Keyguard: baixar versions anteriors

This release adds experimental native passkey support on Windows, preview for ZIP archive attachments, and the Environment item type.
New
- Windows: Added experimental native passkey support (#991).
- Android: Added Termux addon for GPG agent (#1642).
- Attachments: Added preview for ZIP archive attachments.
- Vault: Added the Environment item type.
Improvements
- GPG: Item details screen now shows Expiry, Keygrip, and Keyserver status.
- GPG: Keyserver lookups are now safer and support fingerprint QR codes.
- GPG: Multiple User IDs can now be managed and appear as separate items.
- Vault: Account and Item IDs now include copy actions.
Security
- SSH agent: PPK imports now require integrity verification.
- GPG: Unsigned cleartext OpenPGP headers are now rejected.
Fixes
- Desktop: Fixed a crash when scrolling the unread alert list in Watchtower.
- Desktop: Fixed Watchtower background checks so they start.
- macOS: Fixed process caller detection so it detects the outermost .app.
- Bitwarden: Fixed sync so it skips unsupported Send types instead of failing.
- Passkeys: Fixed passkey selection so only passkeys the authenticator can sign with are offered.
- SSH agent: Fixed the agent so it accepts nonzero SSH forwarding flags and refuses unknown extensions.
- GPG: Fixed the agent so it matches the GPG version on non-sandboxed environments.
- GPG: Fixed key handling so the same key can be stored in multiple items.
- GPG: Fixed binary key imports so key files are read as bytes.
- GPG: Fixed the agent so SIGKEY is treated as an alias of SETKEY.
- Vault: Fixed archived items so they are not indexed or used by GPG and SSH agents.
- Accounts: Fixed account setup so the same Bitwarden or KDBX account cannot be added twice.
- Unlock: Fixed the elevated access dialog so it sends a Deny event when dismissed.
- WebDAV: Fixed malformed URLs so they are handled gracefully.

New
- Bitwarden: Added login via SSO (#605).
Fixes
- Desktop: Fixed opening cipher detail items with vault URI icons so they open correctly.

This release adds S3 storage support for KDBX vaults, and system authentication unlock on Linux.
New
- Linux: Added system authentication unlock via polkit (#1550).
- Windows: Added auto-lock when the system becomes inactive (#1602).
- Windows: Added an ARM64 .msi installer (#727).
- Bitwarden: Added DNS server auto-discovery.
- KDBX: Added support for S3 storage.
- GPG: Added generating and editing of V6 certificates.
Improvements
- macOS, Windows: Experimental auto-type is now available from the Quick search window.
- Desktop: Application startup is now faster.
- Android: Window content is now marked as accessibility data sensitive.
- Android: Ecosia and Via browsers are now included in the list of privileged browsers (#1571).
- Android: Non-privileged apps are now prompted for authorization when requesting passkeys (#1607).
- Android: Installed app icons now render at the requested size.
- Bitwarden: FIDO2 two-factor authentication is now supported directly in the app (#1264).
- WebDAV: A preference is now available to prefer WebDAV transactions (#1585).
- Generator: A recipient ID can now be specified for the addy.io email forwarder (#1628).
- Backups: A setup wizard now guides backup configuration.
- UI: Switches now display Material Design 3 on and off icons (#1621, thanks @Shimmerfly).
- UI: Pressing Esc now exits the item screen (#1588).
- Data: Updated translations and the list of browsers allowed to request passkeys.
Security
- Desktop: Exports are now saved atomically with owner-only file permissions.
- Vault: Secrets in memory are now cleared more thoroughly.
- GPG: OpenPGP private operations now avoid RSA factor recovery.
Fixes
- Desktop: Fixed changing URI match detection causes crashing (#1617).
- Desktop: Fixed data and downloads folders so missing folders are created on a fresh profile.
- Desktop: Fixed pressing Esc so it closes popups before popping navigation entries.
- Windows: Fixed remember key approval not working on Windows (#1618).
- Windows: Fixed the Downloads folder resolution so it resolves when missing or redirected.
- Android: Fixed app password reprompt does not work in autofill, duplicates, and vault quick actions (#2).
- Android: Fixed a crash when launching autofill authentication.
- Android: Fixed Internet connectivity detection so wired connections are detected.
- Android: Fixed the SSH socket listener so it is retained until cleanup.
- Wear OS: Fixed unable to switch language on the watch version (#1609).
- Wear OS: Fixed incorrect formatting of the "Save vault key on disk" pop-up prompt on the watch (#1608).
- Autofill: Fixed unable to block loopback autofills (#1620).
- Watchtower: Fixed Watchtower configuration not preserved after editing (#1626).
- Watchtower: Fixed Watchtower overview shows reused passwords count, but detail page is empty (#1606).
- Watchtower: Fixed the website leak screen so it shows a warning on request error instead of an empty state.
- Watchtower: Fixed website leak matching so domains are matched correctly.
- Watchtower: Fixed folder handling when opening directly into a hidden account.
- Send: Fixed max access count so values with leading spaces are not converted to no limit.
- Attachments: Fixed "Select all" so it selects only filtered items instead of all items.
- Attachments: Fixed downloaded attachments so items with reprompt enabled require authentication.
- Attachments: Fixed attachment previews so files exceeding the size limit are not downloaded completely.
- Bitwarden: Fixed two-factor authentication email delivery so retrying is immediately allowed upon failure.
- Vault: Fixed the folders screen so it respects the hidden accounts setting.
- Vault: Fixed the Luhn check so it fails for strings containing non-digit characters.
- Unlock: Fixed vault creation so a race condition navigating to the unlock screen is prevented.
- Unlock: Fixed hardware key operations so poisoned locks do not block them.
- KDBX: Fixed placeholder formatting and XML parsing so m

- On macOS, the vault now auto-locks when the screen turns off.
- Fixed a crash on older Android versions.
- Fixed the instance manager for Windows.
- The unsupported Backups screen is now hidden on Wear OS.

New
- Linux AppImage builds now support zsync delta updates.
- Added GPG public certificate validation.
Agents
- Improves SSH and GPG agent reliability on Android.
- GPG key details now respect configured policies.
- SSH and GPG keys are revalidated after an agent request is approved.
Platforms
- Improves reliability when running multiple app instances on Windows.
- Improves system tray icon reliability on desktop platforms.
Fixes
- Syncing local accounts no longer requires an active internet connection.
- The 'Mark all as read' action in Watchtower now applies only to the currently filtered items.
- Moving an item to the root of a KDBX database is now saved correctly.
- Creating a Bitwarden Send now requires selecting a destination account.
- Changing backup settings no longer resets the retention policy.
- Ensures the latest master password is used for authentication.
- Improves WebDAV sync reliability.
- The vault item details screen now updates immediately when the Markdown notes preference is changed.
- Fixes progress display for cancelled or failed vault exports.
- Invalid regular expressions are now rejected in input fields.
- The key generator shows an OpenPGP-specific tip for RSA keys.
- The color picker selects the nearest available palette color.

New
- Keyguard for Linux is now available as an AppImage.
KDBX
- Fixes password decryption in KDBXv3 databases that have protected pooled attachments.
- KDBXv3 AES padding is now validated.
- Correctly handles both compressed and raw KDBX attachments.
- Fixes an issue with byte mirroring during database decoding.
- Line endings in KDBX XML data are now normalized according to the XML specification.
- Preserves UTF-16 surrogate pairs when handling KDBX XML data.
Fixes
- On Android, the app now requests the local network access permission when required.
- Database schema migrations on desktop platforms are now atomic.
- File encryption and decryption operations can now be cancelled.
- Fixes handling of large OpenPGP MDC files.

This release introduces several new capabilities for managing GPG keys, improves support for KeePass KDBX vaults, and includes various platform-specific stability fixes.
GPG and SSH
- Added an option to export GPG public and private keys as .asc.
- Added an option to send the verification email when uploading a GPG public key.
- Caches by-email VKS responses during throttle windows.
- Key names are now fetched after unlocking if displaying key names is disabled.
Platform improvements and fixes
- KDBX databases with a key file set no longer require a password.
- Displays a more detailed error message when failing to open a URI on desktop platforms.
- Fixed a crash on Android when the file picker reports that no activity was found.
- Fixed an issue on Windows where the agent process was not stopped before closing the IPC transport.
- Fixed copying on macOS.

This release introduces biometric unlock on Windows with Windows Hello, a major overhaul of the OpenPGP pipeline, and significant improvements to sync conflict resolution for KDBX users.
- e009f2ed - refactor: Fix Detekt violations
- baba1021 - Revert "deps: Bump Compose"
- a2373ed1 - refactor: Move Zip service in a util/zip/ KMP module
- a885d303 - refactor: Move Zxcvbn implementation in a util/zxcvbn/ KMP module
- a69856db - chore: Smaller changelog summary is better
- a98219e7 - tests: Clean-up some of the GPG smoke tests
- 5e1ad797 - Merge pull request #1552 from AChep/localization_action
- 1d475f0e - chore: Bump app version to 3.1.0
- bb293191 - tests: Handle elevated Windows child owner
- a38ec41a - fix: Correct Windows hello credential handling
- 44079329 - [AUTO] Update localization library
- 7b296301 - feat: Windows Hello biometric unlock
- 6edcc818 - fix: Support K-9 signing key selection requests
- f2beb82e - tests: Cache UI Automation instance
- c78d836d - refactor: Fix Detekt violations
- 54b991c4 - chore: Pre-install required Rust components during Rust setup step
- f204d80f - Merge pull request #1557 from AChep/dependabot/github_actions/crowdin/github-action-2.17.1
- 96070065 - Merge pull request #1561 from AChep/gpmpasskeysprivapps_action
- aace6d70 - @sannidhyaroy has signed the CLA in AChep/keyguard-app#1563
- 38cb70b0 - improvement(GPG): Confirm signer identities with local certification authorities
- 4b2e5b57 - fix(UI): Align hardware unlock button row on the GPG unlock dialog
- 14a2ef22 - chore: merge Compose Multiplatform 1.12.0 upgrade
- 3d11dcaa - deps: Bump Compose
- e2533faf - fix: Disable pending usage history runner on Wear OS #1558
- 97f97cfc - fix: Run pending usage history on default dispatcher #1559
- 4d337c7b - fix: Explicitly disable HTTP cache on download requests
- 880c719f - fix(Bitwarden): Split GPG keys into multiple fields to avoid 5000 symbols limit
- 3a6f49cf - improvement: GPG certificate user ID replace/revoke UI
- c84611e6 - [AUTO] Update GPM Credential Privileged Apps JSON
- 004bf736 - improvement: GPG certificate reconciliation during normal import
- cad26986 - improvement: Add Titanium browser as privileged #1560
- f24669eb - refactor: Fix Lint complains
- dfdd520c - improvement: Reconcile changes in GPG certificates during a conflict
- 5b173e0e - improvement: 3-way merge for conflict resolution for KDBX
- 68ad89a9 - fix: Encode passkey key value as URL-safe base64, fixes incompatibility with BW #1559
- 0a76d715 - fix: Reject invalid keyserver responses
- 499dfb99 - improvement: Preserve GPG revocation evidence and reassess key status
- 7701a732 - improvement: Get GPG key restoration and revocation status
- 4598912e - chore(deps): bump crowdin/github-action from 2.17.0 to 2.17.1
- b8ed80d1 - fix(GPG): Preserve local key material during keyserver refresh
- dbf7024d - fix(agent): Verify macOS login ancestry for approval reuse #1549
- 547645b3 - docs(llm): Take AGENTS.md a bit more seriously
- a493d04a - fix: Update GPG and SSH agent paths on Linux and macOS
- 247a0b80 - fix: Harden SSH and GPG socket lifecycle & discovery
- 3f2d0479 - fix(macOS): Mark gpg agent binary as executable on release
- b732b696 - improvement: Add user ID management and deterministic certificate reconciliation
- 3a57ecea - feat: Overhaul OpenPGP pipeline
- 2dbe4aca - fix(sync): propagate fatal errors
- 96a0c256 - feat: Type a password from memory and compare it with a stored one #1533
- 4edd59b9 - docs: Remove the mention that Keyguard is largely JVM dependent
- 9673b43c - fix(Desktop): Stop SSH/GPG agent IPC servers on shutdown #1548
- 5f6b22e7 - improvement: Explicitly forbid database downgrade #1547
- 1e5ad1b4 - Merge pull request #1546 from ilkecan/fix/desktop-okhttp-bom
- acd217ce - @ilkecan has signed the CLA in AChep/keyguard-app#1546
- 56e21e5c - fix(Desktop): Declare the okhttp BOM in desktopApp
- 24827f50 - docs: Note that we do not have browser extension

This release resolves several issues affecting the desktop application on Windows, macOS, and Linux.
Desktop Application Fixes
- Fixed an issue where images, such as website favicons for vault entries, would not load correctly.
- Resolved a bug that prevented the file picker from opening. This affected functionality such as adding attachments to items or opening KDBX database files from the local filesystem.

This release includes a fix to improve network connection reliability.
Fixes & Improvements
- Improved the stability of connections that use custom TLS certificates by resolving an issue within the trust manager.

This release addresses a critical stability issue for Windows users.
Fixes and Improvements
- Resolved an issue that caused the application to crash on startup on Windows.

