Vaultwarden - Package Updates

[crazybrad]

@staff Impressive. < 24 hours after Vaultwarden released an important patch, my Cloudrons are updated. Much appreciated. Wish I could say the same for my other tech vendors(:

[Package Updates]

[1.18.1]

• Update Vaultwarden to 1.32.1
• Full changelog
• Fixed syncing/login with native mobile clients
• Added CLI option to backup SQLite database
• Email Template changes regarding invites, 2FA Incomplete logins, and new logins

[Package Updates]

[1.18.2]

• Update Vaultwarden to 1.32.2
• Full changelog
• Fixed collection management for managers
• Fix compiling for Windows targets by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5053
• Updates and collection management fixes by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5072
• Fix --version from failing without config by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5055

[Package Updates]

[1.18.3]

• Update Vaultwarden to 1.32.3
• Full changelog
• Email template for org invites was updated again. The URL got HTML Encoded which resulted in a sometimes non-working URL (#5100)
• Fixed SMTP issues with some providers which send erroneous response to QUIT messages (Like QQ) (Thanks to @paolobarbolini)
• Fixed a long standing collection management issue where collections were not able to be managed via the Password Manager overview

[Package Updates]

[1.18.4]

• Update vaultwarden to 1.32.4
• Full Changelog
• Added more compatibility fixes for the native mobile apps, datetimes are now formatted without too many decimals.
• Email Template changes to the send emergency access invite. If you have modified this template, make sure to update it with the new changes.
• Update README by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5153

[Package Updates]

[1.18.5]

• Update vaultwarden to 1.32.5
• Full Changelog
• Added SSH-Key storage support. Currently only usable with Bitwarden Desktop v2024.12.0 and newer.
• Fix if logic error by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5171
• More authrequest fixes by @​dani-garcia in https://github.com/dani-garcia/vaultwarden/pull/5176
• Add dynamic CSS support by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/4940
• fix hibp username encoding and pw hint check by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5180
• Remove auth-request deletion by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5184
• fix password hint check by @​stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/5189

[murgero]

@Package-Updates This update is very important! It fixes a CVE

From the Github directly: This release further fixed some CVE Reports reported by a third party security auditor and we recommend everybody to update to the latest version as soon as possible. The contents of these reports will be disclosed publicly in the future.

[Package Updates]

[1.18.6]

• Update vaultwarden to 1.32.6
• Full Changelog
• Fix push not working by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5214
• Fix editing members which have access-all rights by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5213
• Update Rust and crates by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5248
• Update Alpine to version 3.21 by @​dfunkt in https://github.com/dani-garcia/vaultwarden/pull/5256
• Fix another sync issue with native clients by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5259
• Update crates by @​dfunkt in https://github.com/dani-garcia/vaultwarden/pull/5268
• Some Backend Admin fixes and updates by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5272
• @​chuangjinglu made their first contribution in https://github.com/dani-garcia/vaultwarden/pull/5224

[Package Updates]

[1.18.7]

• Update vaultwarden to 1.32.7
• Full Changelog
• feat: mask _smtp_img_src in support string by @​tessus in https://github.com/dani-garcia/vaultwarden/pull/5281
• Some refactoring, optimizations and security fixes by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5291
• Allow adding connect-src entries by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5293
• Use updated fern instead of patch by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5298

[Package Updates]

[1.19.0]

• Update vaultwarden to 1.33.0
• Full Changelog
• GHSA-f7r5-w49x-gxm3
• GHSA-h6cc-rc6q-23j4
• GHSA-j4h8-vch3-f797
• Updated web-vault to v2025.1.1
• Added partial manage role support for collections
• Manager role is converted to a Custom role with either Manage All Collections or per collection.
• The OCI containers and binaries are signed via GitHub Attestations
• Add inline-menu-positioning-improvements feature flag by @​Ephemera42 in https://github.com/dani-garcia/vaultwarden/pull/5313
• Fix issues when uri match is a string by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5332
• Add TOTP delete endpoint by @​Timshel in https://github.com/dani-garcia/vaultwarden/pull/5327
• fix group issue in send_invite by @​stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/5321
• Update crates and GHA by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5346
• Refactor the uri match fix and fix ssh-key sync by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5339
• Add partial role support for manager only using web-vault v2024.12.0 by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5219
• Fix issue with key-rotate by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5348
• fix manager role in admin users overview by @​stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/5359
• Prevent new users/members to be stored in db when invite fails by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5350
• Update crates and web-vault to v2025.1.0 by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5368
• Allow building with Rust v1.84.0 or newer by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5371
• rename membership and adopt newtype pattern by @​stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/5320
• build: raise msrv (1.83.0) rust toolchain (1.84.0) by @​tessus in https://github.com/dani-garcia/vaultwarden/pull/5374
• Fix an issue with login with device by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5379
• refactor: replace static with const for global constants by @​Integral-Tech in https://github.com/dani-garcia/vaultwarden/pull/5260
• Add Attestations for containers and artifacts by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5378
• Fix version detection on bake by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5382
• Simplify container image attestation by @​dfunkt in https://github.com/dani-garcia/vaultwarden/pull/5387
• improve admin invite by @​stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/5403
• Add manage role for collections and groups by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5386
• update web-vault to v2025.1.1 and add /api/devices by @​stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/5422
• Security fixes by @​BlackDex in https://github.com/dani-garcia/vaultwarden/pull/5438
• only validate SMTP_FROM if necessary by @​stefan0xC in https://github.com/dani-garcia/vaultwarden/pull/5442