# Hoppscotch 2026.3.0

- Product: Hoppscotch (https://whatsnew.fyi/product/hoppscotch)
- Vendor: Hoppscotch
- Date: 2026-03-31
- Version: 2026.3.0
- Original notes: https://github.com/hoppscotch/hoppscotch/releases/tag/2026.3.0
- Permalink: https://whatsnew.fyi/product/hoppscotch/releases/2026.3.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Add Cloud for Organizations support to the desktop app
- **added** — Show user workspace memberships in admin dashboard
- **added** — Add MAILER_SMTP_IGNORE_TLS option and optional SMTP authentication
- **added** — Fall back to ref_id in remove functions when id is missing
- **changed** — Route mock server and published docs operations through platform backend
- **changed** — Update Chinese translations
- **fixed** — Persist OAuth2 code challenge method selection
- **fixed** — Prevent stored XSS in team member overflow tooltip
- **fixed** — Fetch full team collection tree on workspace import
- **fixed** — Restore tooltips on icon-only buttons inside popover triggers
- **fixed** — Prevent infinite auth refresh retry loop on permanent token failure
- **fixed** — Add native Edit menu to enable clipboard shortcuts on Linux
- **fixed** — Prevent open redirect in enter page
- **fixed** — Prevent stored XSS via mock server responses and cross-team request moves
- **fixed** — Fix keyboard shortcuts on non-English layouts
- **fixed** — Use operation title as fallback in OpenAPI import
- **fixed** — Handle File objects in HAR postData text resolution
- **fixed** — Validate device-login redirect_uri to prevent token theft via DNS wildcard bypass
- **fixed** — Resolve history schema mismatch on page reload
- **fixed** — Show newly created folder in save-as dialog
- **security** — Apply security patches for the dependency chain

This release brings Cloud for Organizations to the desktop app, adds admin workspace visibility, keyboard shortcut support for non-English layouts, and optional SMTP authentication, alongside security patches and bug fixes.

Read more at: https://hoppscotch.com/blog/hoppscotch-v2026-3-0.

##### What's Changed
* fix(common): persist OAuth2 code challenge method selection by @umutkeltek in https://github.com/hoppscotch/hoppscotch/pull/5921
* chore(common): update Chinese translations by @jiangzm in https://github.com/hoppscotch/hoppscotch/pull/5979
* fix(common): prevent stored XSS in team member overflow tooltip by @jamesgeorge007 in https://github.com/hoppscotch/hoppscotch/pull/5984
* fix(common): fetch full team collection tree on workspace import by @chhaviG22 in https://github.com/hoppscotch/hoppscotch/pull/5792
* fix: restore tooltips on icon-only buttons inside popover triggers by @nikhilmahato21 in https://github.com/hoppscotch/hoppscotch/pull/5935
* fix(common): prevent infinite auth refresh retry loop on permanent token failure by @danielalanbates in https://github.com/hoppscotch/hoppscotch/pull/5893
* fix(desktop): add native Edit menu to enable clipboard shortcuts on Linux by @umutkeltek in https://github.com/hoppscotch/hoppscotch/pull/5920
* fix(common): prevent open redirect in enter page by @jamesgeorge007 in https://github.com/hoppscotch/hoppscotch/pull/5982
* chore: security patch for the dependency chain `v2026.3.0` by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6013
* fix(backend): prevent stored XSS via mock server responses and cross-team request moves by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6006
* feat: add `MAILER_SMTP_IGNORE_TLS` and optional SMTP auth by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/5972
* feat: show user workspace memberships in admin dashboard by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/5968
* refactor(common): route mock server and published docs operations through platform backend by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/6036
* feat(desktop): cloud for orgs support - phase 3 by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6043
* fix: keyboard shortcuts on non-English layouts by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6009
* fix(common): use operation title as fallback in OpenAPI import by @hypergadam in https://github.com/hoppscotch/hoppscotch/pull/5950
* fix(common): handle File objects in HAR postData text resolution by @sh3xu in https://github.com/hoppscotch/hoppscotch/pull/5917
* fix(desktop): add missing backport changes by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6047
* fix: validate device-login redirect_uri to prevent token theft via DNS wildcard bypass by @nahidhasan94 in https://github.com/hoppscotch/hoppscotch/pull/6012
* feat(common): fall back to `ref_id` in remove functions when `id` is missing by @anwarulislam in https://github.com/hoppscotch/hoppscotch/pull/5898
* chore: patch dependency vulnerabilities and harden production image by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6055
* fix: use team.findMany for fetching user teams by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6057
* fix(common): resolve history schema mismatch on page reload by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/6068
* chore: align Tauri plugin-shell versions by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6069
* fix(common): newly created folder not shown in save-as dialog by @majiayu000 in https://github.com/hoppscotch/hoppscotch/pull/6059

##### New Contributors
* @umutkeltek made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5921
* @nikhilmahato21 made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5935
* @danielalanbates made their first contri

_[Truncated at 4000 characters — full notes: https://github.com/hoppscotch/hoppscotch/releases/tag/2026.3.0]_