This release introduces comprehensive GPG key management, extends the SSH/GPG agent to Windows, and delivers a completely reworked synchronization engine for KeePass (KDBX) vaults. It also adds major new integrations for Android, WebDAV support for remote vaults, and numerous security and performance enhancements across all platforms.
GPG Key Management and Agent on Windows
Keyguard now includes first-class support for managing GPG keys and using them through an integrated agent, which is now also available on Windows.
- GPG Key Management: You can now import, manage, and use GPG keys directly within Keyguard. It is also now possible to set or modify the expiration date for GPG keys and subkeys.
- Agent on Windows: The SSH and GPG agents are now available on Windows, providing seamless integration with development tools, terminals, and Git.
- Caller-Scoped Approval: Agent requests can be approved on a per-caller basis, allowing you to grant persistent access for trusted applications without being prompted for every operation.
- Platform Support: Added support for GPG key item types on Wear OS and resolved an issue where agent-related items were not displayed correctly on Windows.
- Security and Reliability: The GPG and SSH agents have been hardened with stricter key policy enforcement during signing and decryption, public key validation before imports, and more robust connection handling.
Reworked KeePass (KDBX) Sync and Attachments
The engine for handling KeePass (KDBX) vaults has been overhauled for significantly improved reliability, performance, and attachment management.
- New Sync Pipeline: The synchronization process is now more robust, performing better conflict resolution and handling unstable network connections more gracefully.
- Large File Support: The maximum supported attachment size has been increased to 500 MB. KDBX vaults are now processed using a streaming encoder and decoder to reduce memory usage, especially for vaults with large attachments.
- Reliable Attachment Sync: Attachments are now staged locally before upload, preventing data loss and ensuring that file changes are synchronized reliably.
- Improved Error Handling: A clear error message is now shown when attempting to add an attachment that exceeds the size limit. The app also better preserves original error details during decoding and avoids unnecessary unlock retries when an incorrect key is used.
New Android Integrations
Keyguard's integration with the Android ecosystem has been expanded with powerful new capabilities for developers and third-party app users.
- OpenKeychain Provider: Keyguard can now act as an OpenKeychain-compatible provider, allowing apps like Termux to use your SSH and GPG keys for authentication and signing operations.
- Credential Exchange (CXF): Added support for Credential Exchange (CXF), enabling secure credential sharing with other compatible Android applications.
- Enhanced Autofill Security: Autofill is now more secure, validating both the package name and the signing identity of the target application before filling credentials.
- Storage and Backup Fixes: Introduced a recovery mechanism for certain types of encrypted storage failures and ensured all sensitive application data is correctly excluded from automatic Android backups.
Security Enhancements
This release includes several important security improvements to protect your data.
- Clipboard Protection: On macOS and Windows, copying sensitive fields (like passwords) now prevents them from being stored in the system's clipboard history.
- Hardened KDBX Parsing: Strengthened the parsing of KDBX files from untrusted sources by enforcing limits on key derivation functions (KDF) and validating internal file structures to guard against malformed databases.
- Secure Temporary Files: Temporary files cr

This release introduces comprehensive GPG key management, extends the SSH/GPG agent to Windows, and delivers a completely reworked synchronization engine for KeePass (KDBX) vaults. It also adds major new integrations for Android, WebDAV support for remote vaults, and numerous security and performance enhancements across all platforms.
GPG Key Management and Agent on Windows
Keyguard now includes first-class support for managing GPG keys and using them through an integrated agent, which is now also available on Windows.
- GPG Key Management: You can now import, manage, and use GPG keys directly within Keyguard. It is also now possible to set or modify the expiration date for GPG keys and subkeys.
- Agent on Windows: The SSH and GPG agents are now available on Windows, providing seamless integration with development tools, terminals, and Git.
- Caller-Scoped Approval: Agent requests can be approved on a per-caller basis, allowing you to grant persistent access for trusted applications without being prompted for every operation.
- Platform Support: Added support for GPG key item types on Wear OS and resolved an issue where agent-related items were not displayed correctly on Windows.
- Security and Reliability: The GPG and SSH agents have been hardened with stricter key policy enforcement during signing and decryption, public key validation before imports, and more robust connection handling.
Reworked KeePass (KDBX) Sync and Attachments
The engine for handling KeePass (KDBX) vaults has been overhauled for significantly improved reliability, performance, and attachment management.
- New Sync Pipeline: The synchronization process is now more robust, performing better conflict resolution and handling unstable network connections more gracefully.
- Large File Support: The maximum supported attachment size has been increased to 500 MB. KDBX vaults are now processed using a streaming encoder and decoder to reduce memory usage, especially for vaults with large attachments.
- Reliable Attachment Sync: Attachments are now staged locally before upload, preventing data loss and ensuring that file changes are synchronized reliably.
- Improved Error Handling: A clear error message is now shown when attempting to add an attachment that exceeds the size limit. The app also better preserves original error details during decoding and avoids unnecessary unlock retries when an incorrect key is used.
New Android Integrations
Keyguard's integration with the Android ecosystem has been expanded with powerful new capabilities for developers and third-party app users.
- OpenKeychain Provider: Keyguard can now act as an OpenKeychain-compatible provider, allowing apps like Termux to use your SSH and GPG keys for authentication and signing operations.
- Credential Exchange (CXF): Added support for Credential Exchange (CXF), enabling secure credential sharing with other compatible Android applications.
- Enhanced Autofill Security: Autofill is now more secure, validating both the package name and the signing identity of the target application before filling credentials.
- Storage and Backup Fixes: Introduced a recovery mechanism for certain types of encrypted storage failures and ensured all sensitive application data is correctly excluded from automatic Android backups.
Security Enhancements
This release includes several important security improvements to protect your data.
- Clipboard Protection: On macOS and Windows, copying sensitive fields (like passwords) now prevents them from being stored in the system's clipboard history.
- Hardened KDBX Parsing: Strengthened the parsing of KDBX files from untrusted sources by enforcing limits on key derivation functions (KDF) and validating internal file structures to guard against malformed databases.
- Secure Temporary Files: Temporary files created during sync or other operations are now securely permissioned on Windows.
UI and Usability Improvements
- Customizable Navigation: The main navigation bar can now be c

On desktop, the UI scale can now be overridden using the keyguard.uiScale JVM property. In-app links have also been updated to point to the new project website.
All changes
- e0eb233f - chore: Bump app name to 2.14.2
- d82df23f - docs: Add QR codes page
- a00987f3 - docs: Add Large type page
- 4ad4030c - docs: Add Appearance page
- 2a2c293b - refactor: Remove now unused SSH agent timeout animation #1454
- a540575e - chore: Bump arrow to 2.2.3
- 8dc6edef - chore: Bump haze to 2.0.0-alpha03
- ab0f1632 - chore: Bump okhttp to 5.4.0
- 4c9da771 - chore: Bump sqlcipher-android to 4.16.0
- 87cae0d2 - chore: Bump Compose to 1.12.0-alpha02
- 1385123d - improvement(web): Better mobile layout
- 29f95e92 - build(deps): Bump dbusJava from 5.1.1 to 5.2.0 (#1189)
- ca36e6fe - build(deps): Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18 (#1429)
- f1294677 - build(deps): Bump richtext from 1.0.0-alpha03 to 1.0.0-alpha05 (#1365)
- ac332c8d - build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#1453)
- 68c8b5f4 - build(deps): Bump apple-actions/import-codesign-certs (#1384)
- 3d49f640 - [AUTO] Update localization library (#1459)
- 24343cb8 - [AUTO] Update Public suffix list (#1458)
- 6092c0ad - [AUTO] Update justdeleteme library (#1457)
- d08290b2 - [AUTO] Update two-factor auth library (#1456)
- 162d8bfc - fix(desktop): allow overriding UI scale via keyguard.uiScale JVM property (#1421)
- e765565d - improvement: Update links to the new website
- 1d662f59 - fix(web): Adjust device frames to the screenshots fits perfectly
- 0ead05d1 - chore: Use a proper worflow prefix
- 5fcb8433 - fix(web): Clip logo in the header to a rounded rectangle
- 0573ac92 - chore: Bump server/web/ dependencies
- bef5cafb - feat: Static website with documentation & marketing fluf

This update includes internal housekeeping and prepares for future improvements.
All changes
- 65e25991 - chore: Bump app version name to 2.14.1

This update introduces automatic vault backups to protect against data loss, along with fixes to improve backup reliability. On desktop, you can now use Ctrl+Shift+L to lock your vault, and issues with popup window and quick search focus have been resolved. The SSH agent now includes a request history viewer and improved timeout management. Additionally, the network timeout has been increased to 30 seconds and Android autofill performance is enhanced.
All changes
- ade168ba - chore: Missing jdkVersion declaration
- f52c4704 - chore: Bump app version to 2.14.0
- 99002681 - tests: Correct stale Backup behavior
- b08d4c1f - fix(Desktop): Request foreground on Windows / Linux when showing a popup window
- 0d98b246 - fix(Desktop): After quick search pops up for a second time it does not auto-focus the input field
- 6262d80e - improvement(MacOS): Better Popup window management with Accessory path
- afd67b44 - chore: Bump Compose to 1.11.1
- e0627190 - chore: Use 'jetbrains' java distribution
- 970d04c9 - ui: Add a Planeta component for visualizing a fingerprint
- 0b92748e - Merge pull request #1446 from AChep/localization_action
- 3ff4d0b6 - Merge pull request #1445 from AChep/justdeleteme_action
- c9f637ce - Merge pull request #1444 from AChep/gpmpasskeysprivapps_action
- 2e076616 - Merge pull request #1443 from AChep/tfa_2factorauth_action
- debd7f03 - Merge pull request #1442 from AChep/tld_public_suffix_list_action
- 172033c8 - [AUTO] Update localization library
- 627ddd5d - [AUTO] Update justdeleteme library
- f0c92522 - [AUTO] Update GPM Credential Privileged Apps JSON
- 3b6fd302 - [AUTO] Update two-factor auth library
- 1968bcae - [AUTO] Update Public suffix list
- a83e0ca9 - Merge pull request #1438 from AChep/localization_action
- 466a5239 - [AUTO] Update localization library
- 1821c264 - improvement(Desktop): Ctrl+Shift+L to lock the vault
- 1948405e - improvement: Increase network timeout from 10s to 30s
- 155e0138 - fix: Correct Auto-resume text phrase for downloading-failed attachments
- 97881ea2 - feat(SshAgent): Store public keys on disk when enabled for an easier list request processing
- 3f22b932 - fix: Avoid leaving partial files on failed decrypt during attachment downloading
- 9fd3fce0 - fix(Backup): Clean-up newly downloaded blobs if backup fails mid-way
- 61f4a228 - improvement(UI): Align visual style between Backup repo component and code snippets
- e1619bd1 - fix: Correct SSH agent setup instructions via config file #1440
- 40cf1490 - fix(Backup): Surface attachment decryption errors as a special type
- c91c91f4 - fix(Desktop): Shutdown SSH agent daemon after main app quits
- 86357423 - fix: Show SSH request timeout animation even if animations are disabled #1439
- fc9de9f0 - fix: Drive SSH agent request expiry from the manager, never from the UI #1439
- 9d7e05a3 - improvement: View SSH agent request history
- d1e6204a - refactor: Extract shared JSON resource list loader
- 93d5ea6f - refactor: Extract shared service directory list helpers
- b3e89639 - improvement(Android): Offload autofill's structure parsing to worker thread where possible
- 8ec5196b - perf(send): avoid polling for expired state
- 7847a20b - fix(send): avoid leaking expired state timer
- 9cd5c540 - feat: Automatic vault backups #534 #1405
- b030a2b0 - experiment: Get iOS to the point where it can log in into a Bitwarden account & sync it
- 2540d82d - experiment: Stub iOS app module
- 6857681c - fix: Require domain boundary for URL matching
- d71b3eb6 - refactor: Validate received Argon2 prelogin parallelism value
- 720916ea - fix: Normalize URLs before URL matching/checking
- 33fbec11 - tests: Add Luhn impl tests
- 25244f12 - fix: Reject invalid HOTP/TOTP digit counts
- c026e3af - fix: Preserve reprompt property during cipher merge
- 46c3e1c6 - refactor(Desktop): Use argv commands for navigation fallbacks
- ae12fb43 - fix(Desktop): Allocate JNA strings by UTF-8 byte length
- 77dc38e6 - fix: Unbiased password generator random selection
- 5310

WebAuthn Level 3 support has been added for Android, and window capture protection is now available on Windows. On Windows and macOS, the app will now use the system's accent color. The previously used barcode format is also now remembered on a per-item basis. Fixes in this release correct WebAuthn authenticator flags, improve domain matching for autofill, resolve a Watchtower search bug, and prevent a potential crash in the TOTP component.
All changes
- 06066aac - chore: Bump app version to 2.13.0
- c6dddea0 - refactor(KMP): Fake signalr websockets to allow iOS tets to pass
- dac56dd1 - refactor(KMP): Switch to explicit binary search implementation because the method is not available for KMP
- 29e5b1b2 - feat(Android): Webauthn Level 3
- 7ac90ee9 - fix: Handle public suffix exception rules in TLD impl
- 56ded491 - @billiegoose has signed the CLA in #1435
- 3070efde - refactor: Batch cipher filter deletes
- 7ba83a3e - refactor: Pass AutoSizeText remember keys separately
- 16ec6b28 - improvement: Remember password visual transformation instance
- 233ecb21 - refactor: reuse DSecret name separator regex
- 32db525a - fix(signalr): Parse completion errors by field presence
- 7de13ff7 - fix: Clean up download cache files after success
- f65c96ea - fix: compare cipher MACs by MessageDigest.isEqual()
- e6755880 - fix(UI): Guard against a division by zero in totp component
- 85b1a23d - fix(Watchtower): Fix binary search missing common PINs on the edge (off by 1)
- f14ef446 - fix(Autofill): Bound short keyword matching
- 7560a3af - fix(Android): Honor credential service cancellation signal
- 1718eb4f - fix: Make file download progress counter atomic
- 76c2ecfa - fix: separate tag filter visibility from collections
- c681b74a - fix: Prevent potential OkHttp response leak if file downloading fails early
- 18c41d7c - fix(UI): Do not show Folder merge action if folders are from multiple accounts
- 3cc7bd1f - fix: correct WebAuthn authenticator data flags
- c256da64 - refactor: Update Bitwarden passkey monotonic counter TODO comment
- e3d448f5 - refactor: Migrate to the modern Compose autofill node APIs
- 585cac9c - refactor: Remove deprecated ServerEnvApi.Ciphers.Attachments.post(...)
- 29cb283d - refactor: Move request list scroll on revision change to a shared impl
- a59884b8 - improvement(Windows): Support window capture protection #1424
- c92c7ddb - improvement(Windows/MacOS): Use actual accent color if available #1423
- 1e89c104 - improvement: Remember previously used barcode format per item #1433
- 516d54ac - fix: IO.shared() sometimes consumes the block twice

