Browser v2026.8.0
What's Changed
💙 Community Highlight
- [PM-19836] Add prefix to fastmail by @lucacome in #14105
- [PM-27495] Do not show true length of password in password mask by @Mauritz8 in #17052
- [PM-39030] Fix Proton Pass import of item custom fields by @archit-goyal in #21253
- [PM-39312] Fix Proton Pass importer dropping custom, alias, and SSH key items by @theagg-18 in #21402
- [PM-39593] reduce calls to
nodeIsElementinquery(and by extensionqueryAutofillFormAndFieldElements) by @datdenkikniet in #21498 - [PM-39704] fix(send): restore increment/decrement buttons for max access count by @harikrishna2208 in #21527
- [PM-40685] Fix forwarder settings cache collision by @cyfrit in #21980
- [PM-41559] [PM-41539] Recognize both Keeper SSO callback URL forms by @detunized in #22265
Feature Development
- [CL-51] create file upload component by @BryanCunningham in #20899
- [CL-998] bit-table-v2 and related components by @willmartian in #20900
- [PM-27844] Set email on sync by @ike-kottlowski in #21349
- [PM-10383] - confirm before deleting a passkey by @jaasen-livefront in #21497
- [PM-32384] Update copy new to create/add browser by @jengstrom-bw in #21524
- [PM-32403] Update button copy desktop by @jengstrom-bw in #21528
- [PM-39778] Fix subtitles when using sdk by @jengstrom-bw in #21591
- [PM-17584] Delinea XML parser by @mcamirault in #21620
- [PM-40060] Use native messaging dialog in browser extension settings by @quexten in #21705
- [PM-40089] Show a banner in the vault view when Fill Assist is active for the current page by @jprusik in #21754
- [PM-34857] Remove PoliciesInAcceptedState feature flag by @eliykat in #21761
- [CL-972] card updates by @BryanCunningham in #21776
- [PM-27060] feat: Call SDK for password prelogin by @ike-kottlowski in #21777
- [CL-1272] Support visually-hidden labels in bit-form-field by @willmartian in #21788
- [CL-1273] Add bitMenuClose directive to decouple menu dismissal from ARIA roles by @willmartian in #21789
- [PM-40194] - add shared-folder icon by @jaasen-livefront in #21801
- [PM-40335] PAM - Add access rules domain (1/2) by @Hinton in #21810
- [PM-40216] feat: Scope organization invite link lookups by organization ID by @r-tome in #21815
- feat(llm): add claude note to make key-management aware of encryption related changes by @quexten in #21818
- [PM-40240][PM-40239] Updated card control features by @BryanCunningham in #21819
- [PM-39815] feat: Add linksEnabled to invite-link status response model by @r-tome in #21820
- Pm 38122 fastmail checkbox by @bmbitwarden in #21830
- [PM-40195] feat: add shared-folder localization keys by @jaasen-livefront in #21832
- [PM-40286] - Add Vfo1TerminologyService and VFO1I18nPipe infrastructure by @nick-livefront in #21860
- [PM-39220] Add the At-Risk Gauge component by @AlexRubik in #21861
- [PM-40119] Assign Collection -> "Add to shared folder" action & dialog copy by @jengstrom-bw in #21874
- [PM-40193] feat: add vfo1Icon pipe for flag-gated icon swaps by @jaasen-livefront in #21876
- add problem detail support, wire up email changing by @BTreston in #21878
- feat(shared-unlock): support trusted devices by @quexten in #21895
- [PM-40111] Rename Owner to Vault field by @nick-livefront in #21897
- [PM-36007] Admin change email event logging by @BTreston in #21908
- [CL-1285] create Storybook feature-flags addon in new @bitwarden/storybook lib by @willmartian in #21913
- [PM-40134] RoutedVaultFilterService accept a vaultId query parameter alongside organizationId by @jengstrom-bw in #21930
- [PM-38794] Add OrganizationInviteLinkApiService.getInvite by @JimmyVo16 in #21932
- [PM-38749] Add OrganizationInviteLinkApiService.updateSupportsConfirmation by @JimmyVo16 in #21933
- [PM-38333] feat: Annual billing savings offer on cancel by @kdenney in #21939
