chore(deps): update bitwarden cli to v2026.9.0

[cloudzero-renovate-operator]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
bitwarden/clients	minor	2026.5.0 → 2026.9.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

bitwarden/clients (bitwarden/clients)

v2026.9.0: CLI v2026.9.0

Compare Source

What's Changed

Feature Development

• [PM-32740] Add support for three new cipher types to importers by @​mcamirault in #​21267
• feat(automation-driver): add automation-driver package by @​quexten in #​21919
• [PM-41273] Extend ImportService to expose per-vendor metadata by @​harr1424 in #​22297
• Route remaining SDK-capable Send operations through the SDK by @​adudek-bw in #​22321
• [PM-39408] feat: Tee TS logs into LogRecorder sink by @​dani-garcia in #​22379
• [PM-40814] Add key id support by @​quexten in #​22444
• [PM-39455] Use v2 upgrade token when asserting organization public key trust. by @​mzieniukbw in #​22490
• [PM-39409] feat: Forward TS logs to Flight Recorder buffer by @​dani-garcia in #​22613
• Route Send sync and key rotation through the SDK by @​adudek-bw in #​22672
• [PM-37136] Empty vault states by @​nick-livefront in #​22827
• [PM-42988] Move Send decryption to SDK functions by @​mcamirault in #​22923

🐛 Bug fixes

• [SRE-2516] Do not event upload request bodies of unlimited size by @​MGibson1 in #​15190
• [PM-40120] Prompt CLI user for divergent domain access by @​harr1424 in #​22216
• [PM-8711] inconsistent casing between vault management api feedback and api docs by @​JaredScar in #​22232
• [PM-41691] Fix issue where edit item, hidden passwords wipes password, TOTP by @​JaredScar in #​22287
• feat(salt): [PM-27060] - Use SDK salt for MP Login by @​Patrick-Pimentel-Bitwarden in #​22381
• Auth / PM-32421 - CLI - Login Command - Validate SSO account has a CLI-supported decryption path by @​JaredSnider-Bitwarden in #​22411
• fix(key-connector): fix sdk-based unlock with key-connector on jit provisioning by @​quexten in #​22545
• [PM-13373] Fix Enpass CSV Importer by @​harr1424 in #​22561
• [PM-42470] Add cooldown to user key id backfill migration by @​quexten in #​22682
• fix(key-management): Clear key id backfill cooldown on logout by @​quexten in #​22698
• [PM-42932] fix: normalize null hostname from getUriHostname to prevent search crash by @​nick-livefront in #​22882

⚙️ Maintenance

• refactor(crypto): split out legacy compat key service by @​quexten in #​22319
• refactor(key-management): read the user key via userKey$ by @​quexten in #​22353
• refactor(auth): unlock via UnlockService in login strategies by @​quexten in #​22354
• refactor(key-management): unlock via UnlockService in key connector conversion by @​quexten in #​22358
• refactor(unlock): replace UserAutoUnlockKeyService with UnlockService by @​quexten in #​22359
• [PM-41874] refactor(crypto): move key-management callers to @​bitwarden/legacy-crypto by @​quexten in #​22362
• [PM-41874] refactor(crypto): move auth callers to @​bitwarden/legacy-crypto by @​quexten in #​22363
• [PM-41874] refactor(crypto): move tools callers to @​bitwarden/legacy-crypto by @​quexten in #​22364
• [PM-41874] refactor(crypto): move vault callers to @​bitwarden/legacy-crypto by @​quexten in #​22365
• [PM-41874] refactor(crypto): move shared client wiring callers to @​bitwarden/legacy-crypto by @​quexten in #​22368
• [PM-41874] refactor(crypto): move platform callers to @​bitwarden/legacy-crypto by @​quexten in #​22369
• [BRE-2116] Bump actions/checkout to v7.0.1 + add bypass flag in client build workflows by @​brandonbiete in #​22385
• widen engines pin to include Node 24 by @​addisonbeck in #​22480
• chore(lock): Move LockService into libs/unlock and add lock/unlock source tracking by @​quexten in #​22539
• [PM-41874] Remove legacy-crypto shims (key management) by @​quexten in #​22578
• [PM-41874] Remove legacy-crypto shims (platform) by @​quexten in #​22579
• refactor(crypto): drop electron key service by @​quexten in #​22601
• refactor(unlock): extract AutoUnlockService by @​quexten in #​22602
• refactor(km): simplify process reload service by @​quexten in #​22646
• [PM-39460] Add v2_encrypted_migrations_grace_period_start to state bridge by @​eligrubb in #​22653
• ci: Fix not reporting test results on push and workflow_dispatch by @​eliykat in #​22679
• key service flaky cipherDecryptionKeys$ tests by @​mzieniukbw in #​22680
• Fix IPC doc comment by @​coltonhurst in #​22754
• [BRE-2219] Replace 'checksum' usage with 'Get-FileHash' cmdlet for Desktop/CLI builds by @​vgrassia in #​22825
• chore(km): Add browser and CLI process reload to codecov component by @​quexten in #​22869
• disabling failing key service test by @​mzieniukbw in #​22875
• Mute flaky chip-filter test by @​vleague2 in #​22925
• Bump client version(s) by @​github-actions in #​23038

