Skip to content

Release history

Hoppscotch Community Edition releases

Fast and beautiful API request builder.

Back to tool Latest release

All releases

10 shown

Upgrade now
2026.5.0 Mixed
Auth Dependencies

OpenAPI 3.1 export + zoom + proxy config

Open
No immediate action
2026.4.1 Bug fix

Import regression fixed

Open
2026.4.0 New feature
Security fixes
  • Remediated `quinn-proto` vulnerability across native packages
  • Security patch for the dependency chain in v2026.4.0
Notable features
  • Collection-level pre-request and test scripts
  • SMTP OAuth2 authentication support
Full changelog

This release introduces collection-level pre-request and test scripts, desktop settings with manual update controls, refinements to the API documentation experience, and self-hosted improvements, including SMTP OAuth2 authentication, alongside security patches and bug fixes.

Read more at: https://hoppscotch.com/blog/hoppscotch-v2026-4-0.

What's Changed

  • refactor(cli): match test-result helper name to documented contract by @Basavaraj8143 in https://github.com/hoppscotch/hoppscotch/pull/6122
  • feat(backend): use stateless OAuth2 state store by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6098
  • fix(common): handle non-string values in Postman collection import by @okxint in https://github.com/hoppscotch/hoppscotch/pull/6137
  • fix(common): correct environment locale wording by @PallavSarkar2005 in https://github.com/hoppscotch/hoppscotch/pull/6117
  • fix(data): make $randomUUID predefined variable RFC 4122 compliant by @Grizouforever in https://github.com/hoppscotch/hoppscotch/pull/6125
  • chore(common): complete missing Spanish translations by @Pakvothe in https://github.com/hoppscotch/hoppscotch/pull/6109
  • chore(common): complete missing Turkish translations by @onwp in https://github.com/hoppscotch/hoppscotch/pull/6071
  • chore(common): modify Chinese translation of words by @jiangzm in https://github.com/hoppscotch/hoppscotch/pull/5996
  • fix(common): add missing aria-labels to icon-only sidenav links by @rayrishu19-wq in https://github.com/hoppscotch/hoppscotch/pull/6160
  • fix(common): variable hover tooltip was not clickable (disappeared) by @AaronFortG in https://github.com/hoppscotch/hoppscotch/pull/6155
  • feat: add SMTP OAuth2 authentication support by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6141
  • fix: resolve invalid environment validation when publishing docs in personal workspace by @sahilkhan09k in https://github.com/hoppscotch/hoppscotch/pull/5962
  • feat(common): improve API documentation publishing UX by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/6116
  • fix: remediate quinn-proto vulnerability across native packages by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6174
  • docs: security threat model and policy update by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6158
  • fix(common): apply platform default proxy URL on load and reset by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/6142
  • feat: add collection-level pre-request and test scripts by @johnan319 in https://github.com/hoppscotch/hoppscotch/pull/5745
  • fix(common): support id_token in Authorization Code OAuth flow by @anwarulislam in https://github.com/hoppscotch/hoppscotch/pull/6144
  • feat(desktop): settings phase 0 - infra and update check by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6172
  • feat(selfhost-web): make webapp-server timeouts configurable by @rkferreira in https://github.com/hoppscotch/hoppscotch/pull/6147
  • fix(common): restore magic-link sign-in flow on cloud for orgs by @jamesgeorge007 in https://github.com/hoppscotch/hoppscotch/pull/6237
  • fix(desktop): unified store scope and migration reroute by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6238
  • chore: security patch for the dependency chain v2026.4.0 by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6191
  • fix(backend): harden onboarding config endpoint by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6240
  • fix(common): set domain url as mockserver environment by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/6185
  • fix(common): subfolder add-new in team collections respects write access by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/6243
  • fix(common): preserve string contract for GQL history responses by @jamesgeorge007 in https://github.com/hoppscotch/hoppscotch/pull/6244

New Contributors

  • @Basavaraj8143 made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6122
  • @okxint made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6137
  • @PallavSarkar2005 made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6117
  • @Grizouforever made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6125
  • @Pakvothe made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6109
  • @onwp made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6071
  • @rayrishu19-wq made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6160
  • @sahilkhan09k made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5962
  • @johnan319 made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5745
  • @rkferreira made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6147

Full Changelog: https://github.com/hoppscotch/hoppscotch/compare/2026.3.1...2026.4.0

View release on GitHub
2026.3.1 Bug fix

Fixed saving settings in the admin dashboard when input validation passes.

