Update SDK to 265e505 (3.0.0-7923-71a958f)

[bw-ghapp]

Updates the SDK from b7e7be7e7f5adde3cafcb27d79fac80a53c5c3c8 to 265e505bf7cac681aee30b5d0d6fb78b2a3481c0

What's Changed

• fix: add key id to masterpasswordunlockdata sdk-internal#1391
• [PM-40985] Introduce managed settings crates sdk-internal#1403
• [PM-34718] Implement bw receive / bw send receive sdk-internal#1317
• [PM-40994] Add and generate wasm and uniffi bindings for managed settings sdk-internal#1404
• [PM-35785] Strongly typed policy enforcement sdk-internal#1364
• [deps]: Update actions/checkout action to v7 sdk-internal#1341
• [PM-40237] Stop emitting placeholder name for blob ciphers sdk-internal#1408
• refactor(shared-unlock): simplify shared unlock sdk-internal#1397
• deps: bump h2 to 0.4.16 (RUSTSEC-2026-0258) sdk-internal#1415
• Update API bindings to fc5ea9ab05bf7a1679163fc13ec351ff96363000 sdk-internal#1402
• [PM-41798] 1Password access module sdk-internal#1371
• [PM-41447] Add destination filtering to shared unlock sdk-internal#1413
• Ensure no commercial crates are part of the OSS builds sdk-internal#1248
• [deps] Platform (cargo): Update Rust crate uniffi to v0.32.0 sdk-internal#1325
• [deps]: Update Rust crate rusqlite to >=0.37.0, <0.41 sdk-internal#1171
• [PM-38816] New crypto lib in new importers crate for Keeper DI sdk-internal#1182
• Fix ThreadBoundRunner Clone Comment sdk-internal#1420
• Update API bindings to e607c3f43ebcbf6feb2aa6768c80bc9ddd5f4460 sdk-internal#1416
• feat(crypto): prevent V2 to V1 downgrade sdk-internal#1417
• Update API bindings to 0c32f3021f3e9bea08958fca1ec3cefe3462c88e sdk-internal#1431
• [deps]: Update dtolnay/rust-toolchain digest to 4360b52 sdk-internal#1422
• [PM-37487] Move collections client ownership to Admin Console sdk-internal#1380
• [PM-42599] [PM-41798] 1Password access: redact Debug output and fix crypto dep ownership sdk-internal#1418
• feat(ipc): route RPC responses on per-request dedicated topics [Option A] sdk-internal#1409
• [deps]: Update Rust to v2026-09-01 sdk-internal#1428
• Update API bindings to f758b982f8b89e8e16b3cd5f56fc129b30b45035 sdk-internal#1435
• [PM-40277] Key rotation corrupts attachments, fido2 credentials sdk-internal#1265
• [deps]: Update Rust crate comfy-table to v8 sdk-internal#1429

Raw changelog

- fix: add key id to masterpasswordunlockdata (#1391)
- [PM-40985] Introduce managed settings crates (#1403)
- [PM-34718] Implement bw receive / bw send receive (#1317)
- [PM-40994] Add and generate wasm and uniffi bindings for managed settings (#1404)
- [PM-35785] Strongly typed policy enforcement (#1364)
- [deps]: Update actions/checkout action to v7 (#1341)
- [PM-40237] Stop emitting placeholder name for blob ciphers (#1408)
- refactor(shared-unlock): simplify shared unlock (#1397)
- deps: bump h2 to 0.4.16 (RUSTSEC-2026-0258) (#1415)
- Update API bindings to fc5ea9ab05bf7a1679163fc13ec351ff96363000 (#1402)
- [PM-41798] 1Password access module (#1371)
- [PM-41447] Add destination filtering to shared unlock (#1413)
- Ensure no commercial crates are part of the OSS builds (#1248)
- [deps] Platform (cargo): Update Rust crate uniffi to v0.32.0 (#1325)
- [deps]: Update Rust crate rusqlite to >=0.37.0, <0.41 (#1171)
- [PM-38816] New crypto lib in new importers crate for Keeper DI (#1182)
- Fix ThreadBoundRunner Clone Comment (#1420)
- Update API bindings to e607c3f43ebcbf6feb2aa6768c80bc9ddd5f4460 (#1416)
- feat(crypto): prevent V2 to V1 downgrade (#1417)
- Update API bindings to 0c32f3021f3e9bea08958fca1ec3cefe3462c88e (#1431)
- [deps]: Update dtolnay/rust-toolchain digest to 4360b52 (#1422)
- [PM-37487] Move collections client ownership to Admin Console (#1380)
- [PM-42599] [PM-41798] 1Password access: redact Debug output and fix crypto dep ownership (#1418)
- feat(ipc): route RPC responses on per-request dedicated topics [Option A] (#1409)
- [deps]: Update Rust to v2026-09-01 (#1428)
- Update API bindings to f758b982f8b89e8e16b3cd5f56fc129b30b45035 (#1435)
- [PM-40277] Key rotation corrupts attachments, fido2 credentials (#1265)
- [deps]: Update Rust crate comfy-table to v8 (#1429)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 79.60%. Comparing base (c419835) to head (1ae34a5).
⚠️ Report is 7 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2989      +/-   ##
==========================================
+ Coverage   79.53%   79.60%   +0.06%     
==========================================
  Files        1169     1169              
  Lines       75095    75200     +105     
==========================================
+ Hits        59724    59860     +136     
+ Misses      15371    15340      -31     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[claude]

