server

What's Changed

💙 Community Highlight

• [PM-37648] Fix double HTML encoding in emergency access emails by @singhvishalkr in https://github.com/bitwarden/server/pull/7652

:shipit: Feature Development

• [PM-38928] - Add name, email to org user update by @jrmccannon in https://github.com/bitwarden/server/pull/7871
• Seeder: add --owner-email and --org-name CLI override flags by @JaredSnider-Bitwarden in https://github.com/bitwarden/server/pull/7870
• [PM-28365] - Add Feature Flag Admin Initiated Member Email change by @jrmccannon in https://github.com/bitwarden/server/pull/7887
• [PM-37514] Support Teams 2019 Migration by @sbrown-livefront in https://github.com/bitwarden/server/pull/7864
• [PM-38798] Create validation link confirmation by @JimmyVo16 in https://github.com/bitwarden/server/pull/7895
• Auth/PM-39774 - Redirect existing users without org membership back to /login on SSO callback by @JaredSnider-Bitwarden in https://github.com/bitwarden/server/pull/7890
• [PM-39745] Scaffold PAM access-rule endpoints by @Hinton in https://github.com/bitwarden/server/pull/7878
• [PM-34393] Add event logging for organization invite link actions by @r-tome in https://github.com/bitwarden/server/pull/7826
• [PM-39798] Scaffold PAM access-request endpoints by @Hinton in https://github.com/bitwarden/server/pull/7893
• [PM-39557] Replace invite link key columns with an opaque Invite blob by @r-tome in https://github.com/bitwarden/server/pull/7896
• [PM-37954] Add Command for Provisioning Staged OrganizationUsers by @sven-bitwarden in https://github.com/bitwarden/server/pull/7859
• [PM-32187] Add Send Type restriction to Send Controls policy by @mcamirault in https://github.com/bitwarden/server/pull/7504
• [PM-36965] feat: Add SeederApi scene for migration cohort CSV-export testing by @cyprain-okeke in https://github.com/bitwarden/server/pull/7906
• [PM-38567] Migration Renewal Copy Dynamic Update by @sbrown-livefront in https://github.com/bitwarden/server/pull/7921
• [PM-38101] Add Staged Provision API Fields by @sven-bitwarden in https://github.com/bitwarden/server/pull/7927
• [PM-31929] Add deletion days restriction to Send Controls policy by @mcamirault in https://github.com/bitwarden/server/pull/7506
• [PM-36505] Finalize Send Controls policy, add second feature flag to enable/disable logic by @mcamirault in https://github.com/bitwarden/server/pull/7943
• [PM-38927] - Extract Organziation User Role Validation by @jrmccannon in https://github.com/bitwarden/server/pull/7876
• [PM-39210] fix: Block converting a Secrets-Manager-enabled org to a Business Unit Portal by @cyprain-okeke in https://github.com/bitwarden/server/pull/7892
• [PM-38796] Create link confirmation endpoint by @JimmyVo16 in https://github.com/bitwarden/server/pull/7907
• [PM-40085] Remove initial delay on self-hosted database migration by @trmartin4 in https://github.com/bitwarden/server/pull/7917
• [PM-39976] Scaffold PAM lease endpoints by @Hinton in https://github.com/bitwarden/server/pull/7925
• added new env var to alter backup filename TZ by @keithhubner in https://github.com/bitwarden/server/pull/7956
• [PM-37944] Differentiate Send events according to domain by @harr1424 in https://github.com/bitwarden/server/pull/7690

