Bitwarden

Recent Commits

• Jimmy Vo (30 Jun 26)

  [PM-38798] Create validation link confirmation (#7895)

• Justin Baur (30 Jun 26)

  Stripe integration tests (#7828) * Add General Integration Test Doc * Add extensive stripe tests * Run formatting * Add Billing as owners

• Justin Baur (30 Jun 26)

  [PM-39512] Stricter data protection errors (#7837) * Add tests showing the poor error behavior when there are issues getting certificates * Fix tests by failing earlier with better errors * Make tests even stricter * Add more explicit catch cases

• Oscar Hinton (30 Jun 26)

  [PM-39734] Support Minimal API endpoints in OpenAPI (#7874) * Support Minimal API endpoints in offline OpenAPI generation Extract the PAM-free swagger foundation from the PAM POC so it can land on main independently. - Add Bit.HttpExtensions.StandaloneEndpointDataSource and the AddOpenApiEndpointDataSource registration helper. The offline OpenAPI generator (dotnet swagger tofile) never runs the Configure pipeline where Minimal API endpoints are mapped via UseEndpoints, so it omits them. A single DI-registered EndpointDataSource composes every feature's mapping delegate and is gated to swagger generation only, so it never replaces the runtime composite EndpointDataSource that routing and link generation depend on. - Teach SwaggerGenOptionsExt.BuildOperationId and ActionNameOperationFilter to derive the operation ID and action name from the endpoint name set via .WithName(...) when there are no controller/action route values, as is the case for Minimal API endpoints. - Guarantee BuildOperationId never returns a null/empty operation ID: a Minimal API endpoint mapped without .WithName() now falls back to a deterministic id derived from the HTTP method and route template. Swashbuckle writes the selector's value straight onto operation.OperationId, so a null/empty id would collapse distinct endpoints together and abort spec generation via CheckDuplicateOperationIdsDocumentFilter. - Add unit tests for BuildOperationId (including the route fallback), the ActionNameOperationFilter endpoint-name branch, StandaloneEndpointDataSource composition, and AddOpenApiEndpointDataSource gating/registration. * Make internal

• Stephon Brown (30 Jun 26)

  [PM-37514] Support Teams 2019 Migration (#7864) * style(global): remove byte order mark from files * feat(billing): introduce SeatCountPolicy enum for plan migrations * feat(billing): add SeatCountPolicy to MigrationPath record * feat(billing): define Teams 2019 migration paths with ActualUsage policy * feat(billing): implement ActualUsage seat calculation in PriceIncreaseScheduler * feat(billing): update UpcomingInvoiceHandler to support SeatCountPolicy * test(billing): add unit tests for Teams 2019 migration seat policies * test(billing): update MigrationPathIds snapshot tests for new paths * feat(billing): consolidate packaged plan seat items to usage-based line in migrations * docs(billing): clarify SeatCountPolicy enum and packaged plan migration logic comments * feat(billing): add update subscription handler logic for plan migrations * fix(billing): run dotnet format * feat(billing): introduce plan migration extension methods * test(billing): add tests for plan migration extensions * refactor(billing): use plan migration extensions in SubscriptionUpdatedHandler * refactor(billing): use plan migration extensions in UpcomingInvoiceHandler * refactor(billing): use plan migration extensions in PriceIncreaseScheduler * refactor(billing): extract packaged migration source check * fix(billing): run dotnet format * Update src/Billing/Services/Implementations/SubscriptionUpdatedHandler.cs Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com> * fix(billing): carry Phase 2 seat quantity for packaged subscriptions * test(billing): add tests for Phase 2 seat quantity in subscription preview --------- Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>

• Jared McCannon (30 Jun 26)

  [PM-28365] - Add Feature Flag Admin Initiated Member Email change (#7887) * Adding Feature Flag for Admin initiated member email change work. * yep

• Mick Letofsky (29 Jun 26)

  Minor but important doc update to align with other overrides (#7889)

• Jared Snider (29 Jun 26)

  Seeder: fix RecipeOrchestratorIntegrationTests build after SeederDependencies arity change (#7888) SeederDependencies gained a 5th ILicensingService parameter (PR #7780) before PR #7870 merged; the new integration test file still used the 4-arg ctor, breaking the main build. Pass null! for LicensingService alongside Mapper - neither is touched by the pre-flight guard these tests exercise.

• Jared Snider (29 Jun 26)

  Seeder: add --owner-email and --org-name CLI override flags (#7870) Adds two CLI flags to util/SeederUtility for parameterizing preset and organization seed runs: - --owner-email: override the default owner@<domain> owner address - --org-name: override the fixture/preset-supplied organization name Both flags route through a new SeederSettings record, picked up by CreateOrganizationStep, CreateOwnerStep, and CreateRosterStep (the roster path was a mid-development bug discovered during e2e testing — presets with roster-declared owners bypass CreateOwnerStep, so the override has to apply at the roster step too). Adds a pre-flight DB check in RecipeOrchestrator that throws an actionable InvalidOperationException when --owner-email collides with an existing User.Email, rather than letting BulkCommitter fail with a deep SQL unique-constraint exception. The check is skipped when --mangle is enabled (per-run unique tag prevents collisions). Test coverage: 43 new tests under test/SeederApi.IntegrationTest/ {Cli,Pipeline,Steps}/, including SQLite-backed integration tests verifying both RecipeOrchestrator.Execute overloads invoke the guard. Test project dependency: SeederApi.IntegrationTest now references util/SeederUtility (was: util/Seeder only). This was added so the new test/SeederApi.IntegrationTest/Cli/ tests can construct PresetArgs and OrganizationArgs directly to exercise their Validate() and ToOptions() logic. CommandDotNet appears as a transitive entry in packages.lock.json as a consequence — it is the CLI parser SeederUtility already uses (via PackageReference Include="CommandDotNet"), not a new runtime dependency of the test process. Only types reachable from PresetArgs/OrganizationArgs (the [Option] attribute) are touched at test time; the actual CommandDotNet runtime is not invoked by tests. Note: tests for the new override flags live in the existing SeederApi.IntegrationTest project even though they are mostly unit-scope. The project is a long-standing hybrid; a proper test/Seeder.Test split is a separate follow-up.

