# Hoppscotch 2026.6.0

- Product: Hoppscotch (https://whatsnew.fyi/product/hoppscotch)
- Vendor: Hoppscotch
- Date: 2026-06-30
- Version: 2026.6.0
- Original notes: https://github.com/hoppscotch/hoppscotch/releases/tag/2026.6.0
- Permalink: https://whatsnew.fyi/product/hoppscotch/releases/2026.6.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Cookie persistence support on the Desktop App
- **added** — ID token support across OAuth2 flows
- **added** — Mock server URL handling for subpath deployments
- **added** — Thai language support
- **added** — Surface which config fields block saving in self-hosted admin
- **fixed** — Mock server persists isPublic on creation and defaults to private
- **fixed** — Enforce ownership on user history and private user fields in backend
- **fixed** — Reject path/query/fragment in SMTP URL validation
- **fixed** — Resolve environment variables in inherited collection headers
- **fixed** — Preserve JSON bodies in curl parser
- **fixed** — Sync self-hosted instance version from manifest in desktop
- **fixed** — Rewrite Finnish language pack
- **fixed** — Add missing Chinese locale keys
- **fixed** — Defer CookieJarService binding
- **security** — Security patch for the dependency chain

> [!IMPORTANT]
There's a known issue on the cloud offering where personal-workspace collections may appear missing or become inaccessible, and the cloud web deployment has been rolled back. Self-hosted deployments are not affected. Follow updates in #6483.

This release adds cookie persistence support on the Desktop App, ID token support across OAuth2 flows, mock server URL handling for subpath deployments, and Thai language support, alongside security patches and bug fixes.

Read more at: https://hoppscotch.com/blog/hoppscotch-v2026-6-0.

##### What's Changed
* fix(mock-server): persist isPublic on creation, default to private by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6410
* fix(backend): enforce ownership on user history and private User fields by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6409
* fix(backend): reject path/query/fragment in SMTP URL validation by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6413
* feat(sh-admin): surface which config fields block saving by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/6385
* chore: security patch for the dependency chain `v2026.6.0` by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6450
* feat(mock-server): append /backend to domain-based URL when subpath access is enabled by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6448
* fix(common): resolve environment variables in inherited collection headers by @sahil29roy in https://github.com/hoppscotch/hoppscotch/pull/6447
* fix(common): preserve JSON bodies in curl parser by @gengjiawen in https://github.com/hoppscotch/hoppscotch/pull/5768
* feat(desktop): desktop cookie persistence and reapplication by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6416
* fix(desktop): sync self-hosted instance version from manifest by @cassiocauee in https://github.com/hoppscotch/hoppscotch/pull/6423
* feat: add Thai translation by @anusoft in https://github.com/hoppscotch/hoppscotch/pull/6449
* docs(js-sandbox): update development instructions by @abhaybansal0322 in https://github.com/hoppscotch/hoppscotch/pull/6387
* fix(common): rewrite Finnish language pack by @roopepaajanen in https://github.com/hoppscotch/hoppscotch/pull/6402
* fix(common): add missing Chinese locale keys by @nikhil-shukl in https://github.com/hoppscotch/hoppscotch/pull/6363
* refactor(common): improve syncing systems and remove platform-wise duplications by @anwarulislam in https://github.com/hoppscotch/hoppscotch/pull/6334
* feat(common): add OAuth2 token type selector for `id_token` support by @anwarulislam in https://github.com/hoppscotch/hoppscotch/pull/6444
* fix(common): defer CookieJarService binding by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6478

##### New Contributors
* @sahil29roy made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6447
* @gengjiawen made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/5768
* @cassiocauee made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6423
* @anusoft made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6449
* @abhaybansal0322 made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6387
* @roopepaajanen made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6402
* @nikhil-shukl made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6363

**Full Changelog**: https://github.com/hoppscotch/hoppscotch/compare/2026.5.0...2026.6.0