Changelogs

​

🐛 Fixes

• Fixed a bug where the embedded terminal could show ghost tabs or connection errors on recently released desktop versions. (#3900)
• Fixed an issue where importing certain valid OpenAPI specifications would fail; the importer now succeeds on any spec that passes initial parsing, extracting what it recognizes rather than rejecting the whole file. (#3896)

​

🚀 New

• You can now render a custom HTML visualization of response data by calling rq.visualizer.set(template, data) in a post-response script, then selecting Visualize in the response panel. Use Mod+Shift+Enter to send and visualize in one step. (#3840)

​

✨ Improvements

• The Sharing tab now displays a note clarifying exactly what your documentation share links include (read-only docs) and exclude (scripts and auth), so you know what recipients will see before you share. (#3861)

​

🐛 Fixes

• The desktop app now blocks secondary listeners from attaching to the background bridge, closing a gap where injected scripts could silently read all background service traffic, including stored secrets and credentials. (#3888)
• Deleting all requests from a collection while the runner is open now correctly shows the empty state and disables the Run button instead of displaying stale entries from the deleted requests. (#3872)

​

🐛 Fixes

• Importing a collection exported from the old Requestly app no longer rejects the entire file when individual requests are missing header or auth fields - valid requests are imported and any unrecoverable ones are reported by name. (#3881)
• Script rq.sendRequest calls on desktop now honor your system certificate store, custom CA certificates, SSL verification toggle, and proxy settings, fixing silent failures on corporate or TLS-intercepting networks. (#3880)
• Starting to rename a chat history thread and then dismissing the popover without saving no longer leaves that thread stuck in its rename input the next time you open chat history. (#3870)
• Pressing the save shortcut immediately after editing a request body, query parameters, or script field now reliably saves your latest content instead of silently reverting to the previous value. (#3863)
• Changing a query parameter’s type annotation (for example from “string” to “integer”) is now saved correctly and no longer reverts to the original type on reload. (#3631)
• Running the Requestly CLI on Windows no longer fails with a JSON parse error caused by an incorrectly formatted internal build file. (#3851)

​

🐛 Fixes

• The desktop terminal now supports multiple tabs again, restoring the ability to run separate terminal sessions side by side. (#3841)

​

🐛 Fixes

• When you restore a tab for a request, collection, or environment that was deleted on another device or by a teammate, you now see a clear not-found message with a Close tab button instead of an infinite loading spinner. (#3822)

​

🐛 Fixes

• Scripts using rq.sendRequest with a callback now correctly wait for the callback to complete, so environment variables set inside the callback are applied and test assertions run as expected. (#3746)

​

🐛 Fixes

• You can now import OpenAPI specs that previously failed due to non-standard but commonly produced field formats, such as boolean required fields or shorthand type strings generated by real conversion tools. (#3731)
• The desktop app no longer freezes or becomes unresponsive when you open or create a local project with a large amount of saved data. (#3715)
• The CLI no longer crashes on startup when running under Node 18, restoring all commands including collection run. (#3708)
• The scheduled run form no longer shows requests from a previously viewed collection when you open it in a different collection. (#3705)
• Sending a request immediately after editing the body now correctly uses your latest edits instead of the version saved a moment before. (#3686)

​

🚀 New

• The AI Assistant now has an auto mode that skips individual approval prompts for tool actions; you can toggle it with Shift+Tab or by clicking the status indicator in the chat panel. (#3661)
• You can now open the AI Assistant directly from the app footer. (#3647)
• A read-only keyboard shortcuts reference overlay is back, showing all your shortcuts at a glance. (#3642)

​

✨ Improvements

• Scheduled Runs now shows an Active/Paused badge on each schedule in the list, lets you search run history by run ID, and opens the Tests tab first when a run finishes with failures. (#3665)
• The request Settings tab now shows an indicator dot when you have active overrides, offers an inline retry button when a request fails due to an SSL or parsing error, and displays a settings summary in the collection runner before you start a run. (#3639)
• Your desktop login session is now encrypted when stored on disk, so it cannot be read if someone accesses your local files. (#3646)
• For teams using TestHub, member and access management is now under Project Settings in a Members and access section and opens in your system browser. (#3555)

