1.35.0

[dani-garcia]

Notable changes

• Implemented support for SSO with OpenID Connect, https://github.com/dani-garcia/vaultwarden/wiki/Enabling-SSO-support-using-OpenId-Connect
• Updated web vault to 2025.12.0
• Added support for future mobile apps with versions 2026.1.0+

What's Changed

• Fix multi delete slowdown by @BlackDex in Fix multi delete slowdown #6144
• Perform same checks when setting kdf by @Timshel in Perform same checks when setting kdf #6141
• SSO using OpenID Connect by @Timshel in SSO using OpenID Connect #3899
• Delete SSO.md by @dani-garcia in Delete SSO.md #6152
• Update webauthn-rs to 0.5.x by @zUnixorn in Update webauthn-rs to 0.5.x #5934
• a little cleanup after SSO merge by @stefan0xC in a little cleanup after SSO merge #6153
• Fix link to point to the wiki by @Timshel in Fix link to point to the wiki #6157
• Fix Email 2FA for mobile apps by @dfunkt in Fix Email 2FA for mobile apps #6156
• Update Rust to 1.89.0 by @dfunkt in Update Rust to 1.89.0 #6150
• Fix several more multi select push issues by @BlackDex in Fix several more multi select push issues #6151
• Fix minor typo by @ncguk in Fix minor typo #6165
• Update crates, fixes some yanked crates by @BlackDex in Update crates, fixes some yanked crates #6167
• Fix WebauthN issue with Software Keys by @BlackDex in Fix WebauthN issue with Software Keys #6168
• Fix Playwright test conf and update deps by @Timshel in Fix Playwright test conf and update deps #6176
• Misc updates by @BlackDex in Misc updates #6185
• fix typo in description of helo_name by @Flottegurke in fix typo in description of helo_name #6194
• Fix Playwright by @Timshel in Fix Playwright #6206
• Switch to GHA's concurrency control by @dfunkt in Switch to GHA's concurrency control #6164
• Make database connection pool dynamic by @Samoth69 in Make database connection pool dynamic #6166
• Re-add if check to release workflow by @dfunkt in Re-add if check to release workflow #6227
• Fix Webauthn/Passkey 2FA migration/validation issues by @BlackDex in Fix Webauthn/Passkey 2FA migration/validation issues #6190
• refactor(config): update template, add validation by @tessus in refactor(config): update template, add validation #6229
• Show SSO_ALLOW_UNKNOWN_EMAIL_VERIFICATION in admin by @Timshel in Show SSO_ALLOW_UNKNOWN_EMAIL_VERIFICATION in admin #6235
• Update crates, gha and web-vault by @BlackDex in Update crates, gha and web-vault #6234
• Fix panic around sso_master_password_policy by @Timshel in Fix panic around sso_master_password_policy #6233
• make webauthn more optional by @stefan0xC in make webauthn more optional #6160
• Fix 2fa recovery endpoint by @BlackDex in Fix 2fa recovery endpoint #6240
• update trivy-action to v0.33.0 by @stefan0xC in update trivy-action to v0.33.0 #6248
• update web vault to v2025.9.1 and allow new policy by @stefan0xC in update web vault to v2025.9.1 and allow new policy #6340
• prevent changing collections when hide_passwords is true by @stefan0xC in prevent changing collections when hide_passwords is true #6278
• Fix sso_user dropped on User::save by @Timshel in Fix sso_user dropped on User::save #6262
• Change OIDC dummy identifier by @Timshel in Change OIDC dummy identifier #6263
• add new billing warnings endpoint by @stefan0xC in add new billing warnings endpoint #6369
• Add auth_request pending endpoint by @Timshel in Add auth_request pending endpoint #6368
• Fix Org identifier by @Timshel in Fix Org identifier #6364
• add mail address change warning for invited accounts by @stefan0xC in add mail address change warning for invited accounts #6377
• add missing media-src directive by @stefan0xC in add missing media-src directive #6381
• add seat limit for the invite dialog by @stefan0xC in add seat limit for the invite dialog #6371
• [Playwright] Improvements around node by @Timshel in [Playwright] Improvements around node #6321
• Use Diesels MultiConnections Derive by @BlackDex in Use Diesels MultiConnections Derive #6279
• Improve protected actions by @dani-garcia in Improve protected actions #6411
• Fix issue with key-rotation and emergency-access by @BlackDex in Fix issue with key-rotation and emergency-access #6421
• Optimizations and build speedup by @BlackDex in Optimizations and build speedup #6339
