Version 2026.7.2

What's Changed

• removed feature flag for enforcing policies for accepted status members
• removed feature flag for pricing migrations
• Various under-the-hood improvements and minor bug fixes

Feature Development

• [PM-38951] feat: Add CreationDate to org user detail endpoints by @jrmccannon in #7936
• [PM-39815] feat: Surface org name on invite-link status when links unavailable by @r-tome in #7928
• [PM-40152] feat: Require verified email to accept organization invite link by @r-tome in #7949
• Add VFO1 Foundation Flag by @nick-livefront in #7973
• [PM-27060] chore: add feature flag for password prelogin from SDK by @ike-kottlowski in #7954
• [PM-40293] feat: Trim invite-link policies endpoint to Master Password and Account Recovery by @r-tome in #7977
• [PM-38388] Support sales-assisted trials by @enmande in #7881
• [PM-38791] feat: Add SupportsConfirmation to invite-link status endpoint by @JimmyVo16 in #7974
• [PM-39274] Add feature flag event-management-for-generic-hec by @Banrion in #7993
• [PM-40006] Add temporary item sharing feature flag by @mcamirault in #7996
• [INNO] - Passkey Directory Endpoint by @jrmccannon in #7317
• [PM-38749] Add endpoint to update SupportsConfirmation and inviteBlob by @JimmyVo16 in #7999
• [PM-40245] Add google favicon API to icon service lookups by @kspearrin in #7951
• [PM-40216] feat: Data-protect OrganizationInviteLink.Code at rest by @r-tome in #7969
• [PM-40537] fix: Only rewrite Stripe schedules for plan-migration organizations by @amorask-bitwarden in #8035
• [PM-39387] fix: Bump AccountRevisionDate when premium status changes by @cyprain-okeke in #7966
• [PM-34429] Create an endpoint to retrieve the Invite by @JimmyVo16 in #7994
• [PM-40523] feat: Add endpoint to return organization private key to admins by @r-tome in #8006
• [PM-40208] Add AccessPam column + PAM seat-occupancy read by @Hinton in #7957
• [PM-39236]: Add RenewalNotificationSentDate column + repository method by @sbrown-livefront in #8031
• [PM-39197] - improve vault sync performance by @jaasen-livefront in #7829
• Revert "[PM-39197] - improve vault sync performance" by @gbubemismith in #8064
• [PM-39197] - improve vault sync performance (#8080) by @gbubemismith in #8117

🐛 Bug fixes

• [PM-40281] Convert email search to text search field by @BTreston in #7968
• [PM-38951] fix: Correct migration script date to 2026-07-14 by @jrmccannon in #7972
• [PM-38773] Require org membership before logging org audit events via /collect by @AlexRubik in #7934
• [PM-38874] fix: Keep Admin org page accessible when Stripe customer is deleted by @kdenney in #7913
• [PM-40372] Fix Issue with Restoring Staged Users by @sven-bitwarden in #7979
• [PM-40516] fix: Isolate ExtendedCache backplane per cache name on shared Redis by @withinfocus in #8004
• [PM-18747] Add more protections to endpoints on backend so regular members can't hit endpoints and see data by @JaredScar in #7985
• [PM-33940] Enforce per-secret access checks in SecretVersionsController by @mandreko-bitwarden in #7823
• [PM-16456] Enhance PreviewOrganizationTaxCommand to support Teams Starter 2023 by @JaredScar in #8000
• [PM-40201] Added feature flag for derive ssh keys by @gbubemismith in #7998
• [PM-16095] feat: Enhance provider seat limit validation messages by @JaredScar in #7980
• [PM-40440] fix: Include Secrets Manager and storage in plan-change tax preview by @amorask-bitwarden in #7995
• [PM-40751] fix: Sales-assisted trials email copy by @enmande in #8045

⚙️ Maintenance

• Bump version to 2026.7.0 by @github-actions[bot] in #7967
• [PM-33046] Remove legacy cache DI registration in Events by @JimmyVo16 in #7958
• Auth/PM-3813 - 2FA Management Endpoints - User Verification Refactor by @JaredSnider-Bitwarden in #7841
• [PM-33046] Remove legacy in-memory application cache services by @JimmyVo16 in #7959
• [PM-40343] Extract ITableObject, IRepository, CombGuid to Data by @Hinton in #7976
• [PM-40047] Detect blob ciphers via format_version probe by @shane-melton in #7930
• ci: route Swashbuckle (Swagger) Renovate updates to Platform by @amorask-bitwarden in #7978
• PM-39869 - Implement attachments in Seeder & cipher key encryption by @theMickster in #7953
• Add library documentation by @justindbaur in #7950
• [PM-33046] Remove GetManyAbilities repo methods and cache interface by @JimmyVo16 in #7960
• chore: update code owners to include architecture team for RustSDK by @theMickster in #7986
• [PM-34857] Remove PoliciesInAcceptedState feature flag by @eliykat in #7947
• Switch to Bitwarden.Server.Sdk.Features by @justindbaur in #7898
• removed curl and replaced healthcheck with wget by @keithhubner in #7858
• chore(ci): skip platform-community signal for fork PRs by @addisonbeck in #8009
• Seeder/add parameterized org seeding by @nthompson-bitwarden in #7987
• [PM-37260] Profile service improvements by @ike-kottlowski in #7924
• Bump version to 2026.7.1 by @github-actions[bot] in #8038
• Resolve minor code smells in attachment tests by @theMickster in #8030
• PM-40665 - Seed SSO configuration and a realistic local-sso dev org in the Seeder by @theMickster in #8014
• Fix date of migration files that broke main by @patriksvensson in #8048
• Seeder/provider scenes by @nthompson-bitwarden in #8034
• [PM-40623] Add ProducesResponseType to fix SDK server bindings by @eliykat in #8046
• map System.Text.Json.Nodes types to OpenAPI schemas by @dani-garcia in #8053
• [PM-37599] refactor: Remove PM37597 always-enable-Stripe-automatic-tax feature flag by @amorask-bitwarden in #7989
• [PM-16095] Revert changes before RC by @JaredScar in #8055
• [PM-40623] Add ProducesResponseType to OrganizationUsersController.GetInvite by @eliykat in #8058
• Bump version to 2026.7.2 by @github-actions[bot] in #8063
• Seeder - Tech debt - Migrate CoreHelpers.GenerateComb to CombGuid.Generate by @theMickster in #8061
• [PM-36062] refactor: Remove defer-price-migration-to-renewal feature flag by @amorask-bitwarden in #7883

📦 Dependency Updates

• [deps]: Update MarkDig to v1.3.2 by @renovate[bot] in #7704
• [deps]: Update dtolnay/rust-toolchain digest to 4cda84d by @renovate[bot] in #8016
• [deps]: Pin rust to 1.97.1 by @renovate[bot] in #8015

New Contributors

• @patriksvensson made their first contribution in #8048

Full Changelog: v2026.7.1...v2026.7.2