Repository navigation
English
Fix cipher creation and full updates on Vaultwarden 1.37.4, where the missing encryptedFor field caused HTTP 422. Requests now use the current access token's user subject while preserving item metadata and attachment request formats. Unusable token subjects are rejected without exposing token contents.
Update Argon2 and Tokio Stream. Independent Argon2id reference vectors cover encryption keys, MAC keys and login hashes. The upgrade test harness now avoids a Linux executable-copy/process-start race.
Install or upgrade:
curl -fsSL https://raw.githubusercontent.com/leeguooooo/bitwarden-use/main/install.sh | sh
bwu --versionValidation: four-platform CI builds and smoke tests, public archive SHA-256 checks, Developer ID signatures on both macOS CLI/agent pairs, and a fresh isolated macOS Apple Silicon installation passed.
中文
修复 Vaultwarden 1.37.4 创建、更新条目时缺少 encryptedFor 导致的 HTTP 422。请求使用当前访问令牌中的用户标识，保留条目元数据和附件请求格式；令牌异常时拒绝写入，不泄露令牌内容。
更新 Argon2、Tokio Stream。新增独立的 Argon2id 参考向量，核对加密密钥、MAC 密钥和登录哈希。修复 Linux 升级测试中复制、启动程序之间的竞态。
下载对应平台的压缩包和 .sha256 文件，或使用上面的安装命令升级。
验证通过：四平台 CI 构建和冒烟测试、公开压缩包 SHA-256、macOS 两个平台的 CLI/agent Developer ID 签名，以及 macOS Apple Silicon 隔离安装。