Bitwarden

Recent Commits

• Alex Dragovich (10 Jul 26)

  [PM-39909] fixed LINQ error when saving send controls (#7939) * [PM-39909] fixed LINQ error when saving send controls * [PM-39909] cr fix * [PM-39909] adding more testing

• Jared Snider (10 Jul 26)

  Auth/PM-38811 - KM - Update RotateUserAccountKeysCommand to use MasterPasswordService (#7804) * PM-38811 - Persist LastPasswordChangeDate from EF user-key rotation write UpdateUserKeyAndEncryptedDataV2Async enumerated a fixed column list and omitted LastPasswordChangeDate, silently dropping the field on PostgreSQL/MySQL/SQLite even when callers set it. The MSSQL sproc User_Update already persists this column, so this aligns EF with the existing Dapper behavior. * PM-38811 - Delegate password-change rotation to MasterPasswordService Wires PasswordChangeAndRotateUserAccountKeysAsync to IMasterPasswordService.PrepareUpdateExistingMasterPasswordAsync (Prepare* tier from PM-35392), replacing the inline master password mutation block. RefreshStamp is false so the existing BaseRotateUserAccountKeysAsync SecurityStamp + V2UpgradeToken logic remains the sole owner of session-invalidation behavior. The hint is sourced from the request because a password change can update it. Closes the parity gap where LastPasswordChangeDate was not set on this path even though the master password is changing. Other rotation variants (master-password-only, TDE, Key Connector) are untouched. Unit tests cover delegation, OneOf failure mapping, and short-circuit on old-password mismatch. * PM-38811 - Assert parity in password-change rotation integration test Extends the existing happy-path integration test to verify the master-key-wrapped user key, master password hint, master password hash (rewritten and verifies against the new authentication hash), and LastPasswordChangeDate are persisted as expected after a password-change-and-rotate call. --------- Co-authored-by: Patrick-Pimentel-Bitwarden <[email protected]>

• gitclonebrian (10 Jul 26)

  [BRE-1907] Corrected artifact manifest container image format (#7938) * corrected artifact manifest format * added step to delete intermediate artifacts

• keithhubner (10 Jul 26)

  added new env var to alter backup filename TZ (#7956)

• Oscar Hinton (10 Jul 26)

  [PM-39976] Scaffold PAM lease endpoints (#7925) * Scaffold PAM lease endpoints and DTOs for OpenAPI binding generation Adds the /leases Minimal API group (active, history, mine, revoke, extend) with an intentionally unimplemented handler, following the access-rule and access-request scaffolds. The response models are already on main; the two new request DTOs (revoke, extension) carry the remaining wire contract. Contract tests lock the routes, names, methods, and return types the generated spec is built from. * Encode lease-extension request constraints as DataAnnotations The validation filter only enforces attributed constraints, and only those surface in the generated OpenAPI schema: Range(1, max) on DurationSeconds and Required on Reason, matching how AccessDecisionRequestModel encodes its contract. The rule-specific duration ceiling stays server-side. * Drop redundant doc parenthetical on DurationSeconds

• Brad (10 Jul 26)

  [PM-38209] Remove pm-26961-access-intelligence-trend-chart feature flag (#7840) Unwind the pm-26961-access-intelligence-trend-chart feature flag (DIRT team), following the Feature Flags Lifecycle documentation.

• Todd Martin (09 Jul 26)

  feat(self-host) [PM-40085] Remove initial delay on self-hosted database migration

• Jimmy Vo (09 Jul 26)

  [PM-38796] Create link confirmation endpoint (#7907)

• Mike Amirault (09 Jul 26)

  [PM-40128] Adjust enforcement message when Send is noncompliant with deletion date policy (#7946)

• Brandon Treston (09 Jul 26)

  [PM-38827] Remove errant org membership check (#7929) * remove errant org membership call * remove unused organizatonUserRepository * clean up * clean up tests

• Brandon Treston (09 Jul 26)

  get collection permission with users and groups (#7945)

• Addison Beck (09 Jul 26)

  chore(ci): add platform-community code-review signal (#7948)

• Brandon Treston (09 Jul 26)

  [PM-39554] Create default collection for demoted admin (#7918) * create default collecion for demoted admin * fix tests, add org ability check and policyRequirement check

• cyprain-okeke (09 Jul 26)

  [PM-39210] fix: Block converting a Secrets-Manager-enabled org to a Business Unit Portal (#7892) * [PM-39210] fix: Block converting a Secrets-Manager-enabled org to a Business Unit Portal BusinessUnitConverter gated org-to-Business-Unit conversion only on Enterprise tier and never checked UseSecretsManager, so a Secrets-Manager-enabled org could be converted. The Password Manager line was then swapped to the Business Unit price and the org's GatewaySubscriptionId nulled, orphaning the Secrets Manager subscription line. Add a UseSecretsManager guard to both validators, mirroring ProviderService, placed before the Stripe GetSubscription call so a disqualified org short-circuits. ValidateInitiationAsync appends a user-facing problem; ValidateFinalizationAsync fails via the existing log-and-throw convention. * Hide Convert to Business Unit option in Admin when org uses Secrets Manager

• MtnBurrit0 (09 Jul 26)

  [SHOT-215] fix: Migrate legacy identity.pfx to modern encryption on update (#7942) identity.pfx files encrypted with RC2-40 cannot be read by OpenSSL 3 in the setup container without the legacy provider, which surfaced as "Error outputting keys and certificates" during update. Reads now pass -legacy to open these files and re-export them without it, rewriting them with AES-256. The key and certificate are preserved so the IdentityServer signing key is unchanged.

