Original release notes
What's Changed
:shipit: Feature Development
- [PM-30483] Remove feature flagged logic around passkey unlock by @eligrubb in https://github.com/bitwarden/server/pull/7318
- Add README for PolicyRequirements feature by @eliykat in https://github.com/bitwarden/server/pull/7503
- [PM-27278] add AccountKeysRequestModel to RegisterFinishRequestModel for account encryption v2 support by @eligrubb in https://github.com/bitwarden/server/pull/6798
- billing/pm-24665/license-file-generation-should-fail-for-unpaid-subscription by @cyprain-okeke in https://github.com/bitwarden/server/pull/7444
- [sm-1878] Adding feature flag for secret versioning by @cd-bitwarden in https://github.com/bitwarden/server/pull/7170
- Feature flag for autotriage (autofill) by @blackwood in https://github.com/bitwarden/server/pull/7528
- [PM-35305] Add desktop-ui-settings-dialog flag by @Hinton in https://github.com/bitwarden/server/pull/7491
- [PM-33875] Add Revocation Reasons by @sven-bitwarden in https://github.com/bitwarden/server/pull/7473
- [PM-34116][PM-34117] Drivers License and Passport by @nick-livefront in https://github.com/bitwarden/server/pull/7512
- [PM-29090] Remove FF:
pm-26793-fetch-premium-price-from-pricing-service- Flag by @amorask-bitwarden in https://github.com/bitwarden/server/pull/7549 - [PM-35805] Add BulkAutoConfirmOnLogin feature flag by @JaredScar in https://github.com/bitwarden/server/pull/7553
- [PM-34565] Save Cancellation Details for Scheduled Subscriptions by @sbrown-livefront in https://github.com/bitwarden/server/pull/7535
- Auth/pm 35392/master password service foundation by @enmande in https://github.com/bitwarden/server/pull/7530
- Implement master password policy requirement by @BTreston in https://github.com/bitwarden/server/pull/7537
- [PM-35253] Add organization ability UseInviteLinks by @r-tome in https://github.com/bitwarden/server/pull/7489
- [PM-33885]: Attach RevocationReason to Needed Client Response Model by @sven-bitwarden in https://github.com/bitwarden/server/pull/7563
- [PM-34148] Implement feature flag for fetching new policies and organization details by @JaredScar in https://github.com/bitwarden/server/pull/7529
- [PM-34387] Add organization invite link creation endpoint by @r-tome in https://github.com/bitwarden/server/pull/7477
- Removed feature flag by @Patrick-Pimentel-Bitwarden in https://github.com/bitwarden/server/pull/7574
- [PM-34774] Add GET endpoint for organization invite links by @r-tome in https://github.com/bitwarden/server/pull/7534
- [PM-32100] Implement Multi-Provider Ability Lookup by @JimmyVo16 in https://github.com/bitwarden/server/pull/7552
- [PM-34388] Add organization invite link update endpoint by @r-tome in https://github.com/bitwarden/server/pull/7560
- [PM-35263] Admin Portal: Add checkbox for the InviteLinks ability by @r-tome in https://github.com/bitwarden/server/pull/7578
- [PM-28346] Use SDK for attachment delete operations by @gbubemismith in https://github.com/bitwarden/server/pull/7538
- [PM-30852] Add support for TDE user key rotation by @Thomas-Avery in https://github.com/bitwarden/server/pull/7565
- [PM-31631] update password pre-login salt response by @ike-kottlowski in https://github.com/bitwarden/server/pull/7469
- [PM-34392] Add delete invite link endpoint by @r-tome in https://github.com/bitwarden/server/pull/7591
- [PM-35201] Enhance AdminRecoverAccountValidator to include Accepted status by @JaredScar in https://github.com/bitwarden/server/pull/7579
- [PM-33473] Remove
pm-29594-update-individual-subscription-pagefeature flag by @amorask-bitwarden in https://github.com/bitwarden/server/pull/7519 - [PM-34389] Add refresh endpoint for organization invite links by @r-tome in https://github.com/bitwarden/server/pull/7588
- [PM-19790] [PM-19791] Remove policy requirements feature flag references and definition by @vincentsalucci in https://github.com/bitwarden/server/pull/7596
- [PM-36859] Add new feature flag for refactoring Org Collections Vault by @JaredScar in https://github.com/bitwarden/server/pull/7599
- [PM-34150] - RequireSSO Applies to Accepted by @jrmccannon in https://github.com/bitwarden/server/pull/7603
- PM 35229 [Browser/Desktop] Stripe Checkout from upgrade dialog by @cyprain-okeke in https://github.com/bitwarden/server/pull/7606
- PM-31923 adding the whole report endpoints v2 by @prograhamming in https://github.com/bitwarden/server/pull/7228
- [PM-31781] skip unpaid automations for exempt orgs by @kdenney in https://github.com/bitwarden/server/pull/7480
- [PM-37230] remove FF logic from new send endpoints by @itsadrago in https://github.com/bitwarden/server/pull/7621