​

🐛 Fixes

• The auto-generated Content-Type header is no longer added when you have already set one explicitly on the request. (#3681)
• Saving a request as new now carries over the description and clears leftover data from body tabs you are not actively using; requests skipped by a pre-request script now show a dedicated skipped panel instead of a blank response. (#3668)
• Variable names are now trimmed of surrounding whitespace when you save them. (#3676)
• Editing the URL bar no longer duplicates existing query parameters; matching parameters are now updated in place. (#3670)
• MQTT connections now work when the broker URL is a single variable placeholder such as . (#3660)
• Message editors in WebSocket and Socket.IO requests now scroll correctly when working with large payloads. (#3643)
• The AI Assistant panel no longer flickers or reloads your conversation when you close and reopen it. (#3622)
• The duplicate variable name warning now correctly treats names that differ only by letter case as distinct. (#3667)
• Cmd/Ctrl+0 (Reset Zoom) is now correctly treated as a reserved shortcut and cannot be rebound in keyboard settings. (#3663)
• The Git panel now shows the correct branch name on empty repositories, auto-fetches in the background to keep the behind counter accurate, and hides the Push button until the repository has at least one commit. (#3285)
• Importing an OpenAPI collection no longer fails on long example names, and validation errors now include the field names needed to identify the problem. (#3619)

​

✨ Improvements

• The desktop app’s initial load is now up to 76% smaller on the wire, making startup noticeably faster. (#3566)
• Scheduled run results now show the actual headers that were sent, including values resolved by pre-request scripts and auth, instead of unresolved template placeholders. (#3496)

​

🐛 Fixes

• Collapsing and re-expanding the sidebar no longer resets your open editors, response panels, or tab state. (#3613)
• In scripts, setting a variable to null or undefined now clears it instead of storing the literal string, matching Postman’s behavior. (#3585)
• The light, dark, and system theme options now work correctly on the sign-in screen. (#3591)
• Pressing Cmd+F (or Ctrl+F) while editing in the request body or a scripts editor no longer steals focus to the sidebar search. (#3583)

​

🚀 New

• The AI assistant can now read and edit your requests, collections, and environments - when it suggests a change, you see an inline diff to accept or reject before anything is saved. (#3055)

​

🐛 Fixes

• Fixed several WebSocket and Socket.IO reliability issues, including a freeze when receiving large payloads, query params no longer syncing with the URL bar, vague connection failure messages, and a missing Cancel button during connection. (#3549)

​

🚀 New

• Signing up is now required to use the app, and the onboarding experience has been redesigned to guide you through initial setup more clearly. (#3416)
• You can now switch between your teams directly from within the app using the new in-product team switcher. (#3478)
• A new Scheduled Runs tab in the Collection Runner lets you discover and manage scheduled runs per collection alongside a Manual run sub-tab. (#2786)
• You can now create and configure scheduled runs directly from the app, with settings for schedule frequency, retry policy, and request selection. (#2814)
• Scheduled runs now include a history list showing past executions and a drill-down view with per-request results. (#2837)
• You can pause, resume, delete, or immediately trigger a scheduled run directly from the run list. (#2847)
• A re-run button lets you re-execute a previous scheduled run, and an inline config pane lets you adjust settings without navigating away. (#2885)
• Scheduled runs can now automatically retry failed requests based on a configurable retry policy and attempt limit. (#2953)
• The scheduled run detail view now shows per-request results in a two-pane layout with headers, payload, response, and test tabs, and the create form has been reorganized with clearer sections. (#3035)
• Scheduled run results are automatically uploaded to BrowserStack Test Hub for centralized test tracking. (#2762)
• Each rq.test assertion in a scheduled collection run now appears as its own result in BrowserStack Test Hub instead of being grouped under a single request. (#2780)
• You can now export and import scheduled run configurations using the REST API or the CLI. (#2823)
• You can now manage scheduled runs from the command line using the new rq scheduled-run subcommands. (#2764)
• When publishing a release in API Design, the version is now automatically derived from the info.version field in your OpenAPI spec. (#3443)

​

✨ Improvements

• The team-switching overlay has been polished and is now hidden when you are working in a local project. (#3525)
• Vault access from scripts is now disabled by default and can be re-enabled from the Vault settings page. (#3479)
• Import warnings are now cleaner, with redundant low-value notices removed and the remaining ones made more actionable. (#3411)
• In-progress scheduled runs now appear in the run history, and runs are ordered by when they actually ran rather than when they were created. (#3373)
• Realtime and gRPC requests are now excluded from scheduled run request selection, preventing unsupported configurations from being saved. (#3104)

​

🐛 Fixes

• A tooltip was covering the create-project button in the project switcher settings area, making it impossible to click. (#3548)
• Switching the body type in an HTTP request no longer leaves behind stale values from the previous type. (#3395)
• OpenAPI collections with XML request bodies now import correctly with the proper content type applied. (#3418)
• The collection runner now correctly records and displays results from WebSocket, Socket.IO, and gRPC requests. (#3476)
• Clicking ‘Try it’ on an example multiple times in quick succession no longer opens duplicate draft tabs. (#3500)
• Adding a request to a scheduled run and saving it now works correctly, and the run detail view no longer renders broken components. (#3053)