🐛 Bug fixes

• [PM-39584] fix: Gate migration grace service accounts on Secrets Manager presence by @amorask-bitwarden in https://github.com/bitwarden/server/pull/7897
• [PM-39816] fix: Raise migrated Password Manager seats to cover Secrets Manager seats by @amorask-bitwarden in https://github.com/bitwarden/server/pull/7904
• [PM-39805] fix: Expose SM migration-grace service accounts on subscription response by @amorask-bitwarden in https://github.com/bitwarden/server/pull/7901
• [PM-38000] Convert text feilds for email to email fields for form validation by @BTreston in https://github.com/bitwarden/server/pull/7908
• [PM-39164] Gate Access Intelligence report reads on new-architecture flag by @Banrion in https://github.com/bitwarden/server/pull/7825
• fix(codeowners): Reorder Docker rules to fix owner override by @fntyler in https://github.com/bitwarden/server/pull/7937
• [PM-35198] - remove orphaned blob attachments after deletion by @jaasen-livefront in https://github.com/bitwarden/server/pull/7539
• [PM-40002] Fix Teams 2019 Migration Display by @sbrown-livefront in https://github.com/bitwarden/server/pull/7933
• [SHOT-215] fix: Migrate legacy identity.pfx to modern encryption on update by @mimartin12 in https://github.com/bitwarden/server/pull/7942
• [PM-39554] Create default collection for demoted admin by @BTreston in https://github.com/bitwarden/server/pull/7918
• [PM-38595] Get collection permission with users and groups by @BTreston in https://github.com/bitwarden/server/pull/7945
• [PM-38827] Remove errant org membership check by @BTreston in https://github.com/bitwarden/server/pull/7929
• [PM-40128] Adjust enforcement message when Send is noncompliant with … by @mcamirault in https://github.com/bitwarden/server/pull/7946
• [PM-39909] fixed LINQ error when saving send controls by @itsadrago in https://github.com/bitwarden/server/pull/7939
• [SHOT-219] fix: build nginx image for arm64 architecture by @mimartin12 in https://github.com/bitwarden/server/pull/7944
• [PM-40281] convert to text field by @BTreston in https://github.com/bitwarden/server/pull/7971
• [PM-40516] Fix Extended Cache Service Registration by @sven-bitwarden in https://github.com/bitwarden/server/pull/8007

