Bitwarden Server Version 2026.8.1

What's Changed

Community Highlight

• [PM-41468] Fix thread-unsafe StringBuilder in Setup Helpers.Exec by @cttech-io in https://github.com/bitwarden/server/pull/8141

:shipit: Feature Development

• Auth/PM-41503 and PM-41533 - Registration - Add open org invite flow support by @JaredSnider-Bitwarden in https://github.com/bitwarden/server/pull/8159
• [PM-41268] Declare the PartialData cipher response field by @Hinton in https://github.com/bitwarden/server/pull/8114
• [PM-40209] Add PAM access claim and ManageAccessRules permission by @Hinton in https://github.com/bitwarden/server/pull/8160
• [PM-32211] fix private key before key rotation by @mzieniukbw in https://github.com/bitwarden/server/pull/7548
• [PM-40336] Access Rules: domain, persistence & schema by @Hinton in https://github.com/bitwarden/server/pull/7981
• [PM-40210] Add single + bulk PAM enable flows for AccessPam by @Hinton in https://github.com/bitwarden/server/pull/8161
• [PM-40211] Authorize Access Rule endpoints with IOrganizationRequirement by @Hinton in https://github.com/bitwarden/server/pull/8162
• [PM-40336] Access Rules: API by @Hinton in https://github.com/bitwarden/server/pull/7983
• [PM-40525] PAM access rule evaluation engine by @Hinton in https://github.com/bitwarden/server/pull/7992
• feat: wire-in key id on registration and key rotation flows by @quexten in https://github.com/bitwarden/server/pull/8164
• [PM-40526] Access Leasing: domain by @Hinton in https://github.com/bitwarden/server/pull/8001
• [PM-40526] Access Leasing: persistence & schema by @Hinton in https://github.com/bitwarden/server/pull/8002
• [PM-41472] feat: add bulk folder delete endpoint by @gbubemismith in https://github.com/bitwarden/server/pull/8157
• feat(vault): add key id validation by @quexten in https://github.com/bitwarden/server/pull/8184
• [PM-39455] Set Upgrade Tokens for Organizations by @mzieniukbw in https://github.com/bitwarden/server/pull/8158
• [PM-39455] Let the organization rotate the account recovery key by @mzieniukbw in https://github.com/bitwarden/server/pull/8174
• [PM-41871] Add Chrome extension beta to allowed passkey origins by @trmartin4 in https://github.com/bitwarden/server/pull/8197
• [PM-40640] Adjust error messages for Send policy enforcement by @mcamirault in https://github.com/bitwarden/server/pull/8196
• [PM-34809] Remove feature flag for policy drawers from server by @JaredScar in https://github.com/bitwarden/server/pull/8188
• [PM-29460] feat: Authenticate PricingClient to the pricing service by @amorask-bitwarden in https://github.com/bitwarden/server/pull/8054
• [PM-39979] Add full API support for Item-type Sends by @mcamirault in https://github.com/bitwarden/server/pull/8192

Breaking Changes

• [PM-36225] Upgrade Stripe SDK to 52.1.0 by @sbrown-livefront in https://github.com/bitwarden/server/pull/7643

Bug fixes

• [SHOT-247] fix: Disable proxy for container healthchecks by @keithhubner in https://github.com/bitwarden/server/pull/8170
• Ensure seeder appsettings.{env}.json can be found by @Hinton in https://github.com/bitwarden/server/pull/8222
• [PM-5108] fix: Show all owners and admins in admin portal org view by @r-tome in https://github.com/bitwarden/server/pull/8099
• [SHOT-187] fix: Make database migration execution timeout configurable by @mimartin12 in https://github.com/bitwarden/server/pull/8143
• [PM-41951] sponsored families email template copy by @JaredScar in https://github.com/bitwarden/server/pull/8217
• fix(vault): skip key id validation for organization by @quexten in https://github.com/bitwarden/server/pull/8219
• [PM-40801] Add option for alternative DataProtection settings on FIPS nodes by @eligrubb in https://github.com/bitwarden/server/pull/8092
• PM-42152 - Open Org Invite Status Endpoint - Decode org name by @JaredSnider-Bitwarden in https://github.com/bitwarden/server/pull/8227
• [PM-40300]: Restrict Provider Users' Account Recovery by @sven-bitwarden in https://github.com/bitwarden/server/pull/8103
• [PM-40350] ManagePolicies should allow read-only access to claimed organization domains by @harr1424 in https://github.com/bitwarden/server/pull/8220
• [PM-22405] - Remove invalid users from invites by @jrmccannon in https://github.com/bitwarden/server/pull/8151
• [PM-42240] perms still returned for members who were previously custom by @JaredScar in https://github.com/bitwarden/server/pull/8244