📦 Dependency Updates

• Update sdk-internal to 0.2.0-main.956 by @​bw-ghapp in #​22146
• [deps] Platform: Update @​types/node to v22.20.1 by @​renovate in #​22218
• Update sdk-internal to 0.2.0-main.967 by @​bw-ghapp in #​22326
• Update sdk-internal to 0.2.0-main.970 by @​bw-ghapp in #​22442
• [deps]: Update dtolnay/rust-toolchain digest to 4360b52 by @​renovate in #​22459
• [deps] AC: Update core-js to v3.50.0 by @​renovate in #​22460
• [deps]: Update actions/stale action to v11 by @​renovate in #​22475
• Update sdk-internal to 0.2.0-main.971 by @​bw-ghapp in #​22512
• Update sdk-internal to 0.2.0-main.978 by @​bw-ghapp in #​22518
• Update sdk-internal to 0.2.0-main.979 by @​bw-ghapp in #​22581
• Update sdk-internal to 0.2.0-main.983 by @​bw-ghapp in #​22592
• Update sdk-internal to 0.2.0-main.1001 by @​bw-ghapp in #​22651
• [deps] Platform: Update nx to v22.7.7 [SECURITY] by @​renovate in #​22693
• Update sdk-internal to 0.2.0-main.1008 by @​bw-ghapp in #​22841
• Update sdk-internal to 0.2.0-main.1011 by @​bw-ghapp in #​22892
• Update sdk-internal to 0.2.0-main.1012 by @​bw-ghapp in #​22922
• Update sdk-internal to 0.2.0-main.1013 by @​bw-ghapp in #​22985

🎨 Other

• [AI-88] llm: Remove .claude/CONTRIBUTING.md by @​SaintPatrck in #​22532
• [AI-94] llm: Evaluate SDK update PRs against the upstream commit range by @​SaintPatrck in #​22697

Full Changelog: bitwarden/clients@cli-v2026.8.0...cli-v2026.9.0

v2026.8.0: CLI v2026.8.0

Compare Source

What's Changed

💙 Community Highlight

• [PM-19836] Add prefix to fastmail by @​lucacome in #​14105
• [PM-39030] Fix Proton Pass import of item custom fields by @​archit-goyal in #​21253
• [PM-39312] Fix Proton Pass importer dropping custom, alias, and SSH key items by @​theagg-18 in #​21402
• [PM-40685] Fix forwarder settings cache collision by @​cyfrit in #​21980

