Changelogs

​

🚀 New

• When importing an OpenAPI file, you can now choose to create a collection, an API specification, or both together in a single step. (#2973)

​

🐛 Fixes

• On Windows, the sign-in dialog now stays open and offers a “Copy the URL” option when your default browser fails to launch, so you can complete the login without getting stuck. (#2894)
• Pasting a cURL command whose URL contains unencoded spaces now imports correctly instead of being rejected. (#3027)
• Importing a Postman collection now correctly preserves query parameters defined in request examples. (#2899)
• Signing up with an email and password now requires at least 8 characters, preventing accounts with weak credentials from being created. (#3016)
• Adding a new route in the Mock Server now automatically selects it so you can start editing immediately, and the rule row controls are visually aligned. (#2893)

​

🚀 New

• If your organization is subject to data-residency restrictions, you now see a clear compliance notice on sign-in with a sign-out option, instead of hitting an unexpected error. (#2963)

​

🐛 Fixes

• Importing a Postman data-export ZIP no longer shows a false error for the archive metadata file bundled by Postman, and imports that finish with warnings now display a ‘What needs attention’ summary instead of a generic success message. (#2931)
• Fixed a server-side issue that caused login failures and widespread errors when multiple users signed in at the same time. (#2991)

​

🚀 New

• You can now click ‘View changelog’ in the desktop update notification to read what changed before restarting to install the update. (#2904)

​

🐛 Fixes

• Fixed security issues in the desktop vault where a crash during startup could erase your stored secrets, vault folders were readable by other users on shared machines, and crafted symbolic links could affect files outside the vault. (#2891)
• When adding a team member or resending an invitation fails, you now see the specific reason from the server instead of a generic error message. (#2956)
• Fixed a bug in the desktop terminal where commands installed via login-profile tools (such as Homebrew, nvm, or Volta) were not found, and fixed a separate issue where the cursor would jump unexpectedly when resizing the terminal panel. (#2958)
• Fixed an error that prevented ‘Update Collections’ from applying content changes when syncing a collection from an API specification. (#2949)

​

🚀 New

• You can now open an embedded terminal in the Dev Tools panel of the desktop app, with support for multiple concurrent sessions in tabs. (#2863)
• Each operation in the published API docs reader now has its own shareable URL, so you can link teammates directly to a specific endpoint. (#2922)

​

✨ Improvements

• Press Mod+K while viewing published API docs to jump straight to the outline search field. (#2940)
• Published API docs now render oneOf and anyOf schema compositions with clearly labeled sections, making complex request and response shapes easier to read. (#2934)
• Schema property descriptions in published API docs now render markdown formatting, so code snippets, bold text, and links display as intended instead of as raw markup. (#2928)
• Published API docs now correctly display response headers and link sections, and resolve schemas that are defined at the top level of your spec. (#2927)

​

🐛 Fixes

• Proxy settings now show a clear validation error for out-of-range port numbers, automatically remove any http:// or https:// prefix you type in the host field, and require both username and password when authentication is turned on. (#2846)
• Fixed an issue where triggering a scheduled run returned a permissions error immediately after signing in. (#2918)

​

✨ Improvements

• Collection imports now show a real progress bar with live status instead of a bare spinner. (#2787)
• Invalid project names are now flagged with a clear message before you create or rename a project, instead of failing afterward. (#2892)
• Legacy Postman scripts that use deprecated variables now keep working in the default safe sandbox, with a deprecation warning instead of a silent error. (#2912)
• In published API docs, the outline now highlights and follows the section you are reading as you scroll. (#2917)

​

🐛 Fixes

• Markdown editing is now readable in light mode, with syntax markers that match your theme. (#2859)

​

✨ Improvements

• Published docs render OpenAPI schemas more faithfully. (#2878)

​

🐛 Fixes

• You can now unstage files in a brand-new repository that has no commits yet. (#2879)

​

🚀 New

• View specs from multiple projects together in the Specs sidebar. (#2860)

​

✨ Improvements

• Published docs now group endpoints by tag for easier navigation. (#2873)

​

🐛 Fixes

• Viewer-role users no longer see create and edit actions they cannot perform. (#2758)
• GraphQL request variables now keep their typed values intact when saved. (#2867)

​

🚀 New

• Scripts gain a full request-execution namespace with setNextRequest, skipRequest, runRequest, and location. (#2849)
• Scripts can now clear request headers for Postman parity. (#2832)
• Scripts can now clear environment, global, and collection variables for Postman parity. (#2854)
• Bulk-delete mock routes by path prefix. (#2811)

​

✨ Improvements

• The API Design versions pane now shows documentation status and has a collapsible header. (#2818)
• The Specs and Components sidebar is now collapsible and resizable. (#2845)

​

🚀 New

• Configure proxy settings in the desktop app. (#2726)
• Run a collection from the command line with a new Run via CLI option on the Collection Runner. (#2795)
• Copy a request’s ID with a new Copy Request ID button in every protocol editor. (#2856)

