Version 2026.8.0

What's Changed

Feature Development

• [PM-38923] feat: Add v2 UpdateOrganizationUser command with role-escalation validation by @jrmccannon in #7919
• [PM-38926] feat: Add admin change member email to v2 UpdateOrganizationUser command by @jrmccannon in #7964
• [PM-36011] feat: add member email change notification email by @jrmccannon in #8044
• [PM-39978] Add Item type Send support by @mcamirault in #8008
• [PM-41015] Create feature flag for managed-device-framework by @djsmith85 in #8072
• [PM-40509] Make sales-assisted trials always payment optional by @enmande in #8067
• [PM-40161] feat(admin-approval-email): Update copy by @enmande in #8079
• [PM-41065] Arch/seeder api additional auth accounts by @MGibson1 in #8077
• [PM-40515] Add the support confirmation check. by @JimmyVo16 in #8074
• Auth/PM-40521 - Registration - Optionally carry SealedOpenOrgInviteData through email verification by @JaredSnider-Bitwarden in #8037
• [PM-39430] Extract shared business-plan migration coordinator by @sbrown-livefront in #8050
• [PM-39894] fix: Exclude provider-linked organizations from add-existing-organization flow by @cyprain-okeke in #7988
• [PM-36007] add event logging for changed email by @BTreston in #8083
• [DIRT] Expose feature flag for browser extension Health tab by @lastbestdev in #8100
• [PM-38799] Add audit events for the confirm flow. by @JimmyVo16 in #8081
• [PM-40738] user facing error messages by @JaredScar in #8088
• [PM-39197] - improve vault sync performance by @gbubemismith in #8080
• [PM-41304] Add feature flag pm-40435-quick-copy-icon-setting by @jengstrom-bw in #8121
• [PM-39454] feat(km): add KeyId value type and user key id validation attribute by @quexten in #8107
• [PM-41259] Scaffold PAM cipher-lease endpoints by @Hinton in #8105
• [PM-40160] SecurityTasksNotification copy update by @jengstrom-bw in #7997
• [PM-40744] Update Server Error Messages for VFO1 by @BTreston in #8087
• [PM-40743] Update email copy for VFO1 by @BTreston in #8131
• [PM-38248] Remove SendEventLogging feature flag by @harr1424 in #8084
• [PM-41438] - Add new errors for taken emails by @jrmccannon in #8140
• [PM-41481] Fix policy enforcement when accepting invite link by @eliykat in #8146
• [PM-39454] feat(km): add UserKeyId column to the user row by @quexten in #8108
• [PM-41409] Introduce ImportRefresh Feature Flag by @harr1424 in #8126
• [PM-41311] Register Fill Assist policy by @bensbits91 in #8123
• feat(crypto): add key ids to request and response models by @quexten in #8124
• [PM-39431] feat: Implement SendInvoicePriceMigrationJob by @cyprain-okeke in #8086
• [PM-38333] feat: Annual billing savings offer on cancel by @kdenney in #8010

🐛 Bug fixes

• [PM-41066] fix: Preserve subscription schedule phase metadata on phase rebuilds by @amorask-bitwarden in #8078
• [PM-17000] fix: block self-host from autoscaling Secrets Manager seats on bulk enable by @jrmccannon in #8073
• [PM-17002] - Added self host guard to stop autoscale when self hosted and creating a service account. by @jrmccannon in #8085
• [PM-17012] - Update Org User Self Host SM Autoscale Guard by @jrmccannon in #8089
• [PM-40866] Fix Teams 2019 organization upgrades to Enterprise by @sbrown-livefront in #8057
• [PM-40507] Change Password Well Known URLs Issues by @gbubemismith in #8036
• PM-41426: PM and SM select for sales-assisted trials by @enmande in #8142
• [PM-39998] Omit org owner and admin Sends from policy enforcement by @mcamirault in #7982
• Add PendingProtection for safe protect-cert rotation when secrets land before non-secrets by @justindbaur in #8104
• [PM-41579] Update email copy by @BTreston in #8166
• [PM-41628] Update email copy by @BTreston in #8167
• [PM-40694] fix: Derive Stripe tax ID type server-side by @amorask-bitwarden in #8122

⚙️ Maintenance

• Stabilize RelayPushRegistration tests by @justindbaur in #8041
• Remove unneeded RequireFeature filter by @justindbaur in #8062
• PM-40665 - Back out the hardcoded local-sso org GUID so the preset can be reseeded by @theMickster in #8060
• docs: note ISNULL rolling-deploy pattern for JSON/TVP NOT NULL columns by @Hinton in #7991
• [PM-40946] refactor: Remove unauthenticated Stripe event recovery endpoints and Admin tool by @amorask-bitwarden in #8070
• [PM-36838] Render DeviceType display name in event integration templates by @lastbestdev in #8011
• [PM-41079] Extract SSRF protection into src/Libraries/SsrfProtection by @justindbaur in #8066
• Seeder/Add billing gateway to SingleUserScene by @nthompson-bitwarden in #8069
• Aspire: add parameter for idp configuration by @eliykat in #8082
• Seeder: Add UsePam organization override by @Hinton in #8093
• PM-40996 - Add async and post-commit step support to the seeder pipeline by @theMickster in #8094
• [PM-41220] add integration tests capturing current middleware behavior by @justindbaur in #8096
• [PM-41225] Extract exception handling into src/Libraries/ExceptionHandling by @justindbaur in #8090
• chore: remove checkmarx from repo by @sognefej in #8120
• [PM-41272] Extract organization authorization into a new library by @Hinton in #8095
• [PM-39454] refactor(users): make UpdateUserData provider-agnostic and enlist EF delegates by @quexten in #8106
• Add steps to build and push gov container images by @gitclonebrian in #7822
• [PM-35791] Remove email verification FF and legacy Send access endpoints by @mcamirault in #8065
• [BRE] Add login step for Chainguard repo by @gitclonebrian in #8129
• Move the shared exception handler to Bit.ExceptionHandling and use it for PAM endpoints by @Hinton in #8118
• [PM-41451] Migrate AC files off off AssemblyHelpers.GetVersion() by @justindbaur in #8133
• [PM-16936] Fix double HTML encoding by @JimmyVo16 in #8047
• Update registry to FedRAMP-specific ACR by @gitclonebrian in #8148
• [PM-41451] Migrate Dirt files off of AssemblyHelpers.GetVersion() by @justindbaur in #8136
• [PM-41451] Migrate Auth files off of AssemblyHelpers.GetVersion() by @justindbaur in #8134
• [BRE-2158] Add PR label to _move_edd_db_scripts workflow by @vgrassia in #8145
• [PM-41451] Migrate Billing files off of AssemblyHelpers.GetVersion() by @justindbaur in #8135
• Extract Serilog file logging into Libraries/SerilogFileLogging by @justindbaur in #8149
• QA-2270: add OrganizationGroupScene to the seeder by @awiester-bw in #8150
• [BRE-2157] ci(build): Centralize Docker image tag sanitization by @fntyler in #8144
• [PM-33046] Drop obsolete ReadAbilities stored procedures by @JimmyVo16 in #7961
• Refactor Seeder Factories by @theMickster in #8152
• Add GlobalSettingsBridge library by @justindbaur in #8156
• [BRE-2116] Bump actions/checkout to v7.0.1 in non-privileged workflows by @...