Claude finished @bw-ghapp[bot]'s task in 5m 31s —— View job

---

SDK bump evaluated

b7e7be7 → 265e505 (sdk-swift), 3.0.0-7742-9794da5 → 3.0.0-7923-71a958f, 28 commits in range.

Surface diff over the sdk-swift range: 0 REMOVED, 0 MUTATED type declarations, 17 ADDED declarations. project-common.yml pin matches the SDKVersionInfoTests format (^\d+\.\d+\.\d+-\d+-[a-f0-9]+$), and BitwardenSdkMocks/BitwardenSdkMocks.swift needs no new entry — no client protocol iOS consumes was renamed or added.

Compile-time breaks

Build passed. build-for-testing for both Bitwarden and Authenticator exited 0 with no error:, Undefined symbols or ld: lines. The log shows BitwardenSdkMocks compiling, which is reachable only from test targets, so test code was covered too.

Two record-field additions were genuine initializer breaks, and both are already absorbed by commits on this branch — nothing left to fix:

1. Send.data: SendItem? / SendView.data: SendItemView? — [PM-34718] Implement bw receive / bw send receive sdk-internal#1317. New parameter in the middle of both memberwise initializers, so every construction site breaks. Fixed at BitwardenShared/Core/Tools/Extensions/BitwardenSdk+Tools.swift:92, BitwardenShared/UI/Tools/Send/SendItem/AddEditSendItem/AddEditSendItemState.swift:266, plus fixtures in BitwardenSdk+ToolsFixtures.swift, SendView+Fixtures.swift, SendListState+Fixtures.swift, BitwardenSdk+VaultMocking.swift. All pass data: nil, which is correct — SendEncryptionType has only .v1.
2. MasterPasswordUnlockData.containedKeyId: KeyId? — fix: add key id to masterpasswordunlockdata sdk-internal#1391. Fixed at BitwardenShared/Core/Auth/Models/Request/MasterPasswordUnlockDataRequestModel.swift:11,31, which forwards it into the request model.

Runtime considerations

• v2 send payloads are dropped — both iOS construction sites hard-code data: nil, and the read path (ViewSendItemState, AddEditSendItemState) still reads only text/file. Correct today since the app is v1-only and the server emits no v2 sends, but a send arriving with a data payload would render as empty rather than as an error. The two // The app only creates v1 sends comments mark this deliberately; worth tracking against [PM-34718] Implement bw receive / bw send receive sdk-internal#1317 rollout.
• containedKeyId is wire-compatible — Swift's synthesized Encodable uses encodeIfPresent for optionals, so the UpdateKdf body is byte-identical when the key has no ID, and gains "containedKeyId" only when it does. UpdateKdfRequestTests.test_body / test_body_containedKeyId assert exactly both shapes.
• New error cases reach iOS through generic handling only — MasterPasswordError.KeyIdMalformed (fix: add key id to masterpasswordunlockdata sdk-internal#1391) and BitwardenError.CollectionDecrypt / .CollectionEncrypt ([PM-37487] Move collections client ownership to Admin Console sdk-internal#1380). iOS never switches exhaustively over these; it uses targeted catch patterns (VaultClientService.swift:85, SSOCookieVendorResponseHandler.swift:49) and String(describing:) in BitwardenSdk+Platform.swift:31. No compile break, and the new cases surface as generic errors — acceptable, since none of them is actionable in the UI.
• No serialization regression. uniffi.toml diff over the sdk-internal range adds only the brand-new bitwarden-managed-settings-types crate; no existing type moved out of bitwarden-core/bitwarden-crypto. Codable conformance count in BitwardenCore.swift is unchanged at 47.

