Overview
Fixed an issue where 2FA emails were not sent when it was the only 2FA method configured.
Enforced HTTPS for self-hosted deployments to ensure encrypted, secure connections.
Resolved an issue where sync checks were preventing timely vault synchronization.
Various bug fixes, UI improvements, and internal code improvements for Android.
What's Changed
[PM- 22735] Unsafe deserialization parcel data intent by @LRNcardozoWDF in #5419
[PM-23546] Update 2FA verification code accept any length by @andrebispo5 in #5500
Update to AGP v8.11.1 by @david-livefront in #5522
Update to Junit v5.13.3 by @david-livefront in #5523
Update OkHttp to v5.1.0 by @david-livefront in #5524
[PM-23608] Add SDK method for generating TOTP for CipherListView by @SaintPatrck in #5519
PM-23666: Construct unique SDK client for Authenticator Sync feature by @david-livefront in #5510
Update the Androidx Crypto library by @david-livefront in #5527
PM-23774: Simplify AuthenticatorBridgeRepositoryImpl by @david-livefront in #5529
[PM-23696] Hide cards from export when policy is enabled. by @andrebispo5 in #5520
[PM-22399] Send 2FA email when view appears by @andrebispo5 in #5498
[BRE-831] migrate secrets akv by @pixman20 in #5347
Update authenticatorbridge README by @SaintPatrck in #5423
[PM-22335] Support fastlane dev via rbenv by @mpbw2 in #5390
[BRE-769] Use Fastlane to keep github releases in sync with mobile deploy versions by @michalchecinski in #5219
Fix unmockkStatic usage in SdkCipherRepositoryTest by @SaintPatrck in #5534
[PM-23681] Update TotpCodeManager to use CipherListView by @SaintPatrck in #5532
[PM-23314] Enforce HTTPS by @andrebispo5 in #5533
[PM-23871] Update Bitwarden SDK to 1.0.0-20250715.111352-243 by @LRNcardozoWDF in #5537
Crowdin Pull - Authenticator by @bw-ghapp[bot] in #5541
Crowdin Pull - Password Manager by @bw-ghapp[bot] in #5542
VULN-261: Filter out send intents that use our own content provider by @david-livefront in #5539
PM-18405: Update the AboutScreen copy info by @david-livefront in #5538
PM-23910: Disallow file sends for non-premium users by @david-livefront in #5544
PM-23878: Add filter touches when obscured by @david-livefront in #5545
PM-23878: Move filterTouchesWhenObscured to avoid actionbar issues by @david-livefront in #5546
[BRE-768] Automate Google Play publishing by @AmyLGalles in #5256
[deps]: Lock file maintenance by @renovate[bot] in #5548
Allow asterisk in email validation by @SaintPatrck in #5549
PM-24004: Push notification for sync should bypass 30 minute interval by @david-livefront in #5552
[BRE-831] Switching to use AKV instead of GitHub secrets by @pixman20 in #5553
[PM-22744] Refactor to use CipherListView as primary cipher source by @SaintPatrck in #5494
PM-19185: Persist pin after a soft-logout by @david-livefront in #5555
Disable MissingTranslation and ExtraTranslation lint checks in UI module by @SaintPatrck in #5558
PM-24035: Add tooltip for website icons by @david-livefront in #5554
PM-24075: Update Dynamic colors copy by @david-livefront in #5560
[PM-23817] Move PM string to UI module and update Crowdin configuration by @SaintPatrck in #5550
Update Firebase to v34.0.0 by @david-livefront in #5561
Update Mockk to v1.14.5 by @david-livefront in #5562
Update Androidx and Hilt dependencies by @david-livefront in #5563
PM-24087: Update the add/edit ssh key title by @david-livefront in #5564
PM-24088: Remove the MobileErrorReporting feature flag by @david-livefront in #5565
PM-24089: Remove Mutual TLS feature flag by @david-livefront in #5566
PM-24090: Remove ChromeAutofill feature flag by @david-livefront in #5567
[PM-13789] add credential manager provider for passwords by @Nailik in #4110
Update the version name to 2025.7.0 by @david-livefront in #5572
[PM-24111] Copy Password Manager strings to ui module by @SaintPatrck in #5569
PM-24137, PM-24138: Remove host alias feature flags by @david-livefront in #5575
[PM-24002] Copy Authenticator strings to ui module by @SaintPatrck in #5576
Crowdin Pull - Password Manager by @bw-ghapp[bot] in #5578
Crowdin Pull - Authenticator by @bw-ghapp[bot] in #5581
Crowdin Pull - Password Manager by @bw-ghapp[bot] in #5582
PM-20152: Remove import logins flow feature flag by @david-livefront in #5580
Crowdin Pull - Authenticator by @bw-ghapp[bot] in #5584
🍒 PM-24182: Fix crash in Android 13 by @david-livefront in #5591
🍒 [PM-24204] Correct TOTP generation to use cipherId instead of totpCode by @SaintPatrck in #5603
🍒 [PM-24205] Fix Fido2CredentialStore to save new credentials correctly by @SaintPatrck in #5604
🍒[PM-24206] Fix filtered verification code search by @SaintPatrck in #5622
🍒 Add Biometric logging by @david-livefront in #5645