False
        

tag:github.com,2008:https://github.com/prometheus/prometheus/releases

Release notes from prometheus

2026-05-19T09:25:22Z tag:github.com,2008:Repository/6838921/v3.12.0-rc.0 2026-05-19T12:57:10Z

3.12.0-rc.0 / 2026-05-19

<p>This release contains security fixes, new features (especially around PromQL and Service Discovery), performance improvements in TSDB, Start Timestamp improvements and numerous bug fixes.</p> <p>Thanks to all contributors!</p> <h2>Key Highlights</h2> <ul> <li><strong>Security</strong>: Two security vulnerabilities have been addressed: a denial of service in remote-write (snappy decompression limit) and a secret exposure leak in STACKIT service discovery.</li> <li><strong>PromQL & Metadata</strong>: Several features and bug fixes related to the experimental "start timestamps" support, including updates to <code>rate()</code>, <code>irate()</code>, <code>increase()</code>, and <code>resets()</code>. New experimental functions <code>start()</code>, <code>end()</code>, <code>range()</code>, and <code>step()</code> are introduced.</li> <li><strong>TSDB Performance</strong>: Optimizations in head chunk lookup (constant time) and mmap operations to reduce CPU usage.</li> <li><strong>Service Discovery</strong>: Added support for DigitalOcean Managed Databases and Outscale VM, along with improvements to AWS SD (IPv6 support for EC2, external ID support).</li> <li><strong>UI</strong>: Added a web interface for deleting time series and cleaning tombstones.</li> </ul> <h2>Changelog</h2> <ul> <li>[SECURITY] Remote: Reject snappy-compressed received requests via Remote Write whose declared decoded length exceeds the 32MB. Thanks to <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/hibrian827/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/hibrian827">@hibrian827</a> for reporting it. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4405363748" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18642" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18642/hovercard" href="https://github.com/prometheus/prometheus/pull/18642">#18642</a></li> <li>[SECURITY] STACKIT SD: Fix secrets being exposed in plaintext via <code>/-/config</code> endpoint. Thanks to <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/August829/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/August829">@August829</a> and <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Phaxma/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Phaxma">@Phaxma</a> for reporting. GHSA-39j6-789q-qxvh <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4406674384" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18649" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18649/hovercard" href="https://github.com/prometheus/prometheus/pull/18649">#18649</a></li> <li>[CHANGE] TSDB/Agent: Adds Start Timestamp field to all WAL Histogram samples in memory; used <code>st-storage</code> flag is enabled. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4017476333" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18221" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18221/hovercard" href="https://github.com/prometheus/prometheus/pull/18221">#18221</a></li> <li>[FEATURE] API: Add <code>/api/v1/status/self_metrics</code> endpoint returning the current state of the Prometheus server's own metrics about itself as JSON. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4177992817" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18411" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18411/hovercard" href="https://github.com/prometheus/prometheus/pull/18411">#18411</a></li> <li>[FEATURE] Discovery: Add DigitalOcean Managed Databases service discovery <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4065701989" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18287" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18287/hovercard" href="https://github.com/prometheus/prometheus/pull/18287">#18287</a></li> <li>[FEATURE] Prometheus: Add support for the aix/ppc64 compilation target <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4098406587" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18321" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18321/hovercard" href="https://github.com/prometheus/prometheus/pull/18321">#18321</a></li> <li>[FEATURE] Discovery: Add Outscale VM service discovery (<code>outscale_sd_configs</code>) for discovering scrape targets from the Outscale Cloud API. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3971498995" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18139" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18139/hovercard" href="https://github.com/prometheus/prometheus/pull/18139">#18139</a></li> <li>[FEATURE] PromQL: Emit a warning when <code>sort</code>, <code>sort_by_label</code> or <code>sort_by_label_desc</code> is used within range (matrix) queries, as these functions do not have effect in that context. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4232551312" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18498" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18498/hovercard" href="https://github.com/prometheus/prometheus/pull/18498">#18498</a></li> <li>[FEATURE] PromQL: Add <code>start()</code>, <code>end()</code>, <code>range()</code>, and <code>step()</code> experimental functions <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3822801578" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/17877" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/17877/hovercard" href="https://github.com/prometheus/prometheus/pull/17877">#17877</a></li> <li>[FEATURE] PromQL: Update <code>resets()</code> function to consider start timestamp resets. Hidden behind <code>use-start-timestamps</code> feature flag. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4391706706" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18627" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18627/hovercard" href="https://github.com/prometheus/prometheus/pull/18627">#18627</a></li> <li>[FEATURE] Prometheus: Promote auto-reload-config as stable <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4377002607" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18620" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18620/hovercard" href="https://github.com/prometheus/prometheus/pull/18620">#18620</a></li> <li>[FEATURE] TSDB/Agent: Add <code>CheckpointFromInMemorySeries</code> option to <code>agent.DB</code> that enables checkpoint based on in-memory series. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3861855052" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/17948" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/17948/hovercard" href="https://github.com/prometheus/prometheus/pull/17948">#17948</a></li> <li>[FEATURE] UI: Add a web interface for deleting time series and cleaning tombstones, accessible from the Status menu. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4161939508" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18390" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18390/hovercard" href="https://github.com/prometheus/prometheus/pull/18390">#18390</a></li> <li>[FEATURE] PromQL: Use start timestamps for <code>rate()</code>, <code>irate()</code>, and <code>increase()</code> calculations, behind a feature flag <code>use-start-timestamps</code>. Doesn't work together with extended range selectors <code>anchored</code> and <code>smoothed</code>. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4120719014" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18344" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18344/hovercard" href="https://github.com/prometheus/prometheus/pull/18344">#18344</a></li> <li>[FEATURE] Scrape: Added a feature flag <code>st-synthesis</code> which synthesizes unknown STs for scraped cumulative metrics. Useful when Remote Writing 2.0 with delta or Otel-based backends. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4060126592" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18279" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18279/hovercard" href="https://github.com/prometheus/prometheus/pull/18279">#18279</a></li> <li>[FEATURE] promqltest: support <code>@st</code> annotation in <code>load</code> blocks to specify per-sample start timestamps. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4133663100" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18360" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18360/hovercard" href="https://github.com/prometheus/prometheus/pull/18360">#18360</a></li> <li>[ENHANCEMENT] API: reject concurrent fgprof profiles. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4407578458" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18651" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18651/hovercard" href="https://github.com/prometheus/prometheus/pull/18651">#18651</a></li> <li>[ENHANCEMENT] AWS SD: Add optional <code>external_id</code> field to ECS/MSK/RDS/Elasticache. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4327848704" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18579" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18579/hovercard" href="https://github.com/prometheus/prometheus/pull/18579">#18579</a></li> <li>[ENHANCEMENT] AWS SD: Add optional <code>external_id</code> field. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3401972988" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/17171" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/17171/hovercard" href="https://github.com/prometheus/prometheus/pull/17171">#17171</a></li> <li>[ENHANCEMENT] Discovery: Propagate SD target updates faster by introducing dynamic backoff interval instead of static 5s interval for throttling. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3986145685" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18187" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18187/hovercard" href="https://github.com/prometheus/prometheus/pull/18187">#18187</a></li> <li>[ENHANCEMENT] Promtool: Add <code>--header</code> flag to <code>query instant</code> command, matching existing <code>query range</code> behaviour. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4185398990" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18418" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18418/hovercard" href="https://github.com/prometheus/prometheus/pull/18418">#18418</a></li> <li>[ENHANCEMENT]: AWS SD: Allows EC2 service discovery to discover IPv6 addresses to communicate with target endpoints. The private IPv4 address remains the default when both IPv4 and IPv6 addresses are present. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2885126281" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/16088" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/16088/hovercard" href="https://github.com/prometheus/prometheus/pull/16088">#16088</a></li> <li>[PERF] TSDB: Make head chunk lookup in range queries constant time instead of quadratic time <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4077926596" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18302" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18302/hovercard" href="https://github.com/prometheus/prometheus/pull/18302">#18302</a></li> <li>[PERF] TSDB: Skip entire stripes in mmapHeadChunks when no series need mmapping, reducing CPU utilization significantly at production-relevant scales. