Browser v2026.7.0
What's Changed
- New installs will now prompt users to allow Bitwarden to manage their browser password manager settings
- Added new save and fill flow
- Added direct Keepass import
- Various under-the-hood improvements and minor bug fixes
💙 Community Highlight
- [PM-33285] Enhance privacy in password leak detection with response padding by @TheDcoder in #19439
- [PM-35288] feat: auto-close sso tab after authentication completes by @sander-adamse in #20213
- [PM-36443] fix microsoft totp autofill by @danysigha in #20481
- [PM-38109] fix(browser): use direct clipboard API when popup has DOM access by @RobinAngele in #20859
- [PM-38123] [bug] Preserve 1Password archive state on 1pux import (closes #20694) by @999purple999 in #20867
- [PM-39177] fix(libs): correct various typos in shared libraries and documentation by @luojiyin1987 in #21320
- [PM-39180] fix(browser): correct various typos in browser extension by @luojiyin1987 in #21323
Feature Development
- [PM-33198] Keeper direct importer by @detunized in #19395
- [PM-31884] implemented controls for send policy access dropdown by @bmbitwarden in #19777
- [CL-1138] Add stacked drawer support with back button by @willmartian in #19804
- [Shared Unlock] [PM-34508] Default enable native messaging permission on browser by @quexten in #19907
- IPC Desktop <-> Browser transport by @coroiu in #19908
- Pm 31929 new send policy for deletion days by @bmbitwarden in #20128
- PM-32187 implemented restrict send type by @bmbitwarden in #20129
- [CL-1001] adding new toggle group styles by @BryanCunningham in #20403
- PM 35229 [Browser/Desktop] Stripe Checkout from upgrade dialog by @cyprain-okeke in #20592
- [PM-32696] Add data field to Cipher object to support blob encryption by @nikwithak in #20765
- [PM-37875] Automatic V2 Upgrade Migration by @quexten in #20831
- [PM-37555] add autofill lifecycle by @audreyality in #20949
- Auth/PM-38298 - Org Invite Acceptance Refactor by @JaredSnider-Bitwarden in #21011
- [PM-38565] Replace tray settings with "Keep Bitwarden running in the background" by @quexten in #21044
- [PM-38387] Introduce KeePass KDBX importer by @harr1424 in #21052
- Auth/PM-38742 - SSO Invited Existing User Flow Improvement - Show SSO redirect error notification on LoginComponent by @JaredSnider-Bitwarden in #21134
- [PM-38778]Make Bitwarden default password manager, callout implementation. by @dan-livefront in #21156
- [PM-38834]Allow programmatic changes to Firefox settings by @dan-livefront in #21177
- [PM-33408] Add OrganizationUserNotification banner to vault by @jengstrom-bw in #21209
- feat: add Region.Gov to available environments by @addisonbeck in #21211
- [PM-39048] Feat: scaffold @bitwarden/pam library by @Hinton in #21259
- [PM-34779] Add accept method to OrganizationInviteLinkApiService by @r-tome in #21266
- [PM-34023] Remove 2FA account recovery flag by @eliykat in #21291
- [PM-33054] Remove feature flag
cipher-key-encryptionby @jengstrom-bw in #21309 - [PM-39070] Create new permissions screen by @dan-livefront in #21311
- [PM-37807] Implement
VaultBatchBarComponenton organization vault by @gbubemismith in #21345 - [PM-34053] Swap verify trust to new SDK method by @Thomas-Avery in #21347
- [PM-32402] Update copy from new to add/create web app by @jengstrom-bw in #21355
- feat(platform): introduce GovModeService for FedRAMP region gating by @addisonbeck in #21366
- [PM-39071]Wire new permissions screen by @dan-livefront in #21391
- [PM-34580] Rename "Note" to "Secure note" for SecureNote cipher type by @nick-livefront in #21423