Feature Development

• [PM-27844] Set email on sync by @​ike-kottlowski in #​21349
• added vault health reports by @​maxkpower in #​21432
• [PM-39778] Fix subtitles when using sdk by @​jengstrom-bw in #​21591
• [PM-17584] Delinea XML parser by @​mcamirault in #​21620
• [PM-34857] Remove PoliciesInAcceptedState feature flag by @​eliykat in #​21761
• [PM-27060] feat: Call SDK for password prelogin by @​ike-kottlowski in #​21777
• [PM-40335] PAM - Add access rules domain (1/2) by @​Hinton in #​21810
• [PM-40216] feat: Scope organization invite link lookups by organization ID by @​r-tome in #​21815
• feat(llm): add claude note to make key-management aware of encryption related changes by @​quexten in #​21818
• [PM-39815] feat: Add linksEnabled to invite-link status response model by @​r-tome in #​21820
• Pm 38122 fastmail checkbox by @​bmbitwarden in #​21830
• [PM-40195] feat: add shared-folder localization keys by @​jaasen-livefront in #​21832
• [PM-40286] - Add Vfo1TerminologyService and VFO1I18nPipe infrastructure by @​nick-livefront in #​21860
• add problem detail support, wire up email changing by @​BTreston in #​21878
• feat(shared-unlock): support trusted devices by @​quexten in #​21895
• [PM-40111] Rename Owner to Vault field by @​nick-livefront in #​21897
• [PM-36007] Admin change email event logging by @​BTreston in #​21908
• [PM-40134] RoutedVaultFilterService accept a vaultId query parameter alongside organizationId by @​jengstrom-bw in #​21930
• [PM-38794] Add OrganizationInviteLinkApiService.getInvite by @​JimmyVo16 in #​21932
• [PM-38749] Add OrganizationInviteLinkApiService.updateSupportsConfirmation by @​JimmyVo16 in #​21933
• [PM-38333] feat: Annual billing savings offer on cancel by @​kdenney in #​21939
• [PM-40252] feat: migrate shared vault components to shared-folder terminology by @​jaasen-livefront in #​21967
• [PM-40510] feat: rename vault-filter query param to sharedFolderId by @​jaasen-livefront in #​21968
• [PM-40654] feat: gate org-creation default collection name behind VFO1 terminology by @​jaasen-livefront in #​21969
• [PM-40255] Update collection icon to bwi-shared-folder by @​nick-livefront in #​21996
• [PM-40623] Update invite link service to match SDK by @​eliykat in #​22054
• [PM-35157] Remove feature flagged logic for SDK decryption flag by @​JaredScar in #​22078
• [PM-41015] Add feature flag for Managed Device Framework by @​djsmith85 in #​22097
• [PM-38799] Add translation for confirm flow audit events by @​JimmyVo16 in #​22117
• [PM-38248] Remove SendEventLogging feature flag by @​harr1424 in #​22131
• [PM-39978] Add Item Send enum and fix resulting build errors by @​mcamirault in #​22135
• [PM-41312] Bump sdk-internal for Fill Assist policy type by @​bensbits91 in #​22206
• [PM-40944] Add Delinea CSV importer, improve types for Delinea XML by @​mcamirault in #​22207
• [PM-31619]Create feature-flag for inline menu component by @​dan-livefront in #​22234