• Jackson Engstrom (29 Jun 26)

  [PM-29251] Remove pm-23384-browser-premium-spotlight feature flag (#7885)

• Jackson Engstrom (29 Jun 26)

  [PM-19169] Remove feature flag pm-19148-innovation-archive (#7884)

• Shane Melton (29 Jun 26)

  [PM-31107] Seeder: blob-migration preset + fido2/password-history/linked-field fixture support (#7809)

• Ned Thompson (29 Jun 26)

  add MyItems to ApplyEnterpriseFeatures (#7882)

• Jared McCannon (29 Jun 26)

  [PM-38928] - Add name, email to org user update (#7871) * adding name and email to the request model * Created nullable strict email for when its nullable.

• github-actions[bot] (29 Jun 26)

  Bumped version to 2026.6.2 (#7879) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

• Mick Letofsky (26 Jun 26)

  PM-33964 - Resolve defect in premium user licensing (#7788)

• Alex Morask (26 Jun 26)

  [PM-39569][PM-39286] fix: Wait for Stripe test clock before migration grace write (#7872) The schedule-triggered business migration wrote SM grace metadata to the subscription without waiting for an advancing Stripe test clock to settle. In the test-clock-driven QA migration flow the write was rejected, 500-ing the webhook and leaving the org plan-changed but with MigratedDate unstamped (PM-39569's 500; PM-39286's org stuck in "Scheduled"). Wait for the clock to settle before the grace write, mirroring the unpaid-cancel path. No-op in production, where there is no test clock. Also consolidate the duplicated WaitForTestClockToAdvanceAsync onto IStripeAdapter and move the Stripe test-clock statuses into StripeConstants.

• sven-bitwarden (25 Jun 26)

  [PM-35314] Backfill Revocation Reasons to All Users (#7713) * Proposed mgiration for backfilling users to have revocation reasons * fix lint issues * update migration + PR comments * fix migration name * fixes migration files --------- Co-authored-by: rkac-bw <[email protected]>

• Oscar Hinton (25 Jun 26)

  [PM-39561] Copy ListResponseModel from Api to HttpExtensions (#7868) With PAM we are storing endpoints in a separate dotnet library where they instead are imported into Api. We ran into an issue with ListResponseModel since it's currently in Api. ListResponseModel is a general-purpose API response wrapper. Moving it and ResponseModel to the HttpExtensions library. Which lets lower-level libraries reference it without taking a dependency on the Api project.

• Alex Morask (25 Jun 26)

  [PM-39562] fix: Reconcile org seats to billed quantity on packaged-plan migration (#7869) * [PM-39562] fix: Reconcile org seats to billed quantity on packaged-plan migration A Teams Starter -> Teams migration billed the occupied per-seat quantity in Stripe but left organization.Seats at the flat bundle cap (10), leaving unpaid seat capacity and bypassing per-seat enforcement. Reconcile Seats to the billed seat line item quantity for packaged sources. * Add multi-item subscription test for seat reconciliation

• Stephon Brown (25 Jun 26)

  fix(billing): allow license generation for sales trial orgs (#7793)

• Robyn MacCallum (25 Jun 26)

  Add PM39071_DefaultPasswordManagerPrompt constant (#7866)

• bnagawiecki (25 Jun 26)

  Add ability to enable SM on SingleOrgScene (#7861) * add enableSM logic to SingleOrgScene * give owner SM access on org seeding

• Maciej Zieniuk (25 Jun 26)

  Revert "[PM-38851] Crypto cipher suite feature flag (#7852)" (#7863) This reverts commit 276410bacc5b05389979bf83c901a06cbe69804f.

• Jared McCannon (24 Jun 26)

  [PM-38922] - Adding Problem Details Result (#7853) * Added problem details type and new project to hold it. * Removes dependency on Core and adds ext method to Api instead * adding packages.lock.json * few other lock files updated for deps

• Dave (24 Jun 26)

  llm(rules): Auth tokenables must be minted via factory. (#7857)

• sven-bitwarden (24 Jun 26)

  remove flag (#7865)

• sven-bitwarden (24 Jun 26)

  [PM-33402] Remove Feature-Flagged Logic: pm-33398-refactor-members-invite-org-users-command (#7855) * remove feature-flagged logic for pm-33398 * formatting

• Jared McCannon (24 Jun 26)

  [PM-39474] - Updating Lock Files (#7862) * Updating lock files from release * more files.

• Ned Thompson (24 Jun 26)

  add AccessSecretsManager to OrganizationUserScene (#7860)