⚙️ Maintenance

• add MyItems to ApplyEnterpriseFeatures by @nthompson-bitwarden in https://github.com/bitwarden/server/pull/7882
• [PM-31107] Seeder: blob-migration preset + fido2/password-history/linked-field fixture support by @shane-melton in https://github.com/bitwarden/server/pull/7809
• [PM-19169] Remove feature flag pm-19148-innovation-archive by @jengstrom-bw in https://github.com/bitwarden/server/pull/7884
• [PM-29251] Remove pm-23384-browser-premium-spotlight feature flag by @jengstrom-bw in https://github.com/bitwarden/server/pull/7885
• Seeder: fix RecipeOrchestratorIntegrationTests build after SeederDependencies arity change by @JaredSnider-Bitwarden in https://github.com/bitwarden/server/pull/7888
• Minor but important doc update to align with other overrides by @theMickster in https://github.com/bitwarden/server/pull/7889
• [PM-39734] Support Minimal API endpoints in OpenAPI by @Hinton in https://github.com/bitwarden/server/pull/7874
• [PM-39512] Stricter data protection errors by @justindbaur in https://github.com/bitwarden/server/pull/7837
• [PM-35812] Remove BulkAutoConfirmOnLogin feature flag logic by @JaredScar in https://github.com/bitwarden/server/pull/7902
• [BRE-1533] Trigger Bitwarden Lite for server builds (including PRs) by @vgrassia in https://github.com/bitwarden/server/pull/7905
• Relax cert check on development builds by @justindbaur in https://github.com/bitwarden/server/pull/7912
• Seeder - Bump RustSdk to the latest release of sdk-internal by @theMickster in https://github.com/bitwarden/server/pull/7903
• Opt the Aspire project out of package locking by @justindbaur in https://github.com/bitwarden/server/pull/7916
• add new cipher type scenes by @rdaugherty in https://github.com/bitwarden/server/pull/7911
• [deps]: Update github-action minor by @renovate[bot] in https://github.com/bitwarden/server/pull/7006
• test(accounts-controller): Move tests under Auth/ directories for CODEOWNERS. by @enmande in https://github.com/bitwarden/server/pull/7658
• PM-39866 - Enhance seeder to seed archive and deleted ciphers by @theMickster in https://github.com/bitwarden/server/pull/7923
• Add Seeder query to get email codes by @bnagawiecki in https://github.com/bitwarden/server/pull/7880
• Add OrganizationUserInviteQuery by @bnagawiecki in https://github.com/bitwarden/server/pull/7915
• [BRE-2039] ci(docker): add distroless FIPS gov.Dockerfile variants by @fntyler in https://github.com/bitwarden/server/pull/7875
• [PM-32699] Utilize cache to check ability of useMyItems if available by @JaredScar in https://github.com/bitwarden/server/pull/7922
• [PM-37469] UseRiskInsights organization ability: migration, plan mapping, admin toggle, license, and endpoint guard by @AlexRubik in https://github.com/bitwarden/server/pull/7782
• [BRE-1907] Add artifact manifest to build.yml by @gitclonebrian in https://github.com/bitwarden/server/pull/7920
• [BRE-2039] chore: cleanup dockerfile comments by @fntyler in https://github.com/bitwarden/server/pull/7935
• Refactor Skill(bump-rust-sdk) to align with current workflow & best practices for skill evaluation by @theMickster in https://github.com/bitwarden/server/pull/7909
• [PM-33045] Remove FeatureRoutedCacheService by @JimmyVo16 in https://github.com/bitwarden/server/pull/7931
• chore(ci): add platform-community code-review signal by @addisonbeck in https://github.com/bitwarden/server/pull/7948
• [PM-38209] Remove pm-26961-access-intelligence-trend-chart feature flag by @lastbestdev in https://github.com/bitwarden/server/pull/7840
• [BRE-1907] Corrected artifact manifest container image format by @gitclonebrian in https://github.com/bitwarden/server/pull/7938
• Auth/PM-38811 - KM - Update RotateUserAccountKeysCommand to use MasterPasswordService by @JaredSnider-Bitwarden in https://github.com/bitwarden/server/pull/7804
• Bumped version to 2026.7.0 (#7967) by @addisonbeck in https://github.com/bitwarden/server/pull/7970

📦 Dependency Updates

• [PM-39443] pin automapper dependency to under v15 by @itsadrago in https://github.com/bitwarden/server/pull/7856
• [deps]: Update actions/upload-artifact action to v7 by @renovate[bot] in https://github.com/bitwarden/server/pull/7219
• [deps]: Update Microsoft.NET.Test.Sdk to v18.7.0 by @renovate[bot] in https://github.com/bitwarden/server/pull/7777
• [deps] Tools: Update MailKit to v4.17.0 by @renovate[bot] in https://github.com/bitwarden/server/pull/7775
• [deps] BRE: Update nginx Docker tag to v1.31 by @renovate[bot] in https://github.com/bitwarden/server/pull/7932

🎨 Other

• Stripe integration tests by @justindbaur in https://github.com/bitwarden/server/pull/7828
• [VULN-649] ci: Remove deprecated scan workflow by @theMickster in https://github.com/bitwarden/server/pull/7851
• Auth - Tokenables Claude Rule Update - Add binding-property lockdown and known-limitation note by @JaredSnider-Bitwarden in https://github.com/bitwarden/server/pull/7900
• Create exploring-bitwarden-data Claude Skill by @theMickster in https://github.com/bitwarden/server/pull/7763

New Contributors

• @rdaugherty made their first contribution in https://github.com/bitwarden/server/pull/7911
• @singhvishalkr made their first contribution in https://github.com/bitwarden/server/pull/7652

Full Changelog: https://github.com/bitwarden/server/compare/v2026.6.2...v2026.7.0