Vaultwarden - Package Updates

girish

[1.7.0]

Project renamed from BitwardenRS to Vaultwarden
Renaming announcement
Update Vaultwarden to 2.21.0
Add support for enabling auto-deletion of trash items after X days, disabled by default
Updates to the icon fetching, making it more reliable in detecting icon types

nebulon

[1.7.1]

Update Vaultwarden to 1.22.1
Added sends_allowed option to disable Send functionality.
Added support for hiding the senders email address.
Added Send options policy.
Added support for password reprompt.
Switched to the new attachment download API.
Send download links use a token system to limit their downloads.
Updates to the icon fetching.
Support for webauthn.
The admin page now shows which variables are overridden.
Updated dependencies and docker base images.
Now RSA keys are generated with the included openssl instead of calling to the openssl binary.
The web vault doesn't require accepting the terms are conditions now, which weren't applicable for a self hosted server.

nebulon

[1.7.2]

Update Vaultwarden to 1.22.2
Updated web vault to 2.21.1.
Enforce 2FA policy in organizations.
Protect send routes against a possible path traversal attack.
Disable show_password_hint by default, it still can be enabled in the admin panel or with environment variables.
Disable user verification enforcement in Webauthn, which would make some users unable to login.
Fix issue that wouldn't correctly delete Webauthn Key.
Added Edge extension support for Webauthn.

girish

[1.7.3]

nebulon

[1.7.4]

girish

[1.7.5]

Update Vaultwarden to 1.23.1
Full changelog
Add email notifications for incomplete 2FA logins by @jjlin in #2067
Fix conflict resolution logic for read_only and hide_passwords flags by @jjlin in #2073
Fix missing encrypted key after emergency access reject by @jjlin in #2078
Macro recursion decrease and other optimizations by @BlackDex in #2084
Enabled trust-dns and some updates. by @BlackDex in #2125
Update web vault to 2.25.0

girish

[1.7.6]

nebulon

[1.8.1]

Update Vaultwarden to 1.24.0
Full changelog
Add support for API keys by @jjlin in #2245
Basic ratelimit for user login (including 2FA) and admin login by @dani-garcia in #2165
Upgrade Feature-Policy to Permissions-Policy by @iamdoubz in #2228
Set Expires header when caching responses by @RealOrangeOne in #2182
Increase length limit for email token generation by @jjlin in #2257
Small changes to icon log messages. by @BlackDex in #2170
Bump rust version to mitigate CVE-2022-21658 by @dscottboggs in #2255
Fixed #2151 by @BlackDex in #2169
Fixed issue #2154 by @BlackDex in #2194
Fix issue with Bitwarden CLI. by @BlackDex in #2197
Fix emergency access invites for new users by @BlackDex in #2217
Sync global_domains.json by @jjlin in #2156

nebulon

[1.8.2]

girish

[1.8.3]

girish

[1.8.4]

girish

[1.9.0]

girish

[1.9.1]

Update Vaultwarden to 1.25.1
Full changelog
Updated included web vault to version 2022.6.2 by @dani-garcia
Sync global_domains.json by @jjlin in #2555
Add TMP_FOLDER to .env.template by @fox34 in #2489
Allow FireFox relay in CSP. by @BlackDex in #2565
Fix hidden ciphers within organizational view. by @BlackDex in #2567
Add password_hints_allowed config option by @jjlin in #2586
Fall back to move_copy_to if persist_to fails while saving uploaded files. by @ruifung in #2605

nebulon

[1.9.2]

girish

[1.10.0]

nebulon

[1.10.1]

nebulon

[1.10.2]

girish

[1.11.0]

nebulon

[1.12.0]

Update Vaultwarden to 1.28.0
Full changelog
The project has changed license to the AGPLv3. If you're hosting a Vaultwarden instance, you now have a requirement to distribute the Vaultwarden source code to your users if they request it. The source code, and any changes you have made, need to be under the same AGPLv3 license. If you simply use our code without modifications, just pointing them to this repository is enough.
Added support for Argon2 key derivation on the clients. To enable it for your account, make sure all your clients are using version v2023.2.0 or greater, then go to account settings > security > keys, and change the algorithm from PBKDF2 to Argon2id.
Added support for Argon2 key derivation for the admin page token. To update your admin token to use it, check the wiki

nebulon

[1.12.1]

Update Vaultwarden to 1.28.1
Full changelog
Decode knowndevice X-Request-Email as base64url with no padding by @jjlin in https://github.com/dani-garcia/vaultwarden/pull/3376
Fix abort on password reset mail error by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/3390
support /users/<uuid>/invite/resend admin api by @nikolaevn in https://github.com/dani-garcia/vaultwarden/pull/3397
always return KdfMemory and KdfParallelism by @stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/3398
Fix sending out multiple websocket notifications by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/3405
Revert setcap, update rust and crates by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/3403

Cloudron Forum