CLI v2026.9.0 Release

What's Changed

💙 Community Highlight

• [PM-29036] fix(desktop): set desktopName for Wayland app_id to display correct icon by @thisisryanswift in #17764
• [PM-38964] Remove obsolete LockScreen config from AppX manifest by @hammadxcm in #21229

Feature Development

• [PM-40945] add testing to relevant components by @dan-livefront in #22224
• feat(browser): Add autofill for SSH keys by @quexten in #21289
• Auth/PM-39706 - Open Org Invite Link Support by @JaredSnider-Bitwarden in #21574
• [PM-40736] billing terminology update by @JaredScar in #22114
• [PM-32211] fix private key before key rotation by @mzieniukbw in #20392
• [PM-35945] Browser: Show the Health Overview after a scan (gauge and risk categories) by @AlexRubik in #22235
• Auth / PM-41503 & PM-41533 - Registration - Wire new open org invite data into register start and finish by @JaredSnider-Bitwarden in #22333
• [PM-41686]Implement plumbing for inline menu lit components by @dan-livefront in #22286
• [CL-1210] use overflow directive to pack primary actions when needed by @BryanCunningham in #21589
• Feature/webmapper integration by @blackwood in #21738
• desktop-autofill: Refactor UV reprompt and window management [PM-29791] by @iinuwa in #22257
• [PM-40312] Introduce vault items table component by @shane-melton in #22237
• [CL-1245] updated icon tile colors by @BryanCunningham in #22102
• [PM-40330] Add vault list table to desktop behind VFO1Foundation flag by @nick-livefront in #22383
• desktop-autofill: Define the desktop FIDO2 user verification service [PM-29791] by @iinuwa in #22258
• [CL-1237] sidenav updates by @BryanCunningham in #21855
• [PM-35946] Browser: Health report at risk category detail view by @lastbestdev in #22246
• PM-40304: Add the conditional Vaults nav-section logic and vault-type color mapping by @nikwithak in #22119
• desktop-autofill: Implement FIDO2 user verification logic [PM-29791] by @iinuwa in #22259
• VaultPopupListTableComponent + Storybook by @nick-livefront in #22106
• [CL-998] table-v2 polish by @willmartian in #22255
• [PM-41902] Member Access Report terminology changes by @JaredScar in #22410
• [PM-40212] Enable-PAM UI (member toggle + bulk Activate PAM) by @Hinton in #22478
• [PM-37839] Browser: Delete item from at risk category view by @lastbestdev in #22268
• [PM-41687]Implement locked and saved login lit components by @dan-livefront in #22348
• [PM-40318] Introduce Web's VaultNextComponet for VFO1 by @shane-melton in #22425
• [PM-34808] Step 1 remove flagged logic for policy drawers by @JaredScar in #22342
• Browser: Add dark mode image to Health tab intro CTA by @lastbestdev in #22487
• [PM-36628] Browser: Add clean state to Health at risk category detail view by @lastbestdev in #22396
• desktop-autofill: Verify user without UI on assertion when possible [PM-29791] by @iinuwa in #22177
• desktop-autofill: macOS native user verification [PM-29791] by @iinuwa in #22178
• desktop-autofill: Windows native user verification [PM-29791] by @iinuwa in #22179
• desktop-autofill: Refactor FIDO2 modals by @iinuwa in #22433
• [PM-41688] Implement cipher list lit components by @dan-livefront in #22378
• desktop-autofill: Skip registration confirmation by @iinuwa in #22435
• [PM-40395] Add Import button to new vault table by @nikwithak in #22439
• [PM-39455] Use v2 upgrade token when asserting organization public key trust. by @mzieniukbw in #22490
• [PM-40127] Item history redesign using bit-card-segmented by @nick-livefront in #21940
• [PM-40333] Hide side-nav vault filter on desktop by @nick-livefront in #22434
• [PM-40331] Vault Param Redirect by @nick-livefront in #22438
• desktop-autofill: FIDO2 selection modal UI improvements by @iinuwa in #22436
• [PM-41856] Update tooltip wording for icons by @jengstrom-bw in #22345
• [PM-39408] feat: Tee TS logs into LogRecorder sink by @dani-garcia in #22379
