# Hoppscotch 2026.4.0 - Product: Hoppscotch (https://whatsnew.fyi/product/hoppscotch) - Vendor: Hoppscotch - Date: 2026-04-30 - Version: 2026.4.0 - Original notes: https://github.com/hoppscotch/hoppscotch/releases/tag/2026.4.0 - Permalink: https://whatsnew.fyi/product/hoppscotch/releases/2026.4.0 What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. --- - **added** — Collection-level pre-request and test scripts - **added** — SMTP OAuth2 authentication support - **added** — Desktop settings with manual update controls - **changed** — Improve API documentation publishing UX - **changed** — Use stateless OAuth2 state store - **changed** — Make webapp-server timeouts configurable in self-hosted deployments - **fixed** — Handle non-string values in Postman collection import - **fixed** — Correct environment locale wording - **fixed** — Make $randomUUID predefined variable RFC 4122 compliant - **fixed** — Add missing aria-labels to icon-only sidenav links - **fixed** — Variable hover tooltip was not clickable (disappeared) - **fixed** — Resolve invalid environment validation when publishing docs in personal workspace - **fixed** — Remediate quinn-proto vulnerability across native packages - **fixed** — Apply platform default proxy URL on load and reset - **fixed** — Support id_token in Authorization Code OAuth flow - **fixed** — Restore magic-link sign-in flow on cloud for orgs - **fixed** — Unified store scope and migration reroute in desktop - **fixed** — Harden onboarding config endpoint - **fixed** — Set domain URL as mockserver environment - **fixed** — Subfolder add-new in team collections respects write access - **security** — Security patch for the dependency chain v2026.4.0 This release introduces collection-level pre-request and test scripts, desktop settings with manual update controls, refinements to the API documentation experience, and self-hosted improvements, including SMTP OAuth2 authentication, alongside security patches and bug fixes. Read more at: https://hoppscotch.com/blog/hoppscotch-v2026-4-0. ##### What's Changed * refactor(cli): match test-result helper name to documented contract by @Basavaraj8143 in https://github.com/hoppscotch/hoppscotch/pull/6122 * feat(backend): use stateless OAuth2 state store by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6098 * fix(common): handle non-string values in Postman collection import by @okxint in https://github.com/hoppscotch/hoppscotch/pull/6137 * fix(common): correct environment locale wording by @PallavSarkar2005 in https://github.com/hoppscotch/hoppscotch/pull/6117 * fix(data): make `$randomUUID` predefined variable RFC 4122 compliant by @Grizouforever in https://github.com/hoppscotch/hoppscotch/pull/6125 * chore(common): complete missing Spanish translations by @Pakvothe in https://github.com/hoppscotch/hoppscotch/pull/6109 * chore(common): complete missing Turkish translations by @onwp in https://github.com/hoppscotch/hoppscotch/pull/6071 * chore(common): modify Chinese translation of words by @jiangzm in https://github.com/hoppscotch/hoppscotch/pull/5996 * fix(common): add missing aria-labels to icon-only sidenav links by @rayrishu19-wq in https://github.com/hoppscotch/hoppscotch/pull/6160 * fix(common): variable hover tooltip was not clickable (disappeared) by @AaronFortG in https://github.com/hoppscotch/hoppscotch/pull/6155 * feat: add SMTP OAuth2 authentication support by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6141 * fix: resolve invalid environment validation when publishing docs in personal workspace by @sahilkhan09k in https://github.com/hoppscotch/hoppscotch/pull/5962 * feat(common): improve API documentation publishing UX by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/6116 * fix: remediate `quinn-proto` vulnerability across native packages by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6174 * docs: security threat model and policy update by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6158 * fix(common): apply platform default proxy URL on load and reset by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/6142 * feat: add collection-level pre-request and test scripts by @johnan319 in https://github.com/hoppscotch/hoppscotch/pull/5745 * fix(common): support `id_token` in Authorization Code OAuth flow by @anwarulislam in https://github.com/hoppscotch/hoppscotch/pull/6144 * feat(desktop): settings phase 0 - infra and update check by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6172 * feat(selfhost-web): make webapp-server timeouts configurable by @rkferreira in https://github.com/hoppscotch/hoppscotch/pull/6147 * fix(common): restore magic-link sign-in flow on cloud for orgs by @jamesgeorge007 in https://github.com/hoppscotch/hoppscotch/pull/6237 * fix(desktop): unified store scope and migration reroute by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6238 * chore: security patch for the dependency chain `v2026.4.0` by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6191 * fix(backend): harden onboarding config endpoint by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6240 * fix(common): set domain url as mockserver environment by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/6185 * fix(common): subfolder add-new in team collections respects write access by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/6243 * fix(common): preserve string contract for GQL history responses by @jamesgeorge007 in https://github.com/hoppscotch/hoppscotch/pull/6244 ##### New Contributors * @Basavaraj814 _[Truncated at 4000 characters — full notes: https://github.com/hoppscotch/hoppscotch/releases/tag/2026.4.0]_