• Stephon Brown (09 Jul 26)

  [PM-40002] Fix Teams 2019 Migration Display (#7933) * feat(billing): Add PriceId to SubscriptionInfo.SubscriptionItem * refactor(billing): Pass subscriber to ApplySchedulePhase2DataAsync * feat(billing): Collapse seat-overage lines for packaged migrations * test(billing): Add tests for seat-overage collapsing logic * test(billing): Add Price ID to Stripe subscription item test data * style: remove BOM from C# files * refactor(SubscriptionInfo): derive add-on flag from Stripe Price metadata * test(SubscriptionInfo): add dedicated add-on flag derivation tests * test(StripePaymentService): update test data for add-on metadata location * refactor(StripePaymentService): reorder legacy seat overage collapse logic * test(StripePaymentService): refine legacy seat overage collapse test * fix(billing): run dotnet format

• Jared McCannon (09 Jul 26)

  [PM-38927] - Extract Organziation User Role Validation (#7876) * added Org User Action Validator to handle logic for org users performing actions. * Updated to match feedback. * Resolve provider status in OrganizationUserValidationService via repository Address review feedback on PR #7876: - Have CanManage resolve provider authority itself through IProviderUserRepository instead of an actingUserIsProvider parameter, mirroring CurrentContext.ProviderUserForOrgAsync while keeping ICurrentContext out of Core. - Refine interface docs: note AuthorizeAttribute pairing for RBAC, call out the Owner-manages-provider-user escalation caveat, and drop the role-change guidance that belongs in the update-user flow. * wrapped in remarks tag

• renovate[bot] (08 Jul 26)

  [deps] BRE: Update nginx Docker tag to v1.31 (#7932) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

• Mike Amirault (08 Jul 26)

  [PM-36505] Finalize Send Controls policy, add second feature flag to enable/disable logic (#7943) * [PM-36505] Finalize Send Controls policy, add second feature flag to enable/disable logic * Lint fix

• Jimmy Vo (08 Jul 26)

  [PM-33045] Remove FeatureRoutedCacheService (#7931)

• renovate[bot] (08 Jul 26)

  [deps] Tools: Update MailKit to v4.17.0 (#7775) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Alex Dragovich <[email protected]>

• Mick Letofsky (08 Jul 26)

  Create exploring-bitwarden-data Claude Skill (#7763)

• Mike Amirault (08 Jul 26)

  [PM-31929] Add deletion days restriction to Send Controls policy (#7506) * initial send controls * update vNext methods and add test coverage for policy validators * add comments to tests * Apply suggestion from @mkincaid-bw • `IX_Policy_OrganizationId_Type` is a unique index Co-authored-by: mkincaid-bw <[email protected]> * renamne migrations for correct sorting * respond to csharp related review comments * fix failing lints * fix tests * revise policy sync logic * revise policy event logic and tests * add integration tests - fix SQL syntax error - escape Sqlite format specifier - update migration IDs to match sorted filename - fix SQL syntax error * OR legacy policy data with SendControls policy data * remove migrations and associated integration test * whitespacing and comment correction * aggregate kegacy Send policies in PolicyQuery and adjust PoliciesController logic * add comments to simplify post-migration cleanup * consolidate legacy Send policy synthesis from PoliciesController into PolicyQuery.GetAllAsync * respond to review comments and other minor fixes * [PM-31884] Add Send control policy access control fields * Disable and enable Sends based on policy compliance * Remove stray merge change * Address PR comments * More PR comment fixes * Adjust email domain restriction logic, consolidate into a function * More PR comment fixes * Fix data migration and sproc files * Even out database load by fetching all org Send IDs and processing in batches * [PM-31929] Add deletion days restriction to Send Controls policy * Fix tests and address review comments * Resolve merge conflicts, address review comments * Remove old renamed SQL procedure, update migration script with new prcedure def * Remove duplicate mock setup from tests * Pass revision date to update Send deletion dates proc * Disable noncompliant Sends instead of changing deletion dates, remove unneeded code * Apply new approach to new Sends, add test * Lint fixes * Address review comments * Address Claude comment --------- Co-authored-by: John Harrington <[email protected]> Co-authored-by: mkincaid-bw <[email protected]>

• Mick Letofsky (08 Jul 26)

  Refactor Skill(bump-rust-sdk) to align with current workflow & best practices for skill evaluation (#7909)

• Jordan Aasen (08 Jul 26)

  remove orphaned blob attachments after deletion (#7539)

• Tyler (08 Jul 26)

  [BRE-2039] chore: cleanup dockerfile comments (#7935)

• Tyler (08 Jul 26)

  fix(codeowners): Reorder Docker rules to fix owner override (#7937)

• gitclonebrian (07 Jul 26)

  [BRE-1907] Add artifact manifest to build.yml (#7920) * added steps to each matrix iteration to generate a manifest fragment for the image built in that step. added a final job to aggregate the fragments into a final manifest * added needs to k8s deploy step to make sure manifest is complete

• sven-bitwarden (07 Jul 26)

  [PM-38101] Add Staged Provision API Fields (#7927) * Adds API access for SCIM/BWDC to provision Staged users behind the feature flag * format

• Stephon Brown (07 Jul 26)

  [PM-38567] Migration Renewal Copy Dynamic Update (#7921) * feat(billing): add proactive discount details to renewal mail view * test(billing): add unit tests for proactive discount mail view properties * refactor(billing): enhance Discount record with coupon ID and duration * feat(billing): populate discount record with coupon duration from Stripe * feat(billing): determine and pass proactive discount months to mail view * test(billing): verify proactive discount month calculation in invoice handler * feat(billing): add conditional proactive discount copy to renewal email templates