In-app previews are now available for image and text attachments, including on WearOS. The clipboard can now be configured to clear automatically, and the desktop app can be set to minimize after copying an item. Watchtower now supports using a custom HIBP token for username breach checks. This release also improves Bitwarden sync compatibility and fixes a potential crash on Android when launching the Large Type activity.
All changes
- 65e88418 - Merge pull request #1430 from AChep/localization_action
- 38f8fb66 - [AUTO] Update localization library
- e3f0c4d7 - build: fix missing string tokens
- 63c9affc - Merge pull request #1414 from AChep/localization_action
- bcd5daa7 - Merge pull request #1425 from AChep/dependabot/gradle/androidx.wear.compose-compose-material3-1.6.2
- 8526292a - Merge pull request #1426 from AChep/dependabot/gradle/androidxCamera-1.6.1
- eb8c5f12 - chore(ci): Set default cooldown for dependabot to 7 days
- ef990c7d - chore(ci): Tighten default workflow's permissions in github actions
- d5c960f7 - chore(ci): Avoid shell template injection in github actions
- 0a391811 - fix(Android): Prevent a crash if Large type Activity is launched without arguments
- 94fb30b9 - feat(WearOS): In-app attachment preview for Image and Text formats
- 4910d6d5 - fix: clamp zoomed attachment image panning
- f56ae171 - docs(README): Add in-app attachment preview as a highlight
- f8aff93d - improvement(UI): Show text preview minimap on smaller devices as well
- 3655f66a - [AUTO] Update localization library
- fbd5458b - chore: Bump app version to 2.12.0
- d1f87386 - feat: In-app attachment previews for Image and Text formats
- d94cbb9f - build(deps): Bump androidxCamera from 1.6.0 to 1.6.1
- 09e654d4 - build(deps): Bump androidx.wear.compose:compose-material3
- bad2ae66 - Merge pull request #1419 from AChep/dependabot/gradle/gradle-wrapper-9.5.1
- 8c67431b - improvement: Change the default Auto clipboard clear to Never
- c92420fb - chore: Bump BuildKonfig to 0.21.2
- dddf4871 - feat: Auto clear clipboard #1422
- cf838d22 - tests: Correct expected result of the Ktor multipart payload
- 0b0909a7 - feat(Desktop): Minimize on copy #1368
- d7884a64 - improvement(Watchtower): Allow specifying your own HIBP token for username breach checks
- 4636c0ca - @auphone has signed the CLA in AChep/keyguard-app#1421
- 63b681ee - refactor: Add vault-based store for the sensitive settings
- 65c83bc9 - chore: Workaround for BuildKonfig AGP incompatibility
- c04c02d8 - chore: Bump Kotlin Ktor to 3.5.0
- 0dac0f69 - chore: Bump Kotlin coroutines to 1.11.0
- 95653fd8 - chore: Bump app version to 2.11.1
- e3bece9d - chore: Bump AGP from 9.2.0 to 9.2.1
- ad33cd72 - chore: Bump BuildKonfig from 0.20.0 to 0.21.0
- a323a889 - chore: Bump Compose from 1.11.0-rc01 to 1.11.0
- 1ec56931 - improvement(Bitwarden API): Clean-up unused properties from Cipher entity
- 0c522337 - improvement(Bitwarden API): Ignore the ciphers that have not know cipher type
- 71e5733b - improvement(Bitwarden API): Support the modern data field in the Cipher entity response
- db779262 - build(deps): Bump gradle-wrapper from 9.4.1 to 9.5.1
- 436a4558 - refactor: Custom KMP implementation of the signalr /notifications/hub
- cace3e11 - chore: Force truncate generated changelog to have less than 500 symbols

The SSH agent now features a key approval window and maintains a request history; its settings have been moved to a new Developer section. The password generator adds support for Cloudflare and Fastmail email forwarders, displaying service logos in the list. When merging vault items, you can now choose to keep, archive, or trash the originals, and password history is preserved through the process. For Bitwarden users, TOTP changes are now stored in password history and several sync reliability issues are resolved.
All changes
- f09d8c4d - tests: Correct Cloudflare email forwarder tests
- 41e73dc8 - chore: Adjust changelog generation script for a more human-sounding generation
- 89e5fceb - chore: Bump app version to 2.11.0
- 439b8e3d - refactor: Move the SSH agent settings from Security to a new Developer settings section
- b8159a72 - improvement: SSH agent key approval window #1407
- fbc9a809 - improvement: Maintain SSH agent history
- 2c2facee - Merge pull request #1399 from AChep/localization_action
- d4b2933f - Merge remote-tracking branch 'origin/improvement/more-email-forwarders'
- dcf000f5 - Merge pull request #1413 from AChep/gpmpasskeysprivapps_action
- f9dd7756 - Merge pull request #1412 from AChep/justdeleteme_action
- 5847fbfd - Merge pull request #1411 from AChep/tld_public_suffix_list_action
- 182bfbfb - Merge pull request #1410 from AChep/tfa_2factorauth_action
- 56eef586 - [AUTO] Update GPM Credential Privileged Apps JSON
- 76c783b9 - [AUTO] Update localization library
- fc2cafdd - [AUTO] Update justdeleteme library
- 3593376c - [AUTO] Update Public suffix list
- 81ee676d - [AUTO] Update two-factor auth library
- bf7f41e4 - tests: Fix localized exception message test
- 514a88a5 - refactor: Clean up common Kotlin source from JVM dependencies
- d0b31a9f - refactor: Simpler List → Flow implementation
- 962be287 - improvement(UI): Use actual services' logos for the Email forwarders list
- 9c1d0ed0 - improvement: Add Fastmail email support as an Email forwarder
- d315f129 - improvement: Add Cloudflare Email Routing support as an Email forwarder
- 536abe47 - improvement: Utilize password history during cipher conflict resolution #1405
- e99dce00 - tests: Add tests specific for password / totp / fields 3-way merge process
- ab597f64 - improvement(Bitwarden): Store TOTP changes in the Password history #1405
- 37949a6f - improvement: Merge password and passwordRevisionDate atomically during 3-way merge
- 9a90c901 - improvement: Treat "" the same as null in 3-way cipher merge
- 6507e1a9 - fix: Crash during Send screen serialization because of the Duration type
- b46bbcdb - fix(UI): Adjust the min cell width in Watchtower so the cards are never too narrow #1403
- b60ddf71 - fix(Watchtower): Changing per-item Watchtower alerts does not reflect in the alert counter #1402
- 86ef1347 - fix(Bitwarden): Add explicit no-cache/no-store to the /sync endpoints #1305
- 9be7d2b6 - improvement(Bitwarden): Remove extra guard against Empty vault response from the backend
- 85fdbd92 - fix(Bitwarden): Handle a case where the server returns stale /sync data #1305
- 8e6625fb - improvement: Display an accurate post-processed Tint color preview in the dropdown picker #1281
- 66ea7468 - improvement: During merge of items provide an option to keep/archive/trash origin items #1376
- 8ffa2f36 - improvement: Preserve and maintain password history during a merger of items #1376
- f5d10210 - tests: Correct Watchtower Weak SSH tests' expected results
- 8c002932 - fix: Weak SSH filter now respects per-cipher ignore list

This update brings improvements for Wear OS and SSH functionality. The Wear OS app introduces a platform-specific UI for the change password screen, displays Watchtower alerts for SSH keys, and now respects Send tab visibility preferences. For SSH users, the in-app tutorial shows actual socket paths. This release also resolves issues where the Wear OS vault did not persist through restarts and trashed SSH keys were not correctly omitted from lists or signing requests.
All changes
- e8fd4433 - chore: Bump app version to 2.10.2
- 0104295f - refactor(Desktop): Allow both prod & dev builds running side by side
- f78a8289 - improvement(Wear): Use a Wear-specific UI for the CHange password screen
- c41b8e1a - improvement(SSH): Wear SSH key watchtower alert
- 51ef5e4b - fix(Wear): Persist vault database through app restarts
- 66514a6f - fix(SSH): Omit trashed SSH keys from list & sign requests
- 4363af19 - improvement(SSH): Show the actual paths to the .sock in the in-app tutorial
- 161d80e7 - improvement(Wear): Respect the Send tab visibility preferences
- 67719d7d - tests: Fix flaky Bitwarden sync test caused by the async log messages

This update addresses several user interface issues. On Android, a layout rendering issue in the subscriptions view has been corrected. Additionally, the 'Send' tab will no longer flicker upon application launch, as its visibility state is now loaded from the cache to prevent waiting for upstream status.
All changes
- 90113b81 - chore: Bump app version to 2.10.1
- a8879e2f - fix(Android): Remove double wrapping into surface for subscriptions layout
- 2d222012 - fix: Prevent Send tab visibility from always waiting for the upstream status instead of using cache -- no more flicker on launch
- 7bb52de2 - docs: Add attachment upload feature to vault

This update introduces support for file attachments and Bitwarden Sends. Passkey authentication is now enforced if the authentication mode is set to preferred or higher. Performance for lists has been updated, and UI animations now use the Material 3 motion scheme. This release also resolves an autofill crash on pre-Android 10 devices, clears the password field when the unlock screen is moved to the background, and addresses various issues with Bitwarden file uploads and the new Send feature.
All changes
- c4fe2ce6 - fix: Prevent Send tab launching it hidden state if you have many accounts
- 1b953aeb - chore: Bump app version to 2.10.0
- 9d9e24c2 - Merge pull request #1383 from AChep/localization_action
- e57a3c84 - Merge pull request #1394 from AChep/justdeleteme_action
- 02afe559 - Merge pull request #1395 from AChep/tld_public_suffix_list_action
- ed79ad1f - Merge pull request #1396 from AChep/passkeys_action
- 6d9aee16 - Merge pull request #1397 from AChep/gpmpasskeysprivapps_action
- ad8d67b7 - [AUTO] Update localization library
- 5d96cbbf - Merge pull request #1392 from AChep/tfa_2factorauth_action
- 8853dd23 - [AUTO] Update GPM Credential Privileged Apps JSON
- 5a8a6ef8 - Merge pull request #1393 from AChep/justgetmydata_action
- 8fe70909 - [AUTO] Update passkeys library
- 5d63eb91 - [AUTO] Update Public suffix list
- ef0b7628 - [AUTO] Update justdeleteme library
- 7329d742 - [AUTO] Update justgetmydata library
- 491821cc - [AUTO] Update two-factor auth library
- 7b2a5ca6 - fix: When the Create / Unlock vault screen is moved into background clear the password field
- 0f23706f - improvement(UI): Use M3 defaultEffectsSpec for color state animations
- 5210754a - improvement(perf): Utilize Lazy list's content type property
- 42359159 - build: Bump Android compile SDK from 36 to 37
- 9ec7f31b - build: Bump Play services wearable to 20.0.1
- d3bfc041 - build: Bump AndroidX libraries
- d2555b3e - build: Bump kotlinx-serialization from 1.10.0 to 1.11.0
- c77f4648 - build: Bump AGP from 9.1.1 to 9.2.0
- b025a599 - build: Bump common-codec from 1.21.0 to 1.22.0
- eebfb8c9 - build: Bump firebase dependency
- fb2bdf03 - build: Bump compose-native-tray from 1.1.0 to 1.3.0
- 384fdf60 - build: Bump compose-multiplatform from 1.11.0-beta03 to 1.11.0-rc01
- e1cd3b6c - build: Bump gradle-versions-plugin from 0.53.0 to 0.54.0
- 3c44a59d - build: Bump filekit from 0.13 to 0.14.1
- 9b676095 - build: Bump bc-java from 1.83 to 1.84
- f39608c0 - build: Bump sqlcipher-android from 4.14.1 to 4.15.0
- 7201e4d1 - build: Bump Kotlin from 2.3.10 to 2.3.21
- 0283c220 - build: Bump BuildKonfig from 0.17.1 to 0.20.0
- 035ecbd3 - fix(Sync): Send encrypted file name during the Send file upload
- 03f7d50f - refactor(diagnostic): Add logs to Bitwarden sync pipeline
- 601372fa - Merge pull request #1389 from AChep/dependabot/gradle/ktor-3.4.3
- c36cd702 - fix: Account / Sends screen now shows the items if the account is hidden
- ec144efb - fix(Bitwarden): Do not treat 404 as terminal file upload failure
- 1d3cba40 - improvement: Testable Bitwarden sync with optimistic concurrency control
- 495e2e02 - refactor(UI): Migrate Shimmer to Modifier.Node
- 9865bd97 - refactor(UI): Migrate some components to M3 Motion scheme
- 05a07135 - maintenance(Bitwarden): Add bulk endpoints for the future use
- ae954617 - fix(Bitwarden): Make unarchive bulk API use actual unarchive endpoint
- 88d47712 - maintenance(Bitwarden): Support new prelogin/password in addition to prelogin
- 9b571a9e - feat: File attachments / sends support
- 3da60281 - chore(Wear): Generate Licenses list for internal builds
- 8d5ecf41 - improvement(Wear): Pass a title to the dropdown picker
- 98f0486e - fix: Add missing Force hide Send tabs setting option
- 171a8037 - improvement: Add more string resources
- ebcf5302 - improvement: Show the Send tab only when relevant #1388
- 975dd030 - build(deps): Bump ktor from 3.4.2 to 3.4.3
- 661568f5 - deps: Bump to Compose 1.11.0-beta03
- 56dfade4 - fix(Wear): M

