Starstruk Logo MarkStarstruk

2026.3.0

magic-research/GETAvatar2026.3.0Mar 31, 2026by jamesgeorge007

AI Summary

This release introduces Cloud for Organizations support in the desktop app, adds admin dashboard workspace visibility, and introduces optional SMTP authentication, while also addressing several security vulnerabilities.

Key Highlights

  • Cloud for Organizations support in the desktop app (Phase 3).
  • Admin dashboard now shows user workspace memberships.
  • Optional SMTP authentication support.
  • Security patches addressing stored XSS and open redirect vulnerabilities.
  • Keyboard shortcut support for non-English layouts.

New Features

  • Cloud for Organizations support in the desktop app.
  • Show user workspace memberships in admin dashboard.
  • Optional SMTP authentication support.
  • Keyboard shortcuts for non-English layouts.

Full Release Notes

This release brings Cloud for Organizations to the desktop app, adds admin workspace visibility, keyboard shortcut support for non-English layouts, and optional SMTP authentication, alongside security patches and bug fixes.

Read more at: https://hoppscotch.com/blog/hoppscotch-v2026-3-0.

## What's Changed
* fix(common): persist OAuth2 code challenge method selection by @umutkeltek in https://github.com/hoppscotch/hoppscotch/pull/5921
* chore(common): update Chinese translations by @jiangzm in https://github.com/hoppscotch/hoppscotch/pull/5979
* fix(common): prevent stored XSS in team member overflow tooltip by @jamesgeorge007 in https://github.com/hoppscotch/hoppscotch/pull/5984
* fix(common): fetch full team collection tree on workspace import by @chhaviG22 in https://github.com/hoppscotch/hoppscotch/pull/5792
* fix: restore tooltips on icon-only buttons inside popover triggers by @nikhilmahato21 in https://github.com/hoppscotch/hoppscotch/pull/5935
* fix(common): prevent infinite auth refresh retry loop on permanent token failure by @danielalanbates in https://github.com/hoppscotch/hoppscotch/pull/5893
* fix(desktop): add native Edit menu to enable clipboard shortcuts on Linux by @umutkeltek in https://github.com/hoppscotch/hoppscotch/pull/5920
* fix(common): prevent open redirect in enter page by @jamesgeorge007 in https://github.com/hoppscotch/hoppscotch/pull/5982
* chore: security patch for the dependency chain `v2026.3.0` by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6013
* fix(backend): prevent stored XSS via mock server responses and cross-team request moves by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6006
* feat: add `MAILER_SMTP_IGNORE_TLS` and optional SMTP auth by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/5972
* feat: show user workspace memberships in admin dashboard by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/5968
* refactor(common): route mock server and published docs operations through platform backend by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/6036
* feat(desktop): cloud for orgs support - phase 3 by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6043
* fix: keyboard shortcuts on non-English layouts by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6009
* fix(common): use operation title as fallback in OpenAPI import by @hypergadam in https://github.com/hoppscotch/hoppscotch/pull/5950
* fix(common): handle File objects in HAR postData text resolution by @sh3xu in https://github.com/hoppscotch/hoppscotch/pull/5917
* fix(desktop): add missing backport changes by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6047
* fix: validate device-login redirect_uri to prevent token theft via DNS wildcard bypass by @nahidhasan94 in https://github.com/hoppscotch/hoppscotch/pull/6012
* feat(common): fall back to `ref_id` in remove functions when `id` is missing by @anwarulislam in https://github.com/hoppscotch/hoppscotch/pull/5898
* chore: patch dependency vulnerabilities and harden production image by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6055
* fix: use team.findMany for fetching user teams by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6057
* fix(common): resolve history schema mismatch on page reload by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/6068
* chore: align Tauri plugin-shell versions by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6069
* fix(common): newly created folder not shown in save-as dialog by @majiayu000 in https://github.com/hoppscotch/hoppscotch/pull/6059

## New Contributors
* @umutkeltek made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5921
* @nikhilmahato21 made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5935
* @danielalanbates made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5893
* @hypergadam made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5950
* @nahidhasan94 made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6012
* @majiayu000 made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6059

**Full Changelog**: https://github.com/hoppscotch/hoppscotch/compare/2026.2.1...2026.3.0