What's Changed
Feature Development
- [PM-33527] Allow multiple tasks per budget by @Banrion in #8309
- feat(sso): check assertion type by @enmande in #8301
- [PM-39100] - Removing ChangeMemberEmailNoMp FF by @jrmccannon in #8318
- feat(saml): SimpleSaml local assertion encryption by @enmande in #8319
- Add support for DDG ext device type by @kspearrin in #8259
- [PM-43285] add feature flag by @BTreston in #8339
- [PM-43378] Impl new feature flag by @JaredScar in #8346
- [SM-2083] Adding feature flag gate to server side for secrets versioning by @cd-bitwarden in #8330
- [PM-38935] - Moved MembersController to v2 Update. by @jrmccannon in #8281
- [PM-41861] Add Ability to Invited Staged Users by @sven-bitwarden in #8283
- [PM-40806] add EnableEmailVerification to sever response model by @BTreston in #8342
- [Sm-1588] secrets versioning by @cd-bitwarden in #8307
- [SHOT-231] Add scheduled seeded database workflow by @mimartin12 in #8189
- [PM-39927] Subscription preview fixes by @sbrown-livefront in #8337
- [PM-43061] Gate Previews Endpoint with isOrganizationManagedByProvider Callback by @sbrown-livefront in #8343
- [PM-34732] Remove feature flagged logic by @BTreston in #8362
- [Sm-1588] Event logging for secret versioning restore event by @cd-bitwarden in #7533
- [PM-43815] feat: Add dead letter retention for event integrations by @withinfocus in #8364
🐛 Bug fixes
- [PM-16095] validation message updates server by @JaredScar in #8295
- [PM-38743] Honor a partially supplied event date range by @AlexRubik in #8265
- [PM-43035] - Set ActingUser Type for providers by @jrmccannon in #8313
- [PM-42557] - Fix TXT generation by @jrmccannon in #8333
- [PM-42491] Allow endpoint if user has permission for Manage Reset Password by @JaredScar in #8325
- [PM-43021] fix: Align server domain name validation with the web client by @sven-bitwarden in #8335
- Resolve Item-Scoped Discounts for Subscription Preview by @sbrown-livefront in #8336
- [PM-42319] - Add Inject Collection by @jrmccannon in #8267
- [PM-42357] fix: Scope collection group and member access to the organization by @r-tome in #8329
- [PM-42397] - Check IsLocal on redirect by @jrmccannon in #8332
- [PM-41863] Fix redundant Send event logging by @harr1424 in #8327
- [PM-42906] file id validations to address manipulation concerns by @itsadrago in #8326
- [PM-43632] Add new endpoint for domain slim via /mini by @JaredScar in #8357
- [PM-43027] fix: Scope invited member collection and group access to the organization by @sven-bitwarden in #8347
- [BRE-2266] Update K6 Load Tests by @vgrassia in #8379
- fix: validate encrypted string piece byte lengths by @quexten in #8328
- Cherry-pick: [PM-43897] set Reply-To on price migration email by @connerbw in #8407
- cherry-pick: PM-43809: bugfix: Skip deleting attachments in default collection on Org Vault purge by @nikwithak in #8416
⚙️ Maintenance
- QA-2360: Add organization cipher seeder scenes for remaining item types by @Corbet-BW in #8323
- [PM-36234] Consolidate into 1 auto confirm organization users command (one that is most performative) by @JaredScar in #8297
- [DBOPS-231] Rewrite SecurityTask_ReadByUserIdStatus to remove OPTION (RECOMPILE) by @rkac-bw in #8331
- [BRE-2213] Rename PR target workflow for clarity by @michalchecinski in #8341
- [PM-41861] fix: Declare send-invite response type in the OpenAPI spec by @sven-bitwarden in #8354
- [PM-43475] refactor: Remove unused deprecated Admin Console API endpoints by @eliykat in #8350
- [PM-43474] refactor: remove dead Service Bus application-cache broadcast by @eliykat in #8349
- Auth/PM-43794 - Fido2 v4 Upgrade - Extend Base64UrlSchemaFilter to all required Fido2 properties by @JaredSnider-Bitwarden in #8371
- [PM-43773] Add verification call when saving or updating an event integration by @Banrion in #8365
- fillAssistRules change for QA and Prod by @alex8bitw in #8359
- [BRE-2266] ci: Fix load test credential wiring and error logging by @withinfocus in #8380
- Revert "[PM-43773] Add verification call when saving or updating an event integration" by @Banrion in #8383
- [BRE-2266] ci: Move the client version check out of the k6 init context by @withinfocus in #8385
- Seeder/secrets manager access token minting by @nthompson-bitwarden in #8300
- [PM-39411] feat: Add flight recorder logging feature flag by @dani-garcia in #8384
- Bump version to 2026.9.1 by @github-actions[bot] in #8398
- Bumped version to 2026.9.2 (#8454) by @addisonbeck in #8456
📦 Dependency Updates
- [PM-40870] Auth renovate fido2 v4 migration by @ike-kottlowski in #8071
- [PM-44131] deps: Bump Server SDK to 1.7.0 by @justindbaur in #8471
New Contributors
- @Corbet-BW made their first contribution in #8323
Full Changelog: v2026.9.1...v2026.9.2