Update SDK to 2.0.0-4744-599e7927

[bw-ghapp]

Updates the SDK version from 2.0.0-4676-0544ddec to com.bitwarden:sdk-android 2.0.0-4744-599e7927

What's Changed

• [PM-30144] Add keystore support for unsigned shared key sdk-internal#677
• [PM-19056] SDK: Send email verification sdk-internal#643
• [PM-24978] Pass along Attachment decryption errors sdk-internal#644
• [BEEEP] Clean up PRF/HKDF error handling sdk-internal#666
• [PM-27638|BEEEP] Add key id to passwordprotectedkeyenvelope headers sdk-internal#514
• Update pull request template sdk-internal#708
• Fix sqlite location sdk-internal#707
• [deps]: Update dtolnay/rust-toolchain digest to f7ccc83 sdk-internal#630
• SSO JIT Master Password encryption v2 new user registration Argon2Id KDF parallelism 4 sdk-internal#711

Raw changelog

- [PM-30144] Add keystore support for unsigned shared key (#677)
- [PM-19056]  SDK: Send email verification (#643)
- [PM-24978] Pass along Attachment decryption errors (#644)
- [BEEEP] Clean up PRF/HKDF error handling (#666)
- [PM-27638|BEEEP] Add key id to passwordprotectedkeyenvelope headers (#514)
- Update pull request template (#708)
- Fix sqlite location (#707)
- [deps]: Update dtolnay/rust-toolchain digest to f7ccc83 (#630)
- SSO JIT Master Password encryption v2 new user registration Argon2Id KDF parallelism 4 (#711)

[github-actions]

Checkmarx One – Scan Summary & Details – 83fd5f9b-e895-4bfb-a558-085aaeb3eff5

New Issues (68)

