Update bitwarden to v2026.7.0

This MR contains the following updates:

Package	Update	Change
bitwarden/clients	minor	2026.6.4 → 2026.7.0
bitwarden/server	minor	2026.6.2 → 2026.7.0

---

Release Notes

bitwarden/clients (bitwarden/clients)

v2026.7.0: Web v2026.7.0

Compare Source

What's Changed

💙 Community Highlight

• [PM-39180] fix(browser): correct various typos in browser extension by @​luojiyin1987 in #​21323
• [PM-39177] fix(libs): correct various typos in shared libraries and documentation by @​luojiyin1987 in #​21320
• [PM-38123] [bug] Preserve 1Password archive state on 1pux import (closes #​20694) by @​999purple999 in #​20867
• [PM-33198] Keeper direct importer by @​detunized in #​19395

:shipit: Feature Development

• [CL-1138] Add stacked drawer support with back button by @​willmartian in #​19804
• [PM-38480] Add Staged Event Message by @​sven-bitwarden in #​21499
• [PM-32402] Update copy from new to add/create web app by @​jengstrom-bw in #​21355
• [PM-35106] Make AES-GCM the default algorithm in crypto.rs for secure memory by @​mzieniukbw in #​21553
• [PM-37808] Bulk Selection + Batch Bar for Desktop by @​nick-livefront in #​21308
• [PM-39472] Note -> Secure Note by @​nick-livefront in #​21469
• [PM-37987] update drawer UI for account recovery administration policy by @​JaredScar in #​21565
• [PM-37989] update drawer UI for password generator policy by @​JaredScar in #​21564
• [PM-38346] Single Org and Autofill into SimpleTogglePolicyComponent by @​JaredScar in #​21595
• [PM-38481] Add Staged Filter for Organization Members by @​sven-bitwarden in #​21394
• [PM-29785] CTAP2 CBOR Parser by @​iinuwa in #​21584
• [PM-29785] Allow waiting for Autofill IPC connection in Windows authenticator by @​iinuwa in #​21615
• [PM-29790] Prepare for separate Windows Passkey Plugin Authenticator exe by @​iinuwa in #​21616
• [PM-29790] Add credential request processing for Windows passkey plugin by @​iinuwa in #​21618
• Auth/PM-39774 - SSO - Improve error for existing users without org membership by @​JaredSnider-Bitwarden in #​21573
• [PM-29790] Wire up authenticator IPC and COM server for Windows passkey plugin by @​iinuwa in #​21622
• [PM-34393] Show invite link events in event log by @​r-tome in #​21335
• [CL-1158] update browser footer by @​BryanCunningham in #​21612
• [PM-37963] - Add Staged Member Actions by @​sven-bitwarden in #​21597
• [PM-29790] Windows passkey plugin: unify signature verification by @​iinuwa in #​21634
• windows-plugin: Add plugin entrypoint by @​iinuwa in #​21635
• [PM-33362] Autotype Edit Cipher Initial Changes by @​coltonhurst in #​21500
• [PM-37988] Add SessionTimeoutPolicyV2 component usage for new policy drawers by @​JaredScar in #​21561
• [PM-39147] Batch bar copy fixes — singular/plural toasts and dialog title by @​nick-livefront in #​21602
• PM-32187 implemented restrict send type by @​bmbitwarden in #​20129
• [PM-40060] Add native messaging permission dialog by @​quexten in #​21703
• Pm 31929 new send policy for deletion days by @​bmbitwarden in #​20128
• [PM-33054] Remove feature flag cipher-key-encryption by @​jengstrom-bw in #​21309
• [PM-36505] Finalize Send Controls policy design, adjust base policy component enabled display logic by @​mcamirault in #​21739
• [PM-39876] Implement targeting rules form category by @​jprusik in #​21715
• [PM-20344] Disallow multiple attachments with the same name, handle existing in zip export format by @​mcamirault in #​21596
• [PM-40060] Split shared unlock setting into desktop and web by @​quexten in #​21704
• [PM-35796] Use SDK bindings for invite link generation by @​BTreston in #​21004
• [PM-40074] Refactor policy definitions to remove deprecated versions and streamline components by @​JaredScar in #​21717
• [PM-37964] Add Ability to Disable Automatic Invitations in SCIM by @​sven-bitwarden in #​21756
• [CL-1001] adding new toggle group styles by @​BryanCunningham in #​20403
• feat: add Region.Gov to available environments by @​addisonbeck in #​21211
• [PM-40126] Update organizationusernotificationpolicy for policy drawer by @​jengstrom-bw in #​21747
• [PM-38387] Introduce KeePass KDBX importer by @​harr1424 in #​21052
• Finalize Manage Send policy description by @​mcamirault in #​21786
• feat(platform): introduce GovModeService for FedRAMP region gating by @​addisonbeck in #​21366
• [CL-1274] Add bit-page layout region for bit-layout main content by @​willmartian in #​21790
• [PM-37944] Differentiate Send events according to domain by @​harr1424 in #​20787