Version 2026.7.2

What's Changed

• removed feature flag for enforcing policies for accepted status members
• removed feature flag for pricing migrations
• Various under-the-hood improvements and minor bug fixes

Feature Development

• [PM-38951] feat: Add CreationDate to org user detail endpoints by @jrmccannon in #7936
• [PM-39815] feat: Surface org name on invite-link status when links unavailable by @r-tome in #7928
• [PM-40152] feat: Require verified email to accept organization invite link by @r-tome in #7949
• Add VFO1 Foundation Flag by @nick-livefront in #7973
• [PM-27060] chore: add feature flag for password prelogin from SDK by @ike-kottlowski in #7954
• [PM-40293] feat: Trim invite-link policies endpoint to Master Password and Account Recovery by @r-tome in #7977
• [PM-38388] Support sales-assisted trials by @enmande in #7881
• [PM-38791] feat: Add SupportsConfirmation to invite-link status endpoint by @JimmyVo16 in #7974
• [PM-39274] Add feature flag event-management-for-generic-hec by @Banrion in #7993
• [PM-40006] Add temporary item sharing feature flag by @mcamirault in #7996
• [INNO] - Passkey Directory Endpoint by @jrmccannon in #7317
• [PM-38749] Add endpoint to update SupportsConfirmation and inviteBlob by @JimmyVo16 in #7999
• [PM-40245] Add google favicon API to icon service lookups by @kspearrin in #7951
• [PM-40216] feat: Data-protect OrganizationInviteLink.Code at rest by @r-tome in #7969
• [PM-40537] fix: Only rewrite Stripe schedules for plan-migration organizations by @amorask-bitwarden in #8035
• [PM-39387] fix: Bump AccountRevisionDate when premium status changes by @cyprain-okeke in #7966
• [PM-34429] Create an endpoint to retrieve the Invite by @JimmyVo16 in #7994
• [PM-40523] feat: Add endpoint to return organization private key to admins by @r-tome in #8006
• [PM-40208] Add AccessPam column + PAM seat-occupancy read by @Hinton in #7957
• [PM-39236]: Add RenewalNotificationSentDate column + repository method by @sbrown-livefront in #8031
• [PM-39197] - improve vault sync performance by @jaasen-livefront in #7829
• Revert "[PM-39197] - improve vault sync performance" by @gbubemismith in #8064
• [PM-39197] - improve vault sync performance (#8080) by @gbubemismith in #8117

🐛 Bug fixes

• [PM-40281] Convert email search to text search field by @BTreston in #7968
• [PM-38951] fix: Correct migration script date to 2026-07-14 by @jrmccannon in #7972
• [PM-38773] Require org membership before logging org audit events via /collect by @AlexRubik in #7934
• [PM-38874] fix: Keep Admin org page accessible when Stripe customer is deleted by @kdenney in #7913
• [PM-40372] Fix Issue with Restoring Staged Users by @sven-bitwarden in #7979
• [PM-40516] fix: Isolate ExtendedCache backplane per cache name on shared Redis by @withinfocus in #8004
• [PM-18747] Add more protections to endpoints on backend so regular members can't hit endpoints and see data by @JaredScar in #7985
• [PM-33940] Enforce per-secret access checks in SecretVersionsController by @mandreko-bitwarden in #7823
• [PM-16456] Enhance PreviewOrganizationTaxCommand to support Teams Starter 2023 by @JaredScar in #8000
• [PM-40201] Added feature flag for derive ssh keys by @gbubemismith in #7998
• [PM-16095] feat: Enhance provider seat limit validation messages by @JaredScar in #7980
• [PM-40440] fix: Include Secrets Manager and storage in plan-change tax preview by @amorask-bitwarden in #7995
• [PM-40751] fix: Sales-assisted trials email copy by @enmande in #8045

⚙️ Maintenance

• Bump version to 2026.7.0 by @github-actions[bot] in #7967
• [PM-33046] Remove legacy cache DI registration in Events by @JimmyVo16 in #7958
• Auth/PM-3813 - 2FA Management Endpoints - User Verification Refactor by @JaredSnider-Bitwarden in #7841
• [PM-33046] Remove legacy in-memory application cache services by @JimmyVo16 in #7959
• [PM-40343] Extract ITableObject, IRepository, CombGuid to Data by @Hinton in #7976
• [PM-40047] Detect blob ciphers via format_version probe by @shane-melton in #7930
• ci: route Swashbuckle (Swagger) Renovate updates to Platform by @amorask-bitwarden in #7978
• PM-39869 - Implement attachments in Seeder & cipher key encryption by @theMickster in #7953
• Add library documentation by @justindbaur in #7950
• [PM-33046] Remove GetManyAbilities repo methods and cache interface by @JimmyVo16 in #7960
• chore: update code owners to include architecture team for RustSDK by @theMickster in #7986
• [PM-34857] Remove PoliciesInAcceptedState feature flag by @eliykat in #7947
• Switch to Bitwarden.Server.Sdk.Features by @justindbaur in #7898
• removed curl and replaced healthcheck with wget by @keithhubner in #7858
• chore(ci): skip platform-community signal for fork PRs by @addisonbeck in #8009
• Seeder/add parameterized org seeding by @nthompson-bitwarden in #7987
• [PM-37260] Profile service improvements by @ike-kottlowski in #7924
• Bump version to 2026.7.1 by @github-actions[bot] in #8038
• Resolve minor code smells in attachment tests by @theMickster in #8030
• PM-40665 - Seed SSO configuration and a realistic local-sso dev org in the Seeder by @theMickster in #8014
• Fix date of migration files that broke main by @patriksvensson in #8048
• Seeder/provider scenes by @nthompson-bitwarden in #8034
• [PM-40623] Add ProducesResponseType to fix SDK server bindings by @eliykat in #8046
• map System.Text.Json.Nodes types to OpenAPI schemas by @dani-garcia in #8053
• [PM-37599] refactor: Remove PM37597 always-enable-Stripe-automatic-tax feature flag by @amorask-bitwarden in #7989
• [PM-16095] Revert changes before RC by @JaredScar in #8055
• [PM-40623] Add ProducesResponseType to OrganizationUsersController.GetInvite by @eliykat in #8058
• Bump version to 2026.7.2 by @github-actions[bot] in #8063
• Seeder - Tech debt - Migrate CoreHelpers.GenerateComb to CombGuid.Generate by @theMickster in #8061
• [PM-36062] refactor: Remove defer-price-migration-to-renewal feature flag by @amorask-bitwarden in #7883

📦 Dependency Updates

• [deps]: Update MarkDig to v1.3.2 by @renovate[bot] in #7704
• [deps]: Update dtolnay/rust-toolchain digest to 4cda84d by @renovate[bot] in #8016
• [deps]: Pin rust to 1.97.1 by @renovate[bot] in #8015

New Contributors

• @patriksvensson made their first contribution in #8048

Full Changelog: v2026.7.1...v2026.7.2

Version 2026.7.1

What's Changed

• Resolve issue with billing schedules.