​

🐛 Fixes

• Fixed the URL field freezing when you switch tabs quickly. (#2785)
• Fixed collection variables being incorrectly read-only in safe mode. (#2819)

​

🚀 New

• Request capture now follows redirect hops and handles Digest/NTLM challenges and GraphQL introspection. (#2746)
• Create multiple mock routes at once, including their nested responses and rules. (#2759)
• Stash your Git changes from a new stash view, with indicators shown across the app. (#2774)

​

✨ Improvements

• Scripts can now modify request headers in both scripting engines. (#2783)
• The Git sidebar panel is tidier with collapsible sections, a change-count badge, and clearer error messages. (#2775)

​

🐛 Fixes

• Importing a partial Requestly export now re-parents orphaned items so nothing goes missing. (#2782)

​

🚀 New

• Cloning a repository now discovers and sets up any Requestly project it contains automatically. (#2768)
• Resolve merge conflicts with a new two-way conflict resolution view. (#2769)

​

✨ Improvements

• Scripts now run on a faster, more reliable safe-mode engine, including full support on Windows. (#2731)

​

🐛 Fixes

• Fixed duplicate key-value row identifiers that could appear when loading a request. (#2756)
• Fixed a false Body-tab indicator dot and corrected the skipped-request count in Run History. (#2766)

​

🚀 New

• DevTools now captures OAuth token fetches that the app makes on your behalf. (#2697)
• A new Git Providers settings page lets you connect accounts, and you can enter or update a personal access token mid-operation when authentication is needed. (#2735)
• Create, switch, and pick Git branches directly from a branch picker. (#2736)
• Browse and select GitHub repositories from a built-in repo picker. (#2737)

​

✨ Improvements

• Search your projects and see them sorted alphabetically. (#2739)

​

🚀 New

• You can now publish collection documentation and share it via a public reader page with public, internal, or password access. (#2649)

​

✨ Improvements

• Scripts now show a deprecation warning when using old Postman-style identifiers. (#2699)

​

🐛 Fixes

• Fixed four API client bugs across request and collection workflows. (#2730)
• Fixed JSONPath navigation for bracketed keys and a missing duplicate-example notification. (#2728)
• Local file moves now report all naming conflicts instead of failing silently. (#2724)

​

🚀 New

• You can now download a response body directly to a file. (#2567)
• Added Postman-like JSONPath filtering to the response Pretty view. (#2661)
• Added a line-wrap toggle to the JSON Pretty view in the response viewer. (#2647)

​

🐛 Fixes

• JWT auth now shows the signed preview token in auto-generated headers and query params. (#2648)
• Long lists such as projects, mocks, and specifications now load every page instead of stopping short. (#2688)
• Fixed key-value rows that could share an id and behave incorrectly. (#2629)

​

🚀 New

• Binary response bodies are now preserved losslessly, with image previews in the response viewer. (#2596)
• Added a Commits view with a commit-graph rail for Git-backed projects. (#2404)

​

🐛 Fixes

• OAuth2 now shows the fetched token in the panel and the auto-generated Authorization header. (#2617)
• Fixed several MQTT issues including auth on connect, a tab-close leak, and publishing with embedded variables. (#2598)

​

🚀 New

• Added App Settings rows to configure eight default behaviors for HTTP and GraphQL requests. (#2390)
• Added rq.sendRequest in scripts for parity with Postman’s pm.sendRequest. (#2582)
• Added several quality-of-life improvements to the WebSocket and Socket.IO editors. (#2531)

​

✨ Improvements

• Importers now show clearer, more accurate reasons when an import fails. (#2227)

​

🐛 Fixes

• Imports no longer fail on partial legacy auth objects, placeholder cookies, or null key names. (#2523)
• Fixed drag-and-drop reordering of collections reverting when items had tied ranks. (#2590)

​

✨ Improvements

• Hardened sign-in and mock server handling against abuse. (#2510)

​

🐛 Fixes

• Duplicate request headers that differ only in letter case are now collapsed correctly. (#2501)

​

🚀 New

• The Tests tab now shows how many tests passed out of the total, with pass and fail color coding. (#2461)

​

✨ Improvements

• Projects now open faster by deferring background data loading until it is actually needed. (#2475)

​

🐛 Fixes

• Fixed several desktop app crashes during startup, shell loading, and when a config file was corrupt. (#2369)
• Re-imported global variables now correctly merge instead of losing their global scope. (#2456)
• Searching collections now shows a clear empty state when no results match. (#2476)

​

✨ Improvements

• You now get a success toast when switching environments. (#2425)
• The active history entry is now highlighted and its font matches collections. (#2421)
• Template variables are now highlighted in HTTP and GraphQL examples. (#2435)
• MQTT expanded timeline messages now show the retain flag. (#2433)