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4287947375" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18541" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18541/hovercard" href="https://github.com/prometheus/prometheus/pull/18541">#18541</a></li> <li>[PERF] TSDB: Skip clean series during periodic head chunk mmap using cached head chunk count <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4056485887" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18272" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18272/hovercard" href="https://github.com/prometheus/prometheus/pull/18272">#18272</a></li> <li>[PERF] PromQL: Address FloatHistogram.KahanAdd performance regression on Go 1.26. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4314128299" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18568" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18568/hovercard" href="https://github.com/prometheus/prometheus/pull/18568">#18568</a></li> <li>[BUGFIX] PromQL: Fix <code>info()</code> function incorrectly handling negated <code>__name__</code> matchers <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3853532827" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/17932" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/17932/hovercard" href="https://github.com/prometheus/prometheus/pull/17932">#17932</a></li> <li>[BUGFIX] API: Return duration expressions in <code>/parse_ast</code>. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4390744329" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18624" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18624/hovercard" href="https://github.com/prometheus/prometheus/pull/18624">#18624</a></li> <li>[BUGFIX] API: correctly document formats accepted for duration query request parameters (step, timeout and lookback delta) in OpenAPI spec <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4080382864" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18305" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18305/hovercard" href="https://github.com/prometheus/prometheus/pull/18305">#18305</a></li> <li>[BUGFIX] Scrape: AppenderV2 now tracks staleness even when OOO/duplicate series errors happen similar to AppenderV1 <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4311688132" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18567" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18567/hovercard" href="https://github.com/prometheus/prometheus/pull/18567">#18567</a></li> <li>[BUGFIX] Config: Validate remote_write queue_config fields at load time to prevent runtime panic and silent misconfiguration. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4006977716" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18209" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18209/hovercard" href="https://github.com/prometheus/prometheus/pull/18209">#18209</a></li> <li>[BUGFIX] Discovery/Consul: Add <code>health_filter</code> for Health API filtering, fixing breakage when using Catalog-only fields like <code>ServiceTags</code> in <code>filter</code>. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4219159026" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18479" data-hovercard-type="issue" data-hovercard-url="/prometheus/prometheus/issues/18479/hovercard" href="https://github.com/prometheus/prometheus/issues/18479">#18479</a> <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4232791218" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18499" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18499/hovercard" href="https://github.com/prometheus/prometheus/pull/18499">#18499</a></li> <li>[BUGFIX] OTLP: limit decompressed body size for gzip-encoded OTLP write requests. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4177214850" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18408" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18408/hovercard" href="https://github.com/prometheus/prometheus/pull/18408">#18408</a></li> <li>[BUGFIX] PromQL: Fix <code>smoothed</code> rate/increase returning zero instead of no result when all data falls strictly after the query range. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4269636765" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18523" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18523/hovercard" href="https://github.com/prometheus/prometheus/pull/18523">#18523</a></li> <li>[BUGFIX] PromQL: Fix metric name not being dropped when last_over_time or first_over_time is applied to subqueries containing name-dropping functions like abs(). <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4177656958" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18409" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18409/hovercard" href="https://github.com/prometheus/prometheus/pull/18409">#18409</a></li> <li>[BUGFIX] PromQL: Fix missing warning when mixing exponential and custom-bucket histograms in stats queries. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4419692844" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18660" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18660/hovercard" href="https://github.com/prometheus/prometheus/pull/18660">#18660</a></li> <li>[BUGFIX] PromQL: Fix parsing of <code>range()</code> keyword in duration expressions such as <code>foo[5m+range()]</code>. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4390696866" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18623" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18623/hovercard" href="https://github.com/prometheus/prometheus/pull/18623">#18623</a></li> <li>[BUGFIX] PromQL: Fix smoothed vector selector returning no results in binary operations when the <code>@</code> modifier is used. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4275465679" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18531" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18531/hovercard" href="https://github.com/prometheus/prometheus/pull/18531">#18531</a></li> <li>[BUGFIX] PromQL: Reject NaN, infinite, and out-of-range duration expressions instead of silently producing an out-of-range time.Duration. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4400344376" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18639" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18639/hovercard" href="https://github.com/prometheus/prometheus/pull/18639">#18639</a></li> <li>[BUGFIX] Scrape: Fix panic when scraping malformed native histograms. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4180064606" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18414" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18414/hovercard" href="https://github.com/prometheus/prometheus/pull/18414">#18414</a></li> <li>[BUGFIX] Scrape: fix panic when scraping a target exposing a summary with no quantiles via the protobuf format. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4151057947" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18382" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18382/hovercard" href="https://github.com/prometheus/prometheus/pull/18382">#18382</a></li> <li>[BUGFIX] Scrape: fix scrape failure log file occasionally not applied after a configuration reload. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4187792345" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18421" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18421/hovercard" href="https://github.com/prometheus/prometheus/pull/18421">#18421</a></li> <li>[BUGFIX] TSDB: Allow retention percentage with new data path. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4391717381" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18628" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18628/hovercard" href="https://github.com/prometheus/prometheus/pull/18628">#18628</a></li> <li>[BUGFIX] TSDB: Preserve decimal precision in percentage-based retention <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4143038787" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18374" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18374/hovercard" href="https://github.com/prometheus/prometheus/pull/18374">#18374</a></li> <li>[BUGFIX] TSDB: fix prometheus_tsdb_head_chunks going negative after WAL replay <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4170136223" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18401" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18401/hovercard" href="https://github.com/prometheus/prometheus/pull/18401">#18401</a></li> <li>[BUGFIX] TSDB: panic with native histograms during query of overlapping chunks. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4445269748" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18692" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18692/hovercard" href="https://github.com/prometheus/prometheus/pull/18692">#18692</a></li> <li>[BUGFIX] Tracing: fix startup failure for insecure OTLP HTTP tracing <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4216989892" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18469" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18469/hovercard" href="https://github.com/prometheus/prometheus/pull/18469">#18469</a></li> <li>[BUGFIX] UI: Escape label values offered by PromQL autocomplete. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4418399596" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18658" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18658/hovercard" href="https://github.com/prometheus/prometheus/pull/18658">#18658</a></li> <li>[BUGFIX] UI: Improve Y-axis tick label precision for graph values over small ranges. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4432987344" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18682" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18682/hovercard" href="https://github.com/prometheus/prometheus/pull/18682">#18682</a></li> <li>[BUGFIX] <code>prometheus_sd_refresh*</code> and <code>prometheus_sd_discovered_targets</code> metrics for specific scrape jobs are deleted when the scrape job is removed. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3663897507" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/17614" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/17614/hovercard" href="https://github.com/prometheus/prometheus/pull/17614">#17614</a></li> <li>[BUGFIX] Remote: fixed validation for received RW2 requests when parsing metadata unit symbols. This fixes a case when request would cause (recovered) handler panic. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4405108711" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18641" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18641/hovercard" href="https://github.com/prometheus/prometheus/pull/18641">#18641</a></li> <li>[BUGFIX] TSDB/Agent: fix race in agent appender where concurrent appends for the same label set could produce duplicate in-memory series and duplicate WAL records. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4071727702" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18292" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18292/hovercard" href="https://github.com/prometheus/prometheus/pull/18292">#18292</a></li> <li>[BUGFIX] Config: Update <code>--enable-feature</code> flag description and sort feature names. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4226780248" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18487" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18487/hovercard" href="https://github.com/prometheus/prometheus/pull/18487">#18487</a></li> </ul> prombot tag:github.com,2008:Repository/6838921/v3.11.3 2026-04-27T15:56:23Z