- [PM-33740] Remove unlock service for password flagged logic by @mzieniukbw in #21427
- [PM-33409] Add organizationusernotification banner to vault browser by @jengstrom-bw in #21461
- [PM-38828]Change settings order and copy by @dan-livefront in #21464
- [PM-39472] Note -> Secure Note by @nick-livefront in #21469
- [PM-33362] Autotype Edit Cipher Initial Changes by @coltonhurst in #21500
- [PM-20344] Disallow multiple attachments with the same name, handle existing in zip export format by @mcamirault in #21596
- [PM-39147] Batch bar copy fixes — singular/plural toasts and dialog title by @nick-livefront in #21602
- [CL-1158] update browser footer by @BryanCunningham in #21612
- [PM-40060] Add native messaging permission dialog by @quexten in #21703
- [PM-40060] Split shared unlock setting into desktop and web by @quexten in #21704
- [PM-39876] Implement targeting rules form category by @jprusik in #21715
- [CL-1274] Add bit-page layout region for bit-layout main content by @willmartian in #21790
🐛 Bug fixes
- [PM-39731] Hotfix: Revert "[Shared Unlock] [PM-34508] Default enable native messaging permission on browser (#19907) by @mzieniukbw in #21559
- [PM-32445] Extension Scrollbar Fix by @rr-bw in #20478
- [PM-37752] - fix collections control when extension loses focus by @jaasen-livefront in #20812
- [PM-34926] Allow single-character CJK vault searches by @jaasen-livefront in #21013
- [PM-38581] - disable drag for single custom fields by @jaasen-livefront in #21136
- [PM-38409] - update custom field value on reorder by @jaasen-livefront in #21137
- Auth/PM-35783 - Fix Org Invite Policy State Pollution and State Clearing Issue by @JaredSnider-Bitwarden in #21218
- [PM-38608] [PM-38560] Fix diacritic normalization and multi-word query handling in searchCiphersBasic by @nick-livefront in #21232
- [PM-38836] harden
calculateSubFramePositioningby @audreyality in #21282 - [PM-39200] - fix notification bar behavior with save and fill by @jaasen-livefront in #21351
- PM-37236 resolved password button issue on browser by @bmbitwarden in #21359
- fix(platform): remove hardcoded vault.bitwarden.com checks in getSendUrl and getScimUrl by @addisonbeck in #21373
- [SM-1483] Fix self-hosted environment URLs in Secrets Manager config by @vincentsalucci in #21375
- [PM-39204] Add extra spacing to vault items when batch bar is visible by @nick-livefront in #21390
- [SM-1993][CL-1227] Fix textarea height and fix SM button spacing by @vleague2 in #21417
- [PM-39392] Use readonly styles for fields intended to be readonly by @vleague2 in #21425
- [CL-1228] hide actions container if empty and always render button outside by @BryanCunningham in #21440
- [PM-39429] remeasure bulk actions bar width when actions change by @BryanCunningham in #21443
- [PM-39447] [Shared Unlock] Shared unlock stuck on lock component by @quexten in #21446
- [PM-37932] Make IPC content script re-injection idempotent by @coroiu in #21451
- [PM-38940] Close Firefox/Safari Permissions-Policy gaps via webRequest by @bensbits91 in #21466
- [PM-7036] Add support for latest LogMeOnce CSV import format, add folder mapping by @mcamirault in #21473
- manually recompile select css by @BryanCunningham in #21488
- [CL-1225] Berry should hide when count is 0 in toggle group by @vleague2 in #21491
- [PM-39349]] - make ssh key cipher fields readonly by @jaasen-livefront in #21505
- reduce select label font size by @BryanCunningham in #21525
- [PM-39695] Send fields are unexpectedly editable and changes cannot be saved by @harr1424 in #21542
- Revert "[PM-38760] Recursively create directory when writing manifest (#21141)" by @addisonbeck in #21568