• [PM-40814] Add key id support by @quexten in #22444
• Fix/late hydration shadow detection by @blackwood in #21370
• [PM-41949] Enhance SecretsManagerSubscribeComponent with feature flag support by @JaredScar in #22412
• [PM-40313] Restructure the Password Manager side navigation (web) by @gbubemismith in #22283
• [PM-41472] feat(web): add the My folders page by @gbubemismith in #22267
• [CL-1248] Add FAB button component to vault by @nick-livefront in #22523
• [PM-41273] Extend ImportService to expose per-vendor metadata by @harr1424 in #22297
• [PM-40740] Policies list & drawers terminology updates by @JaredScar in #22377
• [CL-1194] responsive breadcrumbs by @BryanCunningham in #21742
• [PM-40318] VFO1 Web vault query param handling by @shane-melton in #22501
• [PM-42183] VFO1 Side nav vault scoping by @shane-melton in #22567
• Add desktop beta icons by @trmartin4 in #22445
• [PM-39223] Browser: Run the vault scan and show its progress and failure states by @AlexRubik in #22346
• [CL-988] Update no items component to status lockup design by @vleague2 in #22386
• [PM-40848] Add the shared folder card grid component (libs/vault) by @jengstrom-bw in #22390
• [PM-41689] Implement password generator lit components by @dan-livefront in #22406
• [PM-40316] Restructure the desktop side navigation by @gbubemismith in #22585
• [PM-41475] Add the My folders page to desktop by @gbubemismith in #22588
• [CL-998] table-v2 design review follow-up by @willmartian in #22520
• [PM-40398] Move desktop Import to the vault table toolbar by @gbubemismith in #22589
• feat(automation-driver): add automation-driver package by @quexten in #21919
• [PM-41909] Remove desktop UI settings dialog feature flag by @djsmith85 in #22402
• [PM-41313] Add Fill Assist Policy Admin Console UI by @bensbits91 in #22204
• [PM-40157] Change compile-time flags to default off by @trmartin4 in #22593
• [PM-35944] Extension Health Report: Upgrade to Premium by @Banrion in #22655
• [PM-41486] Autotype MVP & GA Feature Flag Abstraction by @coltonhurst in #22253
• [PM-40505] Detecting old attachments in diagnostics tool by @mzieniukbw in #22580
• Auth/PM-42167 - SSO - Add Staged Org User Support by @JaredSnider-Bitwarden in #22562
• [PM-39926] feat(billing): client foundation for preview-driven cart — types, adapter, translation, facades, HTTP clients by @cyprain-okeke in #22173
• [PM-41001] Create scaffold for libs/managed-settings lib by @djsmith85 in #22695
• [PM-29095] Move autofill attributes to gated settings by @jprusik in #22620
• feat(automation-driver): add automation biometrics service by @quexten in #21920
• [PM-42483] Render My vault as a non-expandable nav item by @gbubemismith in #22671
• Auth/PM-42267 - SSO Error Handling Improvement - Add no-seats-available error to sso-login-failed component by @JaredSnider-Bitwarden in #22705
• [PM-41001] Implement managed settings service by @djsmith85 in #22700
• [PM-41314] Apply Fill Assist policy by @bensbits91 in #22244
• [PM-40849] Render the shared folder grid on the web end user vault view by @jengstrom-bw in #22677
• Route remaining SDK-capable Send operations through the SDK by @adudek-bw in #22321
• [CL-979] Update web & desktop layout components for VFO1 by @vleague2 in #22491
• [CL-1244] icon tiles in menus by @BryanCunningham in #22611
• [PM-37197] feat: Move New organization entry points to Add plan under Settings by @cyprain-okeke in #22530
• [PM-40157] Add extension beta icons and badge by @trmartin4 in #22191
• [PM-32740] Add support for three new cipher types to importers by @mcamirault in #21267
• feat(shared-unlock): add browser destination filtering by @quexten in #22683
• [PM-42585] feat: Add Single org prerequisite to fill assist policy by @bensbits91 in #22759
• [CL-1236] Extension header changes by @BryanCunningham in #22484