3.11.3 / 2026-04-27

<p>This release fixes mutiple security issues.</p> <p>We would like to thank the following people for the responsible disclosures:</p> <ul> <li> <p>Shadowbyte (4c1dr3aper) - Charlie Lewis for the Remote-Read snappy decode vulnerability.</p> </li> <li> <p>Brett Gervasoni for the AzureAD OAuth <code>client_secret</code> vulnerability.</p> </li> <li> <p><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/iiihaiii/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/iiihaiii">@iiihaiii</a> and <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ngocnn97/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ngocnn97">@ngocnn97</a> for the Old UI XSS vulnerability.</p> </li> <li> <p>[SECURITY] AzureAD remote write: Fix OAuth <code>client_secret</code> being exposed in plaintext via <code>/-/config</code> endpoint. <a title="GHSA-wg65-39gg-5wfj" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-wg65-39gg-5wfj/hovercard" href="https://github.com/advisories/GHSA-wg65-39gg-5wfj">GHSA-wg65-39gg-5wfj</a> / <a title="CVE-2026-42151" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-wg65-39gg-5wfj/hovercard" href="https://github.com/advisories/GHSA-wg65-39gg-5wfj">CVE-2026-42151</a> <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4335296907" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18590" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18590/hovercard" href="https://github.com/prometheus/prometheus/pull/18590">#18590</a></p> </li> <li> <p>[SECURITY] Remote-read: Reject snappy-compressed requests whose declared decoded length exceeds the decode limit. <a title="GHSA-8rm2-7qqf-34qm" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-8rm2-7qqf-34qm/hovercard" href="https://github.com/advisories/GHSA-8rm2-7qqf-34qm">GHSA-8rm2-7qqf-34qm</a> / <a title="CVE-2026-42154" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-8rm2-7qqf-34qm/hovercard" href="https://github.com/advisories/GHSA-8rm2-7qqf-34qm">CVE-2026-42154</a> <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4334898612" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18584" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18584/hovercard" href="https://github.com/prometheus/prometheus/pull/18584">#18584</a></p> </li> <li> <p>[SECURITY] UI: Fix stored XSS via unescaped <code>le</code> label values in old UI heatmap chart tick labels. <a title="GHSA-fw8g-cg8f-9j28" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-fw8g-cg8f-9j28/hovercard" href="https://github.com/advisories/GHSA-fw8g-cg8f-9j28">GHSA-fw8g-cg8f-9j28</a> <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4335011221" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18588" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18588/hovercard" href="https://github.com/prometheus/prometheus/pull/18588">#18588</a></p> </li> </ul> prombot tag:github.com,2008:Repository/6838921/v3.5.3 2026-04-27T14:56:17Z

3.5.3 / 2026-04-27

<p>This release fixes mutiple security issues.</p> <p>We would like to thank the following people for the responsible disclosures:</p> <ul> <li>Shadowbyte (4c1dr3aper) - Charlie Lewis for the Remote-Read snappy decode vulnerability.</li> <li>Brett Gervasoni for the AzureAD OAuth <code>client_secret</code> vulnerability.</li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/iiihaiii/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/iiihaiii">@iiihaiii</a> and <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ngocnn97/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ngocnn97">@ngocnn97</a> for the Old UI XSS vulnerability.</li> </ul> <hr> <ul> <li>[SECURITY] AzureAD remote write: Fix OAuth <code>client_secret</code> being exposed in plaintext via <code>/-/config</code> endpoint. <a title="GHSA-wg65-39gg-5wfj" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-wg65-39gg-5wfj/hovercard" href="https://github.com/advisories/GHSA-wg65-39gg-5wfj">GHSA-wg65-39gg-5wfj</a> / <a title="CVE-2026-42151" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-wg65-39gg-5wfj/hovercard" href="https://github.com/advisories/GHSA-wg65-39gg-5wfj">CVE-2026-42151</a> <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4334958558" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18587" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18587/hovercard" href="https://github.com/prometheus/prometheus/pull/18587">#18587</a></li> <li>[SECURITY] Remote-Write: Reject snappy-compressed requests whose declared decoded length exceeds the decode limit. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4335539006" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18591" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18591/hovercard" href="https://github.com/prometheus/prometheus/pull/18591">#18591</a></li> <li>[SECURITY] Remote-read: Reject snappy-compressed requests whose declared decoded length exceeds the decode limit. <a title="GHSA-8rm2-7qqf-34qm" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-8rm2-7qqf-34qm/hovercard" href="https://github.com/advisories/GHSA-8rm2-7qqf-34qm">GHSA-8rm2-7qqf-34qm</a> / <a title="CVE-2026-42154" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-8rm2-7qqf-34qm/hovercard" href="https://github.com/advisories/GHSA-8rm2-7qqf-34qm">CVE-2026-42154</a> <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4334919801" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18585" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18585/hovercard" href="https://github.com/prometheus/prometheus/pull/18585">#18585</a></li> <li>[SECURITY] UI: Fix stored XSS via unescaped <code>le</code> label values in old UI heatmap chart tick labels. <a title="GHSA-fw8g-cg8f-9j28" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-fw8g-cg8f-9j28/hovercard" href="https://github.com/advisories/GHSA-fw8g-cg8f-9j28">GHSA-fw8g-cg8f-9j28</a> <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4335019064" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18589" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18589/hovercard" href="https://github.com/prometheus/prometheus/pull/18589">#18589</a></li> </ul> prombot tag:github.com,2008:Repository/6838921/v0.311.3 2026-04-27T14:43:25Z

