This release adds desktop cookie persistence, id_token support across OAuth2 flows, mock server URL handling for subpath deployments, and Thai language support, alongside security patches and bug fixes.

Read more at: https://hoppscotch.com/blog/hoppscotch-v2026-6-0.

What's Changed

• fix(mock-server): persist isPublic on creation, default to private by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6410
• fix(backend): enforce ownership on user history and private User fields by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6409
• fix(backend): reject path/query/fragment in SMTP URL validation by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6413
• feat(sh-admin): surface which config fields block saving by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/6385
• chore: security patch for the dependency chain v2026.6.0 by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6450
• feat(mock-server): append /backend to domain-based URL when subpath access is enabled by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6448
• fix(common): resolve environment variables in inherited collection headers by @sahil29roy in https://github.com/hoppscotch/hoppscotch/pull/6447
• feat(desktop): desktop cookie persistence and reapplication by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6416
• fix(desktop): sync self-hosted instance version from manifest by @cassiocauee in https://github.com/hoppscotch/hoppscotch/pull/6423
• feat: add Thai translation by @anusoft in https://github.com/hoppscotch/hoppscotch/pull/6449
• docs(js-sandbox): update development instructions by @abhaybansal0322 in https://github.com/hoppscotch/hoppscotch/pull/6387
• fix(common): rewrite Finnish language pack by @roopepaajanen in https://github.com/hoppscotch/hoppscotch/pull/6402
• fix(common): add missing Chinese locale keys by @nikhil-shukl in https://github.com/hoppscotch/hoppscotch/pull/6363
• refactor(common): improve syncing systems and remove platform-wise duplications by @anwarulislam in https://github.com/hoppscotch/hoppscotch/pull/6334
• feat(common): add OAuth2 token type selector for id_token support by @anwarulislam in https://github.com/hoppscotch/hoppscotch/pull/6444
• fix(common): defer CookieJarService binding by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6478

New Contributors

• @sahil29roy made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6447
• @cassiocauee made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6423
• @anusoft made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6449
• @abhaybansal0322 made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6387
• @roopepaajanen made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6402
• @nikhil-shukl made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6363

Full Changelog: https://github.com/hoppscotch/hoppscotch/compare/2026.5.0...2026.6.0