What's Changed 💙 Community Highlight • [PM-38330] Fix per-request memory leak in bw serve (authStatusFor$) by @ggiesen in #20912 :shipit：Feature Development • Add new SendApiServer that uses the SDK by @adudek-bw in #20170 • [PM-34157] Wire up SDK to NewPolicyService by @eliykat in #20377 • [PM-31059] Implement SDK managed PIN unlock by @quexten in #20395 • [PM-35228] Add Premium Status Changed Push Notification by @sbrown-livefront in #20498 • [Shared Unlock] [PM-35083] Add shared unlock typescript drivers and services by @quexten in #20589 • [PM-27679] Remove flagged logic from clients/server and clients feature flag by @jengstrom-bw in #20609 • [PM-34114] Add Passport item type to the CLI by @nick-livefront in #20621 • [PM-34156] Add accepted-state organization sync by @eliykat in #20627 • [PM-28192] Migrate Cipher Attachment Operations to use SDK instead of APIs by @gbubemismith in #20628 • [PM-37295] Ignore upgrade key rotation logout based on feature flag by @Thomas-Avery in #20637 • [PM-31054] Add V2UpgradeToken handling to sync by @Thomas-Avery in #20641 • Remove feature flag check from password generation by @adudek-bw in #20671 • [PM-2588] resolved sends root url conditionally by @bmbitwarden in #20684 • [Shared Unlock] [PM-35083] Implement biometrics over sdk IPC by @quexten in #20689 • [PM-37251] Add getStatus API method for public invite link status endpoint by @r-tome in #20695 • [PM-36967] Update rotate_user_keys to use UpgradeTokenAction by @Thomas-Avery in #20711 • [PM-36229] Route bulk-collections, move, and assigned-cipher ops to SDK by @gbubemismith in #20718 • [PM-36563] Send access event logs by @harr1424 in #20740 • [PM-37797] Add API method to check if email is valid for a given organization invite link by @r-tome in #20749 • Add feature flag for SSH ecdsa by @neuronull in #20813 • [PM-33753] Remove unlock-via-sdk-flag by @quexten in #20832 • chore(platform)：add FedRampGovRegion to client feature flag enum by @addisonbeck in #20880 • [PM-37175] Preserve individual vault export folders when importing to My Items by @mcamirault in #20883 • [PM-31625] Removes feature flag pm-30521-autofill-button-view-login-screen by @jengstrom-bw in #20968 • Gate import of SSH key ECDSA type on FF by @neuronull in #21059 • [PM-38163] Add getPoliciesByInviteLinkCode to PolicyApiService by @r-tome in #21075 • [PM-38012] Initialize feature flag overrides state to empty object by @quexten in #21166 🐛 Bug fixes • [PM-37782] User with view permission cannot favorite or add an item to a folder by @jengstrom-bw in #20764 • [PM-37462] bw get attachment writes decrypted filename verbatim by @jengstrom-bw in #20790 • [PM-37776] - fix empty vault on pin and touch id unlock by @jaasen-livefront in #20793 • [PM-24173] Fix credential generator constraint bypass by @harr1424 in #20810 • fix(cli)：harden bw serve origin-protection against DNS rebinding [PM-36600] by @addisonbeck in #20881 • [PM-38400] Fix avoid ambiguous character bug by @adudek-bw in #20953 • [PM-38405] Fix SDK ref leaking out of scope and add eslint rule by @quexten in #20999 • [PM-37913] - fix cloning archived cipher by @jaasen-livefront in #21058 • [PM-38571] Fix shareReplay memory leaks by @nick-livefront in #21087 • [PM-37913] - set archivedDate when cloning ciphers by @jaasen-livefront in #21160 • [PM-38831] fix：defective SyncPolicy push notification parsing by @eliykat in #21189 • fix(nx)：clear build dependsOn workspace default by @addisonbeck in #21203 • [PM-38012] Fix local override migration by @quexten in #21223 • PM-39449 resolved root url issues by @itsadrago in #21481 ⚙️ Maintenance • [PM-36363] Refactors org user view models and consumers to be ts-strict compliant by @BTreston in #20559 • [PM-6796] implemented file reorg by @bmbitwarden in #20648 • PM-36952 - Improve code review workflow with added triggers by @theMickster in #20702 • [PM-377730] Refactor unlock service & add decrypted user key method by @quexten in #20719 • fixed perms in cherry-pick workflow by @gitclonebrian in #20758 • [BRE-1938] Update Build Web workflow to run on published Web releases by @vgrassia in #20761 • [BRE-1938] Simplify and optimize Retrieve Current Desktop Rollout workflow by @vgrassia in #20778 • refactor(platform)：migrate Region enum to const object per ADR-0025 by @addisonbeck in #20887 • [PM-36510] Remove dead "SDK not available" guards from SDK-backed services by @gbubemismith in #21173 • [BRE-2013] Add repository_dispatch trigger to sdk-update workflow by @vgrassia in #21187 📦 Dependency Updates • [deps] Vault：Update https-proxy-agent to v9 by @renovate in #20124 • [deps] Vault：Update @koa/router to v15.5.0 by @renovate in #20580 • Update sdk-internal to 0.2.0-main.765 by @bw-ghapp in #20744 • Update sdk-internal to 0.2.0-main.774 by @bw-ghapp in #20770 • [PM-37729] SDK Bump by @nick-livefront in #20776 • [bre-1942] fix package lock issue by @aj-bw in #20785 • Update sdk-internal to 0.2.0-main.779 by @bw-ghapp in #20798 • Update sdk-internal to 0.2.0-main.782 by @bw-ghapp in #20807 • [deps] Architecture：Update lint-staged to v17 by @renovate in #20843 • Update sdk-internal to 0.2.0-main.798 by @bw-ghapp in #20937 • [deps] Autofill：Update tldts to v7.4.2 by @renovate in #21112 • Bump SDK version for ECDSA key support by @neuronull in #21176 🔧 Other • Bump client version(s) by @github-actions in #20690 • [BEEEP] [PM-38012] Add local feature flag overrides by @quexten in #20833 • Improve claude.md by @Hinton in #20941 • [PM-38192] Collection Check for CLI Move by @nick-livefront in #21010 • Expand .claude/rules to cover i18n, Tailwind, testing, and Angular DI by @Hinton in #21051 • Remove FF caching for dev env by default by @coltonhurst in #21131 • Change configRetrievalIntervalMs by @coltonhurst in #21143 • Auth - Add claude.md for libs/auth by @JaredSnider-Bitwarden in #21235 • Bump client version(s) by @github-actions in #21271 • Bumped client version(s) (#21271) by @addisonbeck in #21274 Full Changelog：cli-v2026.5.0...cli-v2026.6.0