This update introduces initial support for Wear OS, featuring optimized screens for manual Bitwarden login, the password generator, and updated layouts for the 'About' and 'Data Safety' sections. The description text from the biometric prompt has been removed. For desktop users, the application now periodically checks for and applies system theme changes.
All changes
- d306e66c - chore: Bump rust rand to 0.8.6
- f31aa4fd - Merge pull request #1385 from AChep/dependabot/github_actions/r0adkll/upload-google-play-1.1.5
- 87ce4905 - Merge pull request #1386 from AChep/dependabot/github_actions/crowdin/github-action-2.16.2
- 1e397767 - improvement(Wear): Optimize the manual Bitwarden login screen for wear os
- 6256f50e - improvement(Wear): Optimize the Generator screen for wear os
- fdcd8dad - improvement: Remove the description text from the biometric prompt as it was not providing extra information either way #1387
- 938409c7 - improvement(Wear): Convert about team screen to use transforming scaffold
- 0bceee3f - improvement(Wear): Convert data safety screen to use transforming scaffold
- 16ffb974 - fix(Desktop): Periodically check for the SystemTheme changes #1379
- c663bf24 - build(deps): Bump crowdin/github-action from 2.16.0 to 2.16.2
- 778b37cc - build(deps): Bump r0adkll/upload-google-play from 1.1.3 to 1.1.5
- a307fc1b - chore: Fix Lint errors
- ba033da6 - chore: Fix wearApp release build
- 03913d21 - chore: Provide common proguard rules to wear app module
- 4b6defc3 - Merge pull request #1373 from AChep/dependabot/github_actions/softprops/action-gh-release-3.0.0
- e20e3d2b - Merge pull request #1372 from AChep/dependabot/github_actions/actions/upload-artifact-7.0.1
- 6be9bcae - build(deps): Bump actions/upload-artifact from 7.0.0 to 7.0.1
- 5500cce0 - chore: Bump app version to 2.9.0
- 32f90949 - feat: Initial Wear OS support
- 4a7512e5 - docs: Add screenshots of the Wear OS app
- 2d8eab13 - build(deps): Bump softprops/action-gh-release from 2.6.1 to 3.0.0

A new application icon has been introduced for macOS. On Android, autofill compatibility for Chromium-based browsers has been revised; the list of exotic browsers was removed and a maximum version for compatibility mode was applied. The Autofill origin isolation feature for Android has also been removed.
All changes
- ce23da59 - chore: Bump app version to 2.8.1
- 62425f22 - fix(Android): Remove the unfortunately not possible Autofill origin isolation #1375
- c19e81fe - improvement(Android): Remove all of the exotic Chromium-based browsers from the autofill compatibility mode list
- 0fc7c852 - improvement(Android): Set max version of the Chromium-based browsers to the autofill compatibility to apply
- 782a469c - chore: Migrate to Gradle Toolchains
- f326562e - deps: Bump AGP from 9.1.0 to 9.1.1
- 861c9c3c - Merge pull request #1377 from AChep/localization_action
- c63423f1 - [AUTO] Update localization library
- ec3fa53b - improvement(MacOS): Liquid (Gl)ass app icon

This update adds several new capabilities on Android: the password generator is now available as a Quick Settings Tile for access without login, YubiKey provisioning is supported via NFC, and QR codes can be opened from a file. Android autofill functionality has been updated with a new structure parser to reduce false positives, improved handling of iframes to prevent AutoSpill, and better support for native autofill hints. Additionally, the app package name is now hidden from the legacy autofill popup.
All changes
- 01332e90 - Merge pull request #1340 from AChep/localization_action
- 5b0c40fb - [AUTO] Update localization library
- 3a230147 - chore: Bump app version to 2.8.0
- 506d9ff4 - Merge pull request #1369 from AChep/dependabot/gradle/androidx.datastore-datastore-1.2.1
- 31b67574 - improvement(Android): Hide app package name from the legacy autofill popup
- 37c27560 - fix(Android): Guard node.webScheme call behind SDK 28
- ed445fc6 - build(deps): Bump androidx.datastore:datastore from 1.2.0 to 1.2.1
- 08a84234 - improvement(Android): Explicitly isolate components to prevent AutoSpill, including multiple iframes
- bae8d462 - fix(Android): Better support for Android native autofillHints
- a71eccad - fix(Android): Do not accept "" as a valid web domain during autofill structure parsing
- 79046187 - Merge pull request #1367 from AChep/dependabot/gradle/androidx.credentials-credentials-1.6.0
- b7799daa - improvement(Android): Better structure parser based on trained CART decision tree - should reduce the amount of false positive triggers
- 300f248c - build(deps): Bump androidx.credentials:credentials from 1.5.0 to 1.6.0
- 58431ccd - Merge pull request #1366 from AChep/dependabot/gradle/yubiKit-3.1.0
- cdbfbcf9 - build(deps): Bump yubiKit from 3.0.1 to 3.1.0
- acdacda4 - Merge pull request #1355 from AChep/dependabot/gradle/androidx.benchmark-benchmark-macro-junit4-1.5.0-alpha05
- 2d600262 - Merge pull request #1361 from AChep/dependabot/github_actions/gradle/actions-6.1.0
- ae8b3017 - Merge pull request #1362 from AChep/dependabot/github_actions/android-actions/setup-android-4.0.1
- fefec427 - Merge pull request #1363 from AChep/dependabot/gradle/net.zetetic-sqlcipher-android-4.14.1
- 20a525cb - build(deps): Bump net.zetetic:sqlcipher-android from 4.13.0 to 4.14.1
- 039f372f - build(deps): Bump android-actions/setup-android from 4.0.0 to 4.0.1
- 9fac616f - build(deps): Bump gradle/actions from 6.0.1 to 6.1.0
- 86d075fc - Merge pull request #1354 from AChep/dependabot/gradle/gradle-wrapper-9.4.1
- b96e4297 - build(deps): Bump androidx.benchmark:benchmark-macro-junit4
- 62cf1043 - build(deps): Bump gradle-wrapper from 9.4.0 to 9.4.1
- d6756ab0 - Merge pull request #1349 from AChep/dependabot/gradle/androidxCamera-1.6.0
- 6cd615c8 - Merge pull request #1350 from AChep/dependabot/gradle/androidxWork-2.11.2
- f02cd32b - improvement(Android): Expose Generator as a Tile that is outside the Vault and needs no login #741
- 56926a85 - improvement(Android): Support provisioning YubiKey via NFC #1348
- 6e58fa85 - improvement: Update Strings resources with new phrases
- ad98bba6 - build(deps): Bump androidxWork from 2.11.1 to 2.11.2
- 1ca70d43 - build(deps): Bump androidxCamera from 1.5.3 to 1.6.0
- ff3dd06c - Merge pull request #1347 from AChep/dependabot/gradle/androidx.core-core-ktx-1.18.0
- 1e8f5cb4 - Merge pull request #1342 from AChep/dependabot/github_actions/dtolnay/rust-toolchain-3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9
- fb8d2969 - Merge pull request #1343 from AChep/dependabot/github_actions/crowdin/github-action-2.16.0
- 63730352 - Merge pull request #1344 from AChep/dependabot/github_actions/gradle/actions-6.0.1
- 948bf8ce - Merge pull request #1345 from AChep/dependabot/github_actions/metcalfc/changelog-generator-4.7.0
- 9b1ca299 - Merge pull request #1346 from AChep/dependabot/gradle/ktor-3.4.2
- 3ff9756d - build(deps): Bump androidx.core:core-ktx from 1.17.0 to 1.18.0
- 76b5eb35 - build(deps): Bump ktor from 3.4.1 to 3.4.2

This update features a major search rework, SSH agent support for Android via Termux, and the ability to import SSH keys from files. Search now prioritizes title matches and displays context as a badge. You can also batch-edit tags for multiple items. Further improvements include Bash syntax highlighting and optimized Watchtower processing. Key fixes address desktop SSH agent startup loops, cmd:// URI handling, and gracefully handle invalid TOTP keys and SSH agent failures on Android.
All changes
- 0601d320 - improvement: Basic syntax highlighting for the Bash code snippets
- 76b62959 - improvement: More consistent padding on search qualifier popup
- 556891e7 - chore: Bump app version to 2.7.0
- 32461784 - improvement: Increase the max height of the SSH request window so the fingerprint icon fits properly
- 5a43351b - Merge pull request #1327 from AChep/localization_action
- 319a785b - Merge pull request #1337 from AChep/tld_public_suffix_list_action
- 47f08d12 - Merge pull request #1338 from AChep/tfa_2factorauth_action
- ba46532c - Merge pull request #1339 from AChep/justdeleteme_action
- a4b12bad - [AUTO] Update localization library
- 3a0bff06 - [AUTO] Update justdeleteme library
- 7323aaec - [AUTO] Update two-factor auth library
- 628d679b - [AUTO] Update Public suffix list
- b0716995 - improvement(Desktop): Retry starting up the SSH agent before giving up
- bc912119 - fix(UI): On edit cipher screen show invalid (deleted) folder as No folder #1330
- ea26480a - chore: Bump Compose Multiplatform components to their respectable versions
- 58bc1e2e - chore: Bump Compose Multiplatform from 1.11.0-alpha04 to 1.11.0-beta01
- e4022b25 - fix(Android): Gracefully handle failures in the SSH agent bridge
- 3dba1d6c - chore(Android): Uncomment .debug suffix for debug builds
- efa31d30 - Merge pull request #1335 from AChep/dependabot/gradle/com.google.firebase-firebase-bom-34.11.0
- 24b18533 - Merge pull request #1334 from AChep/dependabot/gradle/com.hierynomus-sshj-0.40.0
- 6ca45b89 - feat(Android): SSH Agent support via a custom Termux package #884
- 31f11f68 - fix(Desktop): SSH agent restarts multiple times on app launch
- 72bdedbf - docs: Remove repository map from AGENTS.md
- 8d8857b0 - build(deps): Bump com.google.firebase:firebase-bom
- e0bd6a4b - build(deps): Bump com.hierynomus:sshj from 0.38.0 to 0.40.0
- bd2f6b8d - fix: Stop cmd:// URIs from being recognized as Web platform, which prevents a user from executing the command #1261
- 5ef22bcb - fix(Linux): Mark jspawnhelper as executable #640 #1261
- 24c8ed4f - Merge pull request #1331 from AChep/dependabot/github_actions/apple-actions/import-codesign-certs-6.1.0
- 17b358d5 - Merge pull request #1332 from AChep/dependabot/gradle/arrow-2.2.2.1
- 30edbae4 - Merge pull request #1333 from AChep/dependabot/gradle/touchIcon-0.9.12
- a7aa0681 - build(deps): Bump touchIcon from 0.9.11 to 0.9.12
- 11e13f85 - build(deps): Bump arrow from 2.2.2 to 2.2.2.1
- 38b7171e - build(deps): Bump apple-actions/import-codesign-certs
- c13d67b0 - chore(Android): Fix build by adding sun.security.x509.X509Key to R8's donotwarn
- 746454bf - Merge pull request #1328 from AChep/dependabot/gradle/androidx.activity-activity-compose-1.13.0
- 673cbee4 - Merge pull request #1329 from AChep/dependabot/gradle/sqldelight-2.3.2
- f690f4c4 - feat: Add support for importing SSH keys from files #1326
- d4dc2b70 - refactor(Android): Migrate from deprecated APIs for edge-to-edge
- a93d9f9c - fix(Desktop): Show toast messages on the focused window
- bc7c2f4a - build(deps): Bump sqldelight from 2.3.1 to 2.3.2
- 4bea6934 - build(deps): Bump androidx.activity:activity-compose
- 89ee6f93 - docs: Add VAULT_SEARCH section
- 8700ac23 - fix: Handle invalid TOTP secret key gracefully
- 5d78ba3d - improvement(UI): Insert/delete animation for add a cipher screen's items
- 37fa7345 - improvement(Vault): Set tags on multiple ciphers in batch #1181
- 47c62e09 - refactor: Add a comment about mutablePersistedFlow(...)
- c9a3f7f4 - improv

This release provides corrections for the Bitwarden integration. The public URL for Bitwarden Send has been fixed for users on the EU server. Additionally, password history for Bitwarden accounts now correctly reflects changes made to secret fields.
All changes
- 1d3c1e08 - chore: Bump app version to 2.6.1
- e41ac37c - fix(Bitwarden): Reflect the changes of the secret fields in the password history #1295
- 2808a5e8 - fix(Bitwarden): Correct public Send url for EU Bitwarden server

