v0.7.0 Release Notes

Highlights

• Added support for Bitwarden Auth Requests ("log in with device"), including request creation, pending request polling, approval responses, persistence, and notification delivery.

Web Vault

• Updated Web Vault to version 2026.4.1 in documentation and workflows.
• Added /identity/accounts/prelogin/password as an alias of the existing prelogin endpoint for newer client compatibility.
• Refreshed the CSS override layer.

Runtime and Performance

• Notification fan-out now runs through Cloudflare Workers waitUntil(), so HTTP responses can return immediately while websocket and push delivery continues in the background. This should reduce response latency on notification-producing endpoints.
• Database access now uses the D1 Sessions API. Per Cloudflare's D1 documentation, read replication requires Sessions API; after enabling D1 Global Read Replication in the Cloudflare dashboard (you have to enable it manually), some read-heavy endpoints may see lower query round-trip latency and faster responses.

Compatibility

• Added DuckDuckGo browser device detection.
• Improved WebDAV backup uploads by creating missing destination directories automatically in the backup workflow.

Fixes

• Added password history normalization in cipher creation and modification.
• Moved security stamp rotation to HeavyDO.

Maintenance

• Updated dependencies and refreshed related documentation and workflow references.
• Removed unused endpoints.