🐛 Bug fixes

• [PM-40537] fix: Only rewrite Stripe schedules for plan-migration organizations by @amorask-bitwarden in #8040

Full Changelog: v2026.7.0...v2026.7.1

Version 2026.7.0

What's Changed

💙 Community Highlight

• [PM-37648] Fix double HTML encoding in emergency access emails by @singhvishalkr in #7652

Feature Development

• [PM-38928] - Add name, email to org user update by @jrmccannon in #7871
• Seeder: add --owner-email and --org-name CLI override flags by @JaredSnider-Bitwarden in #7870
• [PM-28365] - Add Feature Flag Admin Initiated Member Email change by @jrmccannon in #7887
• [PM-37514] Support Teams 2019 Migration by @sbrown-livefront in #7864
• [PM-38798] Create validation link confirmation by @JimmyVo16 in #7895
• Auth/PM-39774 - Redirect existing users without org membership back to /login on SSO callback by @JaredSnider-Bitwarden in #7890
• [PM-39745] Scaffold PAM access-rule endpoints by @Hinton in #7878
• [PM-34393] Add event logging for organization invite link actions by @r-tome in #7826
• [PM-39798] Scaffold PAM access-request endpoints by @Hinton in #7893
• [PM-39557] Replace invite link key columns with an opaque Invite blob by @r-tome in #7896
• [PM-37954] Add Command for Provisioning Staged OrganizationUsers by @sven-bitwarden in #7859
• [PM-32187] Add Send Type restriction to Send Controls policy by @mcamirault in #7504
• [PM-36965] feat: Add SeederApi scene for migration cohort CSV-export testing by @cyprain-okeke in #7906
• [PM-38567] Migration Renewal Copy Dynamic Update by @sbrown-livefront in #7921
• [PM-38101] Add Staged Provision API Fields by @sven-bitwarden in #7927
• [PM-31929] Add deletion days restriction to Send Controls policy by @mcamirault in #7506
• [PM-36505] Finalize Send Controls policy, add second feature flag to enable/disable logic by @mcamirault in #7943
• [PM-38927] - Extract Organziation User Role Validation by @jrmccannon in #7876
• [PM-39210] fix: Block converting a Secrets-Manager-enabled org to a Business Unit Portal by @cyprain-okeke in #7892
• [PM-38796] Create link confirmation endpoint by @JimmyVo16 in #7907
• [PM-40085] Remove initial delay on self-hosted database migration by @trmartin4 in #7917
• [PM-39976] Scaffold PAM lease endpoints by @Hinton in #7925
• added new env var to alter backup filename TZ by @keithhubner in #7956
• [PM-37944] Differentiate Send events according to domain by @harr1424 in #7690

🐛 Bug fixes

• [PM-39584] fix: Gate migration grace service accounts on Secrets Manager presence by @amorask-bitwarden in #7897
• [PM-39816] fix: Raise migrated Password Manager seats to cover Secrets Manager seats by @amorask-bitwarden in #7904
• [PM-39805] fix: Expose SM migration-grace service accounts on subscription response by @amorask-bitwarden in #7901
• [PM-38000] Convert text feilds for email to email fields for form validation by @BTreston in #7908
• [PM-39164] Gate Access Intelligence report reads on new-architecture flag by @Banrion in #7825
• fix(codeowners): Reorder Docker rules to fix owner override by @fntyler in #7937
• [PM-35198] - remove orphaned blob attachments after deletion by @jaasen-livefront in #7539
• [PM-40002] Fix Teams 2019 Migration Display by @sbrown-livefront in #7933
• [SHOT-215] fix: Migrate legacy identity.pfx to modern encryption on update by @mimartin12 in #7942
• [PM-39554] Create default collection for demoted admin by @BTreston in #7918
• [PM-38595] Get collection permission with users and groups by @BTreston in #7945
• [PM-38827] Remove errant org membership check by @BTreston in #7929
• [PM-40128] Adjust enforcement message when Send is noncompliant with … by @mcamirault in #7946
• [PM-39909] fixed LINQ error when saving send controls by @itsadrago in #7939
• [SHOT-219] fix: build nginx image for arm64 architecture by @mimartin12 in #7944
• [PM-40281] convert to text field by @BTreston in #7971
• [PM-40516] Fix Extended Cache Service Registration by @sven-bitwarden in #8007

⚙️ Maintenance

• add MyItems to ApplyEnterpriseFeatures by @nthompson-bitwarden in #7882
• [PM-31107] Seeder: blob-migration preset + fido2/password-history/linked-field fixture support by @shane-melton in #7809
• [PM-19169] Remove feature flag pm-19148-innovation-archive by @jengstrom-bw in #7884
• [PM-29251] Remove pm-23384-browser-premium-spotlight feature flag by @jengstrom-bw in #7885
• Seeder: fix RecipeOrchestratorIntegrationTests build after SeederDependencies arity change by @JaredSnider-Bitwarden in #7888
• Minor but important doc update to align with other overrides by @theMickster in #7889
• [PM-39734] Support Minimal API endpoints in OpenAPI by @Hinton in #7874
• [PM-39512] Stricter data protection errors by @justindbaur in #7837
• [PM-35812] Remove BulkAutoConfirmOnLogin feature flag logic by @JaredScar in #7902
• [BRE-1533] Trigger Bitwarden Lite for server builds (including PRs) by @vgrassia in #7905
• Relax cert check on development builds by @justindbaur in #7912
• Seeder - Bump RustSdk to the latest release of sdk-internal by @theMickster in #7903
• Opt the Aspire project out of package locking by @justindbaur in #7916
• add new cipher type scenes by @rdaugherty in #7911
• [deps]: Update github-action minor by @renovate[bot] in #7006
• test(accounts-controller): Move tests under Auth/ directories for CODEOWNERS. by @enmande in #7658
• PM-39866 - Enhance seeder to seed archive and deleted ciphers by @theMickster in #7923
• Add Seeder query to get email codes by @bnagawiecki in #7880
• Add OrganizationUserInviteQuery by @bnagawiecki in #7915
• [BRE-2039] ci(docker): add distroless FIPS gov.Dockerfile variants by @fntyler in #7875
• [PM-32699] Utilize cache to check ability of useMyItems if available by @JaredScar in #7922
• [PM-37469] UseRiskInsights organization ability: migration, plan mapping, admin toggle, license, and endpoint guard by @AlexRubik in #7782
• [BRE-1907] Add artifact manifest to build.yml by @gitclonebrian in #7920
• [BRE-2039] chore: cleanup dockerfile comments by @fntyler in #7935
• Refactor Skill(bump-rust-sdk) to align with current workflow & best practices for skill evaluation by @theMickster in #7909
• [PM-33045] Remove FeatureRoutedCacheService by @JimmyVo16 in #7931
• chore(ci): add platform-community code-review signal by @addisonbeck in #7948
• [PM-38209] Remove pm-26961-access-intelligence-trend-chart feature flag by @lastbestdev in #7840
• [BRE-1907] Corrected artifact manifest container image format by @gitclonebrian in #7938
• Auth/PM-38811 - KM - Update RotateUserAccountKeysCommand to use MasterPasswordService by @JaredSnider-Bitwarden in #7804
• Bumped version to 2026.7.0 (#7967) by @addisonbeck in #7970