This release introduces the ability to unlock vaults with a YubiKey on Android and the option to archive or unarchive entries. For Bitwarden users, support for email-protected Sends is now available, and the encryptedFor field is correctly included with Cipher entities. This update also contains a fix for YubiKey integration on Android by supplying custom Proguard rules.
All changes
- c3ef7753 - Merge pull request #1316 from AChep/localization_action
- c93fa4a5 - [AUTO] Update localization library
- c0998dbe - chore: Bump app version to 2.6.0
- eca0792b - chore(Bitwarden): Bump client version to Bitwarden 2026.2.1
- 99cf9b75 - fix(Android): Supply custom YubiKey proguard rules
- 581656ba - docs: Add vault unlocking info with biometrics and YubiKey
- 07f3aa93 - feat(Android): Unlock with YubiKey
- 2f0f1e33 - refactor: Rename files for a better consistency
- da1257e6 - feat: Archive/Unarchive ciphers (part 2)
- 2d3c1492 - feat(Bitwarden): Add a support for email-protected Sends
- e077f479 - feat: Archive/Unarchive ciphers (part 1) #1304
- 52af3c5c - improvement(Bitwarden): Send the encryptedFor field with the Cipher entity
- c8402911 - Merge pull request #1307 from AChep/dependabot/gradle/org.jlleitschuh.gradle.ktlint-14.2.0
- 8e5a7710 - chore: Enhance prompt for release note generation, make it more structured
- 44b50d61 - docs: Add AUR installation instructions for Keyguard
- 3a0755e9 - build(deps): Bump org.jlleitschuh.gradle.ktlint from 14.0.1 to 14.2.0

This update adds a global Quick Search shortcut for desktop platforms and enables hotkey detection on Linux under XWayland. The notifications service now uses an exponential backoff for re-connection attempts. For the password generator, the pipe symbol '|' is now included in the set of similar symbols, and example.com domains are now handled as if they use the HTTPS protocol. Lastly, a fix for Bitwarden vaults ensures an empty cipher name is sent correctly instead of a null value.
All changes
- e0d4620e - chore(Linux): Install X11 dev dependency
- 6c146c93 - docs: Add global shortcuts section to SHORTCUTS.md
- 96040f35 - chore: Bump app version to 2.5.0
- 6ebd5269 - Merge pull request #1314 from AChep/localization_action
- 1941a750 - Merge pull request #1313 from AChep/tfa_2factorauth_action
- a0832bed - Merge pull request #1312 from AChep/justdeleteme_action
- 869c108b - Merge pull request #1311 from AChep/passkeys_action
- 50eab4af - Merge pull request #1310 from AChep/tld_public_suffix_list_action
- 38d44c41 - [AUTO] Update localization library
- 1f1f4a79 - [AUTO] Update two-factor auth library
- b04e2266 - [AUTO] Update justdeleteme library
- 264eff7e - [AUTO] Update passkeys library
- b04dd577 - [AUTO] Update Public suffix list
- 74f1af40 - fix(Bitwarden): Send empty cipher name instead of sending null
- bceadb81 - refactor: Avoid using java.time.* APIs in the common code
- 6cc9ec17 - refactor: Rewrite GetPassword impl to use the generic CryptoGenerator.kt service
- 344f9abe - refactor: Rewrite GetFingerprint.kt to not use BigInteger
- 9ded2e94 - refactor: Make TOTP impl use the generic CryptoGenerator.kt service
- b970e988 - refactor: Rename FileEncryptorImpl → FileEncryptorJvm
- eb826aef - Merge pull request #1308 from AChep/dependabot/gradle/arrow-2.2.2
- dff0430c - Merge pull request #1309 from AChep/dependabot/gradle/sqldelight-2.3.1
- f5b5c981 - build(deps): Bump sqldelight from 2.2.1 to 2.3.1
- 11e573fd - build(deps): Bump arrow from 2.2.1.1 to 2.2.2
- 1b3021e9 - Merge pull request #1277 from AChep/dependabot/gradle/nl.littlerobots.version-catalog-update-1.1.0
- 6efe31f0 - Merge pull request #1288 from AChep/dependabot/github_actions/gradle/actions-5.0.2
- 1d78ef8a - Merge pull request #1289 from AChep/dependabot/github_actions/actions/download-artifact-8.0.0
- c3b9ce1a - Merge pull request #1290 from AChep/dependabot/github_actions/crowdin/github-action-2.15.0
- c8200745 - Merge pull request #1291 from AChep/dependabot/github_actions/actions/upload-artifact-7.0.0
- 3f3d6753 - Merge pull request #1293 from AChep/dependabot/gradle/ktor-3.4.1
- a87e9c89 - Merge pull request #1294 from AChep/dependabot/gradle/androidPlugin-9.1.0
- be742bf2 - refactor: Use kotlin-io instead of Java files in the common module
- 28addca3 - chore(Android): Fix compilation issue because of the missing Quick search
- 6f19e5c6 - improvement(Linux): Allow running Hotkeys detection in XWayland
- dc241f58 - chore(Desktop): Compilation error on Linux machine
- b5ef30f1 - build(deps): Bump actions/download-artifact from 7.0.0 to 8.0.0
- f56836a7 - build(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.0
- 214b53ed - chore: Bump Compose to 1.11.0-alpha04
- f25af370 - feat(desktop): Global Quick search shortcut
- f8f1bfd0 - improvement(desktop): Rewrite the desktopLibNative module from Kotlin Native to Rust + ObjC
- 9a033b06 - improvement: Exponential re-connect to the notifications service
- 82400969 - improvement(Generator): Add | to similar symbols set #1259
- 1829cd88 - improvement: Handle example.com as if it had HTTPS protocol #1260
- 1054522c - build(deps): Bump androidPlugin from 9.0.1 to 9.1.0
- cef5e886 - build(deps): Bump ktor from 3.4.0 to 3.4.1
- 614d989a - build(deps): Bump crowdin/github-action from 2.14.1 to 2.15.0
- 7c034840 - build(deps): Bump gradle/actions from 5.0.1 to 5.0.2
- ae42ff19 - docs: Add SSH agent to the list of features
- 655fa375 - tests: Fix hanging Desktop IPC server tests
- 2b09ca11 - build(deps): Bump nl.l

This release addresses a packaging issue to ensure that the ssh-agent and native library binaries are correctly marked as executable after installation.
All changes
- 8346410c - chore: Bump app version to 2.4.1
- c2a07779 - chore: Mark ssh-agent/native-lib binaries as executable post packaging
- b9883cb1 - Merge pull request #1276 from AChep/dependabot/github_actions/crowdin/github-action-2.14.1
- 503cfe6e - build(deps): Bump crowdin/github-action from 2.14.0 to 2.14.1

This release introduces an initial SSH agent for Linux and macOS. Additionally, local master key computations now utilize the Argon2id hashing algorithm. The vault merge process is also updated: tags are now correctly merged when combining ciphers, and the application now shows merge suggestions for Notes.
All changes
- 653ab1f5 - chore: Install protobuf compiler
- ed02a9de - chore: Specify Rust toolchain version
- 4f704348 - Merge pull request #1255 from AChep/localization_action
- abe23af6 - Merge pull request #1285 from AChep/tld_public_suffix_list_action
- e305d5dc - Merge pull request #1286 from AChep/passkeys_action
- 5829b801 - Merge pull request #1284 from AChep/justdeleteme_action
- 7144d199 - Merge pull request #1282 from AChep/gpmpasskeysprivapps_action
- 576b7eb0 - Merge pull request #1283 from AChep/tfa_2factorauth_action
- cf4e0801 - [AUTO] Update localization library
- 5285f4b9 - [AUTO] Update Public suffix list
- 7cae2e74 - [AUTO] Update passkeys library
- 8f293251 - [AUTO] Update justdeleteme library
- adeb6504 - [AUTO] Update two-factor auth library
- 8f027eab - [AUTO] Update GPM Credential Privileged Apps JSON
- 0e06d2a3 - chore: Bump app version name to 2.4.0
- ad938b89 - chore: Bump dependencies
- cb6939fe - feat(Linux/MacOS): Initial SSH agent
- 9827e15f - Merge pull request #1274 from AChep/dependabot/gradle/com.yubico.yubikit-android-3.0.1
- 59d627b3 - Merge pull request #1275 from AChep/dependabot/gradle/com.google.devtools.ksp-2.3.6
- a36f971e - build(deps): Bump com.google.devtools.ksp from 2.3.5 to 2.3.6
- 5f5c0838 - build(deps): Bump com.yubico.yubikit:android from 3.0.0 to 3.0.1
- fc0099d7 - Merge pull request #1271 from AChep/dependabot/gradle/androidx.baselineprofile-1.5.0-alpha03
- 5ae59f71 - Merge pull request #1273 from AChep/dependabot/gradle/androidxWork-2.11.1
- 0ad7d48b - build(deps): Bump androidxWork from 2.11.0 to 2.11.1
- e00548bb - build(deps): Bump androidx.baselineprofile
- c243bbb5 - Merge pull request #1256 from AChep/dependabot/github_actions/actions/checkout-6.0.2
- 8d94c21f - Merge pull request #1257 from AChep/dependabot/gradle/gradle-wrapper-9.3.1
- acbd260f - Merge pull request #1258 from AChep/dependabot/gradle/commons-codec-commons-codec-1.21.0
- ee047451 - docs(wiki): fix typos and grammar issues
- 5a216423 - docs: Add AGENTS.ms file with a small summary
- 92bbc704 - fix(vault): Show merge suggestions for Notes #1268
- 8416ea61 - improvement(vault): Correctly merge tags during a merge of ciphers #1268
- 61add355 - tests(coroutines): Add tests for the IO primitives
- 52944ed6 - improvement: Use Argon2id for local master key computations
- cde8243d - build(deps): Bump commons-codec:commons-codec from 1.20.0 to 1.21.0
- 15314d63 - build(deps): Bump gradle-wrapper from 9.3.0 to 9.3.1
- fe550b72 - build(deps): Bump actions/checkout from 6.0.1 to 6.0.2
- 533894f1 - chore(changelog): Try to advice the LLM to not output >500 chars

This update introduces several platform-specific enhancements and general fixes. For Android users, the "Allow screenshot" option can now display an optional visual cue, and the app will react to system light/dark mode changes without recreating the screen. Support has also been added for marking copied values as sensitive on pre-Tiramisu devices. On desktop platforms, the application has been migrated to a native Compose tray. Finally, this release resolves an issue causing "en-US" to appear twice in the language selector and adds support for re-prompting on Custom field actions.
All changes
- 11debaae - chore: Bump app version name to 2.3.4
- 36d040ad - improvement(Android): Change Allow screenshot option to optionally show a visual cue, so you won't forget to turn it off #1240
- 9463ea5c - fix(Desktop): Migrate to a Compose tray native improving the experience #414 #1248
- 533ebf87 - Merge pull request #1252 from AChep/dependabot/gradle/androidx.activity-activity-compose-1.12.3
- 5c2fdf4d - Merge pull request #1254 from AChep/dependabot/gradle/com.google.devtools.ksp-2.3.5
- b39cb310 - build(deps): Bump com.google.devtools.ksp from 2.3.4 to 2.3.5
- 012c94fe - build(deps): Bump androidx.activity:activity-compose
- f391eb56 - chore: Auto-deploy an update to the AUR repo
- f8bc7ded - Merge pull request #1250 from AChep/dependabot/gradle/androidxCamera-1.5.3
- 2831d2d3 - Merge pull request #1251 from AChep/dependabot/gradle/org.jetbrains.compose.material3-material3-1.11.0-alpha02
- 015fab92 - build(deps): Bump org.jetbrains.compose.material3:material3
- 1ca9d93c - build(deps): Bump androidxCamera from 1.5.2 to 1.5.3
- 3a43b2a3 - chore: Specify the GitHub Actions by the commit hash
- d5d586c5 - improvement(Android): React to system light/dark mode changes without recreating a screen #1246
- 1a254097 - fix: Support re-prompt for Custom fields' actions #1247
- d0cc0c90 - Merge pull request #1242 from AChep/dependabot/gradle/gradle-wrapper-9.3.0
- ceb06830 - Merge pull request #1244 from AChep/dependabot/gradle/composeMultiplatform-1.11.0-alpha02
- 313ea8ce - fix(Localization): Fix en-US showing up in the languages selector twice #1238
- 50a188c6 - improvement(Android): Support marking copied value as sensitive on pre-Tiramisu devices #1239
- 268843ed - build(deps): Bump composeMultiplatform
- 8c6aa6bf - build(deps): Bump gradle-wrapper from 9.2.1 to 9.3.0

This release introduces functional and user interface updates for Windows. The trust manager has been consolidated to combine the Windows-My, Windows-ROOT, and default certificate stores. On Windows, the main window title will now dynamically change to match the selected application theme. A bug has also been fixed where blank tags were incorrectly being saved with vault ciphers.
[!NOTE]
I've finally updated the Android release pipeline to automatically push the release to production track on release. No longer needed for me to manually promote this day's nightly internal build to production, yay! As a bonus, we now get the release summary attached to the Play store release 🍻
All changes
- 5a212861 - chore: Adjust LLM prompt for better changelog summaries
- 0cb29d41 - chore(deps): Bump Kotlin version to 2.3.10-RC
- 8b7205a3 - fix(Vault): Only save the Cipher's tags that are not blank
- ee0a1c67 - chore(build): Bump Kotlin to 2.3.0, Ktor to 3.4.0 and Serialization to 1.10.0
- bfc28a82 - chore: Other fixes for the Release workflow
- 1ceafab8 - chore: Fix Android app is not uploaded as an artifact
- 1da4b532 - chore: Fix Android app baseline profiles build artifact conflict
- 1df442f0 - chore: Fix Android app version code generation script
- da4ccd05 - chore(deps): Bump signalr to 9.0.12
- d11cf598 - chore(deps): Bump sqlite-jdbc-crypt to 3.51.2.0
- 79ee285c - chore(deps): Bump sqlcipher-android to 4.13.0
- a04b006b - chore(deps): Bump HtmlText to 3.0.0-beta02
- b4e5ebba - Merge pull request #1235 from AChep/localization_action
- da76dbfa - [AUTO] Update localization library
- 33cc7fc7 - chore(Android): Correct pip install command
- d36a25b3 - chore(Android): Fake daily tag format during internal build
- 708e69ef - chore(Android): Rework pipeline to Build the prod app during release and include the changes into a Play Store release
- 51f8ca3d - chore: Bump app version name to 2.3.3
- 086db34b - improvement(Windows,UI): Change the Window title basing on the App theme
- 0a36057c - improvement(Windows): Combine Windows-My, Windows-ROOT and the default trust manager #1227

