Back ||
v2026.5.0

May 28th 2026

Release Notes - v2026.5.0

OpenAPI 3.1 Export, Proxy Configuration, Desktop Zoom, Mongolian Translation, Security Patches and more! 🚀

New Features
Improvements

Highlights

  • OpenAPI 3.1 Collection Export: You can now export your Hoppscotch collections as OpenAPI 3.1 documents, enabling seamless interoperability with the latest OpenAPI tooling and workflows.



  • Configurable Proxy URL: The proxy URL can now be set via environment variables and configured directly from the admin dashboard, giving self-hosted Community Edition deployments full control over proxy routing without redeployment.



  • Desktop Zoom Level Control: The desktop app now exposes a zoom level control in settings, letting you dial in the perfect view for your screen and preference.



  • Mongolian Language Support: Hoppscotch is now available in Mongolian, continuing our commitment to making the platform accessible to developers worldwide.



  • Secret Variable Leak Fix: Secret variable values from collections and environments are no longer sent to the backend, closing a potential data exposure path and keeping your sensitive credentials client-side only.



  • Security Patches: Updated vulnerable dependencies and Docker build components as part of the v2026.5.0 security patch cycle.



  • Onboarding Hardening: Fresh-install onboarding is now hardened against mass-assignment of sensitive configuration fields.



This update includes new features and important security fixes. Your data will be backed up automatically. If needed, see Downgrading and Restoring Backups.


👉 Read the full release blog


Added
  • OpenAPI 3.1 collection export
  • Proxy URL configurable from environment variables and admin dashboard
  • Zoom level control in desktop app settings
  • Mongolian language translation
Fixed
  • Secret variable values from collections and environments are no longer sent to the backend
  • Fixed REST request update failures caused by backend validation handling
  • Proxy settings are now awaited before issuing requests
  • Updated vulnerable dependencies and Docker build components as part of the v2026.5.0 security patch cycle
  • Hardened fresh-install onboarding against mass-assignment of sensitive configuration fields