📦 Dependency Updates

• [PM-39443] pin automapper dependency to under v15 by @itsadrago in #7856
• [deps]: Update actions/upload-artifact action to v7 by @renovate[bot] in #7219
• [deps]: Update Microsoft.NET.Test.Sdk to v18.7.0 by @renovate[bot] in https://github.com/bitwarden/server...

Version 2026.6.2

Overview

• Removed feature flag for organization features caching
• Removed feature flag for member controller refactor
• Removed feature flag for collections component refactor
• Added new ‘staged’ status for organization members
• Invited users no longer reach dead end when attempting to log in with SSO
• Fixed cases where new device login protection email could not be re-sent
• Various under-the-hood improvements and minor bug fixes

What's Changed

Feature Development

• [PM-34053] Add new GET endpoint for fetching key data for user key rotation by @Thomas-Avery in #7772
• [PM-38393]: add debug-disable-self-host-premium-check feature flag by @kdenney in #7805
• [PM-34779] Add accept invite link endpoint by @r-tome in #7812
• [PM-31884] Add access control support to Send Controls policy by @mcamirault in #7417
• [PM-36158] - Fix org cipher push notifications to fan out per authorized user by @jaasen-livefront in #7522
• [PM-36963] Bulk cohort assignment by @kdenney in #7792
• [PM-37513] feat: Add Enterprise 2019 to current pricing migration path by @cyprain-okeke in #7819
• [PM-34023] Remove 2FA account recovery flag by @eliykat in #7815
• [PM-39129] Add UsePam organization capability by @Hinton in #7816
• [PM-39257] Add feature flag pm-32380-btn-text-add-create by @jengstrom-bw in #7833
• [PM-32116] Remove pm-32111-provider-ability-extended-cache logic by @JimmyVo16 in #7838
• [PM-39102] Feature Flag for Staged Status by @sven-bitwarden in #7844
• Auth/PM-38742 - SSO Invited Existing User Flow Improvement - Redirect on error by @JaredSnider-Bitwarden in #7785
• [PM-36865] Removes the feature flag from the constants of the server-side code by @JaredScar in #7849
• [PM-30806] Self service change email command by @ike-kottlowski in #7740
• [PM-38851] Crypto cipher suite feature flag by @mzieniukbw in #7852
• [PM-38422] feat: Stack customer-level discount with churn and migration discounts by @amorask-bitwarden in #7831
• [PM-37512] feat: Add Teams Starter to current pricing migration path by @amorask-bitwarden in #7827
• [PM-37953] Add OrganizationUserStatusType.Staged, Remove Ordinal Checks by @sven-bitwarden in #7780
• [PM-36965] feat: Add CSV export of cohort to cohort management table by @cyprain-okeke in #7847
• [PM-32108] - Remove FF for org ability cache by @jrmccannon in #7821
• [PM-38922] - Adding Problem Details Result by @jrmccannon in #7853
• Revert "[PM-38851] Crypto cipher suite feature flag" by @mzieniukbw in #7863
• Add PM39071_DefaultPasswordManagerPrompt constant by @differsthecat in #7866
• [PM-35314] Backfill Revocation Reasons to All Users by @sven-bitwarden in #7713

🐛 Bug fixes

• [PM-38830] fix: Surface fixed-amount and time-bounded discounts in billing API by @amorask-bitwarden in #7814
• [PM-36158] - bump migration file name by @jaasen-livefront in #7820
• fix broken auto confirm policyRequirement check for org scoped request by @BTreston in #7839
• [PM-36574] fix: scope provider client invoice report to the authorized provider by @connerbw in #7770
• [PM-39237] fix: Handle mismatched and orphaned migration cohort assignments in admin dropdown by @cyprain-okeke in #7836
• [PM-38769] Fix OrganizationConnectionsController logic by @eliykat in #7845
• [PM-38456]: Allow License Generation for Sales Trial Orgs by @sbrown-livefront in #7793
• [PM-39562] fix: Reconcile org seats to billed quantity on packaged-plan migration by @amorask-bitwarden in #7869
• [PM-39569][PM-39286] fix: Wait for Stripe test clock before migration grace write by @amorask-bitwarden in #7872

⚙️ Maintenance

• [PM-29129] Add Policy Update Event README by @JimmyVo16 in #7159
• [PM-39293] Remove v2 naming from account recovery command by @eliykat in #7842
• [BRE-1969] Add Docker login with OAT to Build workflow by @vgrassia in #7835
• [PM 34707] Use new shared enforce label workflow by @djsmith85 in #7834
• [BEEEP] - Model Binding for Org and Org User Validation by @jrmccannon in #7724
• add AccessSecretsManager to OrganizationUserScene by @nthompson-bitwarden in #7860
• [PM-39474] - Updating Lock Files by @jrmccannon in #7862
• [PM-33402] Remove Feature-Flagged Logic: pm-33398-refactor-members-invite-org-users-command by @sven-bitwarden in #7855
• [PM-33403] Remove Feature Flag (pm-33398) by @sven-bitwarden in #7865
• Add ability to enable SM on SingleOrgScene by @bnagawiecki in #7861
• [PM-39561] Copy ListResponseModel from Api to HttpExtensions by @Hinton in #7868
• PM-33964 - Resolve defect in premium user licensing by @theMickster in #7788
• Bump version to 2026.6.2 by @github-actions[bot] in #7879

📦 Dependency Updates

• [deps] Platform: Update Microsoft.AspNetCore.SignalR.Protocols.MessagePack to v10.0.9 [SECURITY] by @renovate[bot] in #7817

🎨 Other

• llm(rules): Auth tokenables must be minted via factory. by @enmande in #7857

Full Changelog: v2026.6.1...v2026.6.2

Version 2026.6.1

Overview

• Added more argon2id configurations to prelogin endpoint
• Improved validation of access intelligence reports
• Add support for plan plan migration paths
• Various under-the-hood improvements and minor bug fixes

