CLI v2026.8.0

What's Changed

💙 Community Highlight

• [PM-19836] Add prefix to fastmail by @lucacome in #14105
• [PM-39030] Fix Proton Pass import of item custom fields by @archit-goyal in #21253
• [PM-39312] Fix Proton Pass importer dropping custom, alias, and SSH key items by @theagg-18 in #21402
• [PM-40685] Fix forwarder settings cache collision by @cyfrit in #21980

Feature Development

• [PM-27844] Set email on sync by @ike-kottlowski in #21349
• added vault health reports by @maxkpower in #21432
• [PM-39778] Fix subtitles when using sdk by @jengstrom-bw in #21591
• [PM-17584] Delinea XML parser by @mcamirault in #21620
• [PM-34857] Remove PoliciesInAcceptedState feature flag by @eliykat in #21761
• [PM-27060] feat: Call SDK for password prelogin by @ike-kottlowski in #21777
• [PM-40335] PAM - Add access rules domain (1/2) by @Hinton in #21810
• [PM-40216] feat: Scope organization invite link lookups by organization ID by @r-tome in #21815
• feat(llm): add claude note to make key-management aware of encryption related changes by @quexten in #21818
• [PM-39815] feat: Add linksEnabled to invite-link status response model by @r-tome in #21820
• Pm 38122 fastmail checkbox by @bmbitwarden in #21830
• [PM-40195] feat: add shared-folder localization keys by @jaasen-livefront in #21832
• [PM-40286] - Add Vfo1TerminologyService and VFO1I18nPipe infrastructure by @nick-livefront in #21860
• add problem detail support, wire up email changing by @BTreston in #21878
• feat(shared-unlock): support trusted devices by @quexten in #21895
• [PM-40111] Rename Owner to Vault field by @nick-livefront in #21897
• [PM-36007] Admin change email event logging by @BTreston in #21908
• [PM-40134] RoutedVaultFilterService accept a vaultId query parameter alongside organizationId by @jengstrom-bw in #21930
• [PM-38794] Add OrganizationInviteLinkApiService.getInvite by @JimmyVo16 in #21932
• [PM-38749] Add OrganizationInviteLinkApiService.updateSupportsConfirmation by @JimmyVo16 in #21933
• [PM-38333] feat: Annual billing savings offer on cancel by @kdenney in #21939
• [PM-40252] feat: migrate shared vault components to shared-folder terminology by @jaasen-livefront in #21967
• [PM-40510] feat: rename vault-filter query param to sharedFolderId by @jaasen-livefront in #21968
• [PM-40654] feat: gate org-creation default collection name behind VFO1 terminology by @jaasen-livefront in #21969
• [PM-40255] Update collection icon to bwi-shared-folder by @nick-livefront in #21996
• [PM-40623] Update invite link service to match SDK by @eliykat in #22054
• [PM-35157] Remove feature flagged logic for SDK decryption flag by @JaredScar in #22078
• [PM-41015] Add feature flag for Managed Device Framework by @djsmith85 in #22097
• [PM-38799] Add translation for confirm flow audit events by @JimmyVo16 in #22117
• [PM-38248] Remove SendEventLogging feature flag by @harr1424 in #22131
• [PM-39978] Add Item Send enum and fix resulting build errors by @mcamirault in #22135
• [PM-41312] Bump sdk-internal for Fill Assist policy type by @bensbits91 in #22206
• [PM-40944] Add Delinea CSV importer, improve types for Delinea XML by @mcamirault in #22207
• [PM-31619]Create feature-flag for inline menu component by @dan-livefront in #22234

❗ Breaking Changes

• Fix AuthEdit SDK break by @adudek-bw in #22071

🐛 Bug fixes

• [PM-39387] fix: Auto-sync premium status after returning from Stripe checkout by @cyprain-okeke in #21518
• [PM-39992] Add support for SDK IPC unreachability by @quexten in #21653
• [PM-38189] Wire InitiationPath to Organizations to Correct Trial Metadata by @sbrown-livefront in #21769
• [PM-40201] SSH key items with a null public key or fingerprint fail to decrypt and break the vault by @gbubemismith in #21778
• [PM-40188] Apply deletion date policy to CLI-created Sends by @mcamirault in #21845
• [PM-40241] Bugfix - Rehydrate localData lastUsedDate on local cipher views by @jprusik in #21849
• [PM-24945] Fix bw send receive not recognizing --password parameter by @adudek-bw in #21872
• [PM-40457] Fix typos in the message catalogs by @jprusik in #21882
• [PM-40370] Use decrypted ciphers cache when using SDK by @shane-melton in #21888
• [PM-38557] Netwrix Password Secure importer should map URL-like fields to Bitwarden website URI by @harr1424 in #21889
• [PM-40440] fix: Source upgrade cart total from server invoice preview by @amorask-bitwarden in #21902
• [PM-40375] Add per-item exception handling to 1Pux import by @harr1424 in #21941
• fix(key-connector): fix sdk key-connector login not working by @quexten in #21957
• [PM-39845] Prevent Access Intelligence report freeze on oversized password values by @Banrion in #21987
• [PM-40766] Handle punycode-unicode domain matching for "Host" URI matching strategy by @jprusik in #21994
• fix: race condition leading to decryption errors by @quexten in #22063
• [PM-16160] Fixes CLI issue where passwords are show via get item command in CLI by @JaredScar in #22083
• fix(sdk): revert sdk lifecycle changes by @quexten in #22090
• Auth/PM-41303 - Direct Org Invite Acceptance - fix url paste scenario eternal spinner bug when org has MP policy by @JaredSnider-Bitwarden in #22184
• fix: update sdk and add support for kdf in state bridge by @quexten in #22197
• [PM-41288] Fix bug preventing edits of existing File Sends by @mcamirault in #22203
• [PM-41691] Fix issue where edit item, hidden passwords wipes password, TOTP by @JaredScar in #22329