❗ Breaking Changes

• Fix AuthEdit SDK break by @​adudek-bw in #​22071

🐛 Bug fixes

• [PM-39387] fix: Auto-sync premium status after returning from Stripe checkout by @​cyprain-okeke in #​21518
• [PM-39992] Add support for SDK IPC unreachability by @​quexten in #​21653
• [PM-38189] Wire InitiationPath to Organizations to Correct Trial Metadata by @​sbrown-livefront in #​21769
• [PM-40201] SSH key items with a null public key or fingerprint fail to decrypt and break the vault by @​gbubemismith in #​21778
• [PM-40188] Apply deletion date policy to CLI-created Sends by @​mcamirault in #​21845
• [PM-40241] Bugfix - Rehydrate localData lastUsedDate on local cipher views by @​jprusik in #​21849
• [PM-24945] Fix bw send receive not recognizing --password parameter by @​adudek-bw in #​21872
• [PM-40457] Fix typos in the message catalogs by @​jprusik in #​21882
• [PM-40370] Use decrypted ciphers cache when using SDK by @​shane-melton in #​21888
• [PM-38557] Netwrix Password Secure importer should map URL-like fields to Bitwarden website URI by @​harr1424 in #​21889
• [PM-40440] fix: Source upgrade cart total from server invoice preview by @​amorask-bitwarden in #​21902
• [PM-40375] Add per-item exception handling to 1Pux import by @​harr1424 in #​21941
• fix(key-connector): fix sdk key-connector login not working by @​quexten in #​21957
• [PM-39845] Prevent Access Intelligence report freeze on oversized password values by @​Banrion in #​21987
• [PM-40766] Handle punycode-unicode domain matching for "Host" URI matching strategy by @​jprusik in #​21994
• fix: race condition leading to decryption errors by @​quexten in #​22063
• [PM-16160] Fixes CLI issue where passwords are show via get item command in CLI by @​JaredScar in #​22083
• fix(sdk): revert sdk lifecycle changes by @​quexten in #​22090
• Auth/PM-41303 - Direct Org Invite Acceptance - fix url paste scenario eternal spinner bug when org has MP policy by @​JaredSnider-Bitwarden in #​22184
• fix: update sdk and add support for kdf in state bridge by @​quexten in #​22197
• [PM-41288] Fix bug preventing edits of existing File Sends by @​mcamirault in #​22203
• [PM-41691] Fix issue where edit item, hidden passwords wipes password, TOTP by @​JaredScar in #​22329

⚙️ Maintenance

• Auth/PM-3813 - 2FA Management Endpoints - User Verification Refactor by @​JaredSnider-Bitwarden in #​21385
• [PM-24097] - [Vault] Remove getOrgKey from the key service by @​jaasen-livefront in #​21480
• Auth/PM-39905 - Restructure organization-invite into subfolders with barrel imports by @​JaredSnider-Bitwarden in #​21642
• [PM-39259] Migrate auth token key generation to SDK by @​quexten in #​21706
• [PM-39259] Remove deprecated randomBytes/aesGenerateKey/createKey by @​quexten in #​21713
• [PM-37476] Source canUseAccessIntelligence from server UseRiskInsights ability by @​AlexRubik in #​21760
• [AppSec] AI Fix for Template Injection in GitHub Workflows Action by @​aikido-autofix in #​21787
• Bump client version(s) by @​github-actions in #​21811
• Fix/update CODEOWNERS by @​djsmith85 in #​21826
• Pin NPM 11 on CLI builds by @​dani-garcia in #​21838
• [PM-40345] Ignore Storybook stories in code coverage by @​Hinton in #​21842
• [PM-40456] Update cSpell settings by @​jprusik in #​21875
• chore(ci): skip platform-community signal for fork PRs by @​addisonbeck in #​21934
• refactor(login-strategy): clean up crypto-related functions and deprecation notices by @​quexten in #​21958
• chore: Add team-ai-sme as CODEOWNERS for .mcp.json by @​SaintPatrck in #​21985
• docs(vault): document deprecation of TypeScript vault item decryption by @​quexten in #​22004
• [PM-40846] Support Fido2 v4 server update by @​ike-kottlowski in #​22006
• [BRE-2118] Adding publish CLI workflow for NPM provenance by @​pixman20 in #​22014
• chore(kdf-change): port change kdf to sdk by @​quexten in #​22032
• [PM-40590] Run chromatic workflow when the workflow file is updated, to enable dep testing by @​vleague2 in #​22076
• [PM-35791] Remove old Send access endpoints by @​mcamirault in #​22080
• Add t:deps label for SDK update PRs automatically by @​trmartin4 in #​22142
• [PM-40107] Deprecate TS generator logic available in the SDK by @​harr1424 in #​22154
• chore: remove checkmarx from repo by @​sognefej in #​22183
• [BRE-2153] fix(ci): Stage bit-common for commercial browser builds by @​fntyler in #​22198
• chore(crypto): port crypto sync handler to sdk by @​quexten in #​22217
• [BRE-2158] Add PR label to creation step for Crowdin Pull workflow by @​vgrassia in #​22228
• Browser: Refactor client state definitions for Health feature by @​lastbestdev in #​22240
• refactor(crypto): add legacy crypto module by @​quexten in #​22254
• Bump client version(s) by @​github-actions in #​22320