What's Changed

Feature Development

• [PM-34909] Serve only validated report files from get-latest and self-hosted file endpoints by @AlexRubik in #7465
• [PM-33951] automatically confirm pending users on admin login by @JaredScar in #7527
• [PM-35395] MasterPasswordService Key Management Integration by @enmande in #7637
• [PM-37595] Use New OrganizationUserStatusType Columns by @sven-bitwarden in #7693
• [PM-31191] New Argon2id configuration into prelogin by @mzieniukbw in #7708
• chore(server): add FedRampGovRegion feature flag constant by @addisonbeck in #7726
• feat(server): add Gov cloud region by @addisonbeck in #7730
• [PM-36951] Add Billing Plan Migration Cohorts Admin UI by @kdenney in #7732
• [PM-37589] - Add PM29968_FillAfterSave feature flag by @jaasen-livefront in #7733
• [PM-37087] Release migration schedule before adding org to provider" by @cyprain-okeke in #7737
• [PM-38416] Add Bitwarden-Region to HTTP request to the pricing service by @justindbaur in #7749
• [PM-37070] feat: Add business plan migration renewal email by @cyprain-okeke in #7755
• [PM-37085] feat: Release migration schedule on organization plan upgrade by @amorask-bitwarden in #7757
• [PM-34778] Implement AcceptOrganizationInviteLinkCommand by @r-tome in #7759
• Set fill assist server urls by @differsthecat in #7761
• [PM-38265] Enhance TwoFactorIsEnabledQuery to use a dictionary for two-factor authentication results by @r-tome in #7764
• [PM-37510] feat: Grandfather Secrets Manager machine accounts for Enterprise 2020 migrations by @amorask-bitwarden in #7765
• [PM-38163] Add endpoint to retrieve organization policies by invite link code by @r-tome in #7767
• [PM-37228] feat: Add scheduled price increase to organization warnings by @amorask-bitwarden in #7790
• [PM-37292] - update feature flag by @jaasen-livefront in #7791
• [PM-33408] Add OrganizationUser_NotificationBannerActionClicked EventType by @jengstrom-bw in #7796
• [PM-37875] Make webauthn available on all platforms by @quexten in #7801

🐛 Bug fixes

• Auth/PM-38129 by @JaredSnider-Bitwarden in #7743
• Dirt/pm 38134 access intelligence report not generating by @prograhamming in #7748
• [PM-37168] Fix missing expiration check. by @JimmyVo16 in #7760
• Auth/PM-38588 - Login and Refresh backfill CurrentContext for LaunchDarkly Feature Flag Evaluation by @JaredSnider-Bitwarden in #7766
• Auth/PM-38648 - Refactor device last-activity cache to use configurable TTL by @JaredSnider-Bitwarden in #7773
• [PM-38729] fix: Reflect all discounts in 2020-migration renewal email by @cyprain-okeke in #7786
• Aspire: Fix Self-Host Development Configuration by @sbrown-livefront in #7803
• fix broken auto confirm policyRequirement check for org scoped request by @BTreston in #7839
• fix broken auto confirm policyRequirement check for org scoped reques… by @BTreston in #7848

⚙️ Maintenance

• Auth/PM-32102 - (1) Create ConvertUserToKeyConnectorCommand (2) Remove salt and hint on key connector conversion by @JaredSnider-Bitwarden in #7692
• [PM-38116] Harden SSRF protection in IPAddressExtensions by @jengstrom-bw in #7721
• [PM-38165] Improve Data Protection error handling and constrain plaintext input by @harr1424 in #7734
• [PM-13330] Move collection SQL files to AC Team by @eliykat in #7758
• [SHOT-96] Apply new http2 directive by @mimartin12 in #7769
• [PM-38338] Drop Unused Sprocs by @sven-bitwarden in #7789
• [PM-37511] test: Add Teams 2020 + Secrets Manager migration tests by @cyprain-okeke in #7799

📦 Dependency Updates

• [deps] BRE: Update mcr.microsoft.com/mssql/server Docker tag to v2025 by @renovate in #6447
• [deps]: Update webpack-cli to v7 by @renovate in #7348
• [deps] Auth: Update Auth dotnet dependencies to v10.0.8 by @renovate in #7604
• [deps]: Update dotnet monorepo by @renovate in #7605
• [PM-36584] Bidirectional C2 in icons.bitwarden.net by @jengstrom-bw in #7668
• [AppSec] Add packages.lock.json files for dependency locking by @aikido-autofix in #7725
• Bump version to 2026.6.0 by @github-actions in #7747
• [deps]: Update sass-loader to v17 by @renovate in #7779
• PM-37021 - Fix dotnet deps version bump failure to modify packages.lock.json by @JaredSnider-Bitwarden in #7787
• Pin nginx image to a specific version by @mimartin12 in #7802
• [DBOPS-177] Update MSSQL Docker image to SQL Server 2025 CU5 by @mkincaid-bw in #7806
• [deps] Platform: Update MessagePack to v3.1.7 [SECURITY] by @renovate in #7807
• Bump version to 2026.6.1 by @github-actions in #7813

🎨 Other

• Document migration workflow in .claude/CLAUDE.md by @Hinton in #7689
• Update EmergencyAccessInviteQuery to return encoded URLs and a JSON object by @bnagawiecki in #7741
• [bre-1835] update SeederApi Base Image by @aj-bw in #7771
• Add SingleOrganizationScene to seeder by @bnagawiecki in #7781
• Add 3 more Org Scenes by @bnagawiecki in #7798

Full Changelog: v2026.6.0...v2026.6.1

Version 2026.6.0

Overview

• Removed feature flag for consolidated session timeout component
• Removed feature flag for disabling type zero decryption
• Removed feature flag for migration of My Vault to My Items
• Removed feature flag for Send UI refresh
• Removed feature flag for unlocking with SDK
• Various under-the-hood improvements and minor bug fixes