v0.311.3

<p>v0.311.3</p> roidelapluie tag:github.com,2008:Repository/6838921/v0.305.3 2026-04-27T14:12:50Z

v0.305.3

<p>v0.305.3</p> roidelapluie tag:github.com,2008:Repository/6838921/v3.11.2 2026-04-13T15:17:53Z

3.11.2 / 2026-04-13

<p>This release has a fix for a Stored XSS vulnerability that can be triggered via crafted metric names and label values in Prometheus web UI tooltips and metrics explorer. Thanks to Duc Anh Nguyen from TinyxLab for reporting it.</p> <ul> <li>[SECURITY] UI: Fix stored XSS via unescaped metric names and labels. <a title="CVE-2026-40179" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-vffh-x6r8-xx99/hovercard" href="https://github.com/advisories/GHSA-vffh-x6r8-xx99">CVE-2026-40179</a>. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4238086799" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18506" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18506/hovercard" href="https://github.com/prometheus/prometheus/pull/18506">#18506</a></li> <li>[ENHANCEMENT] Consul SD: Introduce <code>health_filter</code> field for Health API filtering. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4232791218" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18499" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18499/hovercard" href="https://github.com/prometheus/prometheus/pull/18499">#18499</a></li> <li>[BUGFIX] Consul SD: Fix filter parameter being incorrectly applied to the Health API. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4232791218" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18499" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18499/hovercard" href="https://github.com/prometheus/prometheus/pull/18499">#18499</a></li> </ul> prombot tag:github.com,2008:Repository/6838921/v3.5.2 2026-04-13T15:17:27Z

3.5.2 / 2026-04-13

<p>This release has a fix for a Stored XSS vulnerability that can be triggered via crafted metric names and label values in Prometheus web UI tooltips and metrics explorer. Thanks to Duc Anh Nguyen from TinyxLab for reporting it.</p> <ul> <li>[SECURITY] UI: Fix stored XSS via unescaped metric names and labels. <a title="CVE-2026-40179" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-vffh-x6r8-xx99/hovercard" href="https://github.com/advisories/GHSA-vffh-x6r8-xx99">CVE-2026-40179</a>. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4238089640" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18507" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18507/hovercard" href="https://github.com/prometheus/prometheus/pull/18507">#18507</a></li> <li>[PERF] Regex: Stop calling Simplify. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3838434057" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/17908" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/17908/hovercard" href="https://github.com/prometheus/prometheus/pull/17908">#17908</a></li> </ul> prombot tag:github.com,2008:Repository/6838921/v0.311.2 2026-04-13T11:45:06Z

v0.311.2

<p>v0.311.2</p> roidelapluie tag:github.com,2008:Repository/6838921/v0.305.2 2026-04-13T11:44:14Z

v0.305.2

<p>v0.305.2</p> roidelapluie tag:github.com,2008:Repository/6838921/v3.11.1 2026-04-07T15:53:07Z

3.11.1 / 2026-04-07

<ul> <li>[BUGFIX] Tracing: Fix startup failure for OTLP HTTP tracing with <code>insecure: true</code>. <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4216989892" data-permission-text="Title is private" data-url="https://github.com/prometheus/prometheus/issues/18469" data-hovercard-type="pull_request" data-hovercard-url="/prometheus/prometheus/pull/18469/hovercard" href="https://github.com/prometheus/prometheus/pull/18469">#18469</a></li> </ul> prombot
tag:github.com,2008:https://github.com/dani-garcia/vaultwarden/releases

Release notes from vaultwarden

2026-05-03T12:20:45Z tag:github.com,2008:Repository/121898717/1.36.0 2026-05-03T13:02:37Z

