# Hurl 7.0.0

- Product: Hurl (https://whatsnew.fyi/product/hurl)
- Vendor: Orange Open Source
- Date: 2025-07-30
- Version: 7.0.0
- Original notes: https://github.com/Orange-OpenSource/hurl/releases/tag/7.0.0
- Permalink: https://whatsnew.fyi/product/hurl/releases/7.0.0
- Labels: Platforms: Desktop

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Add query for HTTP redirects
- **added** — Add urlQueryParam filter
- **added** — Add option to configure max-time per request
- **added** — Add date comparison predicates
- **added** — Add pinnedpubkey cli option
- **added** — Add base64 url safe encode and decode filters
- **added** — Parse curl's --cookie flag
- **added** — Add toHex filter
- **added** — Add first and last filters
- **added** — Add support for negative values for nth filter
- **added** — Add option to configure pinnedpubkey per request
- **added** — Support template in nth filter parameter
- **added** — Implement predicate isUuid
- **added** — Add --ntlm cli option
- **added** — Add --negotiate option
- **changed** — Add replaceRegex filter and fix replace filter to not take regex
- **changed** — Show curl command when error format option is set to long
- **changed** — Show hurl --help with color
- **changed** — Remove hex crate dependency
- **changed** — Small tweaks to --test progress output
- **changed** — Improve captures error messages when filter chain returned no value
- **fixed** — Fix incorrect curl command for POST redirect
- **fixed** — Fix hurlfmt to disallow invalid header argument in curl command
- **fixed** — Parse verbose flag in curl command
- **fixed** — Keep secret value forever, even if a secret variable override an existing one
- **fixed** — Fix zsh completion
- **fixed** — Parse cookie Expires date attribute with '-'
- **fixed** — Replace deprecated libxml2 initGenericErrorDefaultFunc with xmlSetGenericErrorFunc
- **fixed** — HTML report: fix span for lines in comment
- **fixed** — Fix HTML closing tag for line with trailing comment
- **fixed** — Fix request body during redirections
- **fixed** — Fix "variables" token in GraphQL HTML export
- **fixed** — Support negative index in jsonpath
- **security** — Fix JavaScript injection in HTML report through regex literal

[7.0.0 (2025-07-28)](https://github.com/Orange-OpenSource/hurl/blob/master/CHANGELOG.md#7.0.0)
========================================================================================================================

Thanks to
[@ecolinet](https://github.com/ecolinet),
[@theoforger](https://github.com/theoforger),
[@Muntaner](https://github.com/Muntaner),
[@ashishajr](https://github.com/ashishajr),
[@patkujawa-wf](https://github.com/patkujawa-wf),
[@niklasweimann](https://github.com/niklasweimann),
[@alanbondarun](https://github.com/alanbondarun),
[@benkio](https://github.com/benkio),
[@dhth](https://github.com/dhth),
[@verigak](https://github.com/verigak),
[@markphilpot](https://github.com/markphilpot),
[@lambrospetrou](https://github.com/lambrospetrou),
[@aresler](https://github.com/aresler),
[@nfj25](https://github.com/nfj25),
[@nwellnhof](https://github.com/nwellnhof),
[@YannickAlex07](https://github.com/YannickAlex07),
[@lu-zero](https://github.com/lu-zero),
[@RaghavSood](https://github.com/RaghavSood),
[@tjbrockmeyer](https://github.com/tjbrockmeyer),

[Take a tour of this new version here!](https://hurl.dev/blog/2025/07/30/announcing-hurl-7.0.0.html)

Breaking Changes:

* Add replaceRegex filter and fix replace filter to not take regex [#4018](https://github.com/Orange-OpenSource/hurl/issues/4018)


Enhancements:

* Add query for HTTP redirects [#922](https://github.com/Orange-OpenSource/hurl/issues/922)
* Add urlQueryParam filter [#2199](https://github.com/Orange-OpenSource/hurl/issues/2199)
* Show curl command when error format option is set to long [#2226](https://github.com/Orange-OpenSource/hurl/issues/2226)
* Add option to configure max-time per request [#3162](https://github.com/Orange-OpenSource/hurl/issues/3162)
* Add date comparison predicates [#3480](https://github.com/Orange-OpenSource/hurl/issues/3480)
* Add pinnedpubkey cli option [#3563](https://github.com/Orange-OpenSource/hurl/issues/3563)
* Add base64 url safe encode and decode filters [#3840](https://github.com/Orange-OpenSource/hurl/issues/3840)
* parse curl's --cookie flag [#3877](https://github.com/Orange-OpenSource/hurl/issues/3877)
* Show hurl --help with color [#3882](https://github.com/Orange-OpenSource/hurl/issues/3882)
* Add toHex filter [#3963](https://github.com/Orange-OpenSource/hurl/issues/3963)
* Add first and last filters [#3998](https://github.com/Orange-OpenSource/hurl/issues/3998)
* Remove hex crate dependency [#4011](https://github.com/Orange-OpenSource/hurl/issues/4011)
* Small tweaks to --test progress output [#4028](https://github.com/Orange-OpenSource/hurl/issues/4028)
* Add support for negative values for nth filter [#4050](https://github.com/Orange-OpenSource/hurl/issues/4050)
* Add option to configure pinnedpubkey per request [#4084](https://github.com/Orange-OpenSource/hurl/issues/4084)
* Add timeline link on status label in source and run pages [#4128](https://github.com/Orange-OpenSource/hurl/issues/4128)
* Support template in nth filter parameter [#4152](https://github.com/Orange-OpenSource/hurl/issues/4152)
* Implement predicate `isUuid` [#4179](https://github.com/Orange-OpenSource/hurl/issues/4179)
* Improve captures error messages when filter chain returned no value [#4214](https://github.com/Orange-OpenSource/hurl/issues/4214)
* Add --ntlm cli option [#4216](https://github.com/Orange-OpenSource/hurl/issues/4216)
* Add --negotiate option [#4246](https://github.com/Orange-OpenSource/hurl/issues/4246)


Bugs Fixed:

* Fix incorrect curl command for POST redirect [#2797](https://github.com/Orange-OpenSource/hurl/issues/2797)
* Fix hurlfmt to disallow invalid header argument in curl command [#3668](https://github.com/Orange-OpenSource/hurl/issues/3668)
* Parse verbose flag in curl command [#3760](https://github.com/Orange-OpenSource/hurl/issues/3760)
* Keep secret value forever, even if a secret variable override an existing one [#3898](https://github.com/Orange-O

_[Truncated at 4000 characters — full notes: https://github.com/Orange-OpenSource/hurl/releases/tag/7.0.0]_