Mir Arif Hasan
06bdd7ca6a
feat: add MAILER_SMTP_IGNORE_TLS and optional SMTP auth ( #5972 )
...
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-25 23:30:46 +05:30
Mir Arif Hasan
da3b8c5d37
fix(backend): prevent stored XSS via mock server responses and cross-team request moves ( #6006 )
...
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-25 16:16:38 +05:30
Mir Arif Hasan
2fcf5b7a5f
chore: security patch for the dependency chain v2026.3.0 ( #6013 )
...
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-24 16:34:36 +05:30
James George
e03ffc5d85
fix(common): prevent open redirect in enter page ( #5982 )
2026-03-20 12:41:31 +05:30
Umut Keltek
402955d55f
fix(desktop): add native Edit menu to enable clipboard shortcuts on Linux ( #5920 )
...
Co-authored-by: curiouscorrelation <curiouscorrelation@gmail.com>
2026-03-19 23:30:22 +05:30
Daniel Bates
4a61e3464d
fix(common): prevent infinite auth refresh retry loop on permanent token failure ( #5893 )
...
Co-authored-by: nivedin <nivedinp@gmail.com>
2026-03-19 23:09:01 +05:30
Nikhil
08921786e7
fix: restore tooltips on icon-only buttons inside popover triggers ( #5935 )
...
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-18 15:11:15 +05:30
Chhavi Goyal
f012c31ba2
fix(common): fetch full team collection tree on workspace import ( #5792 )
...
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: Nivedin <53208152+nivedin@users.noreply.github.com>
2026-03-17 16:14:51 +05:30
James George
e418a51432
fix(common): prevent stored XSS in team member overflow tooltip ( #5984 )
2026-03-14 17:26:44 +05:30
Denny Jiang
0bb4824cfa
chore(common): update Chinese translations ( #5979 )
...
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-13 23:59:14 +05:30
Umut Keltek
be536f0ca3
fix(common): persist OAuth2 code challenge method selection ( #5921 )
...
Co-authored-by: Anwarul Islam <anwaarulislaam@gmail.com>
2026-03-13 23:11:13 +05:30
James George
4cbe23cf00
chore: bump version to 2026.2.1
2026-03-04 19:09:52 +05:30
Mir Arif Hasan
a91acdd6bf
fix(backend): bump Prisma packages to 7.4.2 ( #5932 )
2026-03-04 11:42:59 +05:30
Shekhu☺️
3876fa9682
fix(common): update documentation link for mock server ( #5929 )
2026-03-03 15:28:24 +05:30
Mir Arif Hasan
1f4ae3dd88
fix(backend): enforce user ownership when deleting PAT ( #5916 )
...
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-02 23:35:19 +05:30
Mir Arif Hasan
d6ea86dcca
fix(backend): prevent request payload from overriding id and name ( #5913 )
...
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-02 21:50:43 +05:30
Hypo
4594e838d4
fix(common): hide horizontal scrollbar in Firefox for URL input ( #5906 )
...
Co-authored-by: nivedin <nivedinp@gmail.com>
2026-03-02 16:58:40 +05:30
James George
1119a2209c
chore(common): add no_active_orgs_found locale string
2026-02-26 12:38:51 +05:30
James George
12fea3dd09
chore: ignore AI coding assistant config dirs
2026-02-26 12:38:44 +05:30
Mir Arif Hasan
57be05cdcb
fix(backend): prevent IDOR in user collection and request endpoints ( #5902 )
2026-02-24 23:32:43 +05:30
Shreyas
02b3dbcf5c
feat(desktop): cloud for orgs platform contract ( #5903 )
...
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-24 23:21:48 +05:30
iDschepe
5ae9639901
fix(common): increase modal dialog width for more screen sizes ( #5884 )
...
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-24 21:03:16 +05:30
Leonic
77e420dc6a
fix(common): resolve TypeError when opening request from search results ( #5842 )
...
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-24 15:18:13 +05:30
James George
b9064045e8
chore: update lock file
2026-02-24 12:23:14 +05:30
Eve
562d2919ca
fix(common): constrain variable tooltip to viewport for long values ( #5878 )
...