⚙️ Maintenance

• Auth/PM-3813 - 2FA Management Endpoints - User Verification Refactor by @JaredSnider-Bitwarden in #21385
• [PM-24097] - [Vault] Remove getOrgKey from the key service by @jaasen-livefront in #21480
• Auth/PM-39905 - Restructure organization-invite into subfolders with barrel imports by @JaredSnider-Bitwarden in #21642
• [PM-39259] Migrate auth token key generation to SDK by @quexten in #21706
• [PM-39259] Remove deprecated randomBytes/aesGenerateKey/createKey by @quexten in #21713
• [PM-37476] Source canUseAccessIntelligence from server UseRiskInsights ability by @AlexRubik in #21760
• [AppSec] AI Fix for Template Injection in GitHub Workflows Action by @aikido-autofix in #21787
• Bump client version(s) by @github-actions in #21811
• Fix/update CODEOWNERS by @djsmith85 in #21826
• Pin NPM 11 on CLI builds by @dani-garcia in #21838
• [PM-40345] Ignore Storybook stories in code coverage by @Hinton in #21842
• [PM-40456] Update cSpell settings by @jprusik in #21875
• chore(ci): skip platform-community signal for fork PRs by @addisonbeck in #21934
• refactor(login-strategy): clean up crypto-related functions and deprecation notices by @quexten in #21958
• chore: Add team-ai-sme as CODEOWNERS for .mcp.json by @SaintPatrck in #21985
• docs(vault): document deprecation of TypeScript vault item decryption by @quexten in #22004
• [PM-40846] Support Fido2 v4 server update by @ike-kottlowski in #22006
• [BRE-2118] Adding publish CLI workflow for NPM provenance by @pixman20 in #22014
• chore(kdf-change): port change kdf to sdk by @quexten in #22032
• [PM-40590] Run chromatic workflow when the workflow file is updated, to enable dep testing by @vleague2 in #22076
• [PM-35791] Remove old Send access endpoints by @mcamirault in #22080
• Add t:deps label for SDK update PRs automatically by @trmartin4 in #22142
• [PM-40107] Deprecate TS generator logic available in the SDK by @harr1424 in #22154
• chore: remove checkmarx from repo by @sognefej in #22183
• [BRE-2153] fix(ci): Stage bit-common for commercial browser builds by @fntyler in #22198
• chore(crypto): port crypto sync handler to sdk by @quexten in #22217
• [BRE-2158] Add PR label to creation step for Crowdin Pull workflow by @vgrassia in #22228
• Browser: Refactor client state definitions for Health feature by @lastbestdev in #22240
• refactor(crypto): add legacy crypto module by @quexten in #22254
• Bump client version(s) by @github-actions in #22320

📦 Dependency Updates

• [deps]: Update GitHub Artifact Actions (major) by @renovate in #19586
• [deps] Autofill: Update prettier to v3.9.5 by @renovate in #21668
• [deps] Platform: Update jest-preset-angular to v17 by @renovate in #21678
• Update sdk-internal to 0.2.0-main.897 by @bw-ghapp in #21718
• Update sdk-internal to 0.2.0-main.928 by @bw-ghapp in #21870
• [deps]: Update dtolnay/rust-toolchain digest to 4cda84d by @renovate in #21948
• [deps] Tools: Update @bufbuild/protobuf to v2.13.0 by @renovate in #21950
• [deps] Vault: Update @koa/router to v15.7.0 by @renovate in #21951
• [deps] UI Foundation: Update chromatic to v18 by @renovate in #21954
• [deps]: Update chromaui/action action to v18 by @renovate in #21956
• [deps] Platform: Update webpack-dev-server to v5.2.6 [SECURITY] by @renovate in #21972
• Auth/PM-40520 - Bump SDK versions in clients to get new registration open org invite crypto APIs by @JaredSnider-Bitwarden in #22134
• [BRE-2116] Bump actions/checkout to v7.0.1 in non-privileged workflows by @brandonbiete in #22157

New Contributors

• @archit-goyal made their first contribution in #21253
• @lucacome made their first contribution in #14105
• @cyfrit made their first contribution in #21980
• @theagg-18 made their first contribution in #21402

Full Changelog: cli-v2026.7.0...cli-v2026.8.0