• [PM-40329] Integrate VaultPopupListTableComponent into the Vault with Filters by @jaasen-livefront in #22288
• [PM-40323] Apply vault-type color tiles to the item table and vault selector by @jaasen-livefront in #22681
• [PM-40396] tools export routing change from tools to settings by @itsadrago in #22416
• [PM-42828] Extension Health Report: Update on changes and open details by @Banrion in #22831
• [PM-40851] Render the shared folder grid on the desktop vault view by @jengstrom-bw in #22535
• [PM-40324] Add upgrade callout to vfo1 side nav footer by @gbubemismith in #22765
• [PM-40159] Update remaining Add plan page copy under the VFO1 flag by @kdenney in #22657
• [PM-41001] Wire up ManagedSettingsService into dependency injection by @djsmith85 in #22806
• [CL-1308] sidenav fast follows by @BryanCunningham in #22616
• [PM-42586] Add translated beta name to desktop tray and about menu by @trmartin4 in #22595
• feat(automation-driver): wire-in automation-driver by @quexten in #21921
• [PM-39099] - Remove FF logic for Admin Member Email Change by @jrmccannon in #22772
• [PM-38574] feat: Set trialInitiationPath for sales-assisted trials by @cyprain-okeke in #22757
• [CL-998] filter chip and menu design review follow-up by @willmartian in #22587
• [CL-1176] Add bit-badge-group and deprecate bit-badge-list by @willmartian in #21070
• [PM-42880] Add CSS class directly to form control component by @harr1424 in #22839
• [PM-41309] Web: Update Passkey login report card SVG by @lastbestdev in #22785
• [PM-42211] Create reusable shared folders table component by @jengstrom-bw in #22652
• [PM-41004] Create BrowserManagedConfigReader by @djsmith85 in #22880
• [PM-42987] Introduce feature flag for temporary item sharing on clients by @djsmith85 in #22921
• [PM-42898] Add breadcrumbs to shared folders pages by @jengstrom-bw in #22887
• [CL-1175] Create chip group component by @vleague2 in #22823
• [PM-41308] Web: Passkey login report table updates by @lastbestdev in #22766
• [PM-42914] Browser: Update copy in delete item from Health at risk dialog by @lastbestdev in #22860
• [PM-41307] Web: Passkey report filter option label updates by @lastbestdev in #22780
• [PM-35381] Add final illustrations to the Access Intelligence onboarding dialogs by @AlexRubik in #22536
• [PM-43013] fix(vault): restore the "My items" side-nav entry by @gbubemismith in #22937
• [PM-43025] Make vault table row clickable by @shane-melton in #22939
• Create a DevManagedSettingsService, to override any reading of manage… by @djsmith85 in #22907
• [PM-39409] feat: Forward TS logs to Flight Recorder buffer by @dani-garcia in #22613
• [PM-39982] Create share-link icon by @djsmith85 in #22934
• [PM-39982] Create libs/tools/share using the nx lib generator plugin by @djsmith85 in #22926
• [PM-42988] Move Send decryption to SDK functions by @mcamirault in #22923
• [PM-41305] Web: Update header on all report pages by @lastbestdev in #22725
• [PM-41306] Web: Update Passkey report banner type to info by @lastbestdev in #22715
• [CL-982] update bit-item styles by @BryanCunningham in #22242
• [PM-42118] Migrate to the new bit-chip-group component by @shane-melton in #22952
• [PM-40325] feat: Restructure Admin Console side nav for VFO1 by @gbubemismith in #22890
• [PM-39703] Add colored vault icon support for new table filters by @shane-melton in #22944
• [CL-1293] add description and hideOnEmpty inputs to bit-row-group by @willmartian in #22129
• Add breadcrumbs to Shared Folder views by @nikwithak in #22717
• PM-40897: Add breadcrumbs to Appearance and Domain Rules settings pages by @nikwithak in #22787
• [PM-40322] [PM-40217] Account switcher moves to Footer by @ike-kottlowski in #22895
• [PM-37136] Empty vault states by @nick-livefront in #22827
• [PM-41981] Keep v1 users on TS key rotation when SDK key rotation is enabled by @mzieniukbw in #22849