1.36.0

<h2>Security Fixes</h2> <p>This release contains security fixes for the following advisories. We strongly advice to update as soon as possible.</p> <ul> <li>SSO Login CSRF<br> <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-pfp2-jhgq-6hg5">GHSA-pfp2-jhgq-6hg5</a><br> <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-w6h6-8r66-hcv7">GHSA-w6h6-8r66-hcv7</a></li> <li>User/Organization Enumeration<br> <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-hxqh-ff5p-wfr3">GHSA-hxqh-ff5p-wfr3</a></li> <li>SSO existing-user binding<br> <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-j4j8-gpvj-7fqr">GHSA-j4j8-gpvj-7fqr</a><br> <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-6x5c-84vm-5j56">GHSA-6x5c-84vm-5j56</a></li> <li>SSRF via Icon Endpoint<br> <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-72vh-x5jq-m82g">GHSA-72vh-x5jq-m82g</a></li> <li>Some crate's updated and other minor security enhancements</li> </ul> <p>These are private for now, pending CVE assignment.</p> <h2>Notes</h2> <ul> <li>Archiving of items is available<br> <a href="https://bitwarden.com/blog/keep-your-vault-tidy-with-item-archiving/" rel="nofollow">https://bitwarden.com/blog/keep-your-vault-tidy-with-item-archiving/</a><br> <a href="https://bitwarden.com/nl-nl/help/managing-items/#archive" rel="nofollow">https://bitwarden.com/nl-nl/help/managing-items/#archive</a></li> <li>Web Vault updated to v2026.4.1</li> </ul> <h2>What's Changed</h2> <ul> <li>SSO fallback to UserInfo preferred_username by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4322035872" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7128" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7128/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7128">#7128</a></li> <li>Dummy identifier need to pass for a guid by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4344241300" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7154" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7154/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7154">#7154</a></li> <li>add new /identity/accounts/prelogin/password by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4344502327" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7156" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7156/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7156">#7156</a></li> <li>Add DuckDuckGo browser device type by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4341655759" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7147" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7147/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7147">#7147</a></li> <li>Apply <code>duration_suboptimal_units</code> lint findings by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4337055080" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7144" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7144/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7144">#7144</a></li> <li>Apply <code>ref_option</code> lint findings by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4336827894" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7143" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7143/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7143">#7143</a></li> <li>Fix hardcoded sso identifier by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4344914731" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7157" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7157/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7157">#7157</a></li> <li>Update crates and fix a nightly lint by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4353292904" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7161" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7161/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7161">#7161</a></li> <li>Fix Host/IP resolving by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4353293367" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7162" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7162/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7162">#7162</a></li> <li>Several SSO Fixes by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4353293809" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7163" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7163/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7163">#7163</a></li> <li>Add support for archiving items by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/matt-aaron/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/matt-aaron">@matt-aaron</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4043119493" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6916" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6916/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6916">#6916</a></li> <li>Fix favicon fetching to check all icon links instead of just the first one by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Shocker/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Shocker">@Shocker</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4000964839" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6880" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6880/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6880">#6880</a></li> <li>Fix merge conflict by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dani-garcia/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dani-garcia">@dani-garcia</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4353544609" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7164" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7164/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7164">#7164</a></li> <li>Replace organization_uuid unwrap with proper error handling by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/xjohnyknox/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/xjohnyknox">@xjohnyknox</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4068217059" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6936" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6936/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6936">#6936</a></li> <li>fix: return Err instead of panic on unknown cipher atype in to_json() by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mango766/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mango766">@mango766</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4229962626" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7068" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7068/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7068">#7068</a></li> <li>Allow SQLite to be linked against dynamically by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ISSOtm/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ISSOtm">@ISSOtm</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4212505616" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7057" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7057/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7057">#7057</a></li> <li>Update crates and web-vault by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4359601860" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7171" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7171/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7171">#7171</a></li> <li>Update hickory by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4369460412" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7175" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7175/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7175">#7175</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/matt-aaron/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/matt-aaron">@matt-aaron</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4043119493" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6916" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6916/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6916">#6916</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Shocker/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Shocker">@Shocker</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4000964839" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6880" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6880/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6880">#6880</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/xjohnyknox/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/xjohnyknox">@xjohnyknox</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4068217059" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6936" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6936/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6936">#6936</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mango766/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mango766">@mango766</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4229962626" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7068" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7068/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7068">#7068</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ISSOtm/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ISSOtm">@ISSOtm</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4212505616" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7057" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7057/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7057">#7057</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.35.8...1.36.0"><tt>1.35.8...1.36.0</tt></a></p> <p>You can discuss this release here <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="9996054" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/discussions/7177" data-hovercard-type="discussion" data-hovercard-url="/dani-garcia/vaultwarden/discussions/7177/hovercard" href="https://github.com/dani-garcia/vaultwarden/discussions/7177">#7177</a></p> BlackDex tag:github.com,2008:Repository/121898717/1.35.8 2026-04-25T18:08:50Z

1.35.8

<h2>What's Changed</h2> <ul> <li>Dummy org Master password policy auth fix by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4263384720" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7097" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7097/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7097">#7097</a></li> <li>Fix recovery-code not working by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4270199459" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7102" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7102/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7102">#7102</a></li> <li>Fix invalid refresh token response by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4277026476" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7105" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7105/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7105">#7105</a></li> <li>Update Rust, Crates, GHA and fix a DNS issue by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4283702582" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7108" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7108/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7108">#7108</a></li> <li>Update web-vault and crates by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4308697550" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7121" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7121/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7121">#7121</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.35.7...1.35.8"><tt>1.35.7...1.35.8</tt></a></p> BlackDex tag:github.com,2008:Repository/121898717/1.35.7 2026-04-13T21:51:33Z

1.35.7

<h2>What's Changed</h2> <ul> <li>Fix 2FA for Android by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4257300386" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7093" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7093/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7093">#7093</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.35.6...1.35.7"><tt>1.35.6...1.35.7</tt></a></p> BlackDex tag:github.com,2008:Repository/121898717/1.35.6 2026-04-12T19:28:36Z

1.35.6

<h2>Notes</h2> <p>The previous release contained an issue where Two Factor Remember Tokens and Recovery Tokens were not accepted at all.<br> This has been fixed now in this release.</p> <h2>What's Changed</h2> <ul> <li>Fix MFA Remember by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4249305734" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7085" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7085/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7085">#7085</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.35.5...1.35.6"><tt>1.35.5...1.35.6</tt></a></p> BlackDex tag:github.com,2008:Repository/121898717/1.35.5 2026-04-12T19:26:30Z