​

🐛 Fixes

• The sidebar toggle button now correctly reports its open or closed state to screen readers and other assistive technologies. (#3456)
• The array variable type now only appears in the type picker when your installed desktop version supports it, preventing silent data corruption when scripts read or write array variables on older builds. (#3460)

​

🚀 New

• You can now choose how a response body is displayed using the new format selector in the response toolbar, with options for JSON, XML, HTML, YAML, JavaScript, Markdown, Raw, Hex, and Base64. (#3312)
• Variables now support an array data type, so scripts can store and retrieve real arrays with .first() and .last() instead of having them flattened to comma-joined strings. (#3444)

​

✨ Improvements

• The API Docs publishing flow now shows Copy link and View actions in the success toast, the empty-state primary button highlights the most useful next step, and the Components Library in the API Design sidebar is collapsed by default. (#3435)

​

🐛 Fixes

• Secret vault references in OAuth 2.0 and JWT Bearer auth fields now resolve correctly when sending requests, instead of being passed as literal template strings to the token endpoint. (#3434)
• The Run via CLI command generated by the collection runner now uses the environment name instead of its internal ID for local projects, so the copied command works when you run it. (#3419)
• Keyboard shortcuts rebound to punctuation keys such as semicolons, periods, slashes, and brackets now fire correctly after being configured in the desktop app’s shortcut settings. (#3396)
• A security vulnerability in the desktop app’s git integration has been patched, and remote URLs are now validated to allow only standard schemes such as https, http, and ssh. (#3383)

​

🚀 New

• You can now collapse the Collections sidebar to give your request editor more room, and restore it with a click or Cmd/Ctrl+B. (#3313)
• A new Keyboard Shortcuts page in Settings on desktop lets you view all available shortcuts, reassign any of them directly in the list, and reset everything to defaults. (#3098)

​

✨ Improvements

• Script errors in pre- and post-request scripts now show line numbers and column positions in the Response panel, DevTools console, and Collection Runner, so you can pinpoint mistakes faster. (#3310)

​

🐛 Fixes

• Changing a team member’s role no longer fails with an error when the member has been invited but has not yet logged in. (#3346)

​

🚀 New

• You can now delete all variables at once from the Environment, Global, and Collection variable tables using the new Delete All button, which asks for confirmation before clearing. (#2985)
• Users who are not signed in now see a notification banner with a Sign in option, giving advance notice that a free account will soon be required. (#3303)

​

✨ Improvements

• When a mandatory update is detected while the desktop app is running, the download now starts automatically so you can install it without any extra steps. (#3319)

​

🐛 Fixes

• Fixed a bug where the Clone repository modal immediately closed after clicking Clone from the project switcher. (#3188)
• The collection runner now executes requests in the same order they appear in the sidebar, including reorders made by dragging. (#3301)
• Fixed a regression on desktop where the sign-in notification banner remained visible after logging in. (#3338)
• Fixed the embedded terminal on desktop appearing as a blank panel, so it now correctly renders text using the app’s current light or dark theme. (#3282)
• Fixed Quick Share links returning errors for visitors - shared links now load reliably. (#3278)
• Fixed three Postman scripting issues: skipped tests no longer silently discard their function body, response body assertions now require an exact match instead of a substring match, and false warnings about unsupported Postman APIs have been removed. (#3028)
• Fixed the desktop auto-update getting stuck on an error state after a download completed, by adding a verification step between download and success. (#3328)

​

🐛 Fixes

• Requests with an empty body no longer send a spurious Content-Type header, preventing failures on servers that reject unexpected content types. (#3270)

​

🐛 Fixes

• Deleted specs, components, and linked specs in API Design no longer reappear in the sidebar after a page reload. (#3239)
• Using ‘Save as new’ on an HTTP or GraphQL request now carries all Settings overrides, including SSL verification, redirect policy, and timeout, over to the duplicate. (#3221)
• Pre-request scripts that call rq.collectionVariables.set(), unset(), or clear() on a standalone request no longer abort the send with an error - the call is silently skipped and the request proceeds normally. (#3197)
• Collection variables defined on a parent or ancestor folder are now visible to pre-request and post-response scripts, matching what you already see in the URL and header preview. (#3225)
• Importing Postman collections now correctly infers the raw body content type from the Content-Type header when Postman’s format hint is missing, and the Body tab shows a warning when your selected body language and Content-Type header disagree. (#3219)

​

🚀 New

• You can now sign in to your Git provider with an OAuth device-code flow, in addition to a personal access token. (#3154)