- feat(register-finish-request): Add sales_assisted_token to request by @enmande in #21961
- [PM-40252] feat: migrate shared vault components to shared-folder terminology by @jaasen-livefront in #21967
- [PM-40510] feat: rename vault-filter query param to sharedFolderId by @jaasen-livefront in #21968
- [PM-40654] feat: gate org-creation default collection name behind VFO1 terminology by @jaasen-livefront in #21969
- [PM-40449] create lit cipher items and list by @dan-livefront in #21984
- [PM-40255] Update collection icon to
bwi-shared-folderby @nick-livefront in #21996 - [PM-39227] Add the browser vault-health reports service (categorize, score, emit) by @AlexRubik in #22009
- [PM-40448] create lit password generator by @dan-livefront in #22010
- [PM-35943] Browser: Add Health tab and navigation by @lastbestdev in #22045
- [PM-40623] Update invite link service to match SDK by @eliykat in #22054
- [PM-35157] Remove feature flagged logic for SDK decryption flag by @JaredScar in #22078
- [PM-40253] feat(browser): migrate vault components to shared-folder terminology by @gbubemismith in #22079
- [PM-41015] Add feature flag for Managed Device Framework by @djsmith85 in #22097
- [PM-38799] Add translation for confirm flow audit events by @JimmyVo16 in #22117
- [PM-40548] Web add quick copy icon setting by @jengstrom-bw in #22118
- [PM-40549] Desktop add quick copy icon setting by @jengstrom-bw in #22120
- [PM-38248] Remove SendEventLogging feature flag by @harr1424 in #22131
- [PM-39978] Add Item Send enum and fix resulting build errors by @mcamirault in #22135
- [PM-39075] Browser: Show Health tab berry until feature is visited by @lastbestdev in #22140
- [PM-41312] Bump sdk-internal for Fill Assist policy type by @bensbits91 in #22206
- [PM-40944] Add Delinea CSV importer, improve types for Delinea XML by @mcamirault in #22207
- [PM-39222] Browser: Add intro to Health feature by @lastbestdev in #22209
- [PM-31619]Create feature-flag for inline menu component by @dan-livefront in #22234
❗ Breaking Changes
- Fix AuthEdit SDK break by @adudek-bw in #22071
- introduce
AutofillResultby @audreyality in #22161
🐛 Bug fixes
- [PM-30289] Fix for loss of focus on extension search input by @shane-melton in #18581
- [PM-39137] Gate Access Intelligence report reads on new-architecture flag by @Banrion in #21315
- [PM-38940] Close Firefox/Safari Permissions-Policy gaps via webRequest by @bensbits91 in #21466
- [PM-39387] fix: Auto-sync premium status after returning from Stripe checkout by @cyprain-okeke in #21518
- [PM-33228] Add screen reader only to enhance a11y behavior by @BryanCunningham in #21563
- [PM-39992] Add support for SDK IPC unreachability by @quexten in #21653
- [PM-39825] Fix URI reordering, drag handle alignment by @jaasen-livefront in #21697
- [PM-39464] Fix ExpressionChangedAfterItHasBeenCheckedError when assigning collections by @nikwithak in #21743
- [PM-38189] Wire InitiationPath to Organizations to Correct Trial Metadata by @sbrown-livefront in #21769
- [PM-40201] SSH key items with a null public key or fingerprint fail to decrypt and break the vault by @gbubemismith in #21778
- [PM-40247] Fix vault item checkmarks disappearing after clearing a search by @nick-livefront in #21823
- [PM-40377] Fix bug with form field to have textarea behave the same as an input when disabled by @jengstrom-bw in #21848
- [PM-40241] Bugfix - Rehydrate localData lastUsedDate on local cipher views by @jprusik in #21849
- [CL-1277] Add disabled and readonly variants to Textarea story by @willmartian in #21851
- [CL-1282] use correct size for base icon tile by @BryanCunningham in #21856
- [PM-39772] Detect shadow hosts created from iframes by @bensbits91 in #21857
- [PM-40236] Logging out throws error mid-logout due to a race condition. User left in locked state by @mzieniukbw in #21858