Co-authored-by: aviu16 <aviu16@users.noreply.github.com>
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-23 23:33:14 +05:30
James George
c687473889
chore: streamline pnpm versioning
2026-02-23 20:27:07 +05:30
Mir Arif Hasan
803e4633a2
feat: api documentation versioning ( #5676 )
...
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-23 20:11:55 +05:30
James George
faf2bfc8eb
feat(common): add foundational support for dropdown-based organization switcher ( #5890 )
2026-02-23 20:06:10 +05:30
Mir Arif Hasan
a1be60da64
fix(backend): resolve security advisories for IDOR and onboarding bypass ( #5897 )
...
Improve error handling in the onboarding status check
---
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-23 18:11:45 +05:30
James George
55c1cb8290
chore: bump CLI version
2026-02-23 17:47:58 +05:30
James George
a40c491f7a
chore: bump version to 2026.2.0
2026-02-23 17:46:08 +05:30
James George
eb4b6a83c5
chore: update lock file
2026-02-23 17:45:37 +05:30
Lubomír Blažek
a37d19bff3
chore(common): update Czech locale with improved translations ( #5895 )
2026-02-21 14:34:10 +05:30
Shreyas
2e989cf242
chore(common): deprecate legacy interceptor system ( #5830 )
2026-02-21 14:22:47 +05:30
Leonic
1de672b8bd
feat(sh-admin): add search and pagination to teams list ( #5803 )
...
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-20 14:13:14 +05:30
Mir Arif Hasan
4fe0e376bb
chore: security patch for the dependency chain v2026.2.0 ( #5887 )
...
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-19 12:48:50 +05:30
Chandraprakash Pandey
680439a1b0
fix(common): improve responsive layout and overflow in realtime pages ( #5843 )
...
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-18 14:28:43 +05:30
James George
28a6569f42
chore: merge hoppscotch/patch into hoppscotch/next
2026-02-18 11:34:09 +05:30
James George
a22389cda0
fix: auto-recover from corrupted sandbox state ( #5874 )
2026-02-18 10:25:47 +05:30
Eve
98aa0368fb
fix(common): correctly resolve secret environment variables in basic auth header ( #5879 )
...
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-16 18:21:11 +05:30
Kanhaiya Pandey
2ad2f46e6a
feat(common): URL encode/decode context menu actions ( #5782 )
...
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-16 16:55:47 +05:30
Anwarul Islam
ff906b7c96
fix(common): correctly load mock servers on initialization and workspace change ( #5832 )
...
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-05 15:39:47 +05:30
James George
20bfac04fe
chore: bump CLI version
2026-02-05 12:56:11 +05:30
James George
5310b9fb40
fix(cli): strip module prefix before script execution ( #5835 )
2026-02-05 10:39:04 +05:30
James George
32114fc8ef
chore: bump version to 2026.1.1
2026-02-04 22:54:23 +05:30
Nivedin
809c07e84c
fix(common): correctly populate OpenAPI response examples ( #5831 )
2026-02-04 22:53:17 +05:30
Mir Arif Hasan
bf11e7ee22
chore(backend): upgrade nodemailer dependency to v8 ( #5833 )
2026-02-04 18:40:13 +05:30
Mir Arif Hasan
37e9207b43
fix(backend): resolve database connection leak in infra-config operations ( #5825 )
2026-02-04 17:25:00 +05:30
No jae gun
2dc3463b69
fix(backend): use duration instead of timestamp for auth cookie maxAge ( #5821 )
...
The maxAge option in Express's res.cookie() expects a duration in milliseconds, not an absolute timestamp. The previous code was adding `Date.now()` to the validity period, causing cookies to expire decades in the future instead of the intended 1 day / 7 days.
This was particularly problematic on macOS due to stricter cookie handling by Safari/WebKit.
Addresses #5818
Co-authored-by: njg7194 <njg7194@users.noreply.github.com>
2026-02-04 11:08:07 +05:30
Leonic
3c0938da9d
fix(common): prevent support menu from triggering in editors ( #5811 )
2026-02-03 23:46:08 +05:30