🐛 Bug fixes

• [PM-39746] Exclude search and select components from legacy global desktop css by @​vleague2 in #​21556
• [PM-38262] Apply tolerant-validator pattern to V2 read path in Access Intelligence by @​Banrion in #​21474
• [PM-38836] harden calculateSubFramePositioning by @​audreyality in #​21282
• Fix SSH Agent v2 behavior before first unlock by @​neuronull in #​21273
• [PM-18344] Remove XDG_CURRENT_DESKTOP Unity override to fix clipboard on wayland by @​quexten in #​21513
• Revert "[PM-38760] Recursively create directory when writing manifest (#​21141)" by @​addisonbeck in #​21568
• [PM-39805] fix: Exclude permanent migration-grace machine accounts from billable count by @​amorask-bitwarden in #​21598
• [PM-39841] Fix unlocking crashing the desktop app by @​quexten in #​21610
• [PM-39780] Toast text is incorrect when editing collection access by @​gbubemismith in #​21601
• [PM-39900] Enhance PoliciesComponent to clear drawer reference after closing by @​JaredScar in #​21639
• [PM-39447] [Shared Unlock] Shared unlock stuck on lock component by @​quexten in #​21446
• [PM-39060] Fix new org button not showing up by @​BTreston in #​21594
• [PM-39556] Fix access selector not saving changes when the dialog field is modified by @​BTreston in #​21640
• [PM-38763] Exclude sponsorship redemption from premium-to-org upgrade flow by @​sbrown-livefront in #​21180
• [PM-36888] Do auto confirm when setting is enabled by @​BTreston in #​21614
• [PM-39796] Fix bug in new Send dropdown component that prevented navigation after Send creation by @​mcamirault in #​21590
• [PM-37489] Fixes issue where checkbox label does not enable checkbox by @​JaredScar in #​21657
• [PM-39977] Fix broken shared unlock for browser-desktop in non-dev mode by @​quexten in #​21688
• [PM-37196] Tooltip expand max-width by @​JaredScar in #​21646
• [PM-39269] Fix At-Risk Members CSV export including extra columns by @​AlexRubik in #​21477
• Revert "[Shared Unlock] [PM-34508] Default enable native messaging pe… by @​quexten in #​21687
• [PM-39123] Fix members page filters flicker by @​JaredScar in #​21656
• [PM-39570] use correct fill for bup logo by @​BryanCunningham in #​21694
• Prevent connect to desktop in ipc background if native messaging permission is missing by @​quexten in #​21702
• [PM-38896] Enhance DefaultCollectionService tests and improve decryption by @​JaredScar in #​21439
• [PM-39349]] - make ssh key cipher fields readonly by @​jaasen-livefront in #​21505
• [PM-39380] Bitwarden unencrypted JSON files containing cipher keys prevent import by @​harr1424 in #​21587
• [PM-39695] Send fields are unexpectedly editable and changes cannot be saved by @​harr1424 in #​21542
• [PM-39608] Update firefox NMHS permission for snap by @​quexten in #​21728
• [PM-31138] Perform full sync on other clients after upgrade key rotation by @​quexten in #​21628
• fix(vault): archive and unarchive missing from bulk bar for org items by @​nick-livefront in #​21741
• [PM-7036] Add support for latest LogMeOnce CSV import format, add folder mapping by @​mcamirault in #​21473
• [PM-39450] [Shared Unlock] Scan Secure Preferences when detecting installed Chrome extensions by @​quexten in #​21449
• fix(unlock): Biometric unlock shows error dialog when cancelling by @​quexten in #​21731
• [PM-39974] Remove Biometric Integration Setting Fully by @​quexten in #​21684
• [PM-31068] Wire send SDK repository for edit/removePassword by @​adudek-bw in #​21579
• [PM-38761] Fix hard-coded families plan price in revoke sponsorship dialog by @​sbrown-livefront in #​21243
• [PM-39554] Create default collection when admin is demoted to user by @​BTreston in #​21632
• [PM-39891] Fix edit member dialog badge by @​BTreston in #​21637
• [PM-38595] Update local collections from server response by @​BTreston in #​21744
• [PM-38771] - add missing i18n strings for button labels by @​jaasen-livefront in #​21509
• [CL-1263] Increase active bottom navigation label font weight by @​BryanCunningham in #​21772
• [PM-39218] Use global environment for self-hosted env dialog and SSO URL by @​trmartin4 in #​21723
• fix(desktop): fix Firefox native messaging host manifest directory creation by @​quexten in #​21784
• [PM-38392] Route password-protected Send saves through the SDK by @​adudek-bw in #​21725
• fix(desktop): fix crash generating DuckDuckGo native messaging manifests by @​quexten in #​21783
• [PM-39705] Edit Access Modal Does Not Display Members With Access When Going Through Bulk Actions by @​gbubemismith in #​21773
• Render native form control UI in dark theme with color-scheme: dark by @​maxkpower in #​21771
• fix(browser): Fix biometrics setup and connection issues by @​quexten in #​21782
• [PM-40147] Fix Send page filters not appearing on browser by @​harr1424 in #​21759
• fix(biometrics): Biometric unlock does not work over SDK by @​quexten in #​21730
• [PM-38608] [PM-38560] Fix diacritic normalization and multi-word query handling in searchCiphersBasic by @​nick-livefront in #​21232
• [PM-40820] fix style by @​BTreston in #​21821
• [PM-38940] Cherry-pick to rc: Fix Permissions-Policy VULN-582 (#​21466) by @​bensbits91 in #​21834
• [PM-40303] Cherry-pick to rc: Fix user logout when missing permissions by @​harr1424 in #​21846
• [PM-40236][RC] Logging out throws error mid-logout due to a race condition. User left in locked state by @​mzieniukbw in #​21869