What's Changed

Feature Development

• [PM-26732] Remove Chromium ABE importer feature flag by @mcamirault in #7026
• [PM-34615] - add SuppressOnboardingInterstitials setting by @jaasen-livefront in #7516
• PM 35227 Extend checkout endpoint for browser/desktop platforms by @cyprain-okeke in #7550
• [PM-35948] Update send openapi to work for sdk by @adudek-bw in #7556
• [PM-35393] MasterPasswordService auth integration by @enmande in #7575
• [PM-35357] Update Trial Length Parameter by @sbrown-livefront in #7597
• [PM-27679] Remove flagged logic from server by @jengstrom-bw in #7612
• [PM-36359] Feature flag for Splunk integration by @voommen-livefront in #7622
• [PM-37237] Move OrganizationsNew into ProfileResponseModel by @eliykat in #7627
• feat(kdf-settings-validator): Enforce salt cannot be empty string. by @enmande in #7628
• [PM-35394] MasterPasswordService Admin Console Integration by @enmande in #7629
• Add PAM feature flag by @Hinton in #7641
• [PM-35656] Add Events for New Item Types by @nick-livefront in #7642
• [PM-36949] feat: Add OrganizationPlanMigrationCohort and Assignment tables with bare repositories by @amorask-bitwarden in #7644
• [PM-35830] Add ChangeEmailCommand by @ike-kottlowski in #7650
• [PM-37251] Add public invite link GET status endpoint by @r-tome in #7656
• [PM-35058] Adoption UX Improvements (feature flag) by @voommen-livefront in #7657
• [PM-38273] feat(admin-console): Add InjectOrganizationAttribute and OrganizationModelBinder by @JaredScar in #7659
• [PM-33951] feat(admin-console): Add bulk confirmation and pending auto-confirmation by @JaredScar in #7661
• [PM-37597] Set Automatic Tax and Prevent Tax Exempt Mutations by @sbrown-livefront in #7662
• [PM-37723] Add feature flag pm-28191-cipher-admin-ops-to-sdk by @nikwithak in #7664
• [PM-37064] feat: Add ScheduleBusinessPriceIncrease scheduler entry point by @amorask-bitwarden in #7665
• [PM-37593] Add OrganizationUserStatusTypeNew - 🪓 Revoked by @sven-bitwarden in #7666
• [PM-37598] Update Tax Id Warning Logic with Feature Flag by @sbrown-livefront in #7677
• [PM-37068] feat: Add business plan cohort branch to UpcomingInvoiceHandler by @amorask-bitwarden in #7678
• [PM-36563] Send access event logs by @harr1424 in #7679
• [PM-36964] Add per-org migration cohort assignment to the Admin portal by @cyprain-okeke in #7681
• [PM-34776/PM-37797] Add invite link email domain validation endpoint by @r-tome in #7683
• [PM-28178] Remove Send UI refresh feature flag by @mcamirault in #7684
• [PM-37084] Business Aware Schedule Recovery and Cancellation by @sbrown-livefront in #7686
• [Shared Unlock] [PM-35083] Add shared unlock feature flags by @quexten in #7687
• [PM-31021] Resolve authoring exclusions by @jprusik in #7688
• [PM-37083] feat: Add per-phase price resolution to UpdateOrganizationSubscriptionCommand by @amorask-bitwarden in #7695
• [PM-37785] Add vault batch bar feature flags by @nick-livefront in #7696
• Add feature flag for SSH ecdsa by @neuronull in #7697
• [PM-37092] feat: Add business plan migration handler to SubscriptionUpdatedHandler by @cyprain-okeke in #7707
• [PM-31191] Move KDF from Auth to KM constants by @mzieniukbw in #7709
• [PM-29658]: Remove PUT Policy vNext by @sven-bitwarden in #7711
• [PM-27487] Remove disable-type-0-decryption feature flag by @jlf0dev in #7717
• [PM-27298] Remove consolidated-session-timeout-component feature flag by @jlf0dev in #7718
• [PM-37170] feat: Add churn-mitigation offer query, command, and API endpoints by @amorask-bitwarden in #7722
• refactor(server): consolidate cloud region config by @addisonbeck in #7728
• Migrate Web Frontend to Official Aspire JavaScript Hosting by @sbrown-livefront in #7731

🐛 Bug fixes

• [PM-35401] Update exception handling in CreateAuthRequestAsync() and PostAdminRequest() by @rr-bw in #7615
• [PM-37727] Fix exceptions when serialzing blob-encrypted ciphers by @nikwithak in #7667
• [PM-36678] Add custom user check by @JimmyVo16 in #7675
• [PM-37259] - Update Sso Request Validator by @jrmccannon in #7676
• SRE-4899 - update node 20 to 24 for admin project by @sneakernuts in #7685
• [PM-37820] Update Missing Tax Logic for US Customers by @sbrown-livefront in #7719
• [PM-38288] - Restore collections endpoint by @jaasen-livefront in #7738

⚙️ Maintenance

• [PM-4128] Remove nullability of Send.Data and Send.Keys by @harr1424 in #7266
• Use fixture to share state between PushControllerTests by @justindbaur in #7433
• [PM-35066] - remove legacy collections endpoint by @jaasen-livefront in #7520
• [PM-13328] Move OrganizationCollectionManagementUpdateRequestModel to AC team by @eliykat in #7651
• PM-36952 - Improve code review workflow with added triggers by @theMickster in #7663
• Triggering main build to rebuild after cosign failure by @pixman20 in #7669
• [PM-37740] Add missing container configuration to aspire by @eliykat in #7670
• [PM-37486] Remove IPolicyService and associated dead code by @r-tome in #7672
• [PM-12469] Move remaining Admin Password Reset code to AC team by @eliykat in #7680
• [PM-25691] Create OrganizationUpdateCollectionManagementCommand by @r-tome in #7682
• [PM-37956] by @ike-kottlowski in #7698
• [PM-35312] Remove Outdated Stored Procedures by @sven-bitwarden in #7712
• [PM-34502] Remove the IPolicyValidator pattern by @JimmyVo16 in #7714
• refactor(server): move CloudRegion enum from Setup to Core by @addisonbeck in #7727
• docs: expand CACHING.md (non-Redis L2, sizing/cost, SRE coordination) by @withinfocus in #7736

📦 Dependency Updates

• [deps]: Update dotnet monorepo to v10 (major) by @renovate in #6634
• [PM-35479] updating AutoMapper to v14 and adding cve workaround by @itsadrago in #7521
• [PM-36843] Skip relay push registration for non mobile clients by @justindbaur in #7617
• Bump version to 2026.5.0 by @github-actions in #7655
• [deps]: Pin dependencies by @renovate in #7703
• [deps]: Update aspire monorepo to 13.3.4 by @renovate in #7729
• Bump version ...