​

✨ Improvements

• The API Client sidebar now shows a Git status indicator for Git-backed projects. (#3158)
• Improved keyboard navigation across the app. (#3072)
• Extended the scripting API with rq.response.headers accessors, and brought Safe-mode scripts to parity for rq.response.to.have.jsonSchema and the JSON body helpers. (#3170, #3175, #3177)

​

🐛 Fixes

• Example “Try it” now resolves collection-level variables. (#3169)
• Collection variable default values are now applied when exporting a collection to OpenAPI. (#3180)
• Older Requestly exports that omitted query parameters, headers, or enabled flags now import correctly. (#3167)
• Fixed an error when using “Go to source” after the source specification had been deleted. (#3168)
• AI requests are now rate-limited per user to keep the service responsive. (#3198)

​

🚀 New

• You can now create private, scoped share links for a single endpoint or folder in your published API docs, with optional password protection and an expiry, and revoke them at any time. (#3082)
• You can now connect a GitLab account with a personal access token for Git-backed projects. (#3074)

​

✨ Improvements

• Large collection trees that span multiple projects now scroll smoothly. (#3124)

​

🐛 Fixes

• Fixed a freeze in single-line fields when a value containing line breaks was entered. (#3103)
• Fixed Requestly-format imports that could fail to save, and the app now shows the actual reason when an import fails. (#3117)
• Generated code snippets now render multipart file fields as file uploads. (#3109)
• Fixed local projects occasionally reporting data as corrupted after a transient read failure; these reads are now retried. (#3116)
• AI features now redact request and response bodies before any data leaves your machine for quality evaluation. (#3119)

​

🚀 New

• You can now right-click items in the sidebar tree and open tabs to rename, duplicate, delete, and run other actions from a context menu. (#2966)
• You can now copy, cut, and paste requests and folders, within a collection or across collections, using the right-click menu and the usual keyboard shortcuts. (#2983)
• You can now add descriptions to requests and examples across every protocol, and they render in your published API docs. (#3010)

​

✨ Improvements

• The request history list now loads and scrolls smoothly even with thousands of entries, and history search no longer stutters as you type. (#2972, #2961)
• The Collection Runner and large request lists feel more responsive thanks to reduced re-rendering. (#2969, #2962)

​

🐛 Fixes

• The desktop app now opens external links only over secure HTTPS connections and restricts in-app navigation to trusted origins, protecting you against malicious links. (#3089)
• Desktop vault files are now readable only by their owner, so your stored secrets stay private on shared machines. (#3001)
• Fixed a freeze in the API specification editor caused by an infinite render loop in the governance flow. (#3065)
• The desktop terminal now closes its sessions when you delete a project, and new terminal sessions are limited to local projects. (#3031)
• Fixed a server-side issue where saving role or permission changes at the same time could fail. (#3018)
• Added safeguards that limit the number of concurrent import tasks per user and project, keeping imports reliable under load. (#3046)

​

🚀 New

• When importing an OpenAPI file, you can now choose to create a collection, an API specification, or both together in a single step. (#2973)

​

🐛 Fixes

• On Windows, the sign-in dialog now stays open and offers a “Copy the URL” option when your default browser fails to launch, so you can complete the login without getting stuck. (#2894)
• Pasting a cURL command whose URL contains unencoded spaces now imports correctly instead of being rejected. (#3027)
• Importing a Postman collection now correctly preserves query parameters defined in request examples. (#2899)
• Signing up with an email and password now requires at least 8 characters, preventing accounts with weak credentials from being created. (#3016)
• Adding a new route in the Mock Server now automatically selects it so you can start editing immediately, and the rule row controls are visually aligned. (#2893)

​

🚀 New

• If your organization is subject to data-residency restrictions, you now see a clear compliance notice on sign-in with a sign-out option, instead of hitting an unexpected error. (#2963)

​

🐛 Fixes

• Importing a Postman data-export ZIP no longer shows a false error for the archive metadata file bundled by Postman, and imports that finish with warnings now display a ‘What needs attention’ summary instead of a generic success message. (#2931)
• Fixed a server-side issue that caused login failures and widespread errors when multiple users signed in at the same time. (#2991)

​

🚀 New

• You can now click ‘View changelog’ in the desktop update notification to read what changed before restarting to install the update. (#2904)

​

🐛 Fixes

• Fixed security issues in the desktop vault where a crash during startup could erase your stored secrets, vault folders were readable by other users on shared machines, and crafted symbolic links could affect files outside the vault. (#2891)
• When adding a team member or resending an invitation fails, you now see the specific reason from the server instead of a generic error message. (#2956)
• Fixed a bug in the desktop terminal where commands installed via login-profile tools (such as Homebrew, nvm, or Volta) were not found, and fixed a separate issue where the cursor would jump unexpectedly when resizing the terminal panel. (#2958)
• Fixed an error that prevented ‘Update Collections’ from applying content changes when syncing a collection from an API specification. (#2949)

