2026.6.0

> [!IMPORTANT]
There's a known issue on the cloud offering where personal-workspace collections may appear missing or become inaccessible, and the cloud web deployment has been rolled back. Self-hosted deployments are not affected. Follow updates in #6483.

This release adds cookie persistence support on the Desktop App, ID token support across OAuth2 flows, mock server URL handling for subpath deployments, and Thai language support, alongside security patches and bug fixes.

Read more at: https://hoppscotch.com/blog/hoppscotch-v2026-6-0.

## What's Changed
* fix(mock-server): persist isPublic on creation, default to private by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6410
* fix(backend): enforce ownership on user history and private User fields by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6409
* fix(backend): reject path/query/fragment in SMTP URL validation by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6413
* feat(sh-admin): surface which config fields block saving by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/6385
* chore: security patch for the dependency chain `v2026.6.0` by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6450
* feat(mock-server): append /backend to domain-based URL when subpath access is enabled by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6448
* fix(common): resolve environment variables in inherited collection headers by @sahil29roy in https://github.com/hoppscotch/hoppscotch/pull/6447
* fix(common): preserve JSON bodies in curl parser by @gengjiawen in https://github.com/hoppscotch/hoppscotch/pull/5768
* feat(desktop): desktop cookie persistence and reapplication by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6416
* fix(desktop): sync self-hosted instance version from manifest by @cassiocauee in https://github.com/hoppscotch/hoppscotch/pull/6423
* feat: add Thai translation by @anusoft in https://github.com/hoppscotch/hoppscotch/pull/6449
* docs(js-sandbox): update development instructions by @abhaybansal0322 in https://github.com/hoppscotch/hoppscotch/pull/6387
* fix(common): rewrite Finnish language pack by @roopepaajanen in https://github.com/hoppscotch/hoppscotch/pull/6402
* fix(common): add missing Chinese locale keys by @nikhil-shukl in https://github.com/hoppscotch/hoppscotch/pull/6363
* refactor(common): improve syncing systems and remove platform-wise duplications by @anwarulislam in https://github.com/hoppscotch/hoppscotch/pull/6334
* feat(common): add OAuth2 token type selector for `id_token` support by @anwarulislam in https://github.com/hoppscotch/hoppscotch/pull/6444
* fix(common): defer CookieJarService binding by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6478

## New Contributors
* @sahil29roy made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6447
* @gengjiawen made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5768
* @cassiocauee made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6423
* @anusoft made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6449
* @abhaybansal0322 made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6387
* @roopepaajanen made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6402
* @nikhil-shukl made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6363

**Full Changelog**: https://github.com/hoppscotch/hoppscotch/compare/2026.5.0...2026.6.0