- [PM-40444] Hide archive/unarchive from bulk bar in Admin Console by @nick-livefront in #21873
- [PM-39948][PM-40406] Fix native select issues with dark mode and arrow click handling by @vleague2 in #21877
- [PM-40457] Fix typos in the message catalogs by @jprusik in #21882
- [PM-40446] Enhance AutoConfirmWarningDialog by adding LinkModule to imports by @JaredScar in #21883
- [PM-18638] Prevent collection/cipher creation for suspended organizations by @JaredScar in #21887
- [PM-40370] Use decrypted ciphers cache when using SDK by @shane-melton in #21888
- [PM-38557] Netwrix Password Secure importer should map URL-like fields to Bitwarden website URI by @harr1424 in #21889
- [PM-40440] fix: Source upgrade cart total from server invoice preview by @amorask-bitwarden in #21902
- [PM-40502] communicate message extension payloads using symbol by @audreyality in #21909
- [CL-808] Support forced colors mode for form controls by @vleague2 in #21936
- [PM-40375] Add per-item exception handling to 1Pux import by @harr1424 in #21941
- fix(key-connector): fix sdk key-connector login not working by @quexten in #21957
- [PM-39845] Prevent Access Intelligence report freeze on oversized password values by @Banrion in #21987
- [PM-40766] Handle punycode-unicode domain matching for "Host" URI matching strategy by @jprusik in #21994
- [PM-40693] Hide copy button on file Sends by @mcamirault in #22015
- [PM-26503] Bugfix - Allow inline menu to escape aria model focus traps by @jprusik in #22017
- [PM-38639] Fix scrollbar color in desktop light mode by @vleague2 in #22039
- fix: race condition leading to decryption errors by @quexten in #22063
- fix(sdk): revert sdk lifecycle changes by @quexten in #22090
- [PM-41027] fix: label add-item tile as shared folder under VFO1 terminology by @gbubemismith in #22137
- [PM-40218] fix: stop autofill and save from deleting the TOTP key by @gbubemismith in #22175
- [PM-41256] User Is Unable to Create a Passport Cipher by @jengstrom-bw in #22181
- Auth/PM-41303 - Direct Org Invite Acceptance - fix url paste scenario eternal spinner bug when org has MP policy by @JaredSnider-Bitwarden in #22184
- fix: update sdk and add support for kdf in state bridge by @quexten in #22197
- [PM-41288] Fix bug preventing edits of existing File Sends by @mcamirault in #22203
- [PM-41539] fix: recognize both Keeper SSO callback URL forms (#22265) by @itsadrago in #22331
⚙️ Maintenance
- Auth/PM-3813 - 2FA Management Endpoints - User Verification Refactor by @JaredSnider-Bitwarden in #21385
- [PM-24097] - [Vault] Remove getOrgKey from the key service by @jaasen-livefront in #21480
- Auth/PM-39905 - Restructure organization-invite into subfolders with barrel imports by @JaredSnider-Bitwarden in #21642
- Autosync Crowdin Translations for browser by @bw-ghapp in #21648
- [PM-39259] Migrate auth token key generation to SDK by @quexten in #21706
- [PM-39259] Remove deprecated randomBytes/aesGenerateKey/createKey by @quexten in #21713
- [PM-37476] Source canUseAccessIntelligence from server UseRiskInsights ability by @AlexRubik in #21760
- [PM-40259] introduce
AutofillOrchestratorby @audreyality in #21768 - [AppSec] AI Fix for Template Injection in GitHub Workflows Action by @aikido-autofix in #21787
- Bump client version(s) by @github-actions in #21811
- Fix/update CODEOWNERS by @djsmith85 in #21826
- [PM-40345] Ignore Storybook stories in code coverage by @Hinton in #21842
- [PM-39966] Migrate from
@angular/platform-browser-dynamicto@angular/platform-browserby @djsmith85 in #21866 - [PM-40456] Update cSpell settings by @jprusik in #21875
- [PM-40447] Create lit prompt component by @dan-livefront in #21892
- Autosync Crowdin Translations for browser by @bw-ghapp in #21904