​

🚀 New

• You can now open an embedded terminal in the Dev Tools panel of the desktop app, with support for multiple concurrent sessions in tabs. (#2863)
• Each operation in the published API docs reader now has its own shareable URL, so you can link teammates directly to a specific endpoint. (#2922)

​

✨ Improvements

• Press Mod+K while viewing published API docs to jump straight to the outline search field. (#2940)
• Published API docs now render oneOf and anyOf schema compositions with clearly labeled sections, making complex request and response shapes easier to read. (#2934)
• Schema property descriptions in published API docs now render markdown formatting, so code snippets, bold text, and links display as intended instead of as raw markup. (#2928)
• Published API docs now correctly display response headers and link sections, and resolve schemas that are defined at the top level of your spec. (#2927)

​

🐛 Fixes

• Proxy settings now show a clear validation error for out-of-range port numbers, automatically remove any http:// or https:// prefix you type in the host field, and require both username and password when authentication is turned on. (#2846)
• Fixed an issue where triggering a scheduled run returned a permissions error immediately after signing in. (#2918)

​

✨ Improvements

• Collection imports now show a real progress bar with live status instead of a bare spinner. (#2787)
• Invalid project names are now flagged with a clear message before you create or rename a project, instead of failing afterward. (#2892)
• Legacy Postman scripts that use deprecated variables now keep working in the default safe sandbox, with a deprecation warning instead of a silent error. (#2912)
• In published API docs, the outline now highlights and follows the section you are reading as you scroll. (#2917)

​

🐛 Fixes

• Markdown editing is now readable in light mode, with syntax markers that match your theme. (#2859)

​

✨ Improvements

• Published docs render OpenAPI schemas more faithfully. (#2878)

​

🐛 Fixes

• You can now unstage files in a brand-new repository that has no commits yet. (#2879)

​

🚀 New

• View specs from multiple projects together in the Specs sidebar. (#2860)

​

✨ Improvements

• Published docs now group endpoints by tag for easier navigation. (#2873)

​

🐛 Fixes

• Viewer-role users no longer see create and edit actions they cannot perform. (#2758)
• GraphQL request variables now keep their typed values intact when saved. (#2867)

​

🚀 New

• Scripts gain a full request-execution namespace with setNextRequest, skipRequest, runRequest, and location. (#2849)
• Scripts can now clear request headers for Postman parity. (#2832)
• Scripts can now clear environment, global, and collection variables for Postman parity. (#2854)
• Bulk-delete mock routes by path prefix. (#2811)

​

✨ Improvements

• The API Design versions pane now shows documentation status and has a collapsible header. (#2818)
• The Specs and Components sidebar is now collapsible and resizable. (#2845)

​

🚀 New

• Configure proxy settings in the desktop app. (#2726)
• Run a collection from the command line with a new Run via CLI option on the Collection Runner. (#2795)
• Copy a request’s ID with a new Copy Request ID button in every protocol editor. (#2856)

​

🐛 Fixes

• Fixed the URL field freezing when you switch tabs quickly. (#2785)
• Fixed collection variables being incorrectly read-only in safe mode. (#2819)

​

🚀 New

• Request capture now follows redirect hops and handles Digest/NTLM challenges and GraphQL introspection. (#2746)
• Create multiple mock routes at once, including their nested responses and rules. (#2759)
• Stash your Git changes from a new stash view, with indicators shown across the app. (#2774)

​

✨ Improvements

• Scripts can now modify request headers in both scripting engines. (#2783)
• The Git sidebar panel is tidier with collapsible sections, a change-count badge, and clearer error messages. (#2775)

​

🐛 Fixes

• Importing a partial Requestly export now re-parents orphaned items so nothing goes missing. (#2782)

​

🚀 New

• Cloning a repository now discovers and sets up any Requestly project it contains automatically. (#2768)
• Resolve merge conflicts with a new two-way conflict resolution view. (#2769)

​

✨ Improvements

• Scripts now run on a faster, more reliable safe-mode engine, including full support on Windows. (#2731)

​

🐛 Fixes

• Fixed duplicate key-value row identifiers that could appear when loading a request. (#2756)
• Fixed a false Body-tab indicator dot and corrected the skipped-request count in Run History. (#2766)

​

🚀 New

• DevTools now captures OAuth token fetches that the app makes on your behalf. (#2697)
• A new Git Providers settings page lets you connect accounts, and you can enter or update a personal access token mid-operation when authentication is needed. (#2735)
• Create, switch, and pick Git branches directly from a branch picker. (#2736)
• Browse and select GitHub repositories from a built-in repo picker. (#2737)

