault in #8196
- [PM-34809] Remove feature flag for policy drawers from server by @JaredScar in #8188
- [PM-29460] feat: Authenticate PricingClient to the pricing service by @amorask-bitwarden in #8054
- [PM-39979] Add full API support for Item-type Sends by @mcamirault in #8192
❗ Breaking Changes
- [PM-36225] Upgrade Stripe SDK to 52.1.0 by @sbrown-livefront in #7643
🐛 Bug fixes
- [SHOT-247] fix: Disable proxy for container healthchecks by @keithhubner in #8170
- Ensure seeder appsettings.{env}.json can be found by @Hinton in #8222
- [PM-5108] fix: Show all owners and admins in admin portal org view by @r-tome in #8099
- [SHOT-187] fix: Make database migration execution timeout configurable by @mimartin12 in #8143
- [PM-41951] sponsored families email template copy by @JaredScar in #8217
- fix(vault): skip key id validation for organization by @quexten in #8219
- [PM-40801] Add option for alternative DataProtection settings on FIPS nodes by @eligrubb in #8092
- PM-42152 - Open Org Invite Status Endpoint - Decode org name by @JaredSnider-Bitwarden in #8227
- [PM-40300]: Restrict Provider Users' Account Recovery by @sven-bitwarden in #8103
- [PM-40350] ManagePolicies should allow read-only access to claimed organization domains by @harr1424 in #8220
- [PM-22405] - Remove invalid users from invites by @jrmccannon in #8151
- [PM-42240] perms still returned for members who were previously custom by @JaredScar in #8244
⚙️ Maintenance
- [PM-40492] Regenerate NuGet lock files during version bump by @Hinton in #8097
- [BRE] Removing build workflow and Dockerfiles by @gitclonebrian in #8173
- [BRE-2162] ci(build): Trigger downstream build on release branches by @fntyler in #8155
- [PM-37320] refactor: consolidate AuthRequest update validation and remove dead code by @ike-kottlowski in #8051
- [PM-41451] Migrate last files off of
AssemblyHelpers.GetVersion()by @justindbaur in #8137 - Remove grype scanning by @sognefej in #8180
- [PM-34546] Add integration tests for Notifications POST /send endpoint by @justindbaur in #8171
- QA-2279: add OrganizationEventScene to the seeder by @awiester-bw in #8175
- [PM-32211] Database testing CI failures fix by @mzieniukbw in #8185
- [PM-34564] Remove Core & SharedWeb from icons by @justindbaur in #8181
- [PM-35601] Add TODO comments about future conditional validation by @rr-bw in #8153
- [PM-41787] Move two-factor integration tests into a CODEOWNERS-compatible path. by @enmande in #8172
- Document the AccessRuleId write contract on ICollectionRepository by @Hinton in #8186
- [BRE-2116] Checkout v7 privileged workflows by @brandonbiete in #8194
- [PM-41917] Add lit inline menu feature flag to server by @dan-livefront in #8198
- Allow seeder to create a Free org with Secrets Manager by @nthompson-bitwarden in #8187
- feat(seeder): add --account-age-days to seed aged individual users by @nthompson-bitwarden in #8201
- [PM-38270] perf: Speed up "claimed by organization" status checks on the Members page by @r-tome in #8125
- [PM-38269] refactor: remove redundant permissions round-trip in OrganizationUserUserDetailsQuery by @r-tome in #8119
- [PM-38272] fix: handle null or empty permissions in OrganizationUserResponseModel by @JaredScar in #8207
- [PM-38326] Utilize cache for UsePolicies by @JaredScar in #8205
- [PM-38271] Speed up load org data by running queries in parallel by @JaredScar in #8202
- [PM-39422] Remove obsolete properties for organization management compatibility by @JaredScar in #8206
- Add dev.playground seeder preset with role-based login emails by @Hinton in #8223
- [PM-39455] Reuse the connection and transaction during user key rotation by @mzieniukbw in #8165
- Auth/PM-41812 - Auth - New Org User Staged Status Audit - Comment changes only by @JaredSnider-Bitwarden in #8225
- Prepare IPushNotificationService for extraction into a push library by @justindbaur in #8199
- Bump version to 2026.8.1 by @github-actions[bot] in #8247
- [BRE-2166] Add metadata to container images by @vgrassia in #8241
- [PM-38329] policies stop converting policy data on every response by @JaredScar in #8204
📦 Dependency Updates
- [deps]: Update CommunityToolkit.Aspire.Hosting.Ngrok to v13.4.0 by @renovate[bot] in #8020
- [SHOT-251] Update Dockerfile to use Ubuntu 22.04 by @mimartin12 in #8183
- [deps]: Update jquery to v4 by @renovate[bot] in #6932
- [deps]: Update dotnet monorepo by @renovate[bot] in #8018
🎨 Other
- [AI-88] llm: Remove .claude/CONTRIBUTING.md by @SaintPatrck in #8233
New Contributors
- @cttech-io made their first contribution in #8141
Full Changelog: v2026.8.0...v2026.8.1