- [PM-39380] Bitwarden unencrypted JSON files containing cipher keys prevent import by @harr1424 in #21587
- [PM-36888] Do auto confirm when setting is enabled by @BTreston in #21614
- [PM-31138] Perform full sync on other clients after upgrade key rotation by @quexten in #21628
- [PM-39556] Fix access selector not saving changes when the dialog field is modified by @BTreston in #21640
- [PM-37196] Tooltip expand max-width by @JaredScar in #21646
- Revert "[Shared Unlock] [PM-34508] Default enable native messaging pe… by @quexten in #21687
- [PM-39977] Fix broken shared unlock for browser-desktop in non-dev mode by @quexten in #21688
- [PM-39570] use correct fill for bup logo by @BryanCunningham in #21694
- Prevent connect to desktop in ipc background if native messaging permission is missing by @quexten in #21702
- [PM-38392] Route password-protected Send saves through the SDK by @adudek-bw in #21725
- fix(biometrics): Biometric unlock does not work over SDK by @quexten in #21730
- fix(unlock): Biometric unlock shows error dialog when cancelling by @quexten in #21731
- fix(vault): archive and unarchive missing from bulk bar for org items by @nick-livefront in #21741
- Render native form control UI in dark theme with color-scheme: dark by @maxkpower in #21771
- [CL-1263] Increase active bottom navigation label font weight by @BryanCunningham in #21772
- fix(browser): Fix biometrics setup and connection issues by @quexten in #21782
- [PM-38940] Cherry-pick to rc: Fix Permissions-Policy VULN-582 (#21466) by @bensbits91 in #21834
- [PM-40303] Fix logout when underprivileged user accesses Manage Send policy by @harr1424 in #21836
- [PM-40303] Cherry-pick to rc: Fix user logout when missing permissions by @harr1424 in #21846
- [PM-40236][RC] Logging out throws error mid-logout due to a race condition. User left in locked state by @mzieniukbw in #21869
⚙️ Maintenance
- [PM-35600] Update Password Request Models (Key Management) by @rr-bw in #20665
- [PM-4439] Replace oidc-client-ts with oauth4webapi by @harr1424 in #20824
- [PM-12043] Remove usage of ActiveUserState from biometric-state.service by @mzieniukbw in #20860
- Stop cosmetic mutations in light DOM from doing rebuild work by @blackwood in #21084
- [PM-38958] Add ESLint no package self import rule by @quexten in #21198
- Auth/BEEEP/PM-21301 - Move SelfHostedEnvConfigDialog out of libs/auth by @JaredSnider-Bitwarden in #21268
- [BRE-2013] Fix repo name in PR description link by @vgrassia in #21276
- [CL-1223] simplify banner component by @BryanCunningham in #21301
- [PM-39141] Fail Safari packaging script on xcodebuild/codesign errors and missing executable by @quexten in #21307
- [PM-36841] Align Subtitles for all new Item Types by @jengstrom-bw in #21316
- [PM-39182] Migrate to relative imports - @bitwarden/team-billing-dev by @quexten in #21325
- [PM-39182] Migrate to relative imports - @bitwarden/team-data-insights-and-reporting-dev by @quexten in #21327
- [PM-39182] Migrate to relative imports - @bitwarden/team-ui-foundation by @quexten in #21328
- [PM-39182] Migrate to relative imports - @bitwarden/team-admin-console-dev by @quexten in #21329
- [PM-39182] Migrate to relative imports - @bitwarden/team-auth-dev by @quexten in #21330
- [PM-39182] Migrate to relative imports - @bitwarden/team-vault-dev by @quexten in #21331
- [PM-39182] Migrate to relative imports - @bitwarden/team-key-management-dev by @quexten in #21333
- Remove unneeded import for ChipActionComponent by @jengstrom-bw in #21342
- [PM-38190] Improve sanitization of storybook args helper by @vleague2 in #21362