❗ Breaking Changes

• Route Send sync and key rotation through the SDK by @adudek-bw in #22672

🐛 Bug fixes

• [PM-8711] inconsistent casing between vault management api feedback and api docs by @JaredScar in #22232
• [PM-11607] AC Event Log Buttons vertical alignment by @JaredScar in #22222
• [PM-41559] [PM-41539] Recognize both Keeper SSO callback URL forms by @detunized in #22265
• [PM-41691] Fix issue where edit item, hidden passwords wipes password, TOTP by @JaredScar in #22287
• [PM-40258]: AuthRequestResponse refactor by @enmande in #22182
• [PM-41854] fix: skip collections coachmark step for users without collections by @gbubemismith in #22376
• Auth/ PM-41535 & PM-41897 - Open Org Invite Link - Update accept-error classifier for new SDK API error format by @JaredSnider-Bitwarden in #22393
• Auth & KM / PM-41538 - Organization Invite Acceptance - Show invite accepted toast on TDE and KC SSO JIT flows by @JaredSnider-Bitwarden in #22394
• [PM-41880] Quick fix for edit members dialog dependencies by @ttalty in #22407
• fix(biometrics): change the biometric persistent encryption migration to handle the case where the aes-cbc-hmac key has a key id by @quexten in #22336
• [PM-41829] Login Buttons Overlap Owner and Name Elements When Resizing Browser by @jengstrom-bw in #22418
• Auth/PM-41978 - Open Org Invite Acceptance - update error copy for vfo1-foundation vault terminology change by @JaredSnider-Bitwarden in #22485
• [PM-42166] Update member access report terminology by @JaredScar in #22522
• [PM-42006] Self Host Premium Upgrade Copy Change by @JaredScar in #22493
• [PM-41830] Shrinking Window Causes Buttons to Overlap Owner Element and Pushes More Options Menu Offscreen by @jengstrom-bw in #22419
• [PM-41979] [PM-41899] [VULN-735] Validate profileId in Chromium importer by @detunized in #22432
• Auth / PM-32421 - CLI - Login Command - Validate SSO account has a CLI-supported decryption path by @JaredSnider-Bitwarden in #22411
• [PM-42235] Browser: Health at risk category empty state fixes by @lastbestdev in #22538
• [PM-42239] Access Intelligence: Match v2 request password change button behavior to v1 by @lastbestdev in #22537
• [PM-40350] Revert early return introduced in #21836 by @harr1424 in #22453
• [PM-41905] Add Autotype MVP Window Validity Check by @coltonhurst in #22398
• Revert "[PM-42239] Access Intelligence: Match v2 request password change button behavior to v1" by @lastbestdev in #22590
• fix(key-connector): fix sdk-based unlock with key-connector on jit provisioning by @quexten in #22545
• [PM-40120] Prompt CLI user for divergent domain access by @harr1424 in #22216
• [PM-27010] fix: Resolve tax ID type from country and value, with format guidance by @amorask-bitwarden in #22388
• [PM-42239] Access Intelligence v2 match request password change button behavior to v1 by @lastbestdev in #22641
• webauthn: Pass PRF input on unlock passkey creation by @iinuwa in #21998
• fix(updater): disable AppImage in-app auto-update by @addisonbeck in #22689
• [PM-42470] Add cooldown to user key id backfill migration by @quexten in #22682