Maintenance

• [PM-40492] Regenerate NuGet lock files during version bump by @Hinton in https://github.com/bitwarden/server/pull/8097
• [BRE] Removing build workflow and Dockerfiles by @gitclonebrian in https://github.com/bitwarden/server/pull/8173
• [BRE-2162] ci(build): Trigger downstream build on release branches by @fntyler in https://github.com/bitwarden/server/pull/8155
• [PM-37320] refactor: consolidate AuthRequest update validation and remove dead code by @ike-kottlowski in https://github.com/bitwarden/server/pull/8051
• [PM-41451] Migrate last files off of AssemblyHelpers.GetVersion() by @justindbaur in https://github.com/bitwarden/server/pull/8137
• Remove grype scanning by @sognefej in https://github.com/bitwarden/server/pull/8180
• [PM-34546] Add integration tests for Notifications POST /send endpoint by @justindbaur in https://github.com/bitwarden/server/pull/8171
• QA-2279: add OrganizationEventScene to the seeder by @awiester-bw in https://github.com/bitwarden/server/pull/8175
• [PM-32211] Database testing CI failures fix by @mzieniukbw in https://github.com/bitwarden/server/pull/8185
• [PM-34564] Remove Core & SharedWeb from icons by @justindbaur in https://github.com/bitwarden/server/pull/8181
• [PM-35601] Add TODO comments about future conditional validation by @rr-bw in https://github.com/bitwarden/server/pull/8153
• [PM-41787] Move two-factor integration tests into a CODEOWNERS-compatible path. by @enmande in https://github.com/bitwarden/server/pull/8172
• Document the AccessRuleId write contract on ICollectionRepository by @Hinton in https://github.com/bitwarden/server/pull/8186
• [BRE-2116] Checkout v7 privileged workflows by @brandonbiete in https://github.com/bitwarden/server/pull/8194
• [PM-41917] Add lit inline menu feature flag to server by @dan-livefront in https://github.com/bitwarden/server/pull/8198
• Allow seeder to create a Free org with Secrets Manager by @nthompson-bitwarden in https://github.com/bitwarden/server/pull/8187
• feat(seeder): add --account-age-days to seed aged individual users by @nthompson-bitwarden in https://github.com/bitwarden/server/pull/8201
• [PM-38270] perf: Speed up "claimed by organization" status checks on the Members page by @r-tome in https://github.com/bitwarden/server/pull/8125
• [PM-38269] refactor: remove redundant permissions round-trip in OrganizationUserUserDetailsQuery by @r-tome in https://github.com/bitwarden/server/pull/8119
• [PM-38272] fix: handle null or empty permissions in OrganizationUserResponseModel by @JaredScar in https://github.com/bitwarden/server/pull/8207
• [PM-38326] Utilize cache for UsePolicies by @JaredScar in https://github.com/bitwarden/server/pull/8205
• [PM-38271] Speed up load org data by running queries in parallel by @JaredScar in https://github.com/bitwarden/server/pull/8202
• [PM-39422] Remove obsolete properties for organization management compatibility by @JaredScar in https://github.com/bitwarden/server/pull/8206
• Add dev.playground seeder preset with role-based login emails by @Hinton in https://github.com/bitwarden/server/pull/8223
• [PM-39455] Reuse the connection and transaction during user key rotation by @mzieniukbw in https://github.com/bitwarden/server/pull/8165
• Auth/PM-41812 - Auth - New Org User Staged Status Audit - Comment changes only by @JaredSnider-Bitwarden in https://github.com/bitwarden/server/pull/8225
• Prepare IPushNotificationService for extraction into a push library by @justindbaur in https://github.com/bitwarden/server/pull/8199
• Bump version to 2026.8.1 by @github-actions[bot] in https://github.com/bitwarden/server/pull/8247
• [BRE-2166] Add metadata to container images by @vgrassia in https://github.com/bitwarden/server/pull/8241
• [PM-38329] policies stop converting policy data on every response by @JaredScar in https://github.com/bitwarden/server/pull/8204

Dependency Updates

• [deps]: Update CommunityToolkit.Aspire.Hosting.Ngrok to v13.4.0 by @renovate[bot] in https://github.com/bitwarden/server/pull/8020
• [SHOT-251] Update Dockerfile to use Ubuntu 22.04 by @mimartin12 in https://github.com/bitwarden/server/pull/8183
• [deps]: Update jquery to v4 by @renovate[bot] in https://github.com/bitwarden/server/pull/6932
• [deps]: Update dotnet monorepo by @renovate[bot] in https://github.com/bitwarden/server/pull/8018

Other

• [AI-88] llm: Remove .claude/CONTRIBUTING.md by @SaintPatrck in https://github.com/bitwarden/server/pull/8233

New Contributors

• @cttech-io made their first contribution in https://github.com/bitwarden/server/pull/8141

Full Changelog: https://github.com/bitwarden/server/compare/v2026.8.0...v2026.8.1