Full changelog

This patch release, exclusive to the Enterprise offering, resolves an issue that prevented changes to settings from being saved in the admin dashboard.

What's Changed

  • fix(sh-admin): unblock settings save when input validation passes by @nivedin

Full Changelog: https://github.com/hoppscotch/hoppscotch/compare/2026.3.0...2026.3.1

View release on GitHub
2026.3.0 Mixed
Security fixes
  • Fix stored XSS in team member overflow tooltip
  • Fix open redirect vulnerability on enter page
  • Fix stored XSS via mock server responses and cross‑team request moves
Notable features
  • Add `MAILER_SMTP_IGNORE_TLS` and optional SMTP authentication configuration
  • Show user workspace memberships in the admin dashboard
  • Cloud for Organizations support (Phase 3) in the desktop app
Full changelog

This release brings Cloud for Organizations to the desktop app, adds admin workspace visibility, keyboard shortcut support for non-English layouts, and optional SMTP authentication, alongside security patches and bug fixes.

Read more at: https://hoppscotch.com/blog/hoppscotch-v2026-3-0.

What's Changed

  • fix(common): persist OAuth2 code challenge method selection by @umutkeltek in https://github.com/hoppscotch/hoppscotch/pull/5921
  • chore(common): update Chinese translations by @jiangzm in https://github.com/hoppscotch/hoppscotch/pull/5979
  • fix(common): prevent stored XSS in team member overflow tooltip by @jamesgeorge007 in https://github.com/hoppscotch/hoppscotch/pull/5984
  • fix(common): fetch full team collection tree on workspace import by @chhaviG22 in https://github.com/hoppscotch/hoppscotch/pull/5792
  • fix: restore tooltips on icon-only buttons inside popover triggers by @nikhilmahato21 in https://github.com/hoppscotch/hoppscotch/pull/5935
  • fix(common): prevent infinite auth refresh retry loop on permanent token failure by @danielalanbates in https://github.com/hoppscotch/hoppscotch/pull/5893
  • fix(desktop): add native Edit menu to enable clipboard shortcuts on Linux by @umutkeltek in https://github.com/hoppscotch/hoppscotch/pull/5920
  • fix(common): prevent open redirect in enter page by @jamesgeorge007 in https://github.com/hoppscotch/hoppscotch/pull/5982
  • chore: security patch for the dependency chain v2026.3.0 by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6013
  • fix(backend): prevent stored XSS via mock server responses and cross-team request moves by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6006
  • feat: add MAILER_SMTP_IGNORE_TLS and optional SMTP auth by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/5972
  • feat: show user workspace memberships in admin dashboard by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/5968
  • refactor(common): route mock server and published docs operations through platform backend by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/6036
  • feat(desktop): cloud for orgs support - phase 3 by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6043
  • fix: keyboard shortcuts on non-English layouts by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6009
  • fix(common): use operation title as fallback in OpenAPI import by @hypergadam in https://github.com/hoppscotch/hoppscotch/pull/5950
  • fix(common): handle File objects in HAR postData text resolution by @sh3xu in https://github.com/hoppscotch/hoppscotch/pull/5917
  • fix(desktop): add missing backport changes by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6047
  • fix: validate device-login redirect_uri to prevent token theft via DNS wildcard bypass by @nahidhasan94 in https://github.com/hoppscotch/hoppscotch/pull/6012
  • feat(common): fall back to ref_id in remove functions when id is missing by @anwarulislam in https://github.com/hoppscotch/hoppscotch/pull/5898
  • chore: patch dependency vulnerabilities and harden production image by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6055
  • fix: use team.findMany for fetching user teams by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6057
  • fix(common): resolve history schema mismatch on page reload by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/6068
  • chore: align Tauri plugin-shell versions by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6069
  • fix(common): newly created folder not shown in save-as dialog by @majiayu000 in https://github.com/hoppscotch/hoppscotch/pull/6059