​

✨ Improvements

• Search your projects and see them sorted alphabetically. (#2739)

​

🚀 New

• You can now publish collection documentation and share it via a public reader page with public, internal, or password access. (#2649)

​

✨ Improvements

• Scripts now show a deprecation warning when using old Postman-style identifiers. (#2699)

​

🐛 Fixes

• Fixed four API client bugs across request and collection workflows. (#2730)
• Fixed JSONPath navigation for bracketed keys and a missing duplicate-example notification. (#2728)
• Local file moves now report all naming conflicts instead of failing silently. (#2724)

​

🚀 New

• You can now download a response body directly to a file. (#2567)
• Added Postman-like JSONPath filtering to the response Pretty view. (#2661)
• Added a line-wrap toggle to the JSON Pretty view in the response viewer. (#2647)

​

🐛 Fixes

• JWT auth now shows the signed preview token in auto-generated headers and query params. (#2648)
• Long lists such as projects, mocks, and specifications now load every page instead of stopping short. (#2688)
• Fixed key-value rows that could share an id and behave incorrectly. (#2629)

​

🚀 New

• Binary response bodies are now preserved losslessly, with image previews in the response viewer. (#2596)
• Added a Commits view with a commit-graph rail for Git-backed projects. (#2404)

​

🐛 Fixes

• OAuth2 now shows the fetched token in the panel and the auto-generated Authorization header. (#2617)
• Fixed several MQTT issues including auth on connect, a tab-close leak, and publishing with embedded variables. (#2598)

​

🚀 New

• Added App Settings rows to configure eight default behaviors for HTTP and GraphQL requests. (#2390)
• Added rq.sendRequest in scripts for parity with Postman’s pm.sendRequest. (#2582)
• Added several quality-of-life improvements to the WebSocket and Socket.IO editors. (#2531)

​

✨ Improvements

• Importers now show clearer, more accurate reasons when an import fails. (#2227)

​

🐛 Fixes

• Imports no longer fail on partial legacy auth objects, placeholder cookies, or null key names. (#2523)
• Fixed drag-and-drop reordering of collections reverting when items had tied ranks. (#2590)

​

✨ Improvements

• Hardened sign-in and mock server handling against abuse. (#2510)

​

🐛 Fixes

• Duplicate request headers that differ only in letter case are now collapsed correctly. (#2501)

​

🚀 New

• The Tests tab now shows how many tests passed out of the total, with pass and fail color coding. (#2461)

​

✨ Improvements

• Projects now open faster by deferring background data loading until it is actually needed. (#2475)

​

🐛 Fixes

• Fixed several desktop app crashes during startup, shell loading, and when a config file was corrupt. (#2369)
• Re-imported global variables now correctly merge instead of losing their global scope. (#2456)
• Searching collections now shows a clear empty state when no results match. (#2476)

​

✨ Improvements

• You now get a success toast when switching environments. (#2425)
• The active history entry is now highlighted and its font matches collections. (#2421)
• Template variables are now highlighted in HTTP and GraphQL examples. (#2435)
• MQTT expanded timeline messages now show the retain flag. (#2433)

​

🐛 Fixes

• GraphQL variables editor now accepts template tokens. (#2400)
• Switching an MQTT request from v5 to v3 now correctly removes the Properties tab from the URL. (#2401)

​

🚀 New

• HTTP and GraphQL requests now have a per-request Settings tab with values that can inherit from parent levels. (#2379)
• Manage reusable message-body templates in a dedicated Message Templates library. (#2363)

​

🐛 Fixes

• Fixed sending GET requests with a body over HTTP/2. (#2388)
• Switching authorization type now correctly drops stale fields from the previous type. (#2377)
• The Vault now surfaces the real reason when an operation fails. (#2380)
• The WSDL import button now enables only when the URL matches a valid pattern as you type. (#2355)

​

🚀 New

• Save and reuse WebSocket and Socket.IO examples. (#2285)
• gRPC proto file content now persists across sessions and syncs to the cloud. (#2314)

​

🐛 Fixes

• Fixed gRPC stream panel preview, trailer overflow, and reflection method reset issues. (#2209)
• Saving an HTTP, GraphQL, or gRPC request as new now keeps it in the right collection. (#2325)
• GraphQL Send is now blocked when the query body is empty. (#2337)
• URL-bar encoding is preserved when you toggle a query parameter on or off. (#2333)

​

🚀 New

• Reuse saved message templates, beautify XML, and get clearer connection-state feedback in realtime clients. (#2277)

​

✨ Improvements

• Added a Skip link to onboarding. (#2311)