- [PM 34708] Use new shared enforce label workflow by @djsmith85 in #21365
- [PM-9420] - add cipher$ observable to cipher service by @jaasen-livefront in #21383
- [deps]: Pin dependencies by @renovate in #21406
- [VULN-649] ci: Remove deprecated scan workflow by @theMickster in #21429
- [PM-38904] - Managed to Claimed Rename by @jrmccannon in #21430
- [deps] Fix Rust nightly toolchain reference in lint workflow by @coroiu in #21457
- add data-testids to log in elements by @nthompson-bitwarden in #21458
- [PM-39182] Enable no relative imports rule by @quexten in #21515
- introduce
AutofillLifecycleServiceby @audreyality in #21530 - [PM-35812] Remove feature flag by @JaredScar in #21567
- [PM-33362] Use signals for the app label by @coltonhurst in #21638
- [CL-1258] Add NumberInput story to bit-form-field by @willmartian in #21692
- [CL-1261] Add date input form field story by @willmartian in #21695
- [PM-39259] Migrate key-management consumers to SDK key generation by @quexten in #21707
- [PM-39259] Migrate vault export and generator to SDK random number client by @quexten in #21708
- [PM-39259] Migrate FIDO2 credential id to SDK random by @quexten in #21712
- [PM-39259] Remove typescript cipherkey generation by @quexten in #21729
- [PM-34458] Add release.yml to bitwarden/clients by @djsmith85 in #21732
- chore(ci): add platform-community code-review signal by @addisonbeck in #21751
- Bump client version(s) by @github-actions in #21811
- Bumped client version(s) (#21811) by @addisonbeck in #21817
📦 Dependency Updates
- [deps] UI Foundation: Update @storybook/test-runner to v0.24.4 by @renovate in #17854
- [PM-35903] Update clients to node 24 by @dani-garcia in #20400
- Update sdk-internal to 0.2.0-main.843 by @bw-ghapp in #21233
- [deps] Platform: Update @babel/core to v7.29.6 [SECURITY] by @renovate in #21277
- Update sdk-internal to 0.2.0-main.849 by @bw-ghapp in #21299
- [PM-39351][PM-39353][PM-39369] Update Angular to 21.2.17 by @vleague2 in #21377
- Update sdk-internal to 0.2.0-main.857 by @bw-ghapp in #21393
- [deps] Platform: Update webpack-dev-server to v5.2.5 [SECURITY] by @renovate in #21404
- [deps]: Update codecov/codecov-action action to v7 by @renovate in #21409
- Update sdk-internal to 0.2.0-main.859 by @bw-ghapp in #21475
- Update sdk-internal to 0.2.0-main.870 by @bw-ghapp in #21482
- Update sdk-internal to 0.2.0-main.872 by @bw-ghapp in #21651
- [deps]: Update dtolnay/rust-toolchain digest to 4be7066 by @renovate in #21667
- Update sdk-internal to 0.2.0-main.883 by @bw-ghapp in #21686
- chore(deps): move rand to KM Renovate ownership by @addisonbeck in #21719
- Fix lockfile by @dani-garcia in #21763
🎨 Other
- [PM-39008] Do not show save new password inline menu over generate password menu if a new password has not been filled by @jprusik in #21244
- Bump client version(s) by @github-actions in #21271
- Auth/Add CLAUDE.md files to angular/src/auth and common/src/auth on file organization + barrel files by @JaredSnider-Bitwarden in #21283
- Autosync Crowdin Translations for browser by @bw-ghapp in #21380
- Disable self import rule by @quexten in #21410
- Autosync Crowdin Translations for browser by @bw-ghapp in #21507
- Add claude snap permissions rule by @quexten in #21514
New Contributors
- @sander-adamse made their first contribution in #20213
- @danysigha made their first contribution in #20481
- @TheDcoder made their first contribution in #19439
- @RobinAngele made their first contribution in #20859
- @luojiyin1987 made their first contribution in #21322
- @999purple999 made their first contribution in #20867
Full Changelog: browser-v2026.6.1...browser-v2026.7.0