Unclaimed project
Are you a maintainer of vaultwarden? Claim this project to take control of your public changelog and roadmap.
Claim this projectChangelog
vaultwarden
Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
bitwardenbitwarden-rsdockerrocketrustvaultwarden
Last updated 29 days ago
Back to changelogNew
1.35.0
Notable changes
- Implemented support for SSO with OpenID Connect, https://github.com/dani-garcia/vaultwarden/wiki/Enabling-SSO-support-using-OpenId-Connect
- Updated web vault to 2025.12.0
- Added support for future mobile apps with versions 2026.1.0+
- This is the first vaultwarden release using immutable releases and release attestation!
What's Changed
- Fix multi delete slowdown by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6144
- Perform same checks when setting kdf by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6141
- SSO using OpenID Connect by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/3899
- Delete SSO.md by @dani-garcia in https://github.com/dani-garcia/vaultwarden/pull/6152
Update webauthn-rs to 0.5.x by @zUnixorn in https://github.com/dani-garcia/vaultwarden/pull/5934a little cleanup after SSO merge by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6153Fix link to point to the wiki by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6157Fix Email 2FA for mobile apps by @dfunkt in https://github.com/dani-garcia/vaultwarden/pull/6156Update Rust to 1.89.0 by @dfunkt in https://github.com/dani-garcia/vaultwarden/pull/6150Fix several more multi select push issues by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6151Fix minor typo by @ncguk in https://github.com/dani-garcia/vaultwarden/pull/6165Update crates, fixes some yanked crates by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6167Fix WebauthN issue with Software Keys by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6168Fix Playwright test conf and update deps by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6176Misc updates by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6185fix typo in description of helo_name by @Flottegurke in https://github.com/dani-garcia/vaultwarden/pull/6194Fix Playwright by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6206Switch to GHA's concurrency control by @dfunkt in https://github.com/dani-garcia/vaultwarden/pull/6164Make database connection pool dynamic by @Samoth69 in https://github.com/dani-garcia/vaultwarden/pull/6166Re-add if check to release workflow by @dfunkt in https://github.com/dani-garcia/vaultwarden/pull/6227Fix Webauthn/Passkey 2FA migration/validation issues by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6190refactor(config): update template, add validation by @tessus in https://github.com/dani-garcia/vaultwarden/pull/6229Show SSO_ALLOW_UNKNOWN_EMAIL_VERIFICATION in admin by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6235Update crates, gha and web-vault by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6234Fix panic around sso_master_password_policy by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6233make webauthn more optional by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6160Fix 2fa recovery endpoint by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6240update trivy-action to v0.33.0 by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6248update web vault to v2025.9.1 and allow new policy by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6340prevent changing collections when hide_passwords is true by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6278Fix sso_user dropped on User::save by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6262Change OIDC dummy identifier by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6263add new billing warnings endpoint by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6369Add auth_request pending endpoint by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6368Fix Org identifier by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6364add mail address change warning for invited accounts by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6377add missing media-src directive by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6381add seat limit for the invite dialog by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6371[Playwright] Improvements around node by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6321Use Diesels MultiConnections Derive by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6279Improve protected actions by @dani-garcia in https://github.com/dani-garcia/vaultwarden/pull/6411Fix issue with key-rotation and emergency-access by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6421Optimizations and build speedup by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6339Use an older version of mariadb to prevent a panic by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6453Playwright against abitrary web-vault by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6380Fix KDF Change with new web-vault by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6458Fix: admin theme emoji alignment by @joepduin in https://github.com/dani-garcia/vaultwarden/pull/6459remove invalid emergency access dummy value by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6463Add pm-25373-windows-biometrics-v2 feature flag by @Ephemera42 in https://github.com/dani-garcia/vaultwarden/pull/6468Switch to multiple runners per arch by @dfunkt in https://github.com/dani-garcia/vaultwarden/pull/6472Fix icon redirect caching by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6487Fix around singleorg policy by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6247fix email as 2fa provider by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6473Update crates and Rust version by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6485Add option to prefer IPv6 resolving by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6494Some small admin js/css updates by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6501Update crates and workflows and some fixes by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6508Fixed a typo in the default TTL value by @k725 in https://github.com/dani-garcia/vaultwarden/pull/6528Iterate over tags on release by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6518Org.put_policy type not in body anymore by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6514Android want response property in camelCase by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6513Fix admin invite with SSO by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6498Improve sso auth flow by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6205fix email as 2fa for sso by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6495Fix release workflow by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6532Further fixes for the release workflow by @dfunkt in https://github.com/dani-garcia/vaultwarden/pull/6533add empty /api/tasks endpoint by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6557Revert to gzip compression by @dfunkt in https://github.com/dani-garcia/vaultwarden/pull/6566support UriMatchDefaults policy by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6570Add new accountKeys and masterPasswordUnlock fields by @dani-garcia in https://github.com/dani-garcia/vaultwarden/pull/6572Update crates and Rust by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6551Add UserDecryption on /sync too by @dani-garcia in https://github.com/dani-garcia/vaultwarden/pull/6574Update web-vault to v2025.12.0 by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6577Fix posting cipher with readonly collections by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6578Update crates by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6585Simplify binary extraction by @dfunkt in https://github.com/dani-garcia/vaultwarden/pull/6554Remove unnecessary output sharing between jobs by @dfunkt in https://github.com/dani-garcia/vaultwarden/pull/6555Add wrapped named variants to UserDecryptionOptions by @dani-garcia in https://github.com/dani-garcia/vaultwarden/pull/6598New Contributors
- @zUnixorn made their first contribution in https://github.com/dani-garcia/vaultwarden/pull/5934
- @ncguk made their first contribution in https://github.com/dani-garcia/vaultwarden/pull/6165
- @Flottegurke made their first contribution in https://github.com/dani-garcia/vaultwarden/pull/6194
- @Samoth69 made their first contribution in https://github.com/dani-garcia/vaultwarden/pull/6166
- @joepduin made their first contribution in https://github.com/dani-garcia/vaultwarden/pull/6459
- @k725 made their first contribution in https://github.com/dani-garcia/vaultwarden/pull/6528
Full Changelog: https://github.com/dani-garcia/vaultwarden/compare/1.34.3...1.35.0