New Contributors

  • @umutkeltek made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5921
  • @nikhilmahato21 made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5935
  • @danielalanbates made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5893
  • @hypergadam made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5950
  • @nahidhasan94 made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6012
  • @majiayu000 made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6059

Full Changelog: https://github.com/hoppscotch/hoppscotch/compare/2026.2.1...2026.3.0

View release on GitHub
2026.2.1 Security relevant
Security fixes
  • fix(backend): enforce user ownership when deleting PAT — prevents unauthorized deletion of personal access tokens
Full changelog

This patch release addresses a security issue related to Personal Access Token deletion, a regression with stored request payloads that could override collection identifiers, and list truncation beyond 10 items in team workspaces, alongside minor bug fixes.

What's Changed

  • fix(common): hide horizontal scrollbar in Firefox for URL input by @Theproudcold in https://github.com/hoppscotch/hoppscotch/pull/5906
  • fix(backend): prevent request payload from overriding id and name by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/5913
  • fix(backend): enforce user ownership when deleting PAT by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/5916
  • fix(common): update documentation link for mock server by @sh3xu in https://github.com/hoppscotch/hoppscotch/pull/5929
  • fix(backend): bump Prisma packages to 7.4.2 by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/5932

New Contributors

  • @Theproudcold made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5906
  • @sh3xu made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5929

Full Changelog: https://github.com/hoppscotch/hoppscotch/compare/2026.2.0...2026.2.1

View release on GitHub
2026.2.0 Breaking risk
⚠ Upgrade required
  • Run the latest migrations after upgrading if self‑hosting (see https://docs.hoppscotch.io/documentation/self-host/community-edition/install-and-build#running-migrations)
  • Legacy interceptor system deprecated – plan migration to new approach
  • Czech locale updated with improved translations
Breaking changes
  • Database migrations required for API documentation versioning feature
Security fixes
  • Security patch applied to dependency chain v2026.2.0
  • Resolved security advisories: IDOR and onboarding bypass in backend
  • Prevented IDOR in user collection and request endpoints
Notable features
  • API documentation versioning
  • Unified dropdown-based organization switcher
  • URL encode/decode context menu actions
Full changelog

This release introduces API documentation versioning, a unified dropdown-based switcher for Cloud orgs tier, and scripting sandbox reliability improvements, alongside security patches, bug fixes, and enhancements.

Read more at: https://hoppscotch.com/blog/hoppscotch-v2026-2-0.

[!Note]
This release includes database migrations required for the API Documentation versioning feature. If you are self-hosting, please ensure you run the latest migrations after upgrading. Please refer to the documentation for more context.