- [PM-30215] Allow key rotation for key connector users by @mzieniukbw in https://github.com/bitwarden/server/pull/7618
- [PM 34174]Do not show renewal reminder banners to exempt organizations by @cyprain-okeke in https://github.com/bitwarden/server/pull/7483
- Auth/PM-37165 - Add Last API Key Rotated Date to User by @JaredSnider-Bitwarden in https://github.com/bitwarden/server/pull/7634
- [PM-37292] - add feature flag by @jaasen-livefront in https://github.com/bitwarden/server/pull/7630
- [PM-26657] removes feature flag
pm-25083-autofill-confirm-from-searchby @jengstrom-bw in https://github.com/bitwarden/server/pull/7610 - Auth/PM-37166 - Devices - add client version by @JaredSnider-Bitwarden in https://github.com/bitwarden/server/pull/7632
- [PM-36560] Create Send event logs by @harr1424 in https://github.com/bitwarden/server/pull/7602
- [PM-29607] Remove PM24032 Feature Flag by @sbrown-livefront in https://github.com/bitwarden/server/pull/7558
- Aspire Integration by @sbrown-livefront in https://github.com/bitwarden/server/pull/6775
- [PM-26696] Removes
pm-23904-risk-insights-for-premiumfeature flag by @jengstrom-bw in https://github.com/bitwarden/server/pull/7613 - Aspire: Add README for Aspire AppHost setup and usage by @sbrown-livefront in https://github.com/bitwarden/server/pull/7646
- [PM-32743] Add ability to create folders during import to orgs by @mcamirault in https://github.com/bitwarden/server/pull/7568
- [PM-19551] Add externalId support to groups PATCH endpoint by @JimmyVo16 in https://github.com/bitwarden/server/pull/7620
Bug fixes
- [PM-33501] Prevent orphaned Sends during user and org deletion by @harr1424 in https://github.com/bitwarden/server/pull/7386
- [PM-25056] - Deadlock testing fix by @jrmccannon in https://github.com/bitwarden/server/pull/7478
- [PM-34427] Fix Users can edit and save sends with the hide email address option enabled by @harr1424 in https://github.com/bitwarden/server/pull/7509
- [PM-35306] Fix password change not working when using the unlock and authentication data models by @quexten in https://github.com/bitwarden/server/pull/7505
- [PM-33436] Refactor setup shell commands by @dereknance in https://github.com/bitwarden/server/pull/7494
- [PM-34213] Create attachment event log by @shane-melton in https://github.com/bitwarden/server/pull/7425
- [PM-34813] fix system coupons regression by @kdenney in https://github.com/bitwarden/server/pull/7515
- [PM-35250] Prevent Custom Users Removing Admins by @sven-bitwarden in https://github.com/bitwarden/server/pull/7526
- [PM-34822] Consistent error response 400 and 404 in Org Integrations controller by @voommen-livefront in https://github.com/bitwarden/server/pull/7458
- [PM-28045] - Org Key Validation by @jrmccannon in https://github.com/bitwarden/server/pull/7384
- [PM-34601] Bump Group.RevisionDate on edits and access changes by @r-tome in https://github.com/bitwarden/server/pull/7467
- [PM-35351] Fix self-hosted public API member invites by skipping plan retrieval by @r-tome in https://github.com/bitwarden/server/pull/7507
- [PM-34848] Add authorization to PreviewInvoiceController org endpoints by @connerbw in https://github.com/bitwarden/server/pull/7583
- [PM-35257] Validate plan frequency tier by @connerbw in https://github.com/bitwarden/server/pull/7570
- [PM-36568] Disable Pushed Authorization Request endpoint in Identity and SSO by @ike-kottlowski in https://github.com/bitwarden/server/pull/7585
- [PM-35909] Preserve existing discounts during price migration by @amorask-bitwarden in https://github.com/bitwarden/server/pull/7561
- [PM-33289] Stop 500-retry loop on incomplete_expired subs by @amorask-bitwarden in https://github.com/bitwarden/server/pull/7525
- [PM-35624] Fix EF GetCountByOnlyOwnerAsync by @JimmyVo16 in https://github.com/bitwarden/server/pull/7586
- [PM-35300] emails do not match figma by @JaredScar in https://github.com/bitwarden/server/pull/7592
- [PM-23900] Optimize organization exports by @harr1424 in https://github.com/bitwarden/server/pull/7590
- PM-34680 serialize values to prevent injection by @voommen-livefront in https://github.com/bitwarden/server/pull/7593
- [PM-37077] Remediate Data Protection errors in DeleteSendsJob by @harr1424 in https://github.com/bitwarden/server/pull/7608
- [PM-36613] Void open invoices for unpaid subscriptions by @amorask-bitwarden in https://github.com/bitwarden/server/pull/7589
- [PM-36185] Change where Setup container looks for openssl config by @dereknance in https://github.com/bitwarden/server/pull/7623
- [PM-35300] fix emails do not match figma by @JaredScar in https://github.com/bitwarden/server/pull/7609