1.35.5

<h2>Security Fixes</h2> <p>This release contains security fixes for the following advisories. We strongly advice to update as soon as possible.</p> <ul> <li><a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-937x-3j8m-7w7p">GHSA-937x-3j8m-7w7p</a> Unconfirmed Owner Can Purge Entire Organization Vault.</li> <li><a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-569v-845w-g82p">GHSA-569v-845w-g82p</a> Cross-Org Group Binding Enables Unauthorized Read And Write Access Into Another Organization</li> <li><a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-6j4w-g4jh-xjfx">GHSA-6j4w-g4jh-xjfx</a> Refresh tokens not invalidated on security stamp rotation</li> </ul> <p>These are private for now, pending CVE assignment.</p> <h2>Notes</h2> <ul> <li>The admin templates have changed, please update them if you override these via templates.</li> <li>Two Factor Remember Tokens are now valid for max 30 days. Old tokens are invalid directly after upgrading.</li> </ul> <h2>What's Changed</h2> <ul> <li>apply policies only to confirmed members by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4019160468" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6892" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6892/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6892">#6892</a></li> <li>Feat(config): add feature flag for Safari account switching by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/DerPlayer2001/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/DerPlayer2001">@DerPlayer2001</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4016136925" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6891" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6891/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6891">#6891</a></li> <li>fix: add ForcePasswordReset to api key login by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/montdidier/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/montdidier">@montdidier</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4032066566" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6904" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6904/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6904">#6904</a></li> <li>Add Webauthn related origins flag to known flags. by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pasarenicu/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/pasarenicu">@pasarenicu</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4030438098" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6900" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6900/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6900">#6900</a></li> <li>Add 30s cache to SSO exchange_refresh_token by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3979308180" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6866" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6866/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6866">#6866</a></li> <li>Add cxp-import-mobile and cxp-export-mobile: feature flags on mobile by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/phoeagon/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/phoeagon">@phoeagon</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3969746107" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6853" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6853/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6853">#6853</a></li> <li>Misc updates and fixes by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4035866691" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6910" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6910/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6910">#6910</a></li> <li>Support new desktop origin on CORS by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dani-garcia/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dani-garcia">@dani-garcia</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4047061071" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6920" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6920/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6920">#6920</a></li> <li>Fix <code>checkout</code> action version by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4047166610" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6921" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6921/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6921">#6921</a></li> <li>Fix apikey login by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4047436562" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6922" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6922/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6922">#6922</a></li> <li>Fix email header base64 padding by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4088371827" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6961" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6961/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6961">#6961</a></li> <li>Update Feature Flags by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4113649308" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6981" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6981/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6981">#6981</a></li> <li>Update crates and GHA by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4113162680" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6980" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6980/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6980">#6980</a></li> <li>Use protected CI environment by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dani-garcia/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dani-garcia">@dani-garcia</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4123795467" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7004" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7004/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7004">#7004</a></li> <li>Fix 2FA Remember to actually be 30 days by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4058831988" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6929" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6929/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6929">#6929</a></li> <li>Misc Updates by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4163889911" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7027" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7027/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7027">#7027</a></li> <li>Switch to <code>attest</code> action by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4133585232" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7017" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7017/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7017">#7017</a></li> <li>Rotate refresh-tokens on sstamp reset by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4165737536" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7031" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7031/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7031">#7031</a></li> <li>Misc org fixes by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4165765644" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7032" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7032/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7032">#7032</a></li> <li>Fix empty string FolderId by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4189621015" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7048" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7048/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7048">#7048</a></li> <li>Disable deployments for release env by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4165921197" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7033" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7033/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7033">#7033</a></li> <li>Fix Send icons by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4195179723" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7051" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7051/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7051">#7051</a></li> <li>prevent managers from creating collections by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4012419564" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6890" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6890/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6890">#6890</a></li> <li>Change SQLite backup to use VACUUM INTO query by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/getaaron/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/getaaron">@getaaron</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4115922449" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6989" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6989/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6989">#6989</a></li> <li>Handle <code>SIGTERM</code> and <code>SIGQUIT</code> shutdown signals. by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/0x484558/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/0x484558">@0x484558</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4130208407" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7008" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7008/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7008">#7008</a></li> <li>Do not display unavailable 2FA options by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/0x484558/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/0x484558">@0x484558</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4131127439" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7013" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7013/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7013">#7013</a></li> <li>Fix logout push identifiers and send logout before clearing devices by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/qaz741wsd856/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/qaz741wsd856">@qaz741wsd856</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4183993824" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7047" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7047/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7047">#7047</a></li> <li>Fix windows build issues by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/idontneedonetho/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/idontneedonetho">@idontneedonetho</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4224861481" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7065" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7065/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7065">#7065</a></li> <li>Crate and GHA updates by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4245455414" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7081" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7081/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7081">#7081</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/DerPlayer2001/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/DerPlayer2001">@DerPlayer2001</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4016136925" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6891" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6891/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6891">#6891</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/montdidier/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/montdidier">@montdidier</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4032066566" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6904" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6904/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6904">#6904</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pasarenicu/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/pasarenicu">@pasarenicu</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4030438098" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6900" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6900/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6900">#6900</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/phoeagon/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/phoeagon">@phoeagon</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3969746107" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6853" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6853/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6853">#6853</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/getaaron/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/getaaron">@getaaron</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4115922449" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6989" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6989/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6989">#6989</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/0x484558/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/0x484558">@0x484558</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4130208407" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7008" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7008/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7008">#7008</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/qaz741wsd856/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/qaz741wsd856">@qaz741wsd856</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4183993824" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7047" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7047/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7047">#7047</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/idontneedonetho/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/idontneedonetho">@idontneedonetho</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4224861481" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7065" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7065/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7065">#7065</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.35.4...1.35.5"><tt>1.35.4...1.35.5</tt></a></p> BlackDex tag:github.com,2008:Repository/121898717/1.35.4 2026-02-23T21:43:26Z

1.35.4

<h2>Security Fixes</h2> <p>This release contains security fixes for the following advisories. We strongly advice to update as soon as possible.</p> <ul> <li><a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-w9f8-m526-h7fh">GHSA-w9f8-m526-h7fh</a>. This vulnerability would allow an attacker to access a cipher from a different user (fully encrypted) if they already know its internal UUID.</li> <li><a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-h4hq-rgvh-wh27">GHSA-h4hq-rgvh-wh27</a>. This vulnerability allows an attacker with manager-level access within an organization to modify collections they can access, even if they do not have management permissions for them.</li> <li><a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-r32r-j5jq-3w4m">GHSA-r32r-j5jq-3w4m</a>. This vulnerability allows an attacker with manager-level access within an organization to modify collections they are not assigned.</li> </ul> <p>These are private for now, pending CVE assignment.</p> <h2>What's Changed</h2> <ul> <li>Update Rust and Crates and GHA by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3954117795" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6843" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6843/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6843">#6843</a></li> <li>hide remember 2fa token by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3964335580" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6852" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6852/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6852">#6852</a></li> <li>fix(send_invite): invite links by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/proofofcopilot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/proofofcopilot">@proofofcopilot</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3935829504" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6824" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6824/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6824">#6824</a></li> <li>Misc organization fixes by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3980050194" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6867" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6867/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6867">#6867</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/proofofcopilot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/proofofcopilot">@proofofcopilot</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3935829504" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6824" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6824/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6824">#6824</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.35.3...1.35.4"><tt>1.35.3...1.35.4</tt></a></p> dani-garcia tag:github.com,2008:Repository/121898717/1.35.3 2026-02-10T20:41:27Z

