Web v2026.7.0

What's Changed

💙 Community Highlight

• [PM-38123] [bug] Preserve 1Password archive state on 1pux import (closes #20694) by @999purple999 in #20867
• [PM-39177] fix(libs): correct various typos in shared libraries and documentation by @luojiyin1987 in #21320

Feature Development

• [PM-33198] Keeper direct importer by @detunized in #19395
• [CL-1138] Add stacked drawer support with back button by @willmartian in #19804
• Pm 31929 new send policy for deletion days by @bmbitwarden in #20128
• PM-32187 implemented restrict send type by @bmbitwarden in #20129
• [CL-1001] adding new toggle group styles by @BryanCunningham in #20403
• [PM-37944] Differentiate Send events according to domain by @harr1424 in #20787
• [PM-35796] Use SDK bindings for invite link generation by @BTreston in #21004
• [PM-38387] Introduce KeePass KDBX importer by @harr1424 in #21052
• feat: add Region.Gov to available environments by @addisonbeck in #21211
• [PM-33054] Remove feature flag cipher-key-encryption by @jengstrom-bw in #21309
• [PM-37978] update UI for MP policy, refactor org lookup by @BTreston in #21313
• [PM-34393] Show invite link events in event log by @r-tome in #21335
• [PM-32402] Update copy from new to add/create web app by @jengstrom-bw in #21355
• feat(platform): introduce GovModeService for FedRAMP region gating by @addisonbeck in #21366
• [PM-38210] Remove access-intelligence-trend-chart feature flag by @lastbestdev in #21376
• [PM-38481] Add Staged Filter for Organization Members by @sven-bitwarden in #21394
• [PM-39472] Note -> Secure Note by @nick-livefront in #21469
• [PM-38480] Add Staged Event Message by @sven-bitwarden in #21499
• [PM-33362] Autotype Edit Cipher Initial Changes by @coltonhurst in #21500
• [PM-37988] Add SessionTimeoutPolicyV2 component usage for new policy drawers by @JaredScar in #21561
• [PM-37989] update drawer UI for password generator policy by @JaredScar in #21564
• [PM-37987] update drawer UI for account recovery administration policy by @JaredScar in #21565
• Auth/PM-39774 - SSO - Improve error for existing users without org membership by @JaredSnider-Bitwarden in #21573
• [PM-38346] Single Org and Autofill into SimpleTogglePolicyComponent by @JaredScar in #21595
• [PM-20344] Disallow multiple attachments with the same name, handle existing in zip export format by @mcamirault in #21596
• [PM-37963] - Add Staged Member Actions by @sven-bitwarden in #21597
• [PM-39147] Batch bar copy fixes — singular/plural toasts and dialog title by @nick-livefront in #21602
• [PM-40074] Refactor policy definitions to remove deprecated versions and streamline components by @JaredScar in #21717
• [PM-36505] Finalize Send Controls policy design, adjust base policy component enabled display logic by @mcamirault in #21739
• [PM-40126] Update organizationusernotificationpolicy for policy drawer by @jengstrom-bw in #21747
• [PM-37964] Add Ability to Disable Automatic Invitations in SCIM by @sven-bitwarden in #21756
• Finalize Manage Send policy description by @mcamirault in #21786
• [CL-1274] Add bit-page layout region for bit-layout main content by @willmartian in #21790