📦 Dependency Updates

• [deps]: Update GitHub Artifact Actions (major) by @​renovate in #​19586
• [deps] Autofill: Update prettier to v3.9.5 by @​renovate in #​21668
• [deps] Platform: Update jest-preset-angular to v17 by @​renovate in #​21678
• Update sdk-internal to 0.2.0-main.897 by @​bw-ghapp in #​21718
• Update sdk-internal to 0.2.0-main.928 by @​bw-ghapp in #​21870
• [deps]: Update dtolnay/rust-toolchain digest to 4cda84d by @​renovate in #​21948
• [deps] Tools: Update @​bufbuild/protobuf to v2.13.0 by @​renovate in #​21950
• [deps] Vault: Update @​koa/router to v15.7.0 by @​renovate in #​21951
• [deps] UI Foundation: Update chromatic to v18 by @​renovate in #​21954
• [deps]: Update chromaui/action action to v18 by @​renovate in #​21956
• [deps] Platform: Update webpack-dev-server to v5.2.6 [SECURITY] by @​renovate in #​21972
• Auth/PM-40520 - Bump SDK versions in clients to get new registration open org invite crypto APIs by @​JaredSnider-Bitwarden in #​22134
• [BRE-2116] Bump actions/checkout to v7.0.1 in non-privileged workflows by @​brandonbiete in #​22157

New Contributors

• @​archit-goyal made their first contribution in #​21253
• @​lucacome made their first contribution in #​14105
• @​cyfrit made their first contribution in #​21980
• @​theagg-18 made their first contribution in #​21402

Full Changelog: bitwarden/clients@cli-v2026.7.0...cli-v2026.8.0

v2026.7.0: CLI v2026.7.0

Compare Source

What's Changed

• Added direct Keepass import
• Various under-the-hood improvements and minor bug fixes

💙 Community Highlight

• [PM-33285] Enhance privacy in password leak detection with response padding by @​TheDcoder in #​19439
• [PM-38123] [bug] Preserve 1Password archive state on 1pux import (closes #​20694) by @​999purple999 in #​20867
• [PM-39177] fix(libs): correct various typos in shared libraries and documentation by @​luojiyin1987 in #​21320

Feature Development

• [PM-33198] Keeper direct importer by @​detunized in #​19395
• [PM-31884] implemented controls for send policy access dropdown by @​bmbitwarden in #​19777
• [PM-32696] Add data field to Cipher object to support blob encryption by @​nikwithak in #​20765
• [PM-37875] Automatic V2 Upgrade Migration by @​quexten in #​20831
• Auth/PM-38298 - Org Invite Acceptance Refactor by @​JaredSnider-Bitwarden in #​21011
• [PM-38565] Replace tray settings with "Keep Bitwarden running in the background" by @​quexten in #​21044
• [PM-38387] Introduce KeePass KDBX importer by @​harr1424 in #​21052
• [PM-33408] Add OrganizationUserNotification banner to vault by @​jengstrom-bw in #​21209
• feat: add Region.Gov to available environments by @​addisonbeck in #​21211
• [PM-39048] Feat: scaffold @​bitwarden/pam library by @​Hinton in #​21259
• [PM-34779] Add accept method to OrganizationInviteLinkApiService by @​r-tome in #​21266
• [PM-34023] Remove 2FA account recovery flag by @​eliykat in #​21291
• [PM-33054] Remove feature flag cipher-key-encryption by @​jengstrom-bw in #​21309
• [PM-34053] Swap verify trust to new SDK method by @​Thomas-Avery in #​21347
• feat(platform): introduce GovModeService for FedRAMP region gating by @​addisonbeck in #​21366
• [PM-34580] Rename "Note" to "Secure note" for SecureNote cipher type by @​nick-livefront in #​21423
• [PM-33740] Remove unlock service for password flagged logic by @​mzieniukbw in #​21427
• [PM-20344] Disallow multiple attachments with the same name, handle existing in zip export format by @​mcamirault in #​21596