- Autosync Crowdin Translations for browser by @bw-ghapp in #21916
- chore(ci): skip platform-community signal for fork PRs by @addisonbeck in #21934
- refactor(login-strategy): clean up crypto-related functions and deprecation notices by @quexten in #21958
- [PM-40688] Run prettier to fix failing lint after prettier upgrade by @dan-livefront in #21981
- chore: Add team-ai-sme as CODEOWNERS for .mcp.json by @SaintPatrck in #21985
- docs(vault): document deprecation of TypeScript vault item decryption by @quexten in #22004
- [PM-40846] Support Fido2 v4 server update by @ike-kottlowski in #22006
- Autosync Crowdin Translations for browser by @bw-ghapp in #22019
- chore(kdf-change): port change kdf to sdk by @quexten in #22032
- [PM-40847] Add any missing inline menu renderings to storybook for QA by @dan-livefront in #22037
- [CL] mark bit-table-v2 as Beta in Storybook docs by @willmartian in #22072
- [PM-40590] Run chromatic workflow when the workflow file is updated, to enable dep testing by @vleague2 in #22076
- [PM-35791] Remove old Send access endpoints by @mcamirault in #22080
- [CL-1292] update icon docs for filename-based build system by @BryanCunningham in #22108
- Add t:deps label for SDK update PRs automatically by @trmartin4 in #22142
- [PM-40107] Deprecate TS generator logic available in the SDK by @harr1424 in #22154
- [CL-1294] Add FormRecord stories for table-v2 by @willmartian in #22160
- mock missing observables to suppress console errors by @audreyality in #22174
- chore: remove checkmarx from repo by @sognefej in #22183
- [BRE-2153] fix(ci): Stage bit-common for commercial browser builds by @fntyler in #22198
- chore(crypto): port crypto sync handler to sdk by @quexten in #22217
- Move browser Health tab files to commercial license by @lastbestdev in #22223
- [BRE-2158] Add PR label to creation step for Crowdin Pull workflow by @vgrassia in #22228
- [BRE-2105] Updating build process for desktop and browser beta channels by @pixman20 in #22229
- Browser: Refactor client state definitions for Health feature by @lastbestdev in #22240
- refactor(crypto): add legacy crypto module by @quexten in #22254
- Autosync Crowdin Translations for browser by @bw-ghapp in #22273
- Autosync Crowdin Translations for browser by @bw-ghapp in #22281
- Bump client version(s) by @github-actions in #22320
📦 Dependency Updates
- [deps]: Update GitHub Artifact Actions (major) by @renovate in #19586
- [deps] Autofill: Update prettier to v3.9.5 by @renovate in #21668
- [deps] Platform: Update jest-preset-angular to v17 by @renovate in #21678
- Update sdk-internal to 0.2.0-main.897 by @bw-ghapp in #21718
- Update sdk-internal to 0.2.0-main.928 by @bw-ghapp in #21870
- [deps]: Update dtolnay/rust-toolchain digest to 4cda84d by @renovate in #21948
- [deps] Tools: Update @bufbuild/protobuf to v2.13.0 by @renovate in #21950
- [deps] UI Foundation: Update chromatic to v18 by @renovate in #21954
- [deps]: Update chromaui/action action to v18 by @renovate in #21956
- [deps] Platform: Update webpack-dev-server to v5.2.6 [SECURITY] by @renovate in #21972
- Auth/PM-40520 - Bump SDK versions in clients to get new registration open org invite crypto APIs by @JaredSnider-Bitwarden in #22134
- [BRE-2116] Bump actions/checkout to v7.0.1 in non-privileged workflows by @brandonbiete in #22157
🎨 Other
- [PM-39560] [BEEEP] Add MCP server configuration for Chrome and Electron DevTools by @quexten in #21483
New Contributors
- @archit-goyal made their first contribution in #21253
- @lucacome made their first contribution in #14105
- @cyfrit made their first contribution in #21980
- @harikrishna2208 made their first contribution in #21527
- @datdenkikniet made their first contribution in #21498
- @theagg-18 made their first contribution in #21402
Full Changelog: browser-v2026.7.0...browser-v2026.8.0