78 Releases 79 Tags

RSS Feed

• 1.35.0 a4907f3539

  Compare

  Stable

  GiteaMirror released this 2025-12-27 16:53:01 -06:00 | 35 commits to main since this release

  📅 Originally published on GitHub: Sat, 27 Dec 2025 23:07:12 GMT
  🏷️ Git tag created: Sat, 27 Dec 2025 22:53:01 GMT

  Notable changes

  • Implemented support for SSO with OpenID Connect, https://github.com/dani-garcia/vaultwarden/wiki/Enabling-SSO-support-using-OpenId-Connect
  • Updated web vault to 2025.12.0
  • Added support for future mobile apps with versions 2026.1.0+
  • This is the first vaultwarden release using immutable releases and release attestation!

  What's Changed

  • Fix multi delete slowdown by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6144
  • Perform same checks when setting kdf by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6141
  • SSO using OpenID Connect by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/3899
  • Delete SSO.md by @dani-garcia in https://github.com/dani-garcia/vaultwarden/pull/6152
  • Update webauthn-rs to 0.5.x by @zUnixorn in https://github.com/dani-garcia/vaultwarden/pull/5934
  • a little cleanup after SSO merge by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6153
  • Fix link to point to the wiki by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6157
  • Fix Email 2FA for mobile apps by @dfunkt in https://github.com/dani-garcia/vaultwarden/pull/6156
  • Update Rust to 1.89.0 by @dfunkt in https://github.com/dani-garcia/vaultwarden/pull/6150
  • Fix several more multi select push issues by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6151
  • Fix minor typo by @ncguk in https://github.com/dani-garcia/vaultwarden/pull/6165
  • Update crates, fixes some yanked crates by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6167
  • Fix WebauthN issue with Software Keys by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6168
  • Fix Playwright test conf and update deps by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6176
  • Misc updates by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6185
  • fix typo in description of helo_name by @Flottegurke in https://github.com/dani-garcia/vaultwarden/pull/6194
  • Fix Playwright by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6206
  • Switch to GHA's concurrency control by @dfunkt in https://github.com/dani-garcia/vaultwarden/pull/6164
  • Make database connection pool dynamic by @Samoth69 in https://github.com/dani-garcia/vaultwarden/pull/6166
  • Re-add if check to release workflow by @dfunkt in https://github.com/dani-garcia/vaultwarden/pull/6227
  • Fix Webauthn/Passkey 2FA migration/validation issues by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6190
  • refactor(config): update template, add validation by @tessus in https://github.com/dani-garcia/vaultwarden/pull/6229
  • Show SSO_ALLOW_UNKNOWN_EMAIL_VERIFICATION in admin by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6235
  • Update crates, gha and web-vault by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6234
  • Fix panic around sso_master_password_policy by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6233
  • make webauthn more optional by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6160
  • Fix 2fa recovery endpoint by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6240
  • update trivy-action to v0.33.0 by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6248
  • update web vault to v2025.9.1 and allow new policy by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6340
  • prevent changing collections when hide_passwords is true by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6278
  • Fix sso_user dropped on User::save by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6262
  • Change OIDC dummy identifier by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6263
  • add new billing warnings endpoint by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6369
  • Add auth_request pending endpoint by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6368
  • Fix Org identifier by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6364
  • add mail address change warning for invited accounts by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6377
  • add missing media-src directive by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6381
  • add seat limit for the invite dialog by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6371
  • [Playwright] Improvements around node by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6321
  • Use Diesels MultiConnections Derive by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6279
  • Improve protected actions by @dani-garcia in https://github.com/dani-garcia/vaultwarden/pull/6411
  • Fix issue with key-rotation and emergency-access by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6421
  • Optimizations and build speedup by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6339
  • Use an older version of mariadb to prevent a panic by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6453
  • Playwright against abitrary web-vault by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6380
  • Fix KDF Change with new web-vault by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6458
  • Fix: admin theme emoji alignment by @joepduin in https://github.com/dani-garcia/vaultwarden/pull/6459
  • remove invalid emergency access dummy value by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6463
  • Add pm-25373-windows-biometrics-v2 feature flag by @Ephemera42 in https://github.com/dani-garcia/vaultwarden/pull/6468
  • Switch to multiple runners per arch by @dfunkt in https://github.com/dani-garcia/vaultwarden/pull/6472
  • Fix icon redirect caching by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6487
  • Fix around singleorg policy by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6247
  • fix email as 2fa provider by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6473
  • Update crates and Rust version by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6485
  • Add option to prefer IPv6 resolving by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6494
  • Some small admin js/css updates by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6501
  • Update crates and workflows and some fixes by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6508
  • Fixed a typo in the default TTL value by @k725 in https://github.com/dani-garcia/vaultwarden/pull/6528
  • Iterate over tags on release by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6518
  • Org.put_policy type not in body anymore by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6514
  • Android want response property in camelCase by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6513
  • Fix admin invite with SSO by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6498
  • Improve sso auth flow by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/6205
  • fix email as 2fa for sso by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6495
  • Fix release workflow by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6532
  • Further fixes for the release workflow by @dfunkt in https://github.com/dani-garcia/vaultwarden/pull/6533
  • add empty /api/tasks endpoint by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6557
  • Revert to gzip compression by @dfunkt in https://github.com/dani-garcia/vaultwarden/pull/6566
  • support UriMatchDefaults policy by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/6570
  • Add new accountKeys and masterPasswordUnlock fields by @dani-garcia in https://github.com/dani-garcia/vaultwarden/pull/6572
  • Update crates and Rust by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6551
  • Add UserDecryption on /sync too by @dani-garcia in https://github.com/dani-garcia/vaultwarden/pull/6574
  • Update web-vault to v2025.12.0 by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6577
  • Fix posting cipher with readonly collections by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6578
  • Update crates by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/6585
  • Simplify binary extraction by @dfunkt in https://github.com/dani-garcia/vaultwarden/pull/6554
  • Remove unnecessary output sharing between jobs by @dfunkt in https://github.com/dani-garcia/vaultwarden/pull/6555
  • Add wrapped named variants to UserDecryptionOptions by @dani-garcia in https://github.com/dani-garcia/vaultwarden/pull/6598

  New Contributors

  • @zUnixorn made their first contribution in https://github.com/dani-garcia/vaultwarden/pull/5934
  • @ncguk made their first contribution in https://github.com/dani-garcia/vaultwarden/pull/6165
  • @Flottegurke made their first contribution in https://github.com/dani-garcia/vaultwarden/pull/6194
  • @Samoth69 made their first contribution in https://github.com/dani-garcia/vaultwarden/pull/6166
  • @joepduin made their first contribution in https://github.com/dani-garcia/vaultwarden/pull/6459
  • @k725 made their first contribution in https://github.com/dani-garcia/vaultwarden/pull/6528

  Full Changelog: https://github.com/dani-garcia/vaultwarden/compare/1.34.3...1.35.0

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)