This release includes several improvements to the password generator and fixes for certificate handling. You can now create longer passphrases of up to 20 words, and the generator will display a character count for both passphrases and usernames. We have also resolved issues with certificate stores on Windows and macOS for a more reliable experience.
All changes
- abb6539f - Merge branch 'master' of https://github.com/AChep/keyguard-app
- 5c3975c4 - fix(Windows): Revert to using the built-in cert provider
- 9092a468 - chore: Bump app version name to 2.3.2
- dee1a72d - fix(MacOS): Combine KeychainStore with default certificate store
- 05b3113f - improvement(Generator): Change max number of words of a passphrase from 10 to 20 #1232
- 05716243 - improvement(Generator): Show a number of characters for Passphrase & Username values #1232

This update introduces a new feature allowing you to tap an application's URI to look it up in the Google Play, F-Droid, or Apple App stores, which now also fetches app icons. An issue on Android has been fixed where cancelling an autofill prompt could cause the service to stop working. For desktop users, the Windows and macOS apps now use the system's native certificate store for improved connectivity. This release also includes several minor performance and user interface enhancements.
All changes
- bfa2424d - chore: Bump app version name to 2.3.1
- cd320b9a - Merge pull request #1220 from AChep/localization_action
- d4fea9ba - Merge pull request #1231 from AChep/passkeys_action
- d827ecae - Merge pull request #1230 from AChep/justdeleteme_action
- defe53c5 - Merge pull request #1229 from AChep/tfa_2factorauth_action
- 715f0b30 - [AUTO] Update localization library
- 48937723 - [AUTO] Update passkeys library
- 0afd8fba - Merge pull request #1228 from AChep/tld_public_suffix_list_action
- 4f3e1557 - [AUTO] Update justdeleteme library
- 863fe011 - [AUTO] Update two-factor auth library
- de7af103 - [AUTO] Update Public suffix list
- 7be46eb9 - Merge pull request #1224 from AChep/dependabot/gradle/com.google.firebase-firebase-bom-34.8.0
- 7bee8309 - build(deps): Bump androidPlugin from 9.0.0-rc01 to 9.0.0
- f9e0802f - improvement(Windows,MacOS): Use system certificates store #1227
- 7b09e169 - improvement(UI,LargeType): Provide min cell width, so all the cells 0..100 have equal width #1221
- cf826262 - build(deps): Bump com.google.firebase:firebase-bom from 34.7.0 to 34.8.0
- eff469a4 - Merge pull request #1218 from AChep/dependabot/gradle/com.google.android.gms-play-services-base-18.10.0
- faff21e7 - improvement: Fix minor grammar and stylistical issues in the source translation
- 92ceb0b1 - fix: Make Google Play lookup clickable & adjust the layout a little
- a9bfa8ce - improvement: Use Google Play store metadata fetcher to get app icons where possible
- d1da9ad6 - fix: Add proguard rules for the Ksoup library
- 02733938 - improvement(UI): Small Google Play store / F-Droid / Apple App Store lookup when you click on an app URI
- 256d6f13 - refactor: Minor code cleanup
- 9379b0d1 - fix(Android,Autofill): Upon receiving Autofill cancellation signal only cancel a specific job, not stop the whole Autofill service
- aa347742 - improvement(UI): Adjust padding of the dropdown expand element
- da569b69 - improvement(DB): Create indexes for a minor performance improvement
- f3b066e8 - build(deps): Bump com.google.android.gms:play-services-base

This update enhances the two-factor authentication experience by displaying both the current and upcoming one-time password. The privileged apps list is now better organized, with separate sections for user-added and community-added entries. For more control, you can now also disable passkey support in the settings.
All changes
- 279c3306 - Merge pull request #1215 from AChep/passkeys_action
- 3aa43db7 - Merge pull request #1214 from AChep/justdeleteme_action
- 3fc5231a - Merge pull request #1216 from AChep/tfa_2factorauth_action
- 24bb53e1 - Merge pull request #1213 from AChep/tld_public_suffix_list_action
- 5294ea41 - Merge pull request #1212 from AChep/localization_action
- 99fb3136 - [AUTO] Update localization library
- d42e6b72 - [AUTO] Update passkeys library
- 834870aa - [AUTO] Update justdeleteme library
- 94c9ff48 - [AUTO] Update two-factor auth library
- 58803781 - [AUTO] Update Public suffix list
- 6dac4a67 - chore: Bump app version name to 2.3.0
- da076a30 - improvement(UI,Android): Split privileged apps to User-added and Community-added sections
- 2b711565 - improvement(Android): Allow disabling passkeys support #1209
- 996231a7 - improvement(UI): Hide 2FA icon to free some space for the next 2FA token #1208
- 58bf0fcb - improvement(UI): Show both currently active OTP and the next OTP on the item view screen #1208
- ef50a88f - chore(Flathub): Update metadata
- 9217702b - chore(Flathub): Update screenshots

This update introduces a new feature for Android users, allowing you to add an app to the privileged app allowlist directly during a credential request. This gives you more flexibility and control over which applications can access your information.
All changes
- 1d8c6fe7 - chore: Bump app version name to 2.2.0
- 74b0bd1a - Merge pull request #1200 from AChep/justdeleteme_action
- 9329f0d1 - Merge pull request #1201 from AChep/tld_public_suffix_list_action
- 0494fbcb - Merge pull request #1202 from AChep/passkeys_action
- 8cb81837 - Merge pull request #1203 from AChep/localization_action
- ae548a30 - [AUTO] Update localization library
- 547667ce - [AUTO] Update passkeys library
- 97d3fc19 - [AUTO] Update Public suffix list
- eb91792d - [AUTO] Update justdeleteme library
- e8bfae5d - feat(Android): Allow a user to add an app to the privileged app allowlist during a credential request, in addition to the bundled list
- b729d389 - chore(Flathub): Translate metadata on release
- 270d4e14 - Merge pull request #1196 from AChep/localization_action
- de8b4d28 - [AUTO] Update localization library
- e00b0307 - chore(Flathub): Create common listing text tokens
- 7529bf6d - chore(Flathub): Shorten the app summary
- 7621d93c - chore: Actually pass the variables to the Trigger Flathub release workflow

This update introduces initial support for creating new password credentials on Android via Android Credential framework.
[!NOTE]
A large part of the release is testing the updated new release pipeline that maintains the release log for Flathub. The updated pipeline should provide users with a list of versions and the changelog summary for each of them. The summary is auto-generated by an LLM from full changelog as a part of the release pipeline. I hope to extend it at some point to other stores that support displaying changelogs.
I've also turned on GitHub's immutable releases.
All changes
- 9bd9ef43 - chore: Remove extra whitespace from command preventing that from running
- 5a4c0455 - chore: Comply with actions/checkout requiring path to be under the predefined checkout dir
- cfe5ce46 - chore: Bump app version name to 2.1.0
- 4a852279 - feat(Android): Initial support for the Create password credential request #1191
- a2cb2fa2 - chore: Create an GitHub issue for publishing on Flathub for tracking
- 88c13054 - chore(Flatpak): Maintain the releases list automatically + generate release summary
- c87130fc - chore: Update Flathub listing accroding to the platform guidelines
- 0c7ea794 - Merge pull request #1188 from AChep/dependabot/github_actions/actions/upload-artifact-6
- 011f713c - build(deps): Bump actions/upload-artifact from 4 to 6
- 3aae1333 - docs(Readme): Remove AUR package instructions
- b2436d45 - docs(Readme): Resize Flathub badge image to match the others
- dcdd3700 - docs(Readme): Add a link to Flathub

- c767de04 - chore: Bump app version name to 2.0.3
- 8949a074 - fix: Correctly annotate strings with parameters (fixes crash with Turkish lang) #1135
- 2ca46222 - chore(Desktop): Only package Flatpak specific files on Linux
- b73baa7b - chore(Desktop): Rename am64 → x86_64 when packaging distributable
- 743fc903 - improvement(Desktop): Support XDG Notification Portals in addition to the direct notifications service

- 80d86d61 - chore: Bump app version name to 2.0.2
- 829f0ecb - chore(Flatpak): Update screenshots
- cd75e887 - chore: Add Linux-specific screenshots
- 08055324 - deps: Downgrade dbusJava to 5.1.1
- 2862a378 - chore: Move Flatpak specific resources into the distributable archive

- f7c41b63 - chore(Desktop): Chmod +x the binary in Flatpak
- 4381dcfb - chore: Correct paths to the release binaries
- 2ddbfda5 - build: Use dbus-java-transport-native-unixsocket
- 72df481f - chore(Desktop): Provide 512x512 icon
- cb939b91 - chore(Desktop): Correct Exec path
- 4ec361b4 - chore(Desktop): Update Flatpak manifest & metadata
- 9dc503db - chore(Desktop): Build the release variant of the app
- c38cd451 - chore(Flatpak): Add metainfo
- 44b9a20c - chore: Bump app version name to 2.0.1
- 0084856b - Merge pull request #1174 from AChep/localization_action
- e4c4762c - Merge pull request #1182 from AChep/tld_public_suffix_list_action
- 9592228f - Merge pull request #1183 from AChep/tfa_2factorauth_action
- b3c8e60c - [AUTO] Update justdeleteme library (#1184)
- 1baaf1fb - chore: New Flatpak multi-arch action (#1179)
- 767ffcba - chore: Trigger Scoop deployment automatically on release
- c1dacb1c - [AUTO] Update localization library
- 4add5871 - [AUTO] Update two-factor auth library
- 2f5b5fdb - [AUTO] Update Public suffix list
- 24d039e5 - build(Desktop): Migrate from compose.* style of declaring deps to a regular TOML
- e12f0795 - Merge pull request #1178 from AChep/dependabot/gradle/io.github.willena-sqlite-jdbc-3.51.1.0
- 859e717e - build(deps): Bump io.github.willena:sqlite-jdbc
- e0a3d38a - fix(Generator): Pass context list as a parcelable array
- da84e5ce - refactor: Crash on dev builds if invalid parameter is passed to the VM's mutable flow
- a83d6ace - chore: Pull the required Flatpak runtime version directly from the manifest.yml
- f50afba4 - chore: Change F-Droid's publisher runner to ubuntu-latest

- 98085054 - chore: Fix Flatpak setup
- 9eec60ee - chore: Run apt-get update before installing flatpak
- 13bdbf39 - chore: Download flatpak deps ourselves instead of using pre-built image
- ad37783b - chore: Try to fix flatpak build error
- daff22a3 - chore(MacOS): Share build workflow between Apple/Intel arch using a strategy matrix
- 7fd539c5 - chore: Use ghcr.io/flathub-infra/flatpak-github-actions:gnome-49 to build flatpak
- 0dc2a25e - chore: Skip configuration cache
- 8d742a57 - chore: Skip configuration cache problems
- e8df630b - Revert "chore(Release): Skip configuration cache problems on release"
- 5158739c - chore(MasOS): Use macos-15 and macos-15-intel runners
- 18ea7329 - Revert "chore: Use JDK 25"
- 871f9b8d - chore(Release): Skip configuration cache problems on release
- 7e6decd9 - fix(KeePass): Remove mapping key
- 52231cd7 - improvement(KeePass): Add beta impl disclaimer text
- 1411faca - chore: Add AI-powered action to proofread the translations
- 7800f415 - fix(Generator): Only show unique suggestions
- 22906ff0 - Merge pull request #1173 from AChep/localization_action
- edaddd08 - [AUTO] Update localization library
- 917a3f23 - Merge pull request #1171 from AChep/dependabot/gradle/androidBillingClient-8.3.0
- 56403178 - build(deps): Bump androidBillingClient from 8.2.1 to 8.3.0
- 9e793da2 - fix(KeePass): Persist the Hidden profile flag
- 07e03a8b - chore: Use build licenses action in new_apk action
- 76e5a9c7 - fix(VaultView): Text in the item icon is aligned to the bottom #1132
- ad86d947 - Merge pull request #1163 from AChep/dependabot/github_actions/actions/checkout-6
- 76d8140d - Merge pull request #1166 from AChep/dependabot/gradle/dbusJava-5.2.0
- 3d325b92 - Merge pull request #1168 from AChep/localization_action
- 65e2b335 - improvement(Sends): Allow editing existing file sends #1114
- 1a5cd117 - fix(Sends): Coerce expiration date to be at most deletion date #1114
- 5fea308f - feat(Generator): Allow generating content for text fields #1084
- 2c4d6825 - [AUTO] Update localization library
- 558d12d6 - feat(Generator): Offer context-based suggestions in the popup #1125
- ad8db970 - fix(Android): Generator sheet doesn't have items' background
- eadd30c2 - fix: Password-colorized text doesn't respect content color's alpha
- e1a4b5fb - build(deps): Bump dbusJava from 5.1.1 to 5.2.0
- 3084564c - build(deps): Bump actions/checkout from 4 to 6
- e545fc78 - chore: Clean disk space before running an emulator
- 89353f8b - chore: Downgrade Kotlin from 2.3.0 → 2.2.21
- 105fbf12 - chore: Use JDK 25
- 010c31c4 - chore: Update AndroidX & Arrow dependencies
- 03a37b92 - fix(Android): Make sure the notification channel is created before opening the notification channel settings #1110
- d6c41b17 - improvement(flatpak): Use GNOME Runtime v49 #1104
- fa53369f - chore: Fix Lint failing to run on a clean build
- d667fe6b - chore: Pass cache-write-only into the correct action
- 34519f97 - chore: Allow running Lint & Test without initial cache
- a00c77ec - Merge pull request #1161 from AChep/localization_action
- 8c194224 - Merge pull request #1160 from AChep/justgetmydata_action
- 32a91ffd - Merge pull request #1159 from AChep/tfa_2factorauth_action
- c982702c - Merge pull request #1158 from AChep/justdeleteme_action
- 52252c3b - Merge pull request #1157 from AChep/tld_public_suffix_list_action
- eaac654f - Merge pull request #1156 from AChep/passkeys_action
- 2a625240 - [AUTO] Update localization library
- 2c25fff4 - [AUTO] Update justgetmydata library
- c32c8e74 - [AUTO] Update two-factor auth library
- 5e20d67b - [AUTO] Update justdeleteme library
- 9b86067e - [AUTO] Update passkeys library
- b895a4fd - [AUTO] Update Public suffix list
- 6c6ad5d0 - chore: Replace devops-infra/* actions with a bash script
- e52f2467 - chore: Call "🌐 Synchronize Localization" on ubuntu-latest because it needs docker
- 2a53dcac - chore: Refactor GH Actions triggers using a dedicated GH action
- 6d7b99c7 - chore: Use special vars.GOOGLE_SERVI

