Bitwarden CLI 2026.10.1 ڈاؤن لوڈ

What's Changed

💙 Community Highlight
- [PM-43146] feat(desktop): add persistent biometric unlock on Linux via Secret Service by @prostopasta in #23033
- [PM-44168] Render the popup loading spinner only while loading by @Lolig4 in #23528

Feature Development
- desktop-autofill: Enable autofill IPC when the feature flag turns on after startup by @iinuwa in #23652
- [PM-44267] Gate basic auth requests by a user opt-in setting by @jprusik in #23583
- [PM-44246] introduce tab-lifecycle module by @audreyality in #23625
- [CL-1364] Make header suffix slot visible when breadcrumbs are h1 by @vleague2 in #23630
- [PM-40419] Plan Change Preview-Driven Cart by @sbrown-livefront in #23499
- [PM-43117] feat: add Default/Custom selection for fill assist rule source by @bensbits91 in #23558
- [PM-44108] perf: Add performance measurements to unlock and sync by @quexten in #23476
- [PM-44463] Shared folders card grid subtext by @jengstrom-bw in #23682
- [PM-42846] Re-design tour by @BTreston in #23664
- [CL-1257] feat: Add column customization to bit-table-v2 by @BryanCunningham in #23531
- [PM-44559] Add PAM core icons (access connector, managed credential, target system) by @reneelund08 in #23689
- [PM-43953] Extension introduce new experience by @jengstrom-bw in #23467
- [PM-40231] feat: Source the create-organization cart from the invoice preview by @cyprain-okeke in #23415
- [CL-1365] feat: Add hover reveal directives by @BryanCunningham in #23650
- desktop-autofill: Expose OS passkey plugin status APIs by @iinuwa in #23656
- desktop-autofill: Implement passkey provider OS settings APIs by @iinuwa in #23659
- desktop-autofill: Show passkey provider status in app settings by @iinuwa in #23662
- [PM-40413] feat: Source the Premium and Families purchase cart from the invoice preview by @cyprain-okeke in #23524
- desktop-autofill: Match desktop passkey modal style with browser extension by @iinuwa in #23717
- [PM-44025] feat: Anchor popovers to elements inside library components by @BryanCunningham in #23649
- [PM-43958] Web/desktop introduce new experience by @jengstrom-bw in #23679
- Autotype: Separate Existing Autotype Default Policy to MVP Only by @neuronull in #23609
- [PM-44461] Shared folder table updates by @jengstrom-bw in #23658
- [PM-44316] Harden basic auth responses by @jprusik in #23585
- desktop-autofill: Propagate native webauthn errors by @iinuwa in #23721
- [CL-1246] feat: Add keyboard shortcut hints to search component by @BryanCunningham in #22830
- desktop-autofill: credential not found UI by @iinuwa in #23819
- desktop-autofill: Refine passkey provider system settings design by @iinuwa in #23824
- [PM-42581] Add Invite Staged Users Members Actions by @sven-bitwarden in #22822
- [PM-44965] Update GA date by @jengstrom-bw in #23844
- [PM-44026] feat: Add the tour callout to the side nav by @gbubemismith in #23745
- feat(vault): route PAM gated ciphers through the SDK (partial-cipher pivot) by @Hinton in #22171
- [PM-41469] Create new import controls component by @harr1424 in #23503
- [CL-1257][CL-1368] feat: Let users customize vault items table columns by @BryanCunningham in #23532
- desktop-autofill: Clarify why UV prompt is being shown by @iinuwa in #23820
- feat(tests): add basic key-management e2e test suite by @quexten in #23477
- [CL-1371] filter row spotlight by @BryanCunningham in #23870
- [PM-44663] Redirect legacy folder links to /folders/:folderId by @nick-livefront in #23776
- [PM-42405] feat: Push feature flags from ConfigService.renewConfig by @coroiu in #23867
- [PM-44693] Emit http auth event on credential release by @jprusik in #23764
- [PM-32124] Show consistent bulk reinvite toast for self-hosted orgs by @r-tome in #22517
- macos: Enable macOS autofill extension in Beta channel by @iinuwa in #22624
- desktop-autofill: Prevent creating passkeys for Bitwarden vault in desktop app by @iinuwa in #23892
- [CL-1369] feat: Wrap active filter chips in a chip group by @BryanCunningham in #23804
- [PM-44918] Remove pagination from shared folders table by @jengstrom-bw in #23830
- [PAM-344] Access rules: UI follow-ups from UAT by @Hinton in #23836
- macos: Enable macOS autofill extension in Stable channel by @iinuwa in #23809
- [PM-43959] feat: Add the nav walkthrough steps by @gbubemismith in #23774
- [PM-42582] Add Staged Member Management Actions by @sven-bitwarden in #22828
- [PM-44451] Add 1Password direct import through the SDK on desktop and in the extension by @detunized in #23627
- [PM-44027] feat: Add the filters step to the VFO1 walkthrough by @gbubemismith in #23851
- (B3) [PAM-337] Add collection access-rule flag and dialog callout slot by @Hinton in #23909