​

🐛 Fixes

• Discarding or saving variable edits no longer leaves phantom rows behind. (#2292)
• The authorization info banner now shows the correct text when an API key is placed in query params. (#2293)
• URL fragments are now stripped from query-parameter parsing so they no longer pollute your params. (#2299)
• Validation errors are now shown verbatim when saving, so you know exactly what went wrong. (#2305)

​

🚀 New

• Build and send Socket.IO requests with a dedicated editor. (#2202)
• Import environment variables directly from a .env file. (#2254)
• Save and reuse MQTT examples on both cloud and local projects. (#2261)
• Import and export WebSocket and Socket.IO requests in Requestly’s native format. (#2278)

​

🐛 Fixes

• XML responses now keep leaf elements inline for easier reading. (#2269)
• Scripts now preserve boolean and number types when reading values instead of converting them to strings. (#2276)

​

🚀 New

• Connect a local project to Git directly inside the desktop app. (#2194)
• MQTT requests can now be imported and exported in Requestly’s native format. (#2251)

​

✨ Improvements

• MQTT message timelines now display byte-probed formats and MQTT v5 properties more clearly. (#2230)

​

🐛 Fixes

• MQTT topic subscriptions stay stable and reconcile correctly when you reconnect. (#2231)
• The JSON editor no longer flags placeholders as syntax errors. (#2233)
• You can now select multiple files at once in the import drop zone. (#2239)

​

🚀 New

• Added the WebSocket request editor with a live message timeline and connect/disconnect controls. (#2181)
• MQTT requests can now be saved to cloud and local projects. (#2195)

​

🐛 Fixes

• Collections now warn when you try to save an empty name in the overview editor. (#2190)
• Renaming an item now blocks saving and shows an error when the name is left empty. (#2192)
• gRPC error responses now preserve trailers and report the correct status. (#2200)

​

🚀 New

• Added the MQTT request editor with message, topics, authorization, properties, and last will tabs. (#2047)
• Added a keyboard shortcuts modal you can open from the Help menu or with Cmd+/. (#2131)

​

✨ Improvements

• gRPC service discovery now supports importing a proto file. (#2156)
• gRPC requests now support pre and post scripts and per-protocol editor autocompletion. (#2125)

​

🐛 Fixes

• The collection runner now clamps out-of-range iteration and delay values and warns you. (#2150)
• Fixed Mock Server showing blank responses and rule errors after editing. (#2171)

​

🚀 New

• Added the Mock Server with a sidebar, editor, and drag-to-reorder for routes. (#2066)
• You can now drag to reorder environment variables. (#2091)

​

✨ Improvements

• Expanded the gRPC client with a config panel, authentication, custom metadata, and message template generation. (#2087)
• Added grpcurl code generation for gRPC requests. (#2126)
• Response header details now collapse progressively to fit narrower panels. (#2102)

​

🚀 New

• Added an MQTT client for connecting to brokers and publishing messages. (#2013)

​

✨ Improvements

• Exports to Postman and OpenAPI now carry over five additional authentication types. (#2046)
• gRPC requests now support saved examples, variable interpolation, and persistence. (#2051)

​

🐛 Fixes

• Inherited OAuth 2.0 authentication now resolves correctly and renders its config variables. (#2082)
• Fixed a Windows issue where renaming files in a local project produced broken paths. (#1840)
• Generated client code no longer percent-encodes your template variables incorrectly. (#2073)

​

🚀 New

• Added AWS Signature v4 authentication with both live and presigned URL modes. (#1912)
• Added NTLM authentication support on the desktop app. (#1998)

​

✨ Improvements

• Added a report-issue entry to make it easier to send us feedback. (#2027)

​

🐛 Fixes

• Importing older Requestly exports now restores environment variables that were missing an identifier. (#2021)
• Empty or corrupt local project files no longer break loading. (#1986)

​

🚀 New

• Added app-wide back and forward navigation buttons so you can move through screens you’ve visited. (#1974)
• Introduced the gRPC client with support for streaming requests. (#1951)

​

✨ Improvements

• Opening a specification tab for the first time is now faster. (#1980)

​

🐛 Fixes

• Creating a custom package with a duplicate name now shows a clear conflict message instead of a server error. (#1978)
• GraphQL responses that return HTML no longer crash response parsing. (#1989)

​

🚀 New

• Send and inspect gRPC requests with the new gRPC support. (#1917)

​

✨ Improvements

• Environments are now sorted alphabetically in the selector. (#1949)
• Clearer drag-and-drop indicators when reordering collections. (#1962)
• Bottom panel dock preferences now persist across sessions. (#1963)

​

🐛 Fixes

• The app now reloads automatically instead of erroring after a new version is deployed. (#1811)

​

🚀 New

• Added SSL certificate support, including client certificates and custom CA certificates. (#1797)
• Authenticate requests using HTTP Digest authentication. (#1945)
• Design and edit OpenAPI specifications with a dedicated editor, issues panel, and governance checks. (#1884)