Version 2026.5.0

What's Changed

Feature Development

• [PM-30483] Remove feature flagged logic around passkey unlock by @eligrubb in #7318
• Add README for PolicyRequirements feature by @eliykat in #7503
• [PM-27278] add AccountKeysRequestModel to RegisterFinishRequestModel for account encryption v2 support by @eligrubb in #6798
• billing/pm-24665/license-file-generation-should-fail-for-unpaid-subscription by @cyprain-okeke in #7444
• [sm-1878] Adding feature flag for secret versioning by @cd-bitwarden in #7170
• Feature flag for autotriage (autofill) by @blackwood in #7528
• [PM-35305] Add desktop-ui-settings-dialog flag by @Hinton in #7491
• [PM-33875] Add Revocation Reasons by @sven-bitwarden in #7473
• [PM-34116][PM-34117] Drivers License and Passport by @nick-livefront in #7512
• [PM-29090] Remove FF: pm-26793-fetch-premium-price-from-pricing-service - Flag by @amorask-bitwarden in #7549
• [PM-35805] Add BulkAutoConfirmOnLogin feature flag by @JaredScar in #7553
• [PM-34565] Save Cancellation Details for Scheduled Subscriptions by @sbrown-livefront in #7535
• Auth/pm 35392/master password service foundation by @enmande in #7530
• Implement master password policy requirement by @BTreston in #7537
• [PM-35253] Add organization ability UseInviteLinks by @r-tome in #7489
• [PM-33885]: Attach RevocationReason to Needed Client Response Model by @sven-bitwarden in #7563
• [PM-34148] Implement feature flag for fetching new policies and organization details by @JaredScar in #7529
• [PM-34387] Add organization invite link creation endpoint by @r-tome in #7477
• Removed feature flag by @Patrick-Pimentel-Bitwarden in #7574
• [PM-34774] Add GET endpoint for organization invite links by @r-tome in #7534
• [PM-32100] Implement Multi-Provider Ability Lookup by @JimmyVo16 in #7552
• [PM-34388] Add organization invite link update endpoint by @r-tome in #7560
• [PM-35263] Admin Portal: Add checkbox for the InviteLinks ability by @r-tome in #7578
• [PM-28346] Use SDK for attachment delete operations by @gbubemismith in #7538
• [PM-30852] Add support for TDE user key rotation by @Thomas-Avery in #7565
• [PM-31631] update password pre-login salt response by @ike-kottlowski in #7469
• [PM-34392] Add delete invite link endpoint by @r-tome in #7591
• [PM-35201] Enhance AdminRecoverAccountValidator to include Accepted status by @JaredScar in #7579
• [PM-33473] Remove pm-29594-update-individual-subscription-page feature flag by @amorask-bitwarden in #7519
• [PM-34389] Add refresh endpoint for organization invite links by @r-tome in #7588
• [PM-19790] [PM-19791] Remove policy requirements feature flag references and definition by @vincentsalucci in #7596
• [PM-36859] Add new feature flag for refactoring Org Collections Vault by @JaredScar in #7599
• [PM-34150] - RequireSSO Applies to Accepted by @jrmccannon in #7603
• PM 35229 [Browser/Desktop] Stripe Checkout from upgrade dialog by @cyprain-okeke in #7606
• PM-31923 adding the whole report endpoints v2 by @prograhamming in #7228
• [PM-31781] skip unpaid automations for exempt orgs by @kdenney in #7480
• [PM-37230] remove FF logic from new send endpoints by @itsadrago in #7621
• [PM-30215] Allow key rotation for key connector users by @mzieniukbw in #7618
• [PM 34174]Do not show renewal reminder banners to exempt organizations by @cyprain-okeke in #7483
• Auth/PM-37165 - Add Last API Key Rotated Date to User by @JaredSnider-Bitwarden in #7634
• [PM-37292] - add feature flag by @jaasen-livefront in #7630
• [PM-26657] removes feature flag pm-25083-autofill-confirm-from-search by @jengstrom-bw in #7610
• Auth/PM-37166 - Devices - add client version by @JaredSnider-Bitwarden in #7632
• [PM-36560] Create Send event logs by @harr1424 in #7602
• [PM-29607] Remove PM24032 Feature Flag by @sbrown-livefront in #7558
• Aspire Integration by @sbrown-livefront in #6775
• [PM-26696] Removes pm-23904-risk-insights-for-premium feature flag by @jengstrom-bw in #7613
• Aspire: Add README for Aspire AppHost setup and usage by @sbrown-livefront in #7646
• [PM-32743] Add ability to create folders during import to orgs by @mcamirault in #7568
• [PM-19551] Add externalId support to groups PATCH endpoint by @JimmyVo16 in #7620

🐛 Bug fixes

• [PM-33501] Prevent orphaned Sends during user and org deletion by @harr1424 in #7386
• [PM-25056] - Deadlock testing fix by @jrmccannon in #7478
• [PM-34427] Fix Users can edit and save sends with the hide email address option enabled by @harr1424 in #7509
• [PM-35306] Fix password change not working when using the unlock and authentication data models by @quexten in #7505
• [PM-33436] Refactor setup shell commands by @dereknance in #7494
• [PM-34213] Create attachment event log by @shane-melton in #7425
• [PM-34813] fix system coupons regression by @kdenney in #7515
• [PM-35250] Prevent Custom Users Removing Admins by @sven-bitwarden in #7526
• [PM-34822] Consistent error response 400 and 404 in Org Integrations controller by @voommen-livefront in #7458
• [PM-28045] - Org Key Validation by @jrmccannon in #7384
• [PM-34601] Bump Group.RevisionDate on edits and access changes by @r-tome in #7467
• [PM-35351] Fix self-hosted public API member invites by skipping plan retrieval by @r-tome in #7507
• [PM-34848] Add authorization to PreviewInvoiceController org endpoints by @connerbw in #7583
• [PM-35257] Validate plan frequency tier by @connerbw in #7570
• [PM-36568] Disable Pushed Authorization Request endpoint in Identity and SSO by @ike-kottlowski in #7585
• [PM-35909] Preserve existing discounts during price migration by @amorask-bitwarden in #7561
• [PM-33289] Stop 500-retry loop on incomplete_expired subs by @amorask-bitwarden in #7525
• [PM-35624] Fix EF GetCountByOnlyOwnerAsync by @JimmyVo16 in #7586
• [PM-35300] emails do not match figma by @JaredScar in #7592
• [PM-23900] Optimize organization exports by @harr1424 in #7590
• PM-34680 serialize values to prevent injection by @voommen-livefront in #7593
• [PM-37077] Remediate Data Protection errors in DeleteSendsJob by @harr1424 in #7608
• [PM-36613] Void open invoices for unpaid subscriptions by @amorask-bitwarden in #7589
• [PM-36185] Change where Setup container looks for openssl config by @dereknance in #7623
• [PM-35300] fix emails do not match figma by @JaredScar in #7609
• Auth/PM-37621 - Fix Device.LastActivityDate surfacing legacy NULL rows as DateTime.UtcNow by @JaredSnider-Bitwarden in #7649

⚙️ Maintenance

• [AppSec] AI Fix for Template Injection in GitHub Workflows Action by @aikido-autofix[bot] in #7448
• [PM-32598] - Remove Unused sso/details Endpoint + Sprocs by @sven-bitwarden in #7400
• Move missed integration files to DIRT by @eliykat in h...

Version 2026.4.2

Overview

• Bug fix for subscription handling

What's Changed

🐛 Bug fixes

• [PM-36613] Void open invoices for unpaid subscriptions by @amorask-bitwarden in #7589

📦 Dependency Updates

• Update Bitwarden.Server.Sdk to 1.5.2 by @justindbaur in #7559

🎨 Other

• Bumped version to 2026.4.2 by @connerbw in #7619

Full Changelog: v2026.4.1...v2026.4.2

Version 2026.4.1

Overview

• Removed feature flag for automatic member confirmation settings
• Removed feature flag for unlock with passkey
• Removed feature flag for SCIM refactor
• Various under-the-hood improvements and minor bug fixes