What's Changed

  • feat(common): URL encode/decode context menu actions by @KanhaiyaPandey in https://github.com/hoppscotch/hoppscotch/pull/5782
  • fix(common): correctly resolve secret environment variables in basic auth header by @aviu16 in https://github.com/hoppscotch/hoppscotch/pull/5879
  • fix: auto-recover from corrupted sandbox state by @jamesgeorge007 in https://github.com/hoppscotch/hoppscotch/pull/5874
  • fix(common): improve responsive layout and overflow in realtime pages by @chandraprakash-pandey in https://github.com/hoppscotch/hoppscotch/pull/5843
  • chore: security patch for the dependency chain v2026.2.0 by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/5887
  • feat(sh-admin): add search and pagination to teams list by @Leon-Luu in https://github.com/hoppscotch/hoppscotch/pull/5803
  • chore(common): deprecate legacy interceptor system by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/5830
  • chore(common): update Czech locale with improved translations by @lubomirblazekcz in https://github.com/hoppscotch/hoppscotch/pull/5895
  • fix(backend): resolve security advisories for IDOR and onboarding bypass by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/5897
  • feat(common): add foundational support for dropdown-based organization switcher by @jamesgeorge007 in https://github.com/hoppscotch/hoppscotch/pull/5890
  • feat: api documentation versioning by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/5676
  • fix(common): constrain variable tooltip to viewport for long values by @aviu16 in https://github.com/hoppscotch/hoppscotch/pull/5878
  • fix(common): resolve TypeError when opening request from search results by @Leon-Luu in https://github.com/hoppscotch/hoppscotch/pull/5842
  • fix(common): increase modal dialog width for more screen sizes by @iDschepe in https://github.com/hoppscotch/hoppscotch/pull/5884
  • feat(desktop): cloud for orgs platform contract by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/5903
  • fix(backend): prevent IDOR in user collection and request endpoints by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/5902

New Contributors

  • @KanhaiyaPandey made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5782
  • @aviu16 made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5879
  • @chandraprakash-pandey made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5843
  • @lubomirblazekcz made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5895
  • @iDschepe made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5884

Full Changelog: https://github.com/hoppscotch/hoppscotch/compare/2026.1.1...2026.2.0

View release on GitHub
2026.1.1 Bug fix
Notable features
  • Improved OpenAPI response example population
  • Corrected mock server loading on initialization and workspace change
Full changelog

This patch release fixes broken scroll on Chrome v144+, auth cookie handling on macOS, and database connection leaks, alongside mock server and OpenAPI import improvements.

What's Changed

  • fix(common): handle null request ref in InspectionService for test-runner tabs by @Leon-Luu in https://github.com/hoppscotch/hoppscotch/pull/5814
  • fix: broken scroll on latest chrome versions by @mayank-jain-1010 in https://github.com/hoppscotch/hoppscotch/pull/5816
  • fix(common): prevent support menu from triggering in editors by @Leon-Luu in https://github.com/hoppscotch/hoppscotch/pull/5811
  • fix(backend): use duration instead of timestamp for auth cookie maxAge by @njg7194 in https://github.com/hoppscotch/hoppscotch/pull/5821
  • fix(backend): resolve database connection leak in infra-config operations by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/5825
  • chore(backend): upgrade nodemailer dependency to v8 by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/5833
  • fix(common): correctly populate OpenAPI response examples by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/5831
  • fix(cli): strip module prefix before script execution by @jamesgeorge007 in https://github.com/hoppscotch/hoppscotch/pull/5835
  • fix(common): correctly load mock servers on initialization and workspace change by @anwarulislam in https://github.com/hoppscotch/hoppscotch/pull/5832

New Contributors

  • @njg7194 made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5821

Full Changelog: https://github.com/hoppscotch/hoppscotch/compare/2026.1.0...2026.1.1

View release on GitHub
2026.1.0 Breaking risk
Breaking changes
  • `JSONPath` removed; `jq` now used for JSON response filtering.
Notable features
  • Web Crypto API support added to the experimental scripting sandbox
  • Desktop cloud organization infrastructure for hosting mapping
Full changelog

This release introduces jq-based JSON response filtering, Web Crypto API support and memory leak fixes in the experimental scripting sandbox, alongside desktop cloud organization infrastructure, CLI fixes, and backend performance improvements.

[!Note]
This release replaces JSONPath with jq for JSON response filtering. Please refer to #5703 for details.