• Use an older version of mariadb to prevent a panic by @BlackDex in Use an older version of mariadb to prevent a panic #6453
• Playwright against abitrary web-vault by @Timshel in Playwright against abitrary web-vault #6380
• Fix KDF Change with new web-vault by @BlackDex in Fix KDF Change with new web-vault #6458
• Fix: admin theme emoji alignment by @joepduin in Fix: admin theme emoji alignment #6459
• remove invalid emergency access dummy value by @stefan0xC in remove invalid emergency access dummy value #6463
• Add pm-25373-windows-biometrics-v2 feature flag by @Ephemera42 in Add pm-25373-windows-biometrics-v2 feature flag #6468
• Switch to multiple runners per arch by @dfunkt in Switch to multiple runners per arch #6472
• Fix icon redirect caching by @BlackDex in Fix icon redirect caching #6487
• Fix around singleorg policy by @Timshel in Fix around singleorg policy #6247
• fix email as 2fa provider by @stefan0xC in fix email as 2fa provider #6473
• Update crates and Rust version by @BlackDex in Update crates and Rust version #6485
• Add option to prefer IPv6 resolving by @BlackDex in Add option to prefer IPv6 resolving #6494
• Some small admin js/css updates by @BlackDex in Some small admin js/css updates #6501
• Update crates and workflows and some fixes by @BlackDex in Update crates and workflows and some fixes #6508
• Fixed a typo in the default TTL value by @k725 in Fixed a typo in the default TTL value #6528
• Iterate over tags on release by @Timshel in Iterate over tags on release #6518
• Org.put_policy type not in body anymore by @Timshel in Org.put_policy type not in body anymore #6514
• Android want response property in camelCase by @Timshel in Android want response property in camelCase #6513
• Fix admin invite with SSO by @Timshel in Fix admin invite with SSO #6498
• Improve sso auth flow by @Timshel in Improve sso auth flow #6205
• fix email as 2fa for sso by @stefan0xC in fix email as 2fa for sso #6495
• Fix release workflow by @BlackDex in Fix release workflow #6532
• Further fixes for the release workflow by @dfunkt in Further fixes for the release workflow #6533
• add empty /api/tasks endpoint by @stefan0xC in add empty /api/tasks endpoint #6557
• Revert to gzip compression by @dfunkt in Revert to gzip compression #6566
• support UriMatchDefaults policy by @stefan0xC in support UriMatchDefaults policy #6570
• Add new accountKeys and masterPasswordUnlock fields by @dani-garcia in Add new accountKeys and masterPasswordUnlock fields #6572
• Update crates and Rust by @BlackDex in Update crates and Rust #6551
• Add UserDecryption on /sync too by @dani-garcia in Add UserDecryption on /sync too #6574
• Update web-vault to v2025.12.0 by @BlackDex in Update web-vault to v2025.12.0 #6577
• Fix posting cipher with readonly collections by @BlackDex in Fix posting cipher with readonly collections #6578
• Update crates by @BlackDex in Update crates #6585
• Simplify binary extraction by @dfunkt in Simplify binary extraction #6554
• Remove unnecessary output sharing between jobs by @dfunkt in Remove unnecessary output sharing between jobs #6555
• Add wrapped named variants to UserDecryptionOptions by @dani-garcia in Add wrapped named variants to UserDecryptionOptions #6598

New Contributors

• @zUnixorn made their first contribution in Update webauthn-rs to 0.5.x #5934
• @ncguk made their first contribution in Fix minor typo #6165
• @Flottegurke made their first contribution in fix typo in description of helo_name #6194
• @Samoth69 made their first contribution in Make database connection pool dynamic #6166
• @joepduin made their first contribution in Fix: admin theme emoji alignment #6459
• @k725 made their first contribution in Fixed a typo in the default TTL value #6528

Full Changelog: 1.34.3...1.35.0

---

This discussion was created from the release 1.35.0.

[tessus]

After the release of 1.35.1, shouldn't v2025.12.1 be changed from Pre-release to Release?
The webvault was updated in 1.35.1 to v2025.12.1 after all.

[dani-garcia]

I need to make a release checklist, I always forget that part hah. Should be set now, thanks!

[tessus]

I hear you. I know the feeling. Even though it's a bit early: Happy New Year!