- c74b2534 - chore: Bump app version name to 1.15.2
- e815d5e6 - chore: Bump Bitwarden Client version to 2025.9.1
- 7766af4d - Merge pull request #1103 from AChep/localization_action
- 177b02cb - [AUTO]Update localization library
- 9de5833c - Merge pull request #1099 from AChep/justgetmydata_action
- 844d55da - Merge pull request #1102 from AChep/tfa_2factorauth_action
- 8a005f50 - Merge pull request #1101 from AChep/tld_public_suffix_list_action
- 6ffdd742 - [AUTO]Update two-factor auth library
- 21b8756f - Merge pull request #1100 from AChep/passkeys_action
- e6629560 - [AUTO]Update Public suffix list
- b15a5ab4 - [AUTO]Update passkeys library
- bb6c8718 - Merge pull request #1098 from AChep/justdeleteme_action
- 6ec0b3b3 - [AUTO]Update justgetmydata library
- c0ad7651 - [AUTO]Update justdeleteme library

- 3fb2de79 - refactor: Add more String resources for the future use
- 13cfdfdb - improvement(Generator): Add 3072-bits option for RSA keys
- d4965444 - chore: Bump app version name to 1.15.1
- fe01b1ab - Merge pull request #1096 from AChep/gpmpasskeysprivapps_action
- f313d100 - [AUTO]Update GPM Credential Privileged Apps JSON
- 5a9352b1 - improvement: Add IronFox browser to privileged apps #1055
- 8649eeb5 - improvement(Export): Export SSH keys #1095
- 4cccb0b0 - improvement(Passkey): Show a better error message if the app is not in the privilaged list

- 5d43be69 - chore: Bump app version name to 1.15.0
- d4ad5452 - fix: Mark visibility event as parcelable
- 722123d4 - Merge pull request #1052 from AChep/localization_action
- 9808a10d - Merge pull request #1078 from AChep/dependabot/gradle/com.google.android.gms-play-services-base-18.8.0
- 6e8e3ed7 - Merge pull request #1077 from AChep/dependabot/gradle/androidxWork-2.10.4
- 06aa5cf6 - Merge pull request #1075 from AChep/dependabot/gradle/ktor-3.3.0
- f3cbca58 - build(deps): Bump com.google.android.gms:play-services-base
- ff48458e - build(deps): Bump androidxWork from 2.10.3 to 2.10.4
- cb75f587 - build(deps): Bump ktor from 3.2.3 to 3.3.0
- 85ea7411 - Merge pull request #1074 from AChep/tfa_2factorauth_action
- 609fe643 - Merge pull request #1073 from AChep/tld_public_suffix_list_action
- 01dd46bf - [AUTO]Update two-factor auth library
- e1a89aca - Merge pull request #1072 from AChep/justdeleteme_action
- 34b476a7 - [AUTO]Update Public suffix list
- e610177e - [AUTO]Update justdeleteme library
- b216764b - improvement: Use M3 surface group color for elevated containers
- 3003809b - improvement: Use M3 text for Html text component
- ea12f291 - improvement: Persist navigation state in memory after locking/unlocking the vault
- fd97c180 - Merge pull request #1068 from AChep/dependabot/gradle/androidx.activity-activity-compose-1.11.0
- 17c3e088 - Merge pull request #1069 from AChep/dependabot/gradle/androidxRoom-2.8.0
- 947bbc5a - Merge pull request #1070 from AChep/dependabot/gradle/androidxCamera-1.5.0
- 1a70be55 - Merge pull request #1071 from AChep/dependabot/gradle/androidx.benchmark-benchmark-macro-junit4-1.4.1
- 92e811b5 - build(deps): Bump androidx.benchmark:benchmark-macro-junit4
- 00a655c7 - build(deps): Bump androidxCamera from 1.4.2 to 1.5.0
- 5cc22025 - build(deps): Bump androidxRoom from 2.7.2 to 2.8.0
- 65605352 - build(deps): Bump androidx.activity:activity-compose
- 540320f3 - Merge pull request #1062 from AChep/dependabot/github_actions/actions/setup-python-6
- db080ef5 - Merge pull request #1063 from AChep/dependabot/gradle/filekit-0.11.0
- 7c45e8be - Merge pull request #1064 from AChep/dependabot/gradle/com.yubico.yubikit-android-2.9.0
- 185e06e3 - Merge pull request #1066 from sunO2/master
- 04e346f3 - @sunO2 has signed the CLA in AChep/keyguard-app#1066
- b2286e52 - fix fcitx5-android autfill count
- 697bc3d3 - build(deps): Bump com.yubico.yubikit:android from 2.8.2 to 2.9.0
- 008f175f - build(deps): Bump filekit from 0.10.0 to 0.11.0
- 2a70a64e - build(deps): Bump actions/setup-python from 5 to 6
- 97390ff9 - improvement(M3): Expressify Generator screen
- 73ff71df - Merge pull request #1056 from AChep/dependabot/gradle/androidxLifecycle-2.9.3
- ce28a8ed - build(deps): Bump androidxLifecycle from 2.9.2 to 2.9.3
- cc12e6ca - chore: Update Compose Multiplatform to 1.10.0-alpha01
- 1ca177aa - style(Vault): Update item design
- 35ea2dee - refactor: Apply UseKtx suggestions
- fcdac8ae - refactor: Migrate from Glide+Landscapist & Kamel to Coil multiplatform for image loading
- 70244f7f - chore: Bump Firebase dependency to 34.2.0
- 640ce9d1 - chore: Bump AndroidX Lifecycle to 2.9.3
- 988f777a - build: Update Android Gradle Plugin to 8.12.2
- 14f31a4b - [AUTO]Update localization library
- 27487d7a - fix: App only updates Vault lock when screen turns off only after restart #1051
- 5f406b43 - improvement: Use more compact No items component for suggested items

Material You Expressive
This release brings initial changes to align with the updated Material You Expressive design. There's also a setting in Settings / Appearance to disable extra surfaces if your don't like them.
Full changelog
- 787b6c12 - chore: Bump app version name to 1.14.1
- 1b9aa0f4 - chore(mac): Upgrade JDK version from 17 to 21

Material You Expressive
This release brings initial changes to align with the updated Material You Expressive design. There's also a setting in Settings / Appearance to disable extra surfaces if your don't like them.
Full changelog
- feef4268 - chore: Bump Compose to 1.9.0-rc01
- bbc0ae00 - Merge pull request #1044 from AChep/dependabot/gradle/landscapist-2.5.2
- f0f01f34 - build(deps): Bump landscapist from 2.5.1 to 2.5.2
- 16067fea - improvement(M3): Minor design updates
- 56e4ed8d - chore: Bump Firebase dependency
- 5d7a63ba - improvement: Adjust Promo animation
- 26a58a33 - chore: Bump Android billing client to 8.0.0
- c9c12f92 - chore: Bump app version to 1.14.0
- 38df3ee0 - Merge pull request #1034 from AChep/dependabot/gradle/org.jlleitschuh.gradle.ktlint-13.1.0
- bffb0d7c - Merge pull request #1038 from AChep/dependabot/github_actions/devops-infra/action-commit-push-0.11.4
- 443886bc - Merge pull request #1037 from AChep/dependabot/github_actions/devops-infra/action-pull-request-0.6.1
- 8f37217d - Merge pull request #1035 from AChep/dependabot/github_actions/actions/setup-java-5
- 7ebe847d - Merge pull request #1036 from AChep/dependabot/github_actions/actions/checkout-5
- e3671966 - Merge pull request #1006 from AChep/localization_action
- 458e3e93 - Merge pull request #1043 from AChep/justdeleteme_action
- 79db4998 - Merge pull request #1042 from AChep/justgetmydata_action
- 28bb6f6c - Merge pull request #1041 from AChep/passkeys_action
- b136ca6e - Merge pull request #1040 from AChep/tld_public_suffix_list_action
- 19c6af14 - Merge pull request #1039 from AChep/tfa_2factorauth_action
- 279a8569 - [AUTO]Update localization library
- 1dedcb01 - [AUTO]Update justdeleteme library
- 733d3629 - [AUTO]Update justgetmydata library
- ccbe953b - [AUTO]Update passkeys library
- 0dc2b8ef - [AUTO]Update Public suffix list
- fe8a029b - [AUTO]Update two-factor auth library
- 1cc2264a - build(deps): Bump devops-infra/action-commit-push from 0.11.2 to 0.11.4
- 21452d4c - build(deps): Bump devops-infra/action-pull-request from 0.6.0 to 0.6.1
- 0d4f2a19 - chore: Update artwork
- 78bf45d0 - chore: Update screenshots
- 1b082185 - build(deps): Bump actions/checkout from 4 to 5
- ee75f6f7 - build(deps): Bump actions/setup-java from 4 to 5
- 9477c5c4 - improvement(M3): Minor Expressive updates
- 5f59a074 - improvement(M3): Adjust paddings of the Identity component
- b96c8cb4 - refactor: Optimize imports
- 0e2567ce - improvement(M3): Expressify Logs screen
- 89be97f6 - improvement(M3): Expressify Password history screen
- 30cc6ba7 - improvement(M3): Expressify Settings Search component
- f58707b8 - improvement(M3): Expressify Dropdown component
- 179d5fdd - improvement(M3): Expressify Attachments screen
- 9f400533 - improvement(M3): Minor improvements
- 51b144e7 - improvement(M3): Initial expressify Add screen
- b426a60a - improvement(M3): Align paddings over Data safety screen
- ab06f052 - improvement(M3): Align paddings over setting screens
- 2f7cb91c - improvement(M3): Expressify Export screen
- 1e1df609 - improvement(M3): Fix Subscriptions paddings
- cdbc524b - improvement(M3): Expressify Identity view header
- 17d47dcc - improvement(M3): Expressify Create and Unlock screens
- 722790de - build(deps): Bump org.jlleitschuh.gradle.ktlint from 13.0.0 to 13.1.0
- f755b501 - improvement(M3): Less jumpy tabs
- 18796c73 - chore: Bump AGP plugin
- 1164506b - improvement(M3): Reduce the fields' border opacity v2
- 2be31ad1 - improvement(M3): Reduce the fields' border opacity
- cb814556 - improvement(M3): Expressify the Login screen + minor updates
- 7dfe609c - improvement: Add more logs to dev Cipher duplicates impl
- 7a3ec037 - improvement(M3): Expressify Duplicates screen
- 6bdfb996 - improvement(M3): Update Skeleton views to better match the loaded screens
- 728a1075 - improvement(M3): Minor Expressive updates
- 162fb594 - improvement(M3): Expressify Send view screen
- 96bb5703 - improvement(M3): Expressify Send list screen
- 5010de2d - improv