⚙️ Maintenance

• Bump client version(s) by @​github-actions[bot] in #​21554
• Auth/PM-39619 - Rename AcceptOrganizationComponent to AcceptOrgDirectInviteComponent by @​JaredSnider-Bitwarden in #​21522
• [PM-4439] Replace oidc-client-ts with oauth4webapi by @​harr1424 in #​20824
• [PM-23485] Share types between autofill_provider and napi crates by @​iinuwa in #​18787
• Bump client version(s) by @​github-actions[bot] in #​21580
• Autosync Crowdin Translations for web by @​bw-ghapp[bot] in #​21508
• [PM-39398] Refactor Vault Component back to OG naming by @​JaredScar in #​21569
• [PM-35812] Remove feature flag by @​JaredScar in #​21567
• build: Add arm64-only MacOS pack step by @​iinuwa in #​21588
• [BRE-1533] Trigger Bitwarden Lite from web vault build by @​vgrassia in #​21605
• introduce AutofillLifecycleService by @​audreyality in #​21530
• [PM-9420] - add cipher$ observable to cipher service by @​jaasen-livefront in #​21383
• [PM-28139] Remove V1 Linux Biometrics by @​quexten in #​21571
• [CL-1258] Add NumberInput story to bit-form-field by @​willmartian in #​21692
• Fix clippy lint by @​iinuwa in #​21691
• [PM-39889] Acknowledge quick-xml advisory by @​iinuwa in #​21693
• [PM-33362] Use signals for the app label by @​coltonhurst in #​21638
• [CL-1261] Add date input form field story by @​willmartian in #​21695
• [BRE-2044] Migrate Auto Bump Desktop Version workflow logic to the deploy repo by @​vgrassia in #​21641
• SSH Agent v2: restructure the SignRequest by @​neuronull in #​21654
• [BRE-2018] Add snapcraft compatibility note to electron-builder MRs by @​brandonbiete in #​21735
• [PM-39259] Migrate FIDO2 credential id to SDK random by @​quexten in #​21712
• [PM-39259] Migrate DuckDuckGo secure channel to SDK key generation by @​quexten in #​21711
• [PM-39898] desktop_core: Don't compile objc when cross-compiling for non-macOS by @​iinuwa in #​21636
• [PM-39259] Migrate key-management consumers to SDK key generation by @​quexten in #​21707
• [PM-23485] Use strong types for autofill IPC request parsing by @​iinuwa in #​21737
• chore(ci): add platform-community code-review signal by @​addisonbeck in #​21751
• Tidy Desktop Autofill Service by @​iinuwa in #​21736
• [PM-39427] feat: build Chrome beta extension by @​trmartin4 in #​21757
• Autosync Crowdin Translations for desktop by @​bw-ghapp[bot] in #​21647
• [PM-39259] Migrate vault export and generator to SDK random number client by @​quexten in #​21708
• [PM-39259] Migrate risk-insights encryption to SDK key generation by @​quexten in #​21709
• [PM-39427] feat: build desktop beta artifacts by @​trmartin4 in #​21758
• [PM-35600] Update Password Request Models (Key Management) by @​rr-bw in #​20665
• [PM-38210] Remove access-intelligence-trend-chart feature flag by @​lastbestdev in #​21376
• test: add Gov region to parametrized environment service test suite by @​addisonbeck in #​21619
• [PM-34458] Add release.yml to bitwarden/clients by @​djsmith85 in #​21732
• refactor(desktop_native): extract secure_memory into its own crate by @​quexten in #​21780
• Stop cosmetic mutations in light DOM from doing rebuild work by @​blackwood in #​21084
• [PM-39259] Remove typescript cipherkey generation by @​quexten in #​21729
• Autosync Crowdin Translations for desktop by @​bw-ghapp[bot] in #​21779
• desktop-autofill: Move autofill services and models from platform team by @​iinuwa in #​21765
• SSH Agent v2: add README by @​neuronull in #​21791
• Bumped client version(s) (#​21811) by @​addisonbeck in #​21817