Everything else in range — confirmed safe

• [PM-40985] Introduce managed settings crates sdk-internal#1403, [PM-18417] refactor: Reorganize MainActor annotations #1404 — managed settings crates. Entirely new BitwardenManagedSettings.swift (ManagedSettingsBindingClient, ManagementProfile, ManagedSettingsError, isManaged, updateProfile, settings, updatedAt, version). No iOS consumer, and no name collides with an existing iOS type.
• [PM-35785] Strongly typed policy enforcement sdk-internal#1364 — strongly typed policy enforcement. Adds PolicyDataType, EnforcedPolicyErased, enforced. Policy.id/organizationId change Uuid → OrganizationId, which is public typealias OrganizationId = Uuid — cosmetic. PoliciesClientProtocol members unchanged.
• [PM-37487] Move collections client ownership to Admin Console sdk-internal#1380 — collections client ownership move. CollectionsClientProtocol and Collection members unchanged; only the two new BitwardenError cases above.
• [deps] Platform (cargo): Update Rust crate uniffi to v0.32.0 sdk-internal#1325 — uniffi 0.32.0. Reformats every error enum from public enum X: … onto two lines (public then enum X: …), which produces most of the raw diff noise. Conformance lists are identical; spot-checked SendDecryptError and MasterPasswordError.
• [PM-40237] Stop emitting placeholder name for blob ciphers sdk-internal#1408, [PM-16445] Renamed most uses of CXP acronym to CXF #1265, JSON import does not Import all TOTP #1417 — blob-cipher placeholder names, key-rotation attachment/FIDO2 corruption fix, V2→V1 downgrade prevention. Behavioral fixes inside the SDK; Cipher and CipherView members unchanged, so iOS inherits them with no call-site change.
• refactor(shared-unlock): simplify shared unlock sdk-internal#1397, Auto delete spaces in security key #1413 — shared unlock simplify + destination filtering. No surface iOS consumes changed.
• [PM-41798] 1Password access module sdk-internal#1371, Sort order changes randomly when the codes are refreshed #1418, PM-14168: Update log in button capitalization #1182 — 1Password access module, Debug redaction, Keeper importers crypto. New crates, no iOS consumer.
• feat(ipc): route RPC responses on per-request dedicated topics [Option A] sdk-internal#1409 — IPC per-request response topics. No iOS-facing surface.
• Update API bindings to fc5ea9ab05bf7a1679163fc13ec351ff96363000 sdk-internal#1402, Feature Request: Ability to Import #1416, PM-11480 added reloading generator options on view appear #1431, Unable to save new login #1435 — API binding regenerations. No removed or mutated declarations.
• Ensure no commercial crates are part of the OSS builds sdk-internal#1248, PM-17859: Update vault add/edit item authenticator field #1341, QR code scanning not an option for IPhone SE3 #1415, Import of Raivo JSON in Tresorit via iOS Files app fails #1420, App doesn't open and shows "Authenticator quit unexpectedly" error on macOS #1422, Reddit login broken #1428, PM-18808: Added login item name for Autofill selection. #1429, Vault tab navigation bar title display mode is always large even when scrolling #1171 — OSS build hygiene, CI actions, Rust toolchain and crate bumps, comment fix. No binding surface.

Foreign-implemented protocols all verified unchanged, so no with_foreign conformer needs a new stub: Fido2CredentialStore, ClientManagedTokens, ServerCommunicationConfigRepository, Fido2UserInterface. No enum case was removed anywhere in the range.

Commit

No commit — nothing needed fixing. Both compile breaks were already resolved by commits already on sdlc/sdk-update, and the verifying build passes for both schemes including test targets.
• sdlc/sdk-update