• [PM-42414] Browser health UI follow up tweaks by @lastbestdev in #22678
• fix(key-management): Clear key id backfill cooldown on logout by @quexten in #22698
• [PM-41333] Remove IPC fingerprint and client key half by @quexten in #22645
• [PM-42443] Include member items when fetching org ciphers in Access Intelligence by @Banrion in #22749
• [PM-36960] fix: TOTP not copied to clipboard on stripe settings in Chrome by @bensbits91 in #20780
• [PM-42465] Fix batch bar Clear not unchecking vault by @nick-livefront in #22706
• [SRE-2516] Do not event upload request bodies of unlimited size by @MGibson1 in #15190
• [PM-42631] Fix flaky storybook tests for shared folder card grid by @jengstrom-bw in #22760
• [PM-42468] fix: Prevent crash from null active account in cipher row menu services by @nick-livefront in #22776
• [PM-42203] Gate basic auth listeners behind a feature flag by @jprusik in #22612
• [PM-42394] Show Vault and Shared Folders filter chips when vault is empty by @nick-livefront in #22761
• Vault Storybook - Remove org notification banner feature flag reference by @nick-livefront in #22833
• SSH Agent import: log on failure by @neuronull in #22676
• [PM-41487] Reuse a freshly built lunr index instead of rebuilding after the lock by @shane-melton in #22227
• feat(salt): [PM-27060] - Use SDK salt for MP Login by @Patrick-Pimentel-Bitwarden in #22381
• [PM-42932] fix: normalize null hostname from getUriHostname to prevent search crash by @nick-livefront in #22882
• fix(login-decryption-options): [PM-42457] -… by @Patrick-Pimentel-Bitwarden in #22649
• Fix: SSH Agent sign approval requests for non-forwarded hosts by @neuronull in #22836
• [PM-36618] Web: Fix end icon in export button on events pages by @lastbestdev in #22788
• Fix/autofill toplayer listener dedup by @blackwood in #21511
• fix(snap): add hardware-observe plug for FIDO HID enumeration by @addisonbeck in #22885
• Fix: SSH sign request handling of non-active account by @neuronull in #22856
• [PM-42912] Filter Icons by @nick-livefront in #22920
• [PM-42903] Browser: Add virtual scrolling to health at risk category view by @lastbestdev in #22850
• Rolled back changes for set-password by @Patrick-Pimentel-Bitwarden in #22900
• [PM-42913] Reuse the health scan when returning to the overview by @Banrion in #22927
• [PM-13373] Fix Enpass CSV Importer by @harr1424 in #22561
• [PM-42994] Shared folders grid and Items table needs standard spacing by @jengstrom-bw in #22933
• [PM-42851] Fail the vault health scan when the exposed-password check errors by @AlexRubik in #22848
• [PM-42525] Vault side nav query param preservation by @shane-melton in #22932
• [PM-42970] Fix folder filter restore race condition by @nick-livefront in #23013
• [PM-43064] Look up fill assist targeting rules with frame URL instead of tab URL by @jprusik in #22990
• [PM-42991] After selecting a pagination size option the dropdown selection and pagination is no longer clickable by @jengstrom-bw in #22942
• [PM-42937] Clear vault filters when active account changes by @nick-livefront in #22904
• [PM-42854] bugs with policies drawers for RC by @JaredScar in #23044

