Version 2026.8.1

What's Changed

💙 Community Highlight

• [PM-41468] Fix thread-unsafe StringBuilder in Setup Helpers.Exec by @cttech-io in #8141

Feature Development

• Auth/PM-41503 and PM-41533 - Registration - Add open org invite flow support by @JaredSnider-Bitwarden in #8159
• [PM-41268] Declare the PartialData cipher response field by @Hinton in #8114
• [PM-40209] Add PAM access claim and ManageAccessRules permission by @Hinton in #8160
• [PM-32211] fix private key before key rotation by @mzieniukbw in #7548
• [PM-40336] Access Rules: domain, persistence & schema by @Hinton in #7981
• [PM-40210] Add single + bulk PAM enable flows for AccessPam by @Hinton in #8161
• [PM-40211] Authorize Access Rule endpoints with IOrganizationRequirement by @Hinton in #8162
• [PM-40336] Access Rules: API by @Hinton in #7983
• [PM-40525] PAM access rule evaluation engine by @Hinton in #7992
• feat: wire-in key id on registration and key rotation flows by @quexten in #8164
• [PM-40526] Access Leasing: domain by @Hinton in #8001
• [PM-40526] Access Leasing: persistence & schema by @Hinton in #8002
• [PM-41472] feat: add bulk folder delete endpoint by @gbubemismith in #8157
• feat(vault): add key id validation by @quexten in #8184
• [PM-39455] Set Upgrade Tokens for Organizations by @mzieniukbw in #8158
• [PM-39455] Let the organization rotate the account recovery key by @mzieniukbw in #8174
• [PM-41871] Add Chrome extension beta to allowed passkey origins by @trmartin4 in #8197
• [PM-40640] Adjust error messages for Send policy enforcement by @mcamirault in #8196
• [PM-34809] Remove feature flag for policy drawers from server by @JaredScar in #8188
• [PM-29460] feat: Authenticate PricingClient to the pricing service by @amorask-bitwarden in #8054
• [PM-39979] Add full API support for Item-type Sends by @mcamirault in #8192

❗ Breaking Changes

• [PM-36225] Upgrade Stripe SDK to 52.1.0 by @sbrown-livefront in #7643

🐛 Bug fixes

• [SHOT-247] fix: Disable proxy for container healthchecks by @keithhubner in #8170
• Ensure seeder appsettings.{env}.json can be found by @Hinton in #8222
• [PM-5108] fix: Show all owners and admins in admin portal org view by @r-tome in #8099
• [SHOT-187] fix: Make database migration execution timeout configurable by @mimartin12 in #8143
• [PM-41951] sponsored families email template copy by @JaredScar in #8217
• fix(vault): skip key id validation for organization by @quexten in #8219
• [PM-40801] Add option for alternative DataProtection settings on FIPS nodes by @eligrubb in #8092
• PM-42152 - Open Org Invite Status Endpoint - Decode org name by @JaredSnider-Bitwarden in #8227
• [PM-40300]: Restrict Provider Users' Account Recovery by @sven-bitwarden in #8103
• [PM-40350] ManagePolicies should allow read-only access to claimed organization domains by @harr1424 in #8220
• [PM-22405] - Remove invalid users from invites by @jrmccannon in #8151
• [PM-42240] perms still returned for members who were previously custom by @JaredScar in #8244

⚙️ Maintenance

• [PM-40492] Regenerate NuGet lock files during version bump by @Hinton in #8097
• [BRE] Removing build workflow and Dockerfiles by @gitclonebrian in #8173
• [BRE-2162] ci(build): Trigger downstream build on release branches by @fntyler in #8155
• [PM-37320] refactor: consolidate AuthRequest update validation and remove dead code by @ike-kottlowski in #8051
• [PM-41451] Migrate last files off of AssemblyHelpers.GetVersion() by @justindbaur in #8137
• Remove grype scanning by @sognefej in #8180
• [PM-34546] Add integration tests for Notifications POST /send endpoint by @justindbaur in #8171
• QA-2279: add OrganizationEventScene to the seeder by @awiester-bw in #8175
• [PM-32211] Database testing CI failures fix by @mzieniukbw in #8185
• [PM-34564] Remove Core & SharedWeb from icons by @justindbaur in #8181
• [PM-35601] Add TODO comments about future conditional validation by @rr-bw in #8153
• [PM-41787] Move two-factor integration tests into a CODEOWNERS-compatible path. by @enmande in #8172
• Document the AccessRuleId write contract on ICollectionRepository by @Hinton in #8186
• [BRE-2116] Checkout v7 privileged workflows by @brandonbiete in #8194
• [PM-41917] Add lit inline menu feature flag to server by @dan-livefront in #8198
• Allow seeder to create a Free org with Secrets Manager by @nthompson-bitwarden in #8187
• feat(seeder): add --account-age-days to seed aged individual users by @nthompson-bitwarden in #8201
• [PM-38270] perf: Speed up "claimed by organization" status checks on the Members page by @r-tome in #8125
• [PM-38269] refactor: remove redundant permissions round-trip in OrganizationUserUserDetailsQuery by @r-tome in #8119
• [PM-38272] fix: handle null or empty permissions in OrganizationUserResponseModel by @JaredScar in #8207
• [PM-38326] Utilize cache for UsePolicies by @JaredScar in #8205
• [PM-38271] Speed up load org data by running queries in parallel by @JaredScar in #8202
• [PM-39422] Remove obsolete properties for organization management compatibility by @JaredScar in #8206
• Add dev.playground seeder preset with role-based login emails by @Hinton in #8223
• [PM-39455] Reuse the connection and transaction during user key rotation by @mzieniukbw in #8165
• Auth/PM-41812 - Auth - New Org User Staged Status Audit - Comment changes only by @JaredSnider-Bitwarden in #8225
• Prepare IPushNotificationService for extraction into a push library by @justindbaur in #8199
• Bump version to 2026.8.1 by @github-actions[bot] in #8247
• [BRE-2166] Add metadata to container images by @vgrassia in #8241
• [PM-38329] policies stop converting policy data on every response by @JaredScar in #8204

📦 Dependency Updates

• [deps]: Update CommunityToolkit.Aspire.Hosting.Ngrok to v13.4.0 by @renovate[bot] in #8020
• [SHOT-251] Update Dockerfile to use Ubuntu 22.04 by @mimartin12 in #8183
• [deps]: Update jquery to v4 by @renovate[bot] in #6932
• [deps]: Update dotnet monorepo by @renovate[bot] in #8018

🎨 Other

• [AI-88] llm: Remove .claude/CONTRIBUTING.md by @SaintPatrck in #8233

New Contributors

• @cttech-io made their first contribution in #8141

Full Changelog: v2026.8.0...v2026.8.1