Starstruk Logo MarkStarstruk

v3.2.2

usebruno/brunov3.2.2Apr 3, 2026by sid-bruno

AI Summary

Patch release with critical security fix for HTML sanitization in documentation blocks, plus multiple bug fixes for multipart requests, Postman imports, and proxy handling.

Key Highlights

  • Security fix: sanitise HTML before rendering in documentation blocks
  • Fixed app crashes when closing the window
  • Fixed preserve user-defined boundary in multipart/mixed Content-Type header
  • Fixed preserve query params without values by not appending = sign
  • Fixed recreate HTTP/HTTPS agents on redirect to prevent stale agent reuse
  • Fixed re-apply secret masking after editor value changes
  • Fixed status & statusText swap

Full Release Notes

# Changelog

### Fixes
- fix: app crashes when closing the window by @chirag-bruno in [#7637](https://github.com/usebruno/bruno/pull/7637)
- fix: preserve user-defined boundary in multipart/mixed Content-Type header by @chirag-bruno in [#7531](https://github.com/usebruno/bruno/pull/7531)
- fix: preserve query params without values by not appending = sign by @pooja-bruno in [#7567](https://github.com/usebruno/bruno/pull/7567)
- fix: ensure string values within auth, add string header processing during postman collection imports by @sanish-bruno in [#7646](https://github.com/usebruno/bruno/pull/7646)
- fix: recreate HTTP/HTTPS agents on redirect to prevent stale agent reuse by @lohit-bruno in [#7615](https://github.com/usebruno/bruno/pull/7615)
- fix: re-apply secret masking after editor value changes by @abhishek-bruno in [#7585](https://github.com/usebruno/bruno/pull/7585)
- fix(security): sanitise HTML before being rendered in documentation blocks by @sid-bruno in [#7598](https://github.com/usebruno/bruno/pull/7598) - Credits to @andrejtomci and other anonymous contributors for bringing it up
- fix: update system proxy fetching to use finally by @sid-bruno in [#7652](https://github.com/usebruno/bruno/pull/7652)
- fix: status & statusText swap by @shubh-bruno in [#7589](https://github.com/usebruno/bruno/pull/7589)
- fix: convert non-string variable values to strings during postman import by @pooja-bruno in [#7476](https://github.com/usebruno/bruno/pull/7476)
- fix: add conversion for non-string values within headers, params, etc during postman collection imports by @sanish-bruno in [#7644](https://github.com/usebruno/bruno/pull/7644)

### Others
- security: fix all critical vulnerable dependency reports by @sid-bruno in [#7645](https://github.com/usebruno/bruno/pull/7645)
- chore: add a promise based wait group for the shell variables by @sid-bruno in [#7647](https://github.com/usebruno/bruno/pull/7647)

**Full Changelog:** https://github.com/usebruno/bruno/compare/v3.2.0...v3.2.2