🐛 Bug fixes

• [PM-39731] Hotfix: Revert "[Shared Unlock] [PM-34508] Default enable native messaging permission on browser (#​19907) by @​mzieniukbw in #​21559
• [PM-34926] Allow single-character CJK vault searches by @​jaasen-livefront in #​21013
• Auth/PM-35783 - Fix Org Invite Policy State Pollution and State Clearing Issue by @​JaredSnider-Bitwarden in #​21218
• [PM-38608] [PM-38560] Fix diacritic normalization and multi-word query handling in searchCiphersBasic by @​nick-livefront in #​21232
• [PM-27041] - CLI - respect passphrase param in /generate by @​jaasen-livefront in #​21290
• fix(platform): remove hardcoded vault.bitwarden.com checks in getSendUrl and getScimUrl by @​addisonbeck in #​21373
• [SM-1483] Fix self-hosted environment URLs in Secrets Manager config by @​vincentsalucci in #​21375
• [PM-39204] Add extra spacing to vault items when batch bar is visible by @​nick-livefront in #​21390
• [PM-38940] Close Firefox/Safari Permissions-Policy gaps via webRequest by @​bensbits91 in #​21466
• [PM-7036] Add support for latest LogMeOnce CSV import format, add folder mapping by @​mcamirault in #​21473
• Revert "[PM-38760] Recursively create directory when writing manifest (#​21141)" by @​addisonbeck in #​21568
• [PM-31068] Wire send SDK repository for edit/removePassword by @​adudek-bw in #​21579
• [PM-39380] Bitwarden unencrypted JSON files containing cipher keys prevent import by @​harr1424 in #​21587
• [PM-39556] Fix access selector not saving changes when the dialog field is modified by @​BTreston in #​21640
• Revert "[Shared Unlock] [PM-34508] Default enable native messaging pe… by @​quexten in #​21687
• [PM-38392] Route password-protected Send saves through the SDK by @​adudek-bw in #​21725
• [PM-38595] Update local collections from server response by @​BTreston in #​21744
• [PM-40303] Fix logout when underprivileged user accesses Manage Send policy by @​harr1424 in #​21836
• [PM-40303] Cherry-pick to rc: Fix user logout when missing permissions by @​harr1424 in #​21846
• [PM-40236][RC] Logging out throws error mid-logout due to a race condition. User left in locked state by @​mzieniukbw in #​21869

