v156.0 (2026-08-27)

✨ What's Changed ✨

A new API has been added to get the list of enrolled experiments and rollouts without instantiating a NimbusClient: get_active_enrollments(). (#7560)

Add LoginStore::list_candidates() and LoginStore::get_many(), a pair of read APIs for consumers which filter logins on their unencrypted fields. list_candidates() returns a LoginCandidate per stored login - everything Login has except the secure fields (username/password), so searching by origin, httpRealm or formActionOrigin no longer forces a primary password prompt. get_many() then decrypts just the logins which matched. list() is unchanged, for callers who really do want every login in cleartext.