Checkmarx found the following issues in this Pull Request

#	Severity	Issue	Source File / Package	Checkmarx Insight
1		Command_Injection	/.github/scripts/label-pr.py: 109	details The application's gh_replace_labels method calls an OS (shell) command with payload, at line 109 of /.github/scripts/label-pr.py, using an u... Attack Vector
2		Privacy_Violation	/app/src/test/kotlin/com/x8bit/bitwarden/data/vault/manager/CipherManagerTest.kt: 2473	details Method Lambda at line 2473 of /app/src/test/kotlin/com/x8bit/bitwarden/data/vault/manager/CipherManagerTest.kt sends user information outside the ... Attack Vector
3		Privacy_Violation	/network/src/testFixtures/kotlin/com/bitwarden/network/model/SyncResponseProfileUtil.kt: 54	details Method createMockProfile at line 54 of /network/src/testFixtures/kotlin/com/bitwarden/network/model/SyncResponseProfileUtil.kt sends user informat... Attack Vector
4		Privacy_Violation	/app/src/test/kotlin/com/x8bit/bitwarden/data/vault/manager/CipherManagerTest.kt: 2631	details Method Lambda at line 2631 of /app/src/test/kotlin/com/x8bit/bitwarden/data/vault/manager/CipherManagerTest.kt sends user information outside the ... Attack Vector
5		Privacy_Violation	/app/src/test/kotlin/com/x8bit/bitwarden/data/vault/manager/CipherManagerTest.kt: 2546	details Method Lambda at line 2546 of /app/src/test/kotlin/com/x8bit/bitwarden/data/vault/manager/CipherManagerTest.kt sends user information outside the ... Attack Vector
6		Privacy_Violation	/app/src/test/kotlin/com/x8bit/bitwarden/data/vault/manager/CipherManagerTest.kt: 2365	details Method Lambda at line 2365 of /app/src/test/kotlin/com/x8bit/bitwarden/data/vault/manager/CipherManagerTest.kt sends user information outside the ... Attack Vector
7		Privacy_Violation	/app/src/test/kotlin/com/x8bit/bitwarden/data/vault/manager/CipherManagerTest.kt: 2417	details Method Lambda at line 2417 of /app/src/test/kotlin/com/x8bit/bitwarden/data/vault/manager/CipherManagerTest.kt sends user information outside the ... Attack Vector
8		Privacy_Violation	/app/src/test/kotlin/com/x8bit/bitwarden/data/vault/manager/CipherManagerTest.kt: 2315	details Method Lambda at line 2315 of /app/src/test/kotlin/com/x8bit/bitwarden/data/vault/manager/CipherManagerTest.kt sends user information outside the ... Attack Vector
9		Privacy_Violation	/ui/src/main/kotlin/com/bitwarden/ui/platform/model/TotpData.kt: 26	details Method TotpData at line 26 of /ui/src/main/kotlin/com/bitwarden/ui/platform/model/TotpData.kt sends user information outside the application. Thi... Attack Vector
10		Privacy_Violation	/testharness/src/main/kotlin/com/bitwarden/testharness/data/manager/CredentialTestManagerImpl.kt: 39	details Method createPassword at line 39 of /testharness/src/main/kotlin/com/bitwarden/testharness/data/manager/CredentialTestManagerImpl.kt sends user in... Attack Vector
11		Privacy_Violation	/app/src/main/kotlin/com/x8bit/bitwarden/ui/vault/feature/addedit/util/CreateCredentialRequestExtensions.kt: 39	details Method toDefaultAddTypeContent at line 39 of /app/src/main/kotlin/com/x8bit/bitwarden/ui/vault/feature/addedit/util/CreateCredentialRequestExtensio... Attack Vector
12		Privacy_Violation	/app/src/main/kotlin/com/x8bit/bitwarden/ui/vault/feature/addedit/util/CreateCredentialRequestExtensions.kt: 38	details Method toDefaultAddTypeContent at line 38 of /app/src/main/kotlin/com/x8bit/bitwarden/ui/vault/feature/addedit/util/CreateCredentialRequestExtensio... Attack Vector
13		Privacy_Violation	/app/src/main/kotlin/com/x8bit/bitwarden/data/autofill/manager/AutofillTotpManagerImpl.kt: 28	details Method tryCopyTotpToClipboard at line 28 of /app/src/main/kotlin/com/x8bit/bitwarden/data/autofill/manager/AutofillTotpManagerImpl.kt sends user i... Attack Vector
14		Privacy_Violation	/app/src/main/kotlin/com/x8bit/bitwarden/ui/auth/feature/twofactorlogin/TwoFactorLoginNavigation.kt: 27	details Method TwoFactorLoginArgs at line 27 of /app/src/main/kotlin/com/x8bit/bitwarden/ui/auth/feature/twofactorlogin/TwoFactorLoginNavigation.kt sends ... Attack Vector
15		Privacy_Violation	/app/src/main/kotlin/com/x8bit/bitwarden/data/credentials/model/Fido2CredentialAssertionRequest.kt: 24	details Method Fido2CredentialAssertionRequest at line 24 of /app/src/main/kotlin/com/x8bit/bitwarden/data/credentials/model/Fido2CredentialAssertionReques... Attack Vector
16		Privacy_Violation	/app/src/main/kotlin/com/x8bit/bitwarden/ui/auth/feature/login/LoginViewModel.kt: 294	details Method LoginState at line 294 of /app/src/main/kotlin/com/x8bit/bitwarden/ui/auth/feature/login/LoginViewModel.kt sends user information outside t... Attack Vector
17		Privacy_Violation	/app/src/test/kotlin/com/x8bit/bitwarden/ui/vault/feature/itemlisting/VaultItemListingScreenTest.kt: 1990	details Method `GetPasswordCredentialResult event should call CredentialProviderCompletionManager with result` at line 1990 of /app/src/test/kotlin/com/x... Attack Vector
18		Privacy_Violation	/app/src/main/kotlin/com/x8bit/bitwarden/ui/vault/feature/item/VaultItemViewModel.kt: 1420	details Method VaultItemState at line 1420 of /app/src/main/kotlin/com/x8bit/bitwarden/ui/vault/feature/item/VaultItemViewModel.kt sends user information ... Attack Vector
19		Privacy_Violation	/app/src/test/kotlin/com/x8bit/bitwarden/data/vault/datasource/sdk/model/CipherViewUtil.kt: 127	details Method createMockLoginView at line 127 of /app/src/test/kotlin/com/x8bit/bitwarden/data/vault/datasource/sdk/model/CipherViewUtil.kt sends user in... Attack Vector
20		Privacy_Violation	/app/src/test/kotlin/com/x8bit/bitwarden/ui/credentials/manager/CredentialProviderCompletionManagerTest.kt: 232	details Method `completePasswordGet should set GetCredentialResponse, set activity result, then finish activity when result is Success` at line 232 of /a... Attack Vector
21		Privacy_Violation	/app/src/test/kotlin/com/x8bit/bitwarden/data/vault/datasource/sdk/model/CipherViewUtil.kt: 122	details Method createMockLoginView at line 122 of /app/src/test/kotlin/com/x8bit/bitwarden/data/vault/datasource/sdk/model/CipherViewUtil.kt sends user in... Attack Vector
22		Privacy_Violation	/app/src/test/kotlin/com/x8bit/bitwarden/ui/credentials/manager/CredentialProviderCompletionManagerTest.kt: 258	details Method `completePasswordGet should set GetCredentialException, set activity result, then finish activity when result is Cancelled` at line 258 of... Attack Vector
23		Privacy_Violation	/app/src/test/kotlin/com/x8bit/bitwarden/ui/auth/feature/vaultunlock/VaultUnlockViewModelTest.kt: 778	details Method `on UnlockClick for password unlock should display error dialog on AuthenticationError` at line 778 of /app/src/test/kotlin/com/x8bit/bitw... Attack Vector
24		Privacy_Violation	/app/src/main/kotlin/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 427	details Method CompleteRegistrationState at line 427 of /app/src/main/kotlin/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationV... Attack Vector
25		Privacy_Violation	/app/src/main/kotlin/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 431	details Method CompleteRegistrationState at line 431 of /app/src/main/kotlin/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationV... Attack Vector
26		Privacy_Violation	/app/src/main/kotlin/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 428	details Method CompleteRegistrationState at line 428 of /app/src/main/kotlin/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationV... Attack Vector
27		Privacy_Violation	/app/src/main/kotlin/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 426	details Method CompleteRegistrationState at line 426 of /app/src/main/kotlin/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationV... Attack Vector
28		Privacy_Violation	/app/src/main/kotlin/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 322	details Method Lambda at line 322 of /app/src/main/kotlin/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt sends ... Attack Vector
29		Privacy_Violation	/app/src/test/kotlin/com/x8bit/bitwarden/ui/credentials/manager/CredentialProviderCompletionManagerTest.kt: 155	details Method `completeCredentialRegistration should set CreateCredentialResponse, set activity result, then finish activity when result is SuccessPasswo... Attack Vector
30		Privacy_Violation	/app/src/main/kotlin/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 322	details Method Lambda at line 322 of /app/src/main/kotlin/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt sends ... Attack Vector
31		Privacy_Violation	/app/src/test/kotlin/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModelTest.kt: 585	details Method Lambda at line 585 of /app/src/test/kotlin/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModelTest.kt se... Attack Vector
32		Privacy_Violation	/app/src/main/kotlin/com/x8bit/bitwarden/ui/platform/feature/settings/accountsecurity/deleteaccount/DeleteAccountViewModel.kt: 100	details Method Lambda at line 100 of /app/src/main/kotlin/com/x8bit/bitwarden/ui/platform/feature/settings/accountsecurity/deleteaccount/DeleteAccountViewM... Attack Vector
33		Privacy_Violation	/app/src/test/kotlin/com/x8bit/bitwarden/ui/platform/feature/settings/accountsecurity/deleteaccount/DeleteAccountViewModelTest.kt: 175	details Method Lambda at line 175 of /app/src/test/kotlin/com/x8bit/bitwarden/ui/platform/feature/settings/accountsecurity/deleteaccount/DeleteAccountViewM... Attack Vector
34		Privacy_Violation	/app/src/main/kotlin/com/x8bit/bitwarden/ui/platform/feature/settings/accountsecurity/deleteaccount/DeleteAccountViewModel.kt: 100	details Method Lambda at line 100 of /app/src/main/kotlin/com/x8bit/bitwarden/ui/platform/feature/settings/accountsecurity/deleteaccount/DeleteAccountViewM... Attack Vector
35		Privacy_Violation	/testharness/src/main/kotlin/com/bitwarden/testharness/ui/platform/feature/createpassword/CreatePasswordViewModel.kt: 174	details Method CreatePasswordState at line 174 of /testharness/src/main/kotlin/com/bitwarden/testharness/ui/platform/feature/createpassword/CreatePasswordV... Attack Vector

