CLI v2026.6.0

What's Changed

💙 Community Highlight

• [PM-38330] Fix per-request memory leak in bw serve (authStatusFor$) by @ggiesen in #20912

Feature Development

• Add new SendApiServer that uses the SDK by @adudek-bw in #20170
• [PM-34157] Wire up SDK to NewPolicyService by @eliykat in #20377
• [PM-31059] Implement SDK managed PIN unlock by @quexten in #20395
• [PM-35228] Add Premium Status Changed Push Notification by @sbrown-livefront in #20498
• [Shared Unlock] [PM-35083] Add shared unlock typescript drivers and services by @quexten in #20589
• [PM-27679] Remove flagged logic from clients/server and clients feature flag by @jengstrom-bw in #20609
• [PM-34114] Add Passport item type to the CLI by @nick-livefront in #20621
• [PM-34156] Add accepted-state organization sync by @eliykat in #20627
• [PM-28192] Migrate Cipher Attachment Operations to use SDK instead of APIs by @gbubemismith in #20628
• [PM-37295] Ignore upgrade key rotation logout based on feature flag by @Thomas-Avery in #20637
• [PM-31054] Add V2UpgradeToken handling to sync by @Thomas-Avery in #20641
• Remove feature flag check from password generation by @adudek-bw in #20671
• [PM-2588] resolved sends root url conditionally by @bmbitwarden in #20684
• [Shared Unlock] [PM-35083] Implement biometrics over sdk IPC by @quexten in #20689
• [PM-37251] Add getStatus API method for public invite link status endpoint by @r-tome in #20695
• [PM-36967] Update rotate_user_keys to use UpgradeTokenAction by @Thomas-Avery in #20711
• [PM-36229] Route bulk-collections, move, and assigned-cipher ops to SDK by @gbubemismith in #20718
• [PM-36563] Send access event logs by @harr1424 in #20740
• [PM-37797] Add API method to check if email is valid for a given organization invite link by @r-tome in #20749
• Add feature flag for SSH ecdsa by @neuronull in #20813
• [PM-33753] Remove unlock-via-sdk-flag by @quexten in #20832
• chore(platform): add FedRampGovRegion to client feature flag enum by @addisonbeck in #20880
• [PM-37175] Preserve individual vault export folders when importing to My Items by @mcamirault in #20883
• [PM-31625] Removes feature flag pm-30521-autofill-button-view-login-screen by @jengstrom-bw in #20968
• Gate import of SSH key ECDSA type on FF by @neuronull in #21059
• [PM-38163] Add getPoliciesByInviteLinkCode to PolicyApiService by @r-tome in #21075
• [PM-38012] Initialize feature flag overrides state to empty object by @quexten in #21166

🐛 Bug fixes

• [PM-37782] User with view permission cannot favorite or add an item to a folder by @jengstrom-bw in #20764
• [PM-37462] bw get attachment writes decrypted filename verbatim by @jengstrom-bw in #20790
• [PM-37776] - fix empty vault on pin and touch id unlock by @jaasen-livefront in #20793
• [PM-24173] Fix credential generator constraint bypass by @harr1424 in #20810
• fix(cli): harden bw serve origin-protection against DNS rebinding [PM-36600] by @addisonbeck in #20881
• [PM-38400] Fix avoid ambiguous character bug by @adudek-bw in #20953
• [PM-38405] Fix SDK ref leaking out of scope and add eslint rule by @quexten in #20999
• [PM-37913] - fix cloning archived cipher by @jaasen-livefront in #21058
• [PM-38571] Fix shareReplay memory leaks by @nick-livefront in #21087
• [PM-37913] - set archivedDate when cloning ciphers by @jaasen-livefront in #21160
• [PM-38831] fix: defective SyncPolicy push notification parsing by @eliykat in #21189
• fix(nx): clear build dependsOn workspace default by @addisonbeck in #21203
• [PM-38012] Fix local override migration by @quexten in #21223
• PM-39449 resolved root url issues by @itsadrago in #21481

⚙️ Maintenance

• [PM-36363] Refactors org user view models and consumers to be ts-strict compliant by @BTreston in #20559
• [PM-6796] implemented file reorg by @bmbitwarden in #20648
• PM-36952 - Improve code review workflow with added triggers by @theMickster in #20702
• [PM-377730] Refactor unlock service & add decrypted user key method by @quexten in #20719
• fixed perms in cherry-pick workflow by @gitclonebrian in #20758
• [BRE-1938] Update Build Web workflow to run on published Web releases by @vgrassia in #20761
• [BRE-1938] Simplify and optimize Retrieve Current Desktop Rollout workflow by @vgrassia in #20778
• refactor(platform): migrate Region enum to const object per ADR-0025 by @addisonbeck in #20887
• [PM-36510] Remove dead "SDK not available" guards from SDK-backed services by @gbubemismith in #21173
• [BRE-2013] Add repository_dispatch trigger to sdk-update workflow by @vgrassia in #21187

📦 Dependency Updates

• [deps] Vault: Update https-proxy-agent to v9 by @renovate in #20124
• [deps] Vault: Update @koa/router to v15.5.0 by @renovate in #20580
• Update sdk-internal to 0.2.0-main.765 by @bw-ghapp in #20744
• Update sdk-internal to 0.2.0-main.774 by @bw-ghapp in #20770
• [PM-37729] SDK Bump by @nick-livefront in #20776
• [bre-1942] fix package lock issue by @aj-bw in #20785
• Update sdk-internal to 0.2.0-main.779 by @bw-ghapp in #20798
• Update sdk-internal to 0.2.0-main.782 by @bw-ghapp in #20807
• [deps] Architecture: Update lint-staged to v17 by @renovate in #20843
• Update sdk-internal to 0.2.0-main.798 by @bw-ghapp in #20937
• [deps] Autofill: Update tldts to v7.4.2 by @renovate in #21112
• Bump SDK version for ECDSA key support by @neuronull in #21176

🔧 Other

• Bump client version(s) by @github-actions in #20690
• [BEEEP] [PM-38012] Add local feature flag overrides by @quexten in #20833
• Improve claude.md by @Hinton in #20941
• [PM-38192] Collection Check for CLI Move by @nick-livefront in #21010
• Expand .claude/rules to cover i18n, Tailwind, testing, and Angular DI by @Hinton in #21051
• Remove FF caching for dev env by default by @coltonhurst in #21131
• Change configRetrievalIntervalMs by @coltonhurst in #21143
• Auth - Add claude.md for libs/auth by @JaredSnider-Bitwarden in #21235
• Bump client version(s) by @github-actions in #21271
• Bumped client version(s) (#21271) by @addisonbeck in #21274

Full Changelog: cli-v2026.5.0...cli-v2026.6.0