Bitwarden Rs Versions Save

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

1.28.0

1 year ago

Major changes

  • The project has changed license to the AGPLv3. If you're hosting a Vaultwarden instance, you now have a requirement to distribute the Vaultwarden source code to your users if they request it. The source code, and any changes you have made, need to be under the same AGPLv3 license. If you simply use our code without modifications, just pointing them to this repository is enough.
  • Added support for Argon2 key derivation on the clients. To enable it for your account, make sure all your clients are using version v2023.2.0 or greater, then go to account settings > security > keys, and change the algorithm from PBKDF2 to Argon2id.
  • Added support for Argon2 key derivation for the admin page token. To update your admin token to use it, check the wiki
  • New alternative registries for the docker images are available (In BETA for now):

What's Changed

New Contributors

Full Changelog: https://github.com/dani-garcia/vaultwarden/compare/1.27.0...1.28.0

1.27.0

1 year ago

New features

Event logs for organizations

With this feature enabled, actions occurring inside an organization will be recorded in a log, viewable by organization admins and owners. Check the official documentation to learn more: https://bitwarden.com/help/event-logs/ (Note that the Public API is not yet implemented, so the events are only viewable in the Web Vault)

To enable this feature, set ORG_EVENTS_ENABLED=true. By default all events will be stored indefinitely, if you want to limit that, you can use the EVENTS_DAYS_RETAIN option. You can also tune the cleanup schedule with EVENT_CLEANUP_SCHEDULE.

Group support (beta)

Enables the creation and use of groups inside an organization. At the moment this is in beta because there are some known issues (https://github.com/dani-garcia/vaultwarden/issues/2989). Still, the more this feature is tested, the faster we will be able to stabilize it.

To enable this feature, set ORG_GROUPS_ENABLED=true, make sure to make proper backups of your instance before hand.

What's Changed

New Contributors

Full Changelog: https://github.com/dani-garcia/vaultwarden/compare/1.26.0...1.27.0

1.26.0

1 year ago

What's Changed

New Contributors

Full Changelog: https://github.com/dani-garcia/vaultwarden/compare/1.25.2...1.26.0

1.25.2

1 year ago

⚠️ Reminder: If you are still using the bitwardenrs/server* Docker images, you need to migrate to the new vaultwarden image. Check https://github.com/dani-garcia/vaultwarden/discussions/1642 for an explanation. The old images will not receive any new updates any longer.

Important

An incompatibility between the format in which some Bitwarden clients upload attachments and sends could lead to those uploads being silently corrupted. We believe this is occurring only when using the mobile clients and only on the latest vaultwarden 1.25.1. To mitigate this issue, we're releasing this quick patch to make any upload that could lead to a corrupted file explicitly return an error, notifying the user of the problem. We recommend updating as soon as possible, and checking that any recently uploaded attachments can be downloaded and opened correctly (The corrupted uploads will return an error when downloading or download a very small file).

We've also fixed the docker volume check added in 1.25.1, if you previously needed to set I_REALLY_WANT_VOLATILE_STORAGE=true to start the container, please try again without it, and open an issue if it still won't start.

What's Changed

Full Changelog: https://github.com/dani-garcia/vaultwarden/compare/1.25.1...1.25.2

1.25.1

1 year ago

⚠️ Reminder: If you are still using the bitwardenrs/server* Docker images, you need to migrate to the new vaultwarden image. Check https://github.com/dani-garcia/vaultwarden/discussions/1642 for an explanation. The old images will not receive any new updates any longer.

What's Changed

New Contributors

Full Changelog: https://github.com/dani-garcia/vaultwarden/compare/1.25.0...1.25.1

1.25.0

1 year ago

⚠️ Reminder: If you are still using the bitwardenrs/server* Docker images, you need to migrate to the new vaultwarden image. Check https://github.com/dani-garcia/vaultwarden/discussions/1642 for an explanation. The old images will not receive any new updates any longer.

What's Changed

New Contributors

Full Changelog: https://github.com/dani-garcia/vaultwarden/compare/1.24.0...1.25.0

1.24.0

2 years ago

⚠️ Reminder: If you are still using the bitwardenrs/server* Docker images, you need to migrate to the new vaultwarden image. Check https://github.com/dani-garcia/vaultwarden/discussions/1642 for an explanation. The old images will not receive any new updates any longer.

What's Changed

New Contributors

Full Changelog: https://github.com/dani-garcia/vaultwarden/compare/1.23.1...1.24.0

1.23.1

2 years ago

⚠️ Reminder: If you are still using the bitwardenrs/server* Docker images, you need to migrate to the new vaultwarden image. Check https://github.com/dani-garcia/vaultwarden/discussions/1642 for an explanation. The old images will not receive any new updates any longer.

What's Changed

Full Changelog: https://github.com/dani-garcia/vaultwarden/compare/1.23.0...1.23.1

1.23.0

2 years ago

⚠️ Reminder: If you are still using the bitwardenrs/server* Docker images, you need to migrate to the new vaultwarden image. Check https://github.com/dani-garcia/vaultwarden/discussions/1642 for an explanation. The old images are deprecated and will stop being updated after 1.23.0.

  • Added emergency access feature
    • Can be disabled setting EMERGENCY_ACCESS_ALLOWED=false
  • Added support for single organization policy
  • Fixed incorrect webauthn origin
  • Enforce personal ownership policy on imports
  • Fixed issue using uppercase characters on emails
  • Updated web vault to 2.23.0
  • Added organization bulk user management actions (reinvite/confirm/delete)
  • Removed limmit that disabled sending ciphers with attachments
  • Disabled enforcing of two factor organization policy on users that haven't been accepted yet
  • Added tzdata to the alpine containers, to be able to set a different timezone to UTC
  • Updated icon fetching to make it work on unicode websites
  • Docker images are now built using Github Actions, and the base images have been updated
  • Added database connection check to /alive endpoint
  • Updated dependencies

1.22.2

2 years ago

⚠️ Reminder: If you are still using the bitwardenrs/server* Docker images, you need to migrate to the new vaultwarden image. Check https://github.com/dani-garcia/vaultwarden/discussions/1642 for an explanation. The old images are deprecated and will stop being updated after 1.23.0.

  • Updated web vault to 2.21.1.
  • Enforce 2FA policy in organizations.
  • Protect send routes against a possible path traversal attack.
  • Disable show_password_hint by default, it still can be enabled in the admin panel or with environment variables.
  • Disable user verification enforcement in Webauthn, which would make some users unable to login.
  • Fix issue that wouldn't correctly delete Webauthn Key.
  • Added Edge extension support for Webauthn.