- Auth/PM-37621 - Fix Device.LastActivityDate surfacing legacy NULL rows as DateTime.UtcNow by @JaredSnider-Bitwarden in https://github.com/bitwarden/server/pull/7649
Maintenance
- [AppSec] AI Fix for Template Injection in GitHub Workflows Action by @aikido-autofix[bot] in https://github.com/bitwarden/server/pull/7448
- [PM-32598] - Remove Unused sso/details Endpoint + Sprocs by @sven-bitwarden in https://github.com/bitwarden/server/pull/7400
- Move missed integration files to DIRT by @eliykat in https://github.com/bitwarden/server/pull/7487
- [PM-35489] Move collections to AC ownership by @eliykat in https://github.com/bitwarden/server/pull/7523
- [PM-35489] Move collections to AC ownership - update namespaces by @eliykat in https://github.com/bitwarden/server/pull/7532
- fix(ci): fix startup_failure in move_edd_db_scripts job by @addisonbeck in https://github.com/bitwarden/server/pull/7554
- [BRE-1848] Remove legacy failure check job and Slack webhook by @vgrassia in https://github.com/bitwarden/server/pull/7557
- [PM-34883] - Add InjectOrganizationUserAttribute by @jrmccannon in https://github.com/bitwarden/server/pull/7536
- PM-35503 fixed flaky tests due to timing issue. by @prograhamming in https://github.com/bitwarden/server/pull/7551
- [BRE-1871] Adding trigger for dev deploy after build on main by @pixman20 in https://github.com/bitwarden/server/pull/7572
- [BRE-1871] Using new trigger action by @pixman20 in https://github.com/bitwarden/server/pull/7573
- Separate Feature Flags for Desktop Native Team by @differsthecat in https://github.com/bitwarden/server/pull/7577
- [PM-36047] Add tech-leads group as owners of the CODEOWNERS file by @coltonhurst in https://github.com/bitwarden/server/pull/7562
- [BRE-1851] - Migrate Publish and Release workflows by @vgrassia in https://github.com/bitwarden/server/pull/7582
- [PM-36421] Add xmldoc to Admin Console entities by @eliykat in https://github.com/bitwarden/server/pull/7580
- SHOT-152: Remove workflow logic for EE labels by @mimartin12 in https://github.com/bitwarden/server/pull/7595
- [PM-25690] Create UpdateUserResetPasswordEnrollment command by @r-tome in https://github.com/bitwarden/server/pull/7594
- Remove plan file by @eliykat in https://github.com/bitwarden/server/pull/7625
- Remove BW-GHAPP tokens from repository-management workflow by @AmyLGalles in https://github.com/bitwarden/server/pull/7624
- Fix/repository management remove tokens by @AmyLGalles in https://github.com/bitwarden/server/pull/7626
- Migrate to SLNX Style Solution by @justindbaur in https://github.com/bitwarden/server/pull/7645
- chore: ignore C# Dev Kit lscache and dump files by @enmande in https://github.com/bitwarden/server/pull/7648
Dependency Updates
- [deps] Tools: Update MailKit to 4.16.0 [SECURITY] by @renovate[bot] in https://github.com/bitwarden/server/pull/7502
- Update SSO package path in Renovate config by @ike-kottlowski in https://github.com/bitwarden/server/pull/7518
- Update
Bitwarden.Server.Sdkto1.5.2by @justindbaur in https://github.com/bitwarden/server/pull/7559 - [deps] Billing: Update coverlet.collector to v10 by @renovate[bot] in https://github.com/bitwarden/server/pull/7542
- [PM-28727] Upgrade to .NET 10 by @dereknance in https://github.com/bitwarden/server/pull/7171
- [deps] BRE: Update mcr.microsoft.com/devcontainers/dotnet Docker tag to v10 by @renovate[bot] in https://github.com/bitwarden/server/pull/6498
- chore(launch/tasks): Upgrade for .net10 by @enmande in https://github.com/bitwarden/server/pull/7584
- [deps] Tools: Pin dependencies by @renovate[bot] in https://github.com/bitwarden/server/pull/6204
- [deps]: Update vstest monorepo by @renovate[bot] in https://github.com/bitwarden/server/pull/6869
- [deps]: Update Microsoft.NET.Test.Sdk to v18 by @renovate[bot] in https://github.com/bitwarden/server/pull/6870
- [deps]: Update actions/github-script action to v9 by @renovate[bot] in https://github.com/bitwarden/server/pull/7545
- Bumped version to 2026.4.2 by @connerbw in https://github.com/bitwarden/server/pull/7619
Other
- Arch/qa env seeding tweaks by @MGibson1 in https://github.com/bitwarden/server/pull/7430
- Add seed script for local development by @Hinton in https://github.com/bitwarden/server/pull/7490
- Migrate server specific skills into correct location by @theMickster in https://github.com/bitwarden/server/pull/7488
- Add -o --output parameters to DB seeder util for preset command by @mimartin12 in https://github.com/bitwarden/server/pull/7495
- PM-35200 - Create contributing guide for Claude tooling by @theMickster in https://github.com/bitwarden/server/pull/7508
- [PM-35252] by @ike-kottlowski in https://github.com/bitwarden/server/pull/7501
