StefanSA/vaultwarden-plus
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases 12 Packages 1 Wiki Activity Actions
12 releases 12 tags
  • v1.36.8 c57c03f3f3

    Vaultwarden-Plus v1.36.8
    All checks were successful
    auto-image-build / docker-build (push) Successful in 27m18s
    Details
    ci / rust-checks (push) Successful in 2m42s
    Details
    validate-publish-surface / validate-publish-surface (push) Successful in 3s
    Details
    Stable

    StefanSA released this 2026-07-28 12:06:46 +02:00 | 3 commits to main since this release

    Vaultwarden-Plus v1.36.8

    Rust toolchain and dependency convergence release published directly from validated commit c57c03f3f319362026e221d7b18c6de6aa83fe83.

    Toolchain and Dependencies

    • Converged directly on the final Vaultwarden 1.37.0 dependency and toolchain state from upstream #7200, #6127, #7406, #7453, and #7470.
    • Updated the canonical Rust toolchain and Forgejo Rust runner to Rust 1.97.1.
    • Migrated the workspace to Edition 2024 while retaining the upstream 1.95.0 minimum supported Rust version.
    • Updated the final upstream Cargo dependency graph and lockfile, including Reqwest 0.13, Cached 2, OpenDAL 0.57, Diesel 2.3.11, JsonWebToken 11, Tokio 1.53, and associated transitive dependencies.
    • Updated the Debian and musl build images to Rust 1.97.1, the Alpine runtime to 3.24, and musl target selection to CARGO_BUILD_TARGET.

    Vaultwarden-Plus Adaptations

    • Preserved the Plus-only SES feature and aws-sdk-sesv2 dependency on the final common AWS SDK graph.
    • Preserved Lettre DKIM and all SMTP/sendmail/mail-hardening behavior.
    • Added explicit, idempotent Ring crypto-provider initialization for the combined Reqwest 0.13, Rustls, OpenDAL, and SES graph.
    • Adapted Cached 2 macro syntax and OIDC's direct Reqwest integration without changing functional API behavior.
    • Preserved Account Recovery, Passkey Login/PRF, Trusted Devices, Authentication Requests, Device Login, and Send Email OTP.
    • Preserved Forgejo-native workflows and BuildKit caching.

    Scope Boundaries

    • Web Vault remains pinned to 2026.4.1 with the existing immutable digest.
    • Existing Web Vault adapters are unchanged.
    • No GitHub Actions, unrelated API features, or database migrations are included.

    Validation

    • Release target: c57c03f3f319362026e221d7b18c6de6aa83fe83.
    • Formatting and whitespace checks passed in forgejo-rust-node:1.97.1.
    • Locked SQLite, MySQL/MariaDB, PostgreSQL, and sqlite,ses Cargo checks passed.
    • Focused dependency, authentication, organization, Send, mail, SSO, Passkey, Trusted Device, Account Recovery, and Device Login tests passed.
    • Optimized release builds passed separately for SQLite, MySQL/MariaDB, and PostgreSQL.
    • Cargo metadata, lockfile source/checksum validation, and dependency-tree resolution passed.
    • The Debian container build and runtime healthcheck smoke test passed.
    • Forgejo auto-image-build.yml, ci.yml, and validate-publish-surface.yml completed successfully for the release target.
    • The successful CI image is reused for release artifacts and Registry tags; no duplicate release build is performed.

    Images

    • forgejo.sabolowitsch.org/stefansa/vaultwarden-plus:1.36.8
    • forgejo.sabolowitsch.org/stefansa/vaultwarden-plus:c57c03f3f319
    • forgejo.sabolowitsch.org/stefansa/vaultwarden-plus:latest
    Downloads