⚙️ Maintenance

• chore: remove grype scanning by @sognefej in #22289
• [chore] Add CODEOWNERS entry for the licensed browser DIRT directory by @AlexRubik in #22325
• Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22302
• Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22300
• Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22301
• Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22340
• Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22338
• Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22339
• [PM-38767] Adopt cargo-run-bin for binary tool version pinning in desktop_native by @coroiu in #21169
• refactor(crypto): split out legacy compat key service by @quexten in #22319
• Add PAM Allium specification by @abergs in #22373
• [PM-41874] refactor(crypto): move shared client wiring callers to @bitwarden/legacy-crypto by @quexten in #22368
• [PM-41874] refactor(crypto): move dirt callers to @bitwarden/legacy-crypto by @quexten in #22366
• [PM-41874] refactor(crypto): move admin-console callers to @bitwarden/legacy-crypto by @quexten in #22367
• [PM-41874] refactor(crypto): move desktop-native callers to @bitwarden/legacy-crypto by @quexten in #22372
• refactor(auth): unlock via UnlockService in login strategies by @quexten in #22354
• [PM-36409] Enhance type safety across various components by @JaredScar in #22391
• Remove unused loginApprovalModelRef by @djsmith85 in #22405
• [PM-41874] refactor(crypto): move key-management callers to @bitwarden/legacy-crypto by @quexten in #22362
• Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22423
• Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22422
• Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22424
• [PM-35785] Fix SDK breaking change: missing asUuid by @eliykat in #22392
• refactor(key-management-ui): stop re-setting the user key after unlock by @quexten in #22355
• [BRE-2116] Bump actions/checkout to v7.0.1 + add bypass flag in client build workflows by @brandonbiete in #22385
• Fix: breaking SDK change - use asUuid in tests by @eliykat in #22443
• widen engines pin to include Node 24 by @addisonbeck in #22480
• [PM-38455] Remove unused premiumRequired from app.components by @djsmith85 in #22403
• [PM-41874] refactor(crypto): move tools callers to @bitwarden/legacy-crypto by @quexten in #22364
• [PM-41874] refactor(crypto): move secrets-manager callers to @bitwarden/legacy-crypto by @quexten in #22370
• [PM-41874] refactor(crypto): move platform callers to @bitwarden/legacy-crypto by @quexten in #22369
• [PM-41874] refactor(crypto): move vault callers to @bitwarden/legacy-crypto by @quexten in #22365
• [PM-41684] Remove unused Autotype MVP IPC channels by @coltonhurst in #22285
• [PM-41801] Switch to using policyAppliesToUser$ for the Autotype Default Policy by @coltonhurst in #22322
• [PM-42196] Update Native Passkey Ownership by @coltonhurst in #22529
• refactor(auth): unlock via UnlockService when setting an initial password by @quexten in #22356
• [PM-41874] refactor(crypto): move billing callers to @bitwarden/legacy-crypto by @quexten in #22371
• [PM-41874] refactor(crypto): move auth callers to @bitwarden/legacy-crypto by @quexten in #22363
• refactor(key-management): read the user key via userKey$ by @quexten in #22353
• refactor(unlock): replace UserAutoUnlockKeyService with UnlockService by @quexten in #22359
• refactor(key-management): unlock via UnlockService in key connector conversion by @quexten in #22358
• [PM-41874] Remove legacy-crypto shims (platform) by @quexten in #22579
• chore(lock): Move LockService into libs/unlock and add lock/unlock source tracking by @quexten in #22539
• [PM-41874] Remove legacy-crypto shims (key management) by @quexten in #22578
• ci: Beta Appx manifest changes by @iinuwa in #22564
• Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22568
• Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22569
• refactor(auth): unlock via UnlockService during TDE JIT registration by @quexten in #22357
• Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22570
• Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22607
• refactor(crypto): drop electron key service by @quexten in #22601
• Sign Windows Beta Appx in CI by @iinuwa in #22563
• [PM-38187] Improve isSnapStore detection by @djsmith85 in #21195
• Bump client version(s) by @github-actions[bot] in #22608
• tests: add test for device trust / shared unlock / unlock ordering by @quexten in #22600
• [BRE-2208] Adding an MS store check for beta releases to fail-fast if beta version > 1 by @pixman20 in #22583
• refactor(unlock): extract AutoUnlockService by @quexten in #22602
• Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22605
• Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22606
• fix build failures on main caused by out-of-date import by @audreyality in #22666
• Auth/PM-41523 - Organization Invite Service - Introduce NoOp and make DI match client support for org invites by @JaredSnider-Bitwarden in #22494
• key service flaky cipherDecryptionKeys$ tests by @mzieniukbw in #22680
• chore(shared-unlock): update to new shared unlock implementation by @quexten in #22540
• [PM-40024] Remove obsolete keys used in messages.json for old components since we removed V2 components already by @JaredScar in #22617
• ci: Fix not reporting test results on push and workflow_dispatch by @eliykat in #22679
• Fix IPC doc comment by @coltonhurst in #22754
• [BRE-2208] Turning off auto bump for beta releases by @pixman20 in #22582
• [PM-33422] refactor: remove pm-31948-org-user-notification-banner feature flag by @jaasen-livefront in #22719
• [BRE-2166] Add metadata to container images by @vgrassia in #22804
• [PM-42443] Test cases for including My Items in Access Intelligence by @Banrion in #22755
• [BRE-2219] Replace 'checksum' usage with 'Get-FileHash' cmdlet for Desktop/CLI builds by @vgrassia in #22825
• [PM-35599] Update Password Request Models (Auth) by @rr-bw in #20643
• [PM-35601] Update Password Request Models (Admin Console) by @rr-bw in #20664
• refactor(km): simplify process reload service by @quexten in #22646
• disabling failing key service test by @mzieniukbw in #22875
• chore(km): Add browser and CLI process reload to codecov component by @quexten in #22869
• ci: Copy macOS autofill extension in after-pack to avoid re-signing by @iinuwa in #22621
• [PM-39460] Add v2_encrypted_migrations_grace_period_start to state bridge by @eligrubb in #22653
• Mute flaky chip-filter test by @vleague2 in #22925
• [BRE-2230] fix(ci): derive web build git hash from checked-out HEAD by @aj-bw in #22881
• Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22770
• Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22768
• Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22769
• Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22984
• Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22983
• Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22982
• [PM-43089] Browser: Update Health intro CTA images by @lastbestdev in #23015
• Bump client version(s) by @github-actions[bot] in #23038

