This release adds OpenAPI 3.1 collection export, zoom level controls in the Desktop App, configurable proxy URLs from environment variables and the admin dashboard, and Mongolian language support, alongside security patches and bug fixes.
Read more at: https://hoppscotch.com/blog/hoppscotch-v2026-5-0.
What's Changed
- fix(security): prevent mass assignment in onboarding by @nahidhasan94 in #6171
- fix: class validator decorator usages by @mirarifhasan in #6293
- chore: security patch for the dependency chain
v2026.5.0by @mirarifhasan in #6338 - fix: stop secret variable values from leaking to backend by @nivedin in #6279
- fix(common): wait for proxy settings before issuing requests by @anwarulislam in #6333
- feat: make proxy URL configurable from env and admin dashboard by @mirarifhasan in #6336
- feat(desktop): zoom level control in settings by @CuriousCorrelation in #6358
- feat(common): add OpenAPI 3.1 collection export by @mcdgavin in #5880
- fix(desktop): align appload types and resolve shell import alias by @CuriousCorrelation in #6369
- fix: class validation issue for updateRESTUserRequest by @mirarifhasan in #6373
- feat: add Mongolian translation by @cf3901646 in #6344
- fix(common): preserve collection tree on OpenAPI re-import by @jamesgeorge007 in #6376
New Contributors
- @mcdgavin made their first contribution in #5880
- @cf3901646 made their first contribution in #6344
Full Changelog: 2026.4.1...2026.5.0