​

🚀 New

• The Requestly CLI now supports running cloud collections. (#1591)
• Added five new authentication types for securing your requests. (#1784)
• Authenticate requests using JWT Bearer tokens with configurable payload directives. (#1834)

​

✨ Improvements

• Collection trees now remember expansion state per project and added a collapse-all button. (#1795)

​

🐛 Fixes

• The desktop window can now be dragged while the app is loading. (#1809)
• Pasting a cURL command that is not a valid request no longer fails silently. (#1923)

​

🚀 New

• The desktop app now downloads updates in the background with a progress bar. (#1587)
• Configure OAuth 2.0 and view the resulting token directly in the Authorization tab. (#1696)

​

🐛 Fixes

• Requests and environments now appear correctly when viewing multiple projects. (#1773)
• Variable values are now preserved when migrating local projects from the previous app. (#1775)
• Aligned the sidebar default sort order with the previous app. (#1776)

​

🚀 New

• Migrate your local projects from the previous desktop app into Requestly. (#1630)
• Complete interactive OAuth flows through a hosted callback so login redirects work on desktop. (#1672)

​

🐛 Fixes

• Fixed imports of older collections and environments that previously failed to load. (#1748)
• Importing now merges into your existing global environment instead of failing with a conflict. (#1739)

​

🚀 New

• Run your collections from the command line with the new Requestly CLI. (#1541)
• Authenticate requests with OAuth 2.0, including a token service and orchestration. (#1596)
• Use non-interactive OAuth 2.0 grants with automatic token refresh. (#1648)
• Sign requests with OAuth 1.0 directly from the Authorization tab. (#1572)

​

✨ Improvements

• Added contextual help hints across the API client. (#1659)

​

🐛 Fixes

• Older imported records without an explicit type now correctly default to HTTP requests. (#1674)

​

🚀 New

• An app-wide cookie jar lets you manage cookies with a Postman-style experience. (#1622)
• Import much larger files, with the limit raised from 30 MB to 100 MB. (#1550)
• Import API definitions from SoapUI projects. (#1531)
• Import an exported Requestly project archive directly. (#1602)

​

✨ Improvements

• Add a description column to the request headers editor. (#1601)
• Clear the script package cache with a new button to reclaim disk space. (#1524)

​

🚀 New

• Use npm packages directly in your scripts, with search and one-click install. (#1467)

​

✨ Improvements

• Postman imports now translate npm and jsr package requires in scripts. (#1520)
• The package library now always shows its split layout for a steadier view. (#1502)

​

🐛 Fixes

• The package library Save button now matches the size of other editors. (#1509)

​

🚀 New

• Run GraphQL subscriptions on the desktop app. (#1398)
• Create and reuse custom script packages across your requests with a new package library. (#1451)
• An SSL verification indicator now appears in the footer. (#1472)

​

🐛 Fixes

• Postman export now preserves template-prefixed URLs. (#1466)
• Scripts that use a top-level return now have their Postman-style calls transformed correctly. (#1428)

​

🚀 New

• Import HAR files directly, with captured requests turned into examples. (#1357)
• Local filesystem projects now detect and sync changes made outside the app. (#1386)

​

🐛 Fixes

• The Debug tab stays accessible even when a response returns an error. (#1450)
• HTTP/2 pseudo-headers are now filtered out of requests imported from HAR. (#1446)
• Postman export no longer wraps the collection in a duplicate root entry. (#1456)

​

🚀 New

• Inspect outgoing requests with new DevTools Console and Network panels. (#1362)
• Toggle SSL certificate verification on or off per request. (#1390)

​

✨ Improvements

• Empty projects now show helpful call-to-action prompts, and project creation is simpler. (#1343)

​

🐛 Fixes

• Template variables in the URL bar are now preserved, and dynamic variables resolve in code snippets. (#1377)
• Postman imports with array-based form-data file sources now parse correctly. (#1401)
• Root collection descriptions now import from Postman, and the overview scrollbar is hidden. (#1410)

​

🚀 New

• Run bulk operations on examples and import them from supported formats. (#1296)
• Create examples instantly from the sidebar and save them from a new dropdown. (#1348)

​

✨ Improvements

• Persisted example tabs now show a “Try it” button in place of Send. (#1358)
• Redesigned confirmation dialogs for clearer, more readable prompts. (#1316)

​

🐛 Fixes

• Variables now resolve correctly in generated code snippets, and request body content type is set properly. (#1361)
• Invalid GraphQL variables now show an inline validation error instead of failing silently. (#1373)
• Importing from cURL no longer carries over a stale Content-Length header. (#1366)