⚙️ Maintenance

• [PM-35600] Update Password Request Models (Key Management) by @​rr-bw in #​20665
• [PM-38958] Add ESLint no package self import rule by @​quexten in #​21198
• [BRE-2013] Fix repo name in PR description link by @​vgrassia in #​21276
• fix(codeowners): Added environment selector to auth's responsibilities by @​Patrick-Pimentel-Bitwarden in #​21284
• [PM-39182] Migrate to relative imports - @​bitwarden/team-billing-dev by @​quexten in #​21325
• [PM-39182] Migrate to relative imports - @​bitwarden/team-data-insights-and-reporting-dev by @​quexten in #​21327
• [PM-39182] Migrate to relative imports - @​bitwarden/team-admin-console-dev by @​quexten in #​21329
• [PM-39182] Migrate to relative imports - @​bitwarden/team-auth-dev by @​quexten in #​21330
• [PM-39182] Migrate to relative imports - @​bitwarden/team-vault-dev by @​quexten in #​21331
• [PM-39182] Migrate to relative imports - @​bitwarden/team-key-management-dev by @​quexten in #​21333
• [PM 34708] Use new shared enforce label workflow by @​djsmith85 in #​21365
• [PM-9420] - add cipher$ observable to cipher service by @​jaasen-livefront in #​21383
• [deps]: Pin dependencies by @​renovate in #​21406
• [VULN-649] ci: Remove deprecated scan workflow by @​theMickster in #​21429
• [PM-38904] - Managed to Claimed Rename by @​jrmccannon in #​21430
• [deps] Fix Rust nightly toolchain reference in lint workflow by @​coroiu in #​21457
• [PM-39182] Enable no relative imports rule by @​quexten in #​21515
• [PM-39259] Migrate key-management consumers to SDK key generation by @​quexten in #​21707
• [PM-39259] Migrate vault export and generator to SDK random number client by @​quexten in #​21708
• [PM-39259] Remove typescript cipherkey generation by @​quexten in #​21729
• [PM-34458] Add release.yml to bitwarden/clients by @​djsmith85 in #​21732
• chore(ci): add platform-community code-review signal by @​addisonbeck in #​21751
• Bump client version(s) by @​github-actions in #​21811
• Bumped client version(s) (#​21811) by @​addisonbeck in #​21817
• [BRE-2118] Adding publish CLI workflow for NPM provenance by @​pixman20 in #​22014

📦 Dependency Updates

• [PM-35903] Update clients to node 24 by @​dani-garcia in #​20400
• [deps] Vault: Update @​koa/router to v15.6.0 by @​renovate in #​21114
• Update sdk-internal to 0.2.0-main.843 by @​bw-ghapp in #​21233
• [deps] Platform: Update @​babel/core to v7.29.6 [SECURITY] by @​renovate in #​21277
• [deps] Vault: Update form-data to v4.0.6 [SECURITY] by @​renovate in #​21279
• Update sdk-internal to 0.2.0-main.849 by @​bw-ghapp in #​21299
• Update sdk-internal to 0.2.0-main.857 by @​bw-ghapp in #​21393
• [deps] Vault: Update multer to v2.2.0 [SECURITY] by @​renovate in #​21396
• [deps] Platform: Update webpack-dev-server to v5.2.5 [SECURITY] by @​renovate in #​21404
• [deps] Vault: Update https-proxy-agent to v9.1.0 by @​renovate in #​21408
• [deps]: Update codecov/codecov-action action to v7 by @​renovate in #​21409
• Update sdk-internal to 0.2.0-main.859 by @​bw-ghapp in #​21475
• Update sdk-internal to 0.2.0-main.870 by @​bw-ghapp in #​21482
• Update sdk-internal to 0.2.0-main.872 by @​bw-ghapp in #​21651
• [deps]: Update dtolnay/rust-toolchain digest to 4be7066 by @​renovate in #​21667
• [deps] Platform: Update @​types/node to v22.20.0 by @​renovate in #​21673
• Update sdk-internal to 0.2.0-main.883 by @​bw-ghapp in #​21686
• chore(deps): move rand to KM Renovate ownership by @​addisonbeck in #​21719
• Fix lockfile by @​dani-garcia in #​21763

🎨 Other

• Bump client version(s) by @​github-actions in #​21271
• Auth/Add CLAUDE.md files to angular/src/auth and common/src/auth on file organization + barrel files by @​JaredSnider-Bitwarden in #​21283
• Disable self import rule by @​quexten in #​21410
• Add claude snap permissions rule by @​quexten in #​21514

New Contributors

• [@​TheDcoder](

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.