📦 Dependency Updates

• Address RUSTSEC-2026-0190 by @​neuronull in #​21558
• [deps] Vault: Update form-data to v4.0.6 [SECURITY] by @​renovate[bot] in #​21279
• [deps] Vault: Update multer to v2.2.0 [SECURITY] by @​renovate[bot] in #​21396
• Bump client version(s) by @​github-actions[bot] in #​21644
• Update sdk-internal to 0.2.0-main.870 by @​bw-ghapp[bot] in #​21482
• Update sdk-internal to 0.2.0-main.872 by @​bw-ghapp[bot] in #​21651
• [deps] Platform: Update Rust crate itertools to v0.15.0 by @​renovate[bot] in #​21674
• [deps]: Update dtolnay/rust-toolchain digest to 4be7066 by @​renovate[bot] in #​21667
• [deps] Platform: Update macOS/iOS bindings by @​renovate[bot] in #​20344
• [deps]: Update codecov/codecov-action action to v7 by @​renovate[bot] in #​21409
• [deps]: Update @​napi-rs/cli to v3.7.2 by @​renovate[bot] in #​20121
• [deps] Desktop Native: Update Rust crate mockall to v0.15.0 by @​renovate[bot] in #​21671
• Update sdk-internal to 0.2.0-main.883 by @​bw-ghapp[bot] in #​21686
• [PM-35903] Update clients to node 24 by @​dani-garcia in #​20400
• chore(deps): move rand to KM Renovate ownership by @​addisonbeck in #​21719
• [deps] UI Foundation: Update @​storybook/test-runner to v0.24.4 by @​renovate[bot] in #​17854
• Fix lockfile by @​dani-garcia in #​21763
• [deps]: Update actions/cache action to v6 by @​renovate[bot] in #​21681
• [deps] Platform: Update @​types/node to v22.20.0 by @​renovate[bot] in #​21673

🎨 Other

• Add claude snap permissions rule by @​quexten in #​21514
• [PM-37978] update UI for MP policy, refactor org lookup by @​BTreston in #​21313
• [PM-36407] Ts strict bulk member components by @​BTreston in #​21455
• [PM-37978] Fix stories by @​BTreston in #​21566
• [PM-39799] Fix type errors by @​BTreston in #​21583
• [VULN-649] ci: Remove deprecated scan workflow by @​theMickster in #​21429
• [PM-39071]Wire new permissions screen by @​dan-livefront in #​21391
• [PM-38828]Change settings order and copy by @​dan-livefront in #​21464