🐛 Bug fixes
- [PM-44198] Load emergency access view ciphers via SDK by @quexten in #23544
- [PM-44493] fix(biometrics: Bump desktop_native SDK to support XAES user keys by @quexten in #23645
- fix(biometric-ipc): Address the CLI as its own IPC endpoint by @quexten in #23275
- fix(export): fix v2 support for account restricted exports by @quexten in #23648
- Bug/pm 13954/passwordboss json import by @adudek-bw in #22845
- Pick up local SDK rebuilds in desktop watch mode by @coroiu in #23050
- [CL-1325] fix: Keep the vfo1 filter dialog open across popup close by @BryanCunningham in #23348
- [PM-44509] fix: use sentence-case "My folder" label on import page by @gbubemismith in #23685
- [PM-44509] fix: use "My folders" label on import page by @gbubemismith in #23688
- [PM-43843] custom user with manage user permission is logged out when inviting member by @JaredScar in #23201
- PM-39163 Automatic Login not working by @dan-livefront in #23392
- Papercut - Fix unused component warning by @jprusik in #23692
- [PM-44315] Fix batch bar count including items hidden by a filter by @nick-livefront in #23579
- [CL-1363] fix: Count each selected option in the filter trigger berry by @BryanCunningham in #23731
- [CL-1366] fix: Re-measure the table's virtual viewport when it resizes by @BryanCunningham in #23734
- Auth/PM-44119 - SSO + MP Decryption - Deep linking fix by @JaredSnider-Bitwarden in #23491
- Export V2 ciphers as data blob only by @quexten in #23750
- [PM-44516] Temporarily hide item history on item Sends by @mcamirault in #23730
- [PM-44701] Persist last manual lock for shared unlock by @quexten in #23747
- [PM-42643 ] Tools-owned URL validation by @harr1424 in #23160
- [PM-44781] Update new experience dialog to large size by @jengstrom-bw in #23812
- [PM-36815] fix: credit card autofill in tightly sized iframes by @bensbits91 in #23605
- [PM-44806] Don't display the new experience dialog when a tour is already running by @jengstrom-bw in #23815
- [PM-42345] Fix Chromium import when elevated as a different Windows user by @detunized in #22599
- [PM-44545] Add vault options menu to the vault side nav by @shane-melton in #23709
- [PM-32144] Improve Access Intelligence review new applications dialog performance by @Banrion in #23694
- Auth/PM-38259 - Desktop - Fix account switch loop and add AccountSwitcherService by @JaredSnider-Bitwarden in #23699
- [CL-1337][CL-1367] minor sidenav updates by @BryanCunningham in #23765
- [CL-1336] fix: Keep vault header collapsed when returning from an item by @BryanCunningham in #23805
- Write Firefox manifest when ~/.mozilla is absent by @quexten in #23876
- Create NativeMessagingHosts dir for all browsers by @quexten in #23877
- [PM-44494] fix(biometrics): fix biometric id update enrollment despite failed biometrics by @quexten in #23646
- [PM-44600] feat: Count filter options against active filters by @jaasen-livefront in #23735
- PM-24268 resolve close by @bmbitwarden in #23593
- PM-42338 folder assigned by @bmbitwarden in #23629
- [CL-1356][CL-1340][CL-1341] table toolbar responsiveness by @BryanCunningham in #23866
- [SM-2091] Fixing issue with Event Logging storing the incorrect OrguserId/actin… by @cd-bitwarden in #23424
- [PM-44603] Restore last selected vault on Vault tab click by @nick-livefront in #23732
- [PM-44200] fix: Check clone passkey warning on decrypted cipher by @quexten in #23547
- [PM-44522] fix: recognize and fill password inputs when type is text by @bensbits91 in #23722
- [PM-43104] Update tab URL handling to frame URLs by @jprusik in #23813
- [PM-44338] Move insecure page autofill check to a consolidated background check by @jprusik in #23739
- [PM-44496] Fill TOTP instead of username in ambiguous 2FA fields by @bw-dmitriy in #23670
- [PM-44640] fix: Hide Families sponsorship options in Gov mode (#23826) by @connerbw in #23997
- rc pick: fix(biometrics): race condition unchecks biometric unlock when turned on. by @mzieniukbw in #24019
- [CL-1366] Stop importing ngx-toastr's full stylesheet to workaround Chromium bug (#24006) by @vleague2 in #24027

⚙️ Maintenance
- desktop-autofill: Register COM plugin for stable app. by @iinuwa in #23620
- [PM-26913] Remove pm-23995-no-logout-on-kdf-change feature flag by @jlf0dev in #23369
- desktop-autofill: Fix beta and dark logo variants by @iinuwa in #23622
- Assign passkey_authenticator NAPI module to skunkworks by @iinuwa in #23651
- [PM-43887] Migrate MembersComponent and related to standalone by @JaredScar in #23534
- [PM-38906] bulk decrypt collections with failures unstacked by @JaredScar in #22886
- [PM-39246] chore: Remove pm-32380-btn-text-add-create feature flag by @gbubemismith in #23632
- Auth/PM-44095 - Login Strategies TS Strict Refactor by @JaredSnider-Bitwarden in #23536
- [PM-40148] refactor: Read policies$ from accepted-or-confirmed state by @eliykat in #23354
- Remove getKeyForCipherKeyDecryption by @quexten in #23591
- [PM-40663] Enforce 7-day cargo publish age for Renovate by @addisonbeck in #23668
- Remove enroll-aead-on-key-rotation feature flagged code by @mzieniukbw in #23671
- Remove no longer needed models, fields by @mzieniukbw in #23673
- [PM-40663] Exempt Bitwarden SDK from npm release-age filter by @addisonbeck in #23674