🐛 Bug fixes

• [PM-38763] Exclude sponsorship redemption from premium-to-org upgrade flow by @sbrown-livefront in #21180
• [PM-38608] [PM-38560] Fix diacritic normalization and multi-word query handling in searchCiphersBasic by @nick-livefront in #21232
• [PM-38761] Fix hard-coded families plan price in revoke sponsorship dialog by @sbrown-livefront in #21243
• [PM-38896] Enhance DefaultCollectionService tests and improve decryption by @JaredScar in #21439
• [PM-39447] [Shared Unlock] Shared unlock stuck on lock component by @quexten in #21446
• [PM-38940] Close Firefox/Safari Permissions-Policy gaps via webRequest by @bensbits91 in #21466
• [PM-7036] Add support for latest LogMeOnce CSV import format, add folder mapping by @mcamirault in #21473
• [PM-38262] Apply tolerant-validator pattern to V2 read path in Access Intelligence by @Banrion in #21474
• [PM-39269] Fix At-Risk Members CSV export including extra columns by @AlexRubik in #21477
• [PM-39349]] - make ssh key cipher fields readonly by @jaasen-livefront in #21505
• [PM-38771] - add missing i18n strings for button labels by @jaasen-livefront in #21509
• [PM-39695] Send fields are unexpectedly editable and changes cannot be saved by @harr1424 in #21542
• [PM-37978] Fix stories by @BTreston in #21566
• Revert "[PM-38760] Recursively create directory when writing manifest (#21141)" by @addisonbeck in #21568
• [PM-39799] Fix type errors by @BTreston in #21583
• [PM-39380] Bitwarden unencrypted JSON files containing cipher keys prevent import by @harr1424 in #21587
• [PM-39796] Fix bug in new Send dropdown component that prevented navigation after Send creation by @mcamirault in #21590
• [PM-39060] Fix new org button not showing up by @BTreston in #21594
• [PM-39805] fix: Exclude permanent migration-grace machine accounts from billable count by @amorask-bitwarden in #21598
• [PM-39780] Toast text is incorrect when editing collection access by @gbubemismith in #21601
• [PM-31138] Perform full sync on other clients after upgrade key rotation by @quexten in #21628
• [PM-39554] Create default collection when admin is demoted to user by @BTreston in #21632
• [PM-39891] Fix edit member dialog badge by @BTreston in #21637
• [PM-39900] Enhance PoliciesComponent to clear drawer reference after closing by @JaredScar in #21639
• [PM-39556] Fix access selector not saving changes when the dialog field is modified by @BTreston in #21640
• [PM-37196] Tooltip expand max-width by @JaredScar in #21646
• [PM-39123] Fix members page filters flicker by @JaredScar in #21656
• [PM-37489] Fixes issue where checkbox label does not enable checkbox by @JaredScar in #21657
• Revert "[Shared Unlock] [PM-34508] Default enable native messaging pe… by @quexten in #21687
• [PM-39570] use correct fill for bup logo by @BryanCunningham in #21694
• [PM-38392] Route password-protected Send saves through the SDK by @adudek-bw in #21725
• fix(vault): archive and unarchive missing from bulk bar for org items by @nick-livefront in #21741
• Render native form control UI in dark theme with color-scheme: dark by @maxkpower in #21771
• [PM-39705] Edit Access Modal Does Not Display Members With Access When Going Through Bulk Actions by @gbubemismith in #21773
• [PM-40820] fix style by @BTreston in #21821
• [PM-40303] Fix logout when underprivileged user accesses Manage Send policy by @harr1424 in #21836
• [PM-40303] Cherry-pick to rc: Fix user logout when missing permissions by @harr1424 in #21846
• [PM-40236][RC] Logging out throws error mid-logout due to a race condition. User left in locked state by @mzieniukbw in #21869

⚙️ Maintenance

• [PM-35600] Update Password Request Models (Key Management) by @rr-bw in #20665
• [PM-9420] - add cipher$ observable to cipher service by @jaasen-livefront in #21383
• [VULN-649] ci: Remove deprecated scan workflow by @theMickster in #21429
• [PM-36407] Ts strict bulk member components by @BTreston in #21455
• Autosync Crowdin Translations for web by @bw-ghapp in #21508
• Auth/PM-39619 - Rename AcceptOrganizationComponent to AcceptOrgDirectInviteComponent by @JaredSnider-Bitwarden in #21522
• Bump client version(s) by @github-actions in #21554
• [PM-35812] Remove feature flag by @JaredScar in #21567
• [PM-39398] Refactor Vault Component back to OG naming by @JaredScar in #21569
• [BRE-1533] Trigger Bitwarden Lite from web vault build by @vgrassia in #21605
• test: add Gov region to parametrized environment service test suite by @addisonbeck in #21619
• [PM-33362] Use signals for the app label by @coltonhurst in #21638
• [CL-1258] Add NumberInput story to bit-form-field by @willmartian in #21692
• [CL-1261] Add date input form field story by @willmartian in #21695
• [PM-39259] Migrate key-management consumers to SDK key generation by @quexten in #21707
• [PM-39259] Migrate vault export and generator to SDK random number client by @quexten in #21708
• [PM-39259] Migrate risk-insights encryption to SDK key generation by @quexten in #21709
• [PM-39259] Remove typescript cipherkey generation by @quexten in #21729
• [PM-34458] Add release.yml to bitwarden/clients by @djsmith85 in #21732
• chore(ci): add platform-community code-review signal by @addisonbeck in #21751
• Bump client version(s) by @github-actions in #21811
• Bumped client version(s) (#21811) by @addisonbeck in #21817

📦 Dependency Updates

• [deps] UI Foundation: Update @storybook/test-runner to v0.24.4 by @renovate in #17854
• [PM-35903] Update clients to node 24 by @dani-garcia in #20400
• [deps]: Update codecov/codecov-action action to v7 by @renovate in #21409
• Update sdk-internal to 0.2.0-main.870 by @bw-ghapp in #21482
• Update sdk-internal to 0.2.0-main.872 by @bw-ghapp in #21651
• [deps]: Update dtolnay/rust-toolchain digest to 4be7066 by @renovate in #21667
• Update sdk-internal to 0.2.0-main.883 by @bw-ghapp in #21686
• chore(deps): move rand to KM Renovate ownership by @addisonbeck in #21719
• Fix lockfile by @dani-garcia in #21763

🎨 Other

• Add claude snap permissions rule by @quexten in #21514
• [PM-39731] Hotfix: Revert "[Shared Unlock] [PM-34508] Default enable native messaging permission on browser (#19907) by @mzieniukbw in #21559

New Contributors

• @999purple999 made their first contribution in #20867

Full Changelog: web-v2026.6.4...web-v2026.7.0