1.35.3

<h2>Security Fixes</h2> <p>This release contains security fixes for the following advisory. We strongly advice to update as soon as possible if you believe it could affect you.</p> <ul> <li><a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-h265-g7rm-h337">GHSA-h265-g7rm-h337</a> (Publication in process, waiting for CVE assignment)<br> This vulnerability would allow an authenticated attacker that is part of an organization to access items from collections to which the attacker does not belong.</li> </ul> <h2>What's Changed</h2> <ul> <li>Fix User API Key login by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3812923759" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6712" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6712/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6712">#6712</a></li> <li>use email instead of empty name for webauhn by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3826655511" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6733" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6733/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6733">#6733</a></li> <li>hide password hints via CSS by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3823056682" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6726" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6726/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6726">#6726</a></li> <li>fix email as 2fa with auth requests by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3830932188" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6736" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6736/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6736">#6736</a></li> <li>Update crates, web-vault, js, workflows by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3843828973" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6749" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6749/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6749">#6749</a></li> <li>refactor: improve tooltips in diagnostics page by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tessus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tessus">@tessus</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3864897772" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6765" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6765/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6765">#6765</a></li> <li>Empty AccountKeys when no private key by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3855958348" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6761" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6761/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6761">#6761</a></li> <li>fix error message for purging auth requests by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3881382833" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6776" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6776/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6776">#6776</a></li> <li>Misc updates, crates, rust, js, gha, vault by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3910582145" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6799" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6799/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6799">#6799</a></li> <li>Update crates and web-vault by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3922293752" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6810" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6810/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6810">#6810</a></li> <li>Fix org-details issue by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3923163517" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6811" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6811/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6811">#6811</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.35.2...1.35.3"><tt>1.35.2...1.35.3</tt></a></p> dani-garcia tag:github.com,2008:Repository/121898717/1.35.2 2026-01-09T18:37:05Z

1.35.2

<h2>Notable changes</h2> <p>Fixed an issue with the web-vault which prevent creating an organization.</p> <h2>What's Changed</h2> <ul> <li>update web-vault to fix org creation by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3774893714" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6646" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6646/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6646">#6646</a></li> <li>return no content with status code 204 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3782220947" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6665" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6665/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6665">#6665</a></li> <li>allow MasterPasswordHash for Android by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3785263858" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6673" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6673/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6673">#6673</a></li> <li>improve sso callback path by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3785708233" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6676" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6676/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6676">#6676</a></li> <li>Fix web-vault version check and update web-vault by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3794179922" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6686" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6686/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6686">#6686</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.35.1...1.35.2"><tt>1.35.1...1.35.2</tt></a></p> BlackDex tag:github.com,2008:Repository/121898717/1.35.1 2025-12-30T14:21:06Z

1.35.1

<h2>Notable changes</h2> <ul> <li>Fixed issue with applications being logged out after upgrading due to changes to refresh token parsing</li> <li>Updated web vault to 2025.12.1</li> <li>Correctly publish <code>alpine</code> tag, which was missing in 1.35.0</li> </ul> <h2>What's Changed</h2> <ul> <li>Update lockfile by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dani-garcia/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dani-garcia">@dani-garcia</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3765177579" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6600" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6600/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6600">#6600</a></li> <li>Re-add <code>alpine</code> tag by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3768019585" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6626" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6626/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6626">#6626</a></li> <li>Misc updates by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3768078748" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6627" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6627/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6627">#6627</a></li> <li>Try old refresh token if we fail to decode jwt by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dani-garcia/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dani-garcia">@dani-garcia</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3768370617" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6629" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6629/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6629">#6629</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.35.0...1.35.1"><tt>1.35.0...1.35.1</tt></a></p> dani-garcia tag:github.com,2008:Repository/121898717/1.35.0 2025-12-27T23:14:47Z