What's Changed

Feature Development

• [PM-34595] Add provider authorization attributes by @eliykat in #7389
• [PM-34230] server side constant for feature flag by @voommen-livefront in #7395
• Add SDK Sends API feature flag by @adudek-bw in #7254
• [PM-34177] Add feature flag for Organization Invite Links by @r-tome in #7404
• [PM-34177] Fix feature flag key value for Organization Invite Links by @r-tome in #7409
• [PM-34171] Add card scanner feature flag by @SaintPatrck in #7310
• PM-34686 Remove Summary Count Limit by @prograhamming in #7398
• [PM-32105] - Org ability feature flag by @jrmccannon in #7401
• [PM-33213] Remove FeatureFlag Around ResetPassword && PolicyRequirements by @sven-bitwarden in #7188
• [PM-32394] Implement Scim V2 features by @JaredScar in #7397
• [PM-34694] - add quick actions feature flag by @jaasen-livefront in #7412
• [PM-34146] Add GetManyConfirmedAcceptedByUserIdAsync(Guid userId) to the IPolicyRepository interface by @JimmyVo16 in #7392
• [PM-34178] Add entities, repository and database migrations for Organization Invite Link feature by @r-tome in #7407
• [PM-31894] remove storage reconciliation job and flags by @kdenney in #7424
• [PM-26383] Remove feature flag from server-side for autoconfirm by @JaredScar in #7402
• [PM-34805] Add new feature flag for Policy Drawers (pm-34804) in Constants.cs by @JaredScar in #7429
• [PM-34147] Add GetManyConfirmedAcceptedDetailsByUserAsync to IOrganizationUserRepository by @JimmyVo16 in #7399
• [PM-34500] Add PM-34500-strict-cipher-decryption feature flag by @nikwithak in #7387
• [PM-35072] Allow account recovery for revoked status users by @kspearrin in #7446
• [PM-34854] Add pm-34145-policies-in-accepted-state feature flag by @eliykat in #7449
• [PM-31941] Implement Feature Flag and Access Intelligence Refactor Integration by @Banrion in #7459
• [PM-34500] Fix Feature Flag pm-34500-strict-cipher-decryption name casing by @nikwithak in #7460
• [PM-30751] - add secure SSRF protection for internal IPs by @jaasen-livefront in #7256
• [PM-31909] Remove m3 flagged logic by @connerbw in #7352
• [PM-31911] Remove m3 flag definition by @connerbw in #7354
• [PM-34825] Add support for ml-dsa44 keypairs by @quexten in #7435
• [PM-31780] Add exempt from billing automation toggle by @amorask-bitwarden in #7438
• [PM-32068] - Org Ability Extended Cache by @jrmccannon in #7443
• [PM-33866] Revocation Reasons: DDL Edition by @sven-bitwarden in #7432
• chore: remove bulk reinvite and org accept init flags by @vincentsalucci in #7484
• Auth/Innovation/PM-4517 - Device Management - Add Last Activity Date by @JaredSnider-Bitwarden in #7302
• [PM-34060] Add bank account item type by @gbubemismith in #7112
• [PM-35154] collection SDK decryption feature flag to Constants.cs by @JaredScar in #7470
• [PM-34595] Update provider controllers to use authz attribute by @eliykat in #7450
• [PM-24927] Add payment optional support to trial initiation flow by @cyprain-okeke in #7418
• [PM-32069] Add ExtendedProviderAbilityCacheService by @JimmyVo16 in #7447
• PM-22228 Added Phishing events by @voommen-livefront in #7427
• [PM-32853] Add Trial Initiation Metadata for Marketing or Product by @sbrown-livefront in #7462
• feat(validation): [PM-32626] by @Patrick-Pimentel-Bitwarden in #7064
• [PM-32073] - Added Bulk Get Org Ability by @jrmccannon in #7476

🐛 Bug fixes

• [PM-22525] Log when provider admin accesses an org vault by @BTreston in #7379
• [PM-34679] Display Phase 2 prices and discount on org subscription page by @amorask-bitwarden in #7393
• [PM-34679] Fix Families 2019 Phase 2 price and discount display by @amorask-bitwarden in #7408
• PM-34391 fixes to eventsController by @voommen-livefront in #7405
• [PM-34728] Use top-level ProrationBehavior on schedule updates by @amorask-bitwarden in #7410
• [PM-33500] - delete attachments from deleted ciphers by @jaasen-livefront in #7208
• fix(change-email): [PM-34742] Change Email Sets Salt by @Patrick-Pimentel-Bitwarden in #7413
• [PM-34773] Fix storage addition during active Phase 2 of schedule by @amorask-bitwarden in #7420
• [PM-34255] - SCIM Api Key Fix by @jrmccannon in #7403
• fix(refactor): [PM-34246] Rename Set Password to Finalize Onboarding by @Patrick-Pimentel-Bitwarden in #7328
• Revert "fix(change-email): [PM-34742] Change Email Sets Salt" by @Patrick-Pimentel-Bitwarden in #7421
• PM-33194 single integration of a type only by @voommen-livefront in #7280
• [PM-22450] Bump Collection.RevisionDate on edits and access changes by @r-tome in #7380
• [PM-26043] Fix bug: can't add secrets manager to legacy plans by @kdenney in #7414
• [PM-22450] Bump date on migration script file CollectionBumpRevisionDateOnAccessChange by @r-tome in #7436
• [PM-33301] Add Functionality for Upgrading Using PayPal by @sbrown-livefront in #7183
• [PM-34866][PM-34865] Fix EnableAutomaticTaxAsync to update schedule phases by @connerbw in #7437
• Fix test clock awareness in schedule-aware cancellation by @connerbw in #7440
• Fix CollectionUsers/CollectionGroups table names for Seeder across all DB providers by @mimartin12 in #7441
• [PM-32463] Remove organization enabled filter from database query/view by @shane-melton in #7037
• Auth/PM-34130 - Fix DeviceAuthDetails constructor and stored procedure for EDD compliance by @JaredSnider-Bitwarden in #7416
• [PM-34390] - Fixing Group/Provider User by @jrmccannon in #7431
• [PM-33539] Fix wrong model response type for file model size by @quexten in #7474
• [PM-35234] Prevent appending duplicate org user in validator request by @BTreston in #7486
• [PM-34427] Fix Users can edit and save sends with the hide email address option enabled by @harr1424 in #7511

⚙️ Maintenance

• [PM-34456] Innovation Sprint: Enable generating automated release notes by @djsmith85 in #7362
• [FIX] Image tag max length logic by @gitclonebrian in #7396
• [PM-29152] Rename VNextSavePolicyCommand to SavePolicyCommand and remove deprecated policy interfaces by @r-tome in #7364
• test(change-email): [PM-34742] Change Email Sets Salt Attempt 2 by @Patrick-Pimentel-Bitwarden in #7422
• [PM-34383] Add import validation allowing providers to perform imports by @harr1424 in #7394
• [PM-33044] Provider Ability Refactor EventService by @JimmyVo16 in #7411
• [PM-34823] Remove missed uses of PolicyRequirements flag by @eliykat in #7426
• [deps]: Update docker/login-action action to v4 by @renovate[bot] in #7346
• [deps]: Update docker/setup-qemu-action action to v4 by @renovate[bot] in #7223
• [deps]: Update codecov/codecov-action action to v6 by @renovate[bot] in #7455
  *...