- caeda73e - deps: Bump Compose version from 1.9.0-alpha02 to 1.9.0-alpha03
- 36a3aa4a - chore: Bump app version to 1.13.0
- a43eb482 - Merge pull request #1005 from AChep/localization_action
- d3280bc1 - Merge pull request #1004 from AChep/tfa_2factorauth_action
- acc003f7 - Merge pull request #1003 from AChep/passkeys_action
- 7482b192 - Merge pull request #1001 from AChep/justdeleteme_action
- 3a4595b4 - Merge pull request #1002 from AChep/tld_public_suffix_list_action
- ae9986cd - [AUTO]Update localization library
- fd5c3938 - [AUTO]Update two-factor auth library
- 3bc54836 - Merge pull request #1000 from AChep/gpmpasskeysprivapps_action
- 333b22a0 - [AUTO]Update passkeys library
- 201ae24c - [AUTO]Update Public suffix list
- 6e2aedcd - [AUTO]Update justdeleteme library
- c3cfbafd - [AUTO]Update GPM Credential Privileged Apps JSON
- 8ebcecbe - Merge pull request #980 from AChep/dependabot/gradle/landscapist-2.5.0
- 295f058a - Merge pull request #993 from AChep/dependabot/gradle/androidxRoom-2.7.2
- 2c2d474b - Merge pull request #994 from AChep/dependabot/gradle/androidxWork-2.10.2
- ed5c5155 - Merge pull request #995 from AChep/dependabot/gradle/com.google.firebase-firebase-bom-33.16.0
- 9094deb6 - chore: Add FileKit license
- 6ee78f51 - chore: Fix compatibility with Kotlin 2.2.0
- 69c3756a - build(deps): Bump com.google.firebase:firebase-bom
- 23b791f5 - build(deps): Bump androidxWork from 2.10.1 to 2.10.2
- 8e2d3ca1 - build(deps): Bump androidxRoom from 2.7.1 to 2.7.2
- e92c0847 - deps: Change Kotlin datetime dependency to 0.7.0-0.6.x-compat
- a8f0cc76 - deps: Migrate from kotlinx.datetime to kotlin.time
- 31a0fe5e - Revert "Revert "deps: Bump Kotlin Datetime to 0.7.0""
- d0b5807c - Merge pull request #982 from AChep/dependabot/gradle/media.kamel-kamel-image-default-1.0.6
- 68865a11 - Merge pull request #978 from AChep/dependabot/gradle/ktor-3.2.0
- e8c7947b - Revert "deps: Bump Kotlin Datetime to 0.7.0"
- 96be47ec - deps: Bump Gradle to 8.14.2
- da0911b4 - deps: Bump Android Gradle Plugin to 8.11.0
- 58f28d64 - deps: Bump Kotlin Serialization to 1.9.0
- 25e06d67 - deps: Bump Kotlin Datetime to 0.7.0
- db9e27de - deps: Bump Kotlin to 2.2.0
- 67ff07a2 - build(deps): Bump org.jetbrains.compose from 1.8.1 to 1.8.2
- 47dc0141 - build(deps): Bump media.kamel:kamel-image-default from 1.0.5 to 1.0.6
- 56052994 - build(deps): Bump landscapist from 2.4.8 to 2.5.0
- f854d4b3 - build(deps): Bump ktor from 3.1.3 to 3.2.0
- 29c8a6d5 - feat: Conflict resolution
- bc813d86 - chore: Allow spotbugs - static analysis tool
- dfe8fbe2 - chore: Add opensource/mit to allowed licenses
- bb3d020f - build(deps): Bump androidPlugin from 8.10.0 to 8.10.1
- a50ed9c2 - build(deps): Bump androidxAppCompat from 1.7.0 to 1.7.1
- fc876769 - build(deps): Bump androidxAutofill from 1.3.0-rc01 to 1.3.0
- fb03fb2f - build(deps): Bump androidxLifecycle from 2.9.0 to 2.9.1
- 5444c609 - build(deps): Bump androidxSecurityCryptoKtx from 1.1.0-alpha07 to 1.1.0-beta01
- 26e216bb - build(deps): Bump crashlyticsPlugin from 3.0.3 to 3.0.4
- 42f02641 - build(deps): Bump ktlintPlugin from 12.2.0 to 12.3.0
- 24c714db - build(deps): Bump signalr from 9.0.5 to 9.0.6
- c0aad8fd - build(deps): Bump bouncycastle from 1.80 to 1.81
- 032b1393 - build(deps): Bump sqlcipherAndroid from 4.8.0 to 4.9.0
- 83dd1bbf - build(deps): Bump sqliteJdbcCrypt from 3.49.1.0 to 3.50.1.0
- a311a0a5 - build(deps): Bump yubiKit from 2.8.0 to 2.8.1
- a5c6ecef - Merge pull request #954 from AChep/dependabot/gradle/org.gradle.toolchains.foojay-resolver-convention-1.0.0
- bd88550e - Merge pull request #973 from AChep/dependabot/gradle/com.google.firebase-firebase-bom-33.15.0
- 39637bbd - build(deps): Bump com.google.firebase:firebase-bom
- 5b5350d9 - Merge pull request #950 from AChep/dependabot/gradle/arrow-2.1.2
- 035e5009 - Merge pull request #966 from RokeJulianLockhart/patch-1
- 7cae7540 - @RokeJulianLockhart has signed the CLA in AChep/keyguard-app#966
- e974e6aa - Update README.md
- 703aa4cf -

- 135572d1 - chore: Bump app version to 1.12.3
- e5105985 - improvement: Support new device verification #965

- d068a6e4 - chore: Bump app version to 1.12.2
- fe6b11fb - [AUTO]Update localization library
- d2a60961 - [AUTO]Update two-factor auth library
- 8a28445b - [AUTO]Update Public suffix list
- e86e2f0b - [AUTO]Update passkeys library
- 71a27c23 - [AUTO]Update justgetmydata library
- e951408b - [AUTO]Update justdeleteme library
- 6df010e9 - [AUTO]Update GPM Credential Privileged Apps JSON
- bde5b615 - fix: Send empty note as null instead of "" to hide in Bitwarden #946
- fc72def8 - fix: Add inset padding to the "Keyguard" empty screen in landscape
- 04585065 - fix: Migrate to latest accompanist
- 8d170ab6 - improvement: Merge Passkeys correctly
- 2a694166 - build: Bump dependencies
- eeff83a0 - improvement(Chromebook): Show copy toast messages
- b4e98453 - fix(autofill): only mark autofill structure as webview if visible
- 005f3fd3 - @Adolar0042 has signed the CLA in AChep/keyguard-app#952
- 5a8ad2a4 - build(deps): Bump sqldelight from 2.0.2 to 2.1.0
- fe2205da - @mixon606 has signed the CLA in AChep/keyguard-app#947
- 019ae93a - build(deps): Bump androidxLifecycle from 2.8.7 to 2.9.0

- 8754f17a - chore: Bump app version to 1.12.1
- 41f46060 - fix: Correctly validate androidapp:// URIs #931
- 9868823f - fix: Do not ask for auth re-prompt on all items when clicking on the visibility eye

- adb9dd99 - fix: Move Key code → Key string function to platform declaration
- 99353e70 - chore: Bump app version to 1.12.0
- 41f1ff36 - build(deps): Bump org.jetbrains.compose from 1.8.0-rc01 to 1.8.0
- 4839d042 - build(deps): Bump androidPlugin from 8.9.2 to 8.10.0
- b2ec3e87 - build(deps): Bump ktor from 3.1.2 to 3.1.3
- d6cd34e9 - feat: Basic desktop shortcuts
- 0f851456 - build(deps): Bump com.google.devtools.ksp
- 960ec66f - build(deps): Bump arrow from 2.1.0 to 2.1.1
- 31e1a861 - build(deps): Bump net.zetetic:sqlcipher-android from 4.7.2 to 4.8.0
- 5614853c - chore: Bump Compose to 1.8.0-rc01
- ec90f19a - build(deps): Bump androidxWork from 2.10.0 to 2.10.1
- 38092135 - build(deps): Bump com.google.firebase:firebase-bom
- bda91db4 - chore: Bump app version to 1.11.1
- 7e2d1614 - build: Revert datastore to 1.1.4
- 5439cee3 - build(deps): Bump androidxRoom from 2.7.0 to 2.7.1
- 32d7ef4c - build(deps): Bump androidx.datastore:datastore from 1.1.4 to 1.1.5
- cf042530 - build(deps): Bump androidx.core:core-splashscreen
- ee69f735 - chore: Make build script compatible with KSP v2 (v3)
- f9c6f23c - chore: Make build script compatible with KSP v2 (v2)
- c1342e78 - build(deps): Bump arrow from 2.0.1 to 2.1.0
- 96a80214 - build(deps): Bump androidPlugin from 8.9.1 to 8.9.2
- 060b8cbd - chore: Keyguard for Bitwarden → Keyguard, as per Google's complain
- 3a21a9a3 - build(deps): Bump kotlinCoroutines from 1.10.1 to 1.10.2
- 53099bf6 - build(deps): Bump com.codingfeline.buildkonfig from 0.17.0 to 0.17.1
- afc2e9f1 - chore: Make build script compatible with KSP v2
- 5f970221 - build(deps): Bump com.google.android.gms:play-services-base
- cba4c8c0 - build(deps): Bump com.google.devtools.ksp
- e0e0534e - build(deps): Bump org.gradle.toolchains.foojay-resolver-convention
- 8913f057 - chore: Bump SignalR to 9.0.4
- 8869fda8 - chore: Bump minor dependencies
- 1c6ed6ec - chore: Bump Arrow to 2.0.1
- cf95fe0c - improvement: Slightly more contrast color for symbols & numbers of passwords
- 1202d295 - feat: Suggest some popular Password/PIN configs in the Generator window
- 88808741 - build(deps): Bump androidPlugin from 8.9.0 to 8.9.1
- 52b227c2 - deps: Bump Compose to 1.8.0-beta02
- 7044cf8b - build(deps): Bump ktor from 3.1.1 to 3.1.2
- 5325be8e - build(deps): Bump androidx.baselineprofile from 1.3.3 to 1.3.4
- a2fe39c0 - build(deps): Bump nl.littlerobots.version-catalog-update
- 13b9bf05 - build(deps): Bump kotlinSerialization from 1.8.0 to 1.8.1
- 0f782004 - build(deps): Bump androidxCamera from 1.4.1 to 1.4.2
- f22c6cd3 - build(deps): Bump apple-actions/import-codesign-certs from 3 to 5
- 50a34260 - build(deps): Bump app.cash.licensee from 1.12.0 to 1.13.0
- 5f50be24 - build(deps): Bump metcalfc/changelog-generator from 4.5.0 to 4.6.2
- 4ea6e970 - fix: Generate a Locale config for Android app language selection #878
- 6d43f4c0 - fix: Auto-resolve state where >1 items have the same remote id

- 21e99bb7 - deps: Bump Kotlin to 2.1.20 and Compose to 1.8.0-beta01
- 06af373c - build(deps): Bump net.java.dev.jna:jna from 5.16.0 to 5.17.0
- 027b9b3a - build(deps): Bump dbusJava from 5.1.0 to 5.1.1
- f61b5a22 - build(deps): Bump metcalfc/changelog-generator from 4.3.1 to 4.5.0
- 2381c27c - chore: Bump app version to 1.11.0
- c8ebe583 - [AUTO]Update localization library
- 1d942ebf - [AUTO]Update two-factor auth library
- 55889ebf - [AUTO]Update Public suffix list
- 826933b8 - [AUTO]Update passkeys library
- e6a86e7e - [AUTO]Update justdeleteme library
- eb9a2ddc - build(deps): Bump androidx.credentials:credentials
- aa82edec - fix(Watchtower): Do not notify about warnings in ciphers in the Trash
- 64d70566 - fix(Watchtower): Process changes in Broad URIs detection
- 27f92a91 - build: Bump Compose to 1.8.0-alpha04
- ab6f5222 - improvement(Android): Enable keyboard Incognito mode on concealed fields
- 3cb96919 - improvement(Desktop): Add support for KeyValueStore.getAll()
- ae919b54 - fix: Localized Abc sorting #859
- cac75bda - build(deps): Bump androidPlugin from 8.8.2 to 8.9.0
- d943a219 - fix: Minor source localization fixes
- 2e97cf53 - build(deps): Bump androidx.activity:activity-compose
- 58baa158 - build(deps): Bump com.google.devtools.ksp
- cb7e5523 - build(deps): Bump androidPlugin from 8.8.1 to 8.8.2
- f9f5e43f - build(deps): Bump com.google.firebase:firebase-bom
- 780f8a2f - improvement: Clear Watchtower notification when you open the Watchtower screen
- 7bfcf814 - improvement: Add MacOS notification platform impl
- 8546a356 - chore(licensee): Allow EPL-2.0
- 2d3a8ab6 - feat: Send Watchtower alerts as Notifications
- 5eea4034 - build(deps): Bump androidx.datastore:datastore from 1.1.2 to 1.1.3
- 2226c35b - build(deps): Bump org.jlleitschuh.gradle.ktlint from 12.1.2 to 12.2.0
- 13839220 - build(deps): Bump net.harawata:appdirs from 1.3.0 to 1.4.0
- 69303d48 - build(deps): Bump androidx.core:core-splashscreen
- 15356504 - build(deps): Bump org.slf4j:slf4j-api from 2.0.16 to 2.0.17

Broad URI match detection suggestions
The app checks for URIs that refer to the same domain. If you have one item with a URI that has Host match detection and a second one with Domain match detection:

service1.example.com Host match detection
service2.example.com Domain match detection

then it's highly likely that the second URI should also be narrowed down to a Host match detection.
Full changelog
- 7be3b34c - improvement(Watchtower): Always check for the latest breaches on start, instead of weekly
- d6b179e0 - [AUTO]Update localization library
- 0ad2edc9 - [AUTO]Update Public suffix list
- 47205469 - [AUTO]Update two-factor auth library
- eb0b0acf - [AUTO]Update justdeleteme library
- f3b2f11d - build(deps): Bump kamel from 1.0.1 to 1.0.3
- 54bacdcf - build(deps): Bump desugar_jdk_libs from 2.1.4 to 2.1.5
- 2c3da44a - chore: Bump app version to 1.10.1
- f6490143 - improvement: Hidden WIP option to backup app configuration #790
- 7a73cef8 - build(deps): Bump ktor from 3.1.0 to 3.1.1
- e77bd25f - build(deps): Bump com.codingfeline.buildkonfig from 0.15.2 to 0.17.0
- c8391c4f - build(deps): Bump com.google.devtools.ksp
- c4904b74 - build(deps): Bump io.github.willena:sqlite-jdbc
- d3cd4ff7 - build(deps): Bump AGP plugin from 8.8.0 to 8.8.1
- f4ea6d3e - fix: Provide the lock reason model as the new common code wants
- aeb165fe - feat(Watchtower): Broad URI match detection suggestions
- 70517d02 - build(deps): Bump io.github.willena:sqlite-jdbc
- fdd5e4e4 - improvement: Auto trigger biometrics on unlock if lock was triggered >5m ago
- 173285cc - build(deps): Bump org.jetbrains.kotlinx:kotlinx-datetime
- fc2b3aca - build(deps): Bump landscapist from 2.4.6 to 2.4.7
- 6dfad1db - build(deps): Bump devops-infra/action-pull-request from 0.5.5 to 0.6.0
- b5d2d63e - build(deps): Bump devops-infra/action-commit-push from 0.9.2 to 0.10.0