New Contributors

• @​999purple999 made their first contribution in #​20867

Full Changelog: https://github.com/bitwarden/clients/compare/web-v2026.6.4...web-v2026.7.0

bitwarden/server (bitwarden/server)

v2026.7.0: Version 2026.7.0

Compare Source

What's Changed

💙 Community Highlight

• [PM-37648] Fix double HTML encoding in emergency access emails by @​singhvishalkr in #​7652

:shipit: Feature Development

• [PM-38928] - Add name, email to org user update by @​jrmccannon in #​7871
• Seeder: add --owner-email and --org-name CLI override flags by @​JaredSnider-Bitwarden in #​7870
• [PM-28365] - Add Feature Flag Admin Initiated Member Email change by @​jrmccannon in #​7887
• [PM-37514] Support Teams 2019 Migration by @​sbrown-livefront in #​7864
• [PM-38798] Create validation link confirmation by @​JimmyVo16 in #​7895
• Auth/PM-39774 - Redirect existing users without org membership back to /login on SSO callback by @​JaredSnider-Bitwarden in #​7890
• [PM-39745] Scaffold PAM access-rule endpoints by @​Hinton in #​7878
• [PM-34393] Add event logging for organization invite link actions by @​r-tome in #​7826
• [PM-39798] Scaffold PAM access-request endpoints by @​Hinton in #​7893
• [PM-39557] Replace invite link key columns with an opaque Invite blob by @​r-tome in #​7896
• [PM-37954] Add Command for Provisioning Staged OrganizationUsers by @​sven-bitwarden in #​7859
• [PM-32187] Add Send Type restriction to Send Controls policy by @​mcamirault in #​7504
• [PM-36965] feat: Add SeederApi scene for migration cohort CSV-export testing by @​cyprain-okeke in #​7906
• [PM-38567] Migration Renewal Copy Dynamic Update by @​sbrown-livefront in #​7921
• [PM-38101] Add Staged Provision API Fields by @​sven-bitwarden in #​7927
• [PM-31929] Add deletion days restriction to Send Controls policy by @​mcamirault in #​7506
• [PM-36505] Finalize Send Controls policy, add second feature flag to enable/disable logic by @​mcamirault in #​7943
• [PM-38927] - Extract Organziation User Role Validation by @​jrmccannon in #​7876
• [PM-39210] fix: Block converting a Secrets-Manager-enabled org to a Business Unit Portal by @​cyprain-okeke in #​7892
• [PM-38796] Create link confirmation endpoint by @​JimmyVo16 in #​7907
• [PM-40085] Remove initial delay on self-hosted database migration by @​trmartin4 in #​7917
• [PM-39976] Scaffold PAM lease endpoints by @​Hinton in #​7925
• added new env var to alter backup filename TZ by @​keithhubner in #​7956
• [PM-37944] Differentiate Send events according to domain by @​harr1424 in #​7690

🐛 Bug fixes

• [PM-39584] fix: Gate migration grace service accounts on Secrets Manager presence by @​amorask-bitwarden in #​7897
• [PM-39816] fix: Raise migrated Password Manager seats to cover Secrets Manager seats by @​amorask-bitwarden in #​7904
• [PM-39805] fix: Expose SM migration-grace service accounts on subscription response by @​amorask-bitwarden in #​7901
• [PM-38000] Convert text feilds for email to email fields for form validation by @​BTreston in #​7908
• [PM-39164] Gate Access Intelligence report reads on new-architecture flag by @​Banrion in #​7825
• fix(codeowners): Reorder Docker rules to fix owner override by @​fntyler in #​7937
• [PM-35198] - remove orphaned blob attachments after deletion by @​jaasen-livefront in #​7539
• [PM-40002] Fix Teams 2019 Migration Display by @​sbrown-livefront in #​7933
• [SHOT-215] fix: Migrate legacy identity.pfx to modern encryption on update by @​mimartin12 in #​7942
• [PM-39554] Create default collection for demoted admin by @​BTreston in #​7918
• [PM-38595] Get collection permission with users and groups by @​BTreston in #​7945
• [PM-38827] Remove errant org membership check by @​BTreston in #​7929
• [PM-40128] Adjust enforcement message when Send is noncompliant with … by @​mcamirault in #​7946
• [PM-39909] fixed LINQ error when saving send controls by @​itsadrago in #​7939
• [SHOT-219] fix: build nginx image for arm64 architecture by @​mimartin12 in #​7944
• [PM-40281] convert to text field by @​BTreston in #​7971
• [PM-40516] Fix Extended Cache Service Registration by @​sven-bitwarden in #​8007