1.35.0

<h2>Notable changes</h2> <ul> <li>Implemented support for SSO with OpenID Connect, <a href="https://github.com/dani-garcia/vaultwarden/wiki/Enabling-SSO-support-using-OpenId-Connect">https://github.com/dani-garcia/vaultwarden/wiki/Enabling-SSO-support-using-OpenId-Connect</a></li> <li>Updated web vault to 2025.12.0</li> <li>Added support for future mobile apps with versions 2026.1.0+</li> <li>This is the first vaultwarden release using <a href="https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/immutable-releases">immutable releases</a> and release attestation!</li> </ul> <h2>What's Changed</h2> <ul> <li>Fix multi delete slowdown by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3301265369" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6144" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6144/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6144">#6144</a></li> <li>Perform same checks when setting kdf by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3297633172" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6141" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6141/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6141">#6141</a></li> <li>SSO using OpenID Connect by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1900628855" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/3899" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/3899/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/3899">#3899</a></li> <li>Delete SSO.md by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dani-garcia/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dani-garcia">@dani-garcia</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3305302243" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6152" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6152/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6152">#6152</a></li> <li>Update webauthn-rs to 0.5.x by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/zUnixorn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/zUnixorn">@zUnixorn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3123551326" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/5934" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/5934/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/5934">#5934</a></li> <li>a little cleanup after SSO merge by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3305463462" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6153" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6153/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6153">#6153</a></li> <li>Fix link to point to the wiki by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3306253992" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6157" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6157/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6157">#6157</a></li> <li>Fix Email 2FA for mobile apps by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3306193470" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6156" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6156/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6156">#6156</a></li> <li>Update Rust to 1.89.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3304930796" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6150" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6150/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6150">#6150</a></li> <li>Fix several more multi select push issues by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3305115527" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6151" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6151/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6151">#6151</a></li> <li>Fix minor typo by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ncguk/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ncguk">@ncguk</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3307495975" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6165" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6165/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6165">#6165</a></li> <li>Update crates, fixes some yanked crates by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3307592855" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6167" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6167/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6167">#6167</a></li> <li>Fix WebauthN issue with Software Keys by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3307772463" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6168" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6168/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6168">#6168</a></li> <li>Fix Playwright test conf and update deps by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3313171640" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6176" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6176/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6176">#6176</a></li> <li>Misc updates by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3322653384" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6185" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6185/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6185">#6185</a></li> <li>fix typo in description of helo_name by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Flottegurke/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Flottegurke">@Flottegurke</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3328659271" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6194" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6194/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6194">#6194</a></li> <li>Fix Playwright by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3341290422" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6206" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6206/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6206">#6206</a></li> <li>Switch to GHA's concurrency control by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3307423088" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6164" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6164/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6164">#6164</a></li> <li>Make database connection pool dynamic by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Samoth69/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Samoth69">@Samoth69</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3307544494" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6166" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6166/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6166">#6166</a></li> <li>Re-add <code>if</code> check to release workflow by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3352801645" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6227" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6227/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6227">#6227</a></li> <li>Fix Webauthn/Passkey 2FA migration/validation issues by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3327462387" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6190" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6190/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6190">#6190</a></li> <li>refactor(config): update template, add validation by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tessus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tessus">@tessus</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3353341265" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6229" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6229/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6229">#6229</a></li> <li>Show SSO_ALLOW_UNKNOWN_EMAIL_VERIFICATION in admin by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3356335782" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6235" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6235/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6235">#6235</a></li> <li>Update crates, gha and web-vault by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3356319906" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6234" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6234/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6234">#6234</a></li> <li>Fix panic around sso_master_password_policy by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3356033954" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6233" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6233/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6233">#6233</a></li> <li>make webauthn more optional by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3307001283" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6160" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6160/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6160">#6160</a></li> <li>Fix 2fa recovery endpoint by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3360451359" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6240" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6240/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6240">#6240</a></li> <li>update trivy-action to v0.33.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3364987398" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6248" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6248/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6248">#6248</a></li> <li>update web vault to v2025.9.1 and allow new policy by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3484023247" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6340" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6340/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6340">#6340</a></li> <li>prevent changing collections when hide_passwords is true by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3394798236" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6278" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6278/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6278">#6278</a></li> <li>Fix <code>sso_user</code> dropped on <code>User::save</code> by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3373451554" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6262" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6262/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6262">#6262</a></li> <li>Change OIDC dummy identifier by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3373479795" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6263" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6263/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6263">#6263</a></li> <li>add new billing warnings endpoint by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3522772327" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6369" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6369/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6369">#6369</a></li> <li>Add auth_request pending endpoint by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3522631459" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6368" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6368/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6368">#6368</a></li> <li>Fix Org identifier by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3517856282" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6364" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6364/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6364">#6364</a></li> <li>add mail address change warning for invited accounts by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3530460588" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6377" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6377/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6377">#6377</a></li> <li>add missing media-src directive by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3532931350" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6381" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6381/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6381">#6381</a></li> <li>add seat limit for the invite dialog by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3526952104" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6371" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6371/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6371">#6371</a></li> <li>[Playwright] Improvements around node by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3445476155" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6321" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6321/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6321">#6321</a></li> <li>Use Diesels MultiConnections Derive by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3394898952" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6279" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6279/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6279">#6279</a></li> <li>Improve protected actions by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dani-garcia/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dani-garcia">@dani-garcia</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3567764676" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6411" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6411/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6411">#6411</a></li> <li>Fix issue with key-rotation and emergency-access by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3578264331" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6421" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6421/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6421">#6421</a></li> <li>Optimizations and build speedup by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3478121509" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6339" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6339/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6339">#6339</a></li> <li>Use an older version of mariadb to prevent a panic by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3608101297" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6453" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6453/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6453">#6453</a></li> <li>Playwright against abitrary web-vault by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3532510480" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6380" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6380/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6380">#6380</a></li> <li>Fix KDF Change with new web-vault by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3613250866" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6458" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6458/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6458">#6458</a></li> <li>Fix: admin theme emoji alignment by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/joepduin/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/joepduin">@joepduin</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3613486192" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6459" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6459/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6459">#6459</a></li> <li>remove invalid emergency access dummy value by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3616662026" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6463" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6463/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6463">#6463</a></li> <li>Add <code>pm-25373-windows-biometrics-v2</code> feature flag by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Ephemera42/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Ephemera42">@Ephemera42</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3621257851" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6468" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6468/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6468">#6468</a></li> <li>Switch to multiple runners per arch by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3630637895" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6472" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6472/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6472">#6472</a></li> <li>Fix icon redirect caching by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3655945834" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6487" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6487/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6487">#6487</a></li> <li>Fix around singleorg policy by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3363855339" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6247" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6247/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6247">#6247</a></li> <li>fix email as 2fa provider by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3636293616" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6473" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6473/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6473">#6473</a></li> <li>Update crates and Rust version by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3654866698" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6485" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6485/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6485">#6485</a></li> <li>Add option to prefer IPv6 resolving by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3664555175" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6494" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6494/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6494">#6494</a></li> <li>Some small admin js/css updates by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3675650845" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6501" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6501/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6501">#6501</a></li> <li>Update crates and workflows and some fixes by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3677605392" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6508" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6508/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6508">#6508</a></li> <li>Fixed a typo in the default TTL value by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/k725/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/k725">@k725</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3697637278" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6528" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6528/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6528">#6528</a></li> <li>Iterate over tags on release by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3691148434" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6518" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6518/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6518">#6518</a></li> <li>Org.put_policy type not in body anymore by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3686327035" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6514" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6514/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6514">#6514</a></li> <li>Android want response property in camelCase by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3686290226" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6513" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6513/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6513">#6513</a></li> <li>Fix admin invite with SSO by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3671947228" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6498" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6498/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6498">#6498</a></li> <li>Improve sso auth flow by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3338582370" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6205" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6205/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6205">#6205</a></li> <li>fix email as 2fa for sso by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3665285264" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6495" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6495/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6495">#6495</a></li> <li>Fix release workflow by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3703298224" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6532" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6532/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6532">#6532</a></li> <li>Further fixes for the release workflow by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3703492895" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6533" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6533/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6533">#6533</a></li> <li>add empty /api/tasks endpoint by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3727268536" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6557" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6557/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6557">#6557</a></li> <li>Revert to gzip compression by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3739065890" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6566" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6566/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6566">#6566</a></li> <li>support UriMatchDefaults policy by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3745849889" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6570" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6570/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6570">#6570</a></li> <li>Add new accountKeys and masterPasswordUnlock fields by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dani-garcia/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dani-garcia">@dani-garcia</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3747221028" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6572" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6572/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6572">#6572</a></li> <li>Update crates and Rust by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3724250752" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6551" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6551/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6551">#6551</a></li> <li>Add UserDecryption on /sync too by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dani-garcia/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dani-garcia">@dani-garcia</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3748519640" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6574" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6574/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6574">#6574</a></li> <li>Update web-vault to v2025.12.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3750168945" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6577" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6577/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6577">#6577</a></li> <li>Fix posting cipher with readonly collections by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3750302019" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6578" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6578/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6578">#6578</a></li> <li>Update crates by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3757703924" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6585" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6585/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6585">#6585</a></li> <li>Simplify binary extraction by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3725021339" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6554" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6554/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6554">#6554</a></li> <li>Remove unnecessary output sharing between jobs by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3725056314" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6555" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6555/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6555">#6555</a></li> <li>Add wrapped named variants to UserDecryptionOptions by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dani-garcia/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dani-garcia">@dani-garcia</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3765131646" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6598" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6598/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6598">#6598</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/zUnixorn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/zUnixorn">@zUnixorn</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3123551326" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/5934" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/5934/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/5934">#5934</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ncguk/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ncguk">@ncguk</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3307495975" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6165" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6165/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6165">#6165</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Flottegurke/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Flottegurke">@Flottegurke</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3328659271" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6194" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6194/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6194">#6194</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Samoth69/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Samoth69">@Samoth69</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3307544494" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6166" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6166/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6166">#6166</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/joepduin/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/joepduin">@joepduin</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3613486192" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6459" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6459/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6459">#6459</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/k725/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/k725">@k725</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3697637278" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6528" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6528/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6528">#6528</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.34.3...1.35.0"><tt>1.34.3...1.35.0</tt></a></p> dani-garcia