What's Changed

  • feat(common): add copy functionality to console output entries by @aparna-bhatt in https://github.com/hoppscotch/hoppscotch/pull/5743
  • fix(common): environment variable mapping when referencing other variables by @AaronFortG in https://github.com/hoppscotch/hoppscotch/pull/5704
  • fix: strip comments from JSON request bodies in CLI by @jamesgeorge007 in https://github.com/hoppscotch/hoppscotch/pull/5769
  • fix(cli): inherit collection variables in folders without own variables by @jamesgeorge007 in https://github.com/hoppscotch/hoppscotch/pull/5771
  • fix(common): prevent hang when highlighting large responses by @chhaviG22 in https://github.com/hoppscotch/hoppscotch/pull/5714
  • feat(common): use jq for JSON response filtering by @gerardbalaoro in https://github.com/hoppscotch/hoppscotch/pull/5703
  • feat(common): add armenian translation by @NarekCodes in https://github.com/hoppscotch/hoppscotch/pull/5740
  • fix(common): correct typo in repo French locale by @NoobFullStack in https://github.com/hoppscotch/hoppscotch/pull/5733
  • feat(common): update and complete Dutch translations for Hoppscotch UI by @NoobFullStack in https://github.com/hoppscotch/hoppscotch/pull/5734
  • fix(common): prevent duplication of request ID when duplicating requests by @anwarulislam in https://github.com/hoppscotch/hoppscotch/pull/5781
  • fix: improve endpoint parsing in parseExample method by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/5762
  • feat: migrate ESLint to v9 across packages by @jamesgeorge007 in https://github.com/hoppscotch/hoppscotch/pull/5773
  • fix(common): restore scrolling on response panel by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/5783
  • chore: security patch for the dependency chain v2026.1.0 by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/5786
  • chore(common): complete missing Spanish translations by @taberoajorge in https://github.com/hoppscotch/hoppscotch/pull/5761
  • feat(js-sandbox): add extensive Web Crypto API support by @jamesgeorge007 in https://github.com/hoppscotch/hoppscotch/pull/5791
  • fix(backend): prevent cross-user orderIndex corruption and collection deadlocks by @shaezard in https://github.com/hoppscotch/hoppscotch/pull/5647
  • docs(desktop): add installation instruction using Homebrew by @swanandvk in https://github.com/hoppscotch/hoppscotch/pull/5790
  • fix(common): ignore shift keybindings in CodeMirror editors by @Leon-Luu in https://github.com/hoppscotch/hoppscotch/pull/5794
  • feat(desktop): host mapping infra for cloud orgs by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/5795
  • fix(desktop): use store dir for unified store path by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/5799
  • feat(common): show full request path in tab tooltip by @abhibarkade in https://github.com/hoppscotch/hoppscotch/pull/5750
  • feat(common): display user roles in member stack tooltips by @Leon-Luu in https://github.com/hoppscotch/hoppscotch/pull/5793
  • fix: prevent memory leaks in experimental scripting sandbox by @jamesgeorge007 in #5800

New Contributors

  • @aparna-bhatt made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5743
  • @gerardbalaoro made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5703
  • @NarekCodes made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5740
  • @NoobFullStack made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5733
  • @taberoajorge made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5761
  • @shaezard made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5647
  • @swanandvk made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5790
  • @abhibarkade made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5750

Full Changelog: https://github.com/hoppscotch/hoppscotch/compare/2025.12.1...2026.1.0

View release on GitHub
2025.12.1 Bug fix

Fixed macOS white-screen crash and hardened backend rate limiting behind proxies.

Full changelog

This patch release stabilises the Desktop App by fixing the macOS white-screen crash caused by repeated store path lookups, and hardens backend rate limiting behind proxies, along with a small desktop UI cleanup.

What's Changed

  • chore: apply ThrottlerBehindProxyGuard across controllers by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/5746
  • fix: remove redundant label on the Desktop App by @jamesgeorge007 in f34e06b7d1b67d2102fb5aa283b8f9e317fc5fe0
  • perf(desktop): cache store path resolution by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/5747

Full Changelog: https://github.com/hoppscotch/hoppscotch/compare/2025.12.0...2025.12.1

View release on GitHub

Beta — feedback welcome: [email protected]