📦 Dependency Updates

• Update sdk-internal to 0.2.0-main.956 by @bw-ghapp[bot] in #22146
• [deps] Platform: Update @types/node to v22.20.1 by @renovate[bot] in #22218
• Update sdk-internal to 0.2.0-main.967 by @bw-ghapp[bot] in #22326
• [deps]: Update dtolnay/rust-toolchain digest to 4360b52 by @renovate[bot] in #22459
• [deps]: Update actions/stale action to v11 by @renovate[bot] in #22475
• Update sdk-internal to 0.2.0-main.970 by @bw-ghapp[bot] in #22442
• Update sdk-internal to 0.2.0-main.971 by @bw-ghapp[bot] in #22512
• [deps] Desktop Native: Update Rust crate serial_test to v4 by @renovate[bot] in #22469
• [deps] Platform: Update Rust crate serde_with to v3.22.0 by @renovate[bot] in #22462
• [deps]: Update Rust to v1.97.1 by @renovate[bot] in #22467
• Update sdk-internal to 0.2.0-main.978 by @bw-ghapp[bot] in #22518
• Update sdk-internal to 0.2.0-main.979 by @bw-ghapp[bot] in #22581
• [deps] AC: Update core-js to v3.50.0 by @renovate[bot] in #22460
• Update sdk-internal to 0.2.0-main.983 by @bw-ghapp[bot] in #22592
• [deps] Autofill: Update wait-on to v9.1.0 by @renovate[bot] in #22461
• Address RUSTSEC-2026-0258 by @coltonhurst in #22514
• [deps] Platform: Update postcss to v8.5.23 [SECURITY] by @renovate[bot] in #22324
• [deps] Platform: Update nx to v22.7.7 [SECURITY] by @renovate[bot] in #22693
• Automated update from source run 32391882332 by @bre-deploy[bot] in #22558
• Update sdk-internal to 0.2.0-main.1001 by @bw-ghapp[bot] in #22651
• Update sdk-internal to 0.2.0-main.1008 by @bw-ghapp[bot] in #22841
• Update sdk-internal to 0.2.0-main.1011 by @bw-ghapp[bot] in #22892
• Update sdk-internal to 0.2.0-main.1012 by @bw-ghapp[bot] in #22922
• Update sdk-internal to 0.2.0-main.1013 by @bw-ghapp[bot] in #22985

🎨 Other

• [AI-88] llm: Remove .claude/CONTRIBUTING.md by @SaintPatrck in #22532
• [AI-94] llm: Evaluate SDK update PRs against the upstream commit range by @SaintPatrck in #22697

New Contributors

• @thisisryanswift made their first contribution in #17764
• @hammadxcm made their first contribution in #21229
• @bre-deploy[bot] made their first contribution in #22558

Full Changelog: cli-v2026.8.0...cli-v2026.9.0