⚙️ Maintenance

• add MyItems to ApplyEnterpriseFeatures by @​nthompson-bitwarden in #​7882
• [PM-31107] Seeder: blob-migration preset + fido2/password-history/linked-field fixture support by @​shane-melton in #​7809
• [PM-19169] Remove feature flag pm-19148-innovation-archive by @​jengstrom-bw in #​7884
• [PM-29251] Remove pm-23384-browser-premium-spotlight feature flag by @​jengstrom-bw in #​7885
• Seeder: fix RecipeOrchestratorIntegrationTests build after SeederDependencies arity change by @​JaredSnider-Bitwarden in #​7888
• Minor but important doc update to align with other overrides by @​theMickster in #​7889
• [PM-39734] Support Minimal API endpoints in OpenAPI by @​Hinton in #​7874
• [PM-39512] Stricter data protection errors by @​justindbaur in #​7837
• [PM-35812] Remove BulkAutoConfirmOnLogin feature flag logic by @​JaredScar in #​7902
• [BRE-1533] Trigger Bitwarden Lite for server builds (including MRs) by @​vgrassia in #​7905
• Relax cert check on development builds by @​justindbaur in #​7912
• Seeder - Bump RustSdk to the latest release of sdk-internal by @​theMickster in #​7903
• Opt the Aspire project out of package locking by @​justindbaur in #​7916
• add new cipher type scenes by @​rdaugherty in #​7911
• [deps]: Update github-action minor by @​renovate[bot] in #​7006
• test(accounts-controller): Move tests under Auth/ directories for CODEOWNERS. by @​enmande in #​7658
• PM-39866 - Enhance seeder to seed archive and deleted ciphers by @​theMickster in #​7923
• Add Seeder query to get email codes by @​bnagawiecki in #​7880
• Add OrganizationUserInviteQuery by @​bnagawiecki in #​7915
• [BRE-2039] ci(docker): add distroless FIPS gov.Dockerfile variants by @​fntyler in #​7875
• [PM-32699] Utilize cache to check ability of useMyItems if available by @​JaredScar in #​7922
• [PM-37469] UseRiskInsights organization ability: migration, plan mapping, admin toggle, license, and endpoint guard by @​AlexRubik in #​7782
• [BRE-1907] Add artifact manifest to build.yml by @​gitclonebrian in #​7920
• [BRE-2039] chore: cleanup dockerfile comments by @​fntyler in #​7935
• Refactor Skill(bump-rust-sdk) to align with current workflow & best practices for skill evaluation by @​theMickster in #​7909
• [PM-33045] Remove FeatureRoutedCacheService by @​JimmyVo16 in #​7931
• chore(ci): add platform-community code-review signal by @​addisonbeck in #​7948
• [PM-38209] Remove pm-26961-access-intelligence-trend-chart feature flag by @​lastbestdev in #​7840
• [BRE-1907] Corrected artifact manifest container image format by @​gitclonebrian in #​7938
• Auth/PM-38811 - KM - Update RotateUserAccountKeysCommand to use MasterPasswordService by @​JaredSnider-Bitwarden in #​7804
• Bumped version to 2026.7.0 (#​7967) by @​addisonbeck in #​7970

📦 Dependency Updates

• [PM-39443] pin automapper dependency to under v15 by @​itsadrago in #​7856
• [deps]: Update actions/upload-artifact action to v7 by @​renovate[bot] in #​7219
• [deps]: Update Microsoft.NET.Test.Sdk to v18.7.0 by @​renovate[bot] in #​7777
• [deps] Tools: Update MailKit to v4.17.0 by @​renovate[bot] in #​7775
• [deps] BRE: Update nginx Docker tag to v1.31 by @​renovate[bot] in #​7932

🎨 Other

• Stripe integration tests by @​justindbaur in #​7828
• [VULN-649] ci: Remove deprecated scan workflow by @​theMickster in #​7851
• Auth - Tokenables Claude Rule Update - Add binding-property lockdown and known-limitation note by @​JaredSnider-Bitwarden in #​7900
• Create exploring-bitwarden-data Claude Skill by @​theMickster in #​7763

New Contributors

• @​rdaugherty made their first contribution in #​7911
• @​singhvishalkr made their first contribution in #​7652

Full Changelog: https://github.com/bitwarden/server/compare/v2026.6.2...v2026.7.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Mend Renovate.