More results are available on the CxOne platform

Fixed Issues (15)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	Privacy_Violation	/testharness/src/test/kotlin/com/bitwarden/testharness/ui/platform/feature/createpassword/CreatePasswordViewModelTest.kt: 429
	Privacy_Violation	/testharness/src/test/kotlin/com/bitwarden/testharness/ui/platform/feature/createpassword/CreatePasswordViewModelTest.kt: 402
	Privacy_Violation	/testharness/src/test/kotlin/com/bitwarden/testharness/ui/platform/feature/createpassword/CreatePasswordViewModelTest.kt: 386
	Privacy_Violation	/testharness/src/test/kotlin/com/bitwarden/testharness/ui/platform/feature/createpassword/CreatePasswordViewModelTest.kt: 334
	Privacy_Violation	/testharness/src/test/kotlin/com/bitwarden/testharness/ui/platform/feature/createpassword/CreatePasswordViewModelTest.kt: 237
	Privacy_Violation	/testharness/src/test/kotlin/com/bitwarden/testharness/ui/platform/feature/createpassword/CreatePasswordViewModelTest.kt: 265
	Privacy_Violation	/testharness/src/test/kotlin/com/bitwarden/testharness/ui/platform/feature/createpassword/CreatePasswordViewModelTest.kt: 305
	Privacy_Violation	/testharness/src/test/kotlin/com/bitwarden/testharness/ui/platform/feature/createpassword/CreatePasswordViewModelTest.kt: 206
	Privacy_Violation	/testharness/src/test/kotlin/com/bitwarden/testharness/ui/platform/feature/createpassword/CreatePasswordViewModelTest.kt: 170
	Privacy_Violation	/testharness/src/test/kotlin/com/bitwarden/testharness/ui/platform/feature/createpassword/CreatePasswordViewModelTest.kt: 110
	Privacy_Violation	/testharness/src/test/kotlin/com/bitwarden/testharness/ui/platform/feature/createpassword/CreatePasswordViewModelTest.kt: 90
	Privacy_Violation	/testharness/src/test/kotlin/com/bitwarden/testharness/ui/platform/feature/createpassword/CreatePasswordViewModelTest.kt: 70
	Privacy_Violation	/app/src/test/kotlin/com/x8bit/bitwarden/data/credentials/model/Fido2CredentialAssertionRequestUtil.kt: 12
	Privacy_Violation	/app/src/test/kotlin/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModelTest.kt: 675
	Privacy_Violation	/app/src/test/kotlin/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModelTest.kt: 687