​

🐛 Fixes

• GraphQL variables editor now accepts template tokens. (#2400)
• Switching an MQTT request from v5 to v3 now correctly removes the Properties tab from the URL. (#2401)

​

🚀 New

• HTTP and GraphQL requests now have a per-request Settings tab with values that can inherit from parent levels. (#2379)
• Manage reusable message-body templates in a dedicated Message Templates library. (#2363)

​

🐛 Fixes

• Fixed sending GET requests with a body over HTTP/2. (#2388)
• Switching authorization type now correctly drops stale fields from the previous type. (#2377)
• The Vault now surfaces the real reason when an operation fails. (#2380)
• The WSDL import button now enables only when the URL matches a valid pattern as you type. (#2355)

​

🚀 New

• Save and reuse WebSocket and Socket.IO examples. (#2285)
• gRPC proto file content now persists across sessions and syncs to the cloud. (#2314)

​

🐛 Fixes

• Fixed gRPC stream panel preview, trailer overflow, and reflection method reset issues. (#2209)
• Saving an HTTP, GraphQL, or gRPC request as new now keeps it in the right collection. (#2325)
• GraphQL Send is now blocked when the query body is empty. (#2337)
• URL-bar encoding is preserved when you toggle a query parameter on or off. (#2333)

​

🚀 New

• Reuse saved message templates, beautify XML, and get clearer connection-state feedback in realtime clients. (#2277)

​

✨ Improvements

• Added a Skip link to onboarding. (#2311)

​

🐛 Fixes

• Discarding or saving variable edits no longer leaves phantom rows behind. (#2292)
• The authorization info banner now shows the correct text when an API key is placed in query params. (#2293)
• URL fragments are now stripped from query-parameter parsing so they no longer pollute your params. (#2299)
• Validation errors are now shown verbatim when saving, so you know exactly what went wrong. (#2305)

​

🚀 New

• Build and send Socket.IO requests with a dedicated editor. (#2202)
• Import environment variables directly from a .env file. (#2254)
• Save and reuse MQTT examples on both cloud and local projects. (#2261)
• Import and export WebSocket and Socket.IO requests in Requestly’s native format. (#2278)

​

🐛 Fixes

• XML responses now keep leaf elements inline for easier reading. (#2269)
• Scripts now preserve boolean and number types when reading values instead of converting them to strings. (#2276)

​

🚀 New

• Connect a local project to Git directly inside the desktop app. (#2194)
• MQTT requests can now be imported and exported in Requestly’s native format. (#2251)

​

✨ Improvements

• MQTT message timelines now display byte-probed formats and MQTT v5 properties more clearly. (#2230)

​

🐛 Fixes

• MQTT topic subscriptions stay stable and reconcile correctly when you reconnect. (#2231)
• The JSON editor no longer flags placeholders as syntax errors. (#2233)
• You can now select multiple files at once in the import drop zone. (#2239)

​

🚀 New

• Added the WebSocket request editor with a live message timeline and connect/disconnect controls. (#2181)
• MQTT requests can now be saved to cloud and local projects. (#2195)

​

🐛 Fixes

• Collections now warn when you try to save an empty name in the overview editor. (#2190)
• Renaming an item now blocks saving and shows an error when the name is left empty. (#2192)
• gRPC error responses now preserve trailers and report the correct status. (#2200)

​

🚀 New

• Added the MQTT request editor with message, topics, authorization, properties, and last will tabs. (#2047)
• Added a keyboard shortcuts modal you can open from the Help menu or with Cmd+/. (#2131)

​

✨ Improvements

• gRPC service discovery now supports importing a proto file. (#2156)
• gRPC requests now support pre and post scripts and per-protocol editor autocompletion. (#2125)

​

🐛 Fixes

• The collection runner now clamps out-of-range iteration and delay values and warns you. (#2150)
• Fixed Mock Server showing blank responses and rule errors after editing. (#2171)

​

🚀 New

• Added the Mock Server with a sidebar, editor, and drag-to-reorder for routes. (#2066)
• You can now drag to reorder environment variables. (#2091)

​

✨ Improvements

• Expanded the gRPC client with a config panel, authentication, custom metadata, and message template generation. (#2087)
• Added grpcurl code generation for gRPC requests. (#2126)
• Response header details now collapse progressively to fit narrower panels. (#2102)

​

🚀 New

• Added an MQTT client for connecting to brokers and publishing messages. (#2013)

​

✨ Improvements

• Exports to Postman and OpenAPI now carry over five additional authentication types. (#2046)
• gRPC requests now support saved examples, variable interpolation, and persistence. (#2051)

​

🐛 Fixes

• Inherited OAuth 2.0 authentication now resolves correctly and renders its config variables. (#2082)
• Fixed a Windows issue where renaming files in a local project produced broken paths. (#1840)
• Generated client code no longer percent-encodes your template variables incorrectly. (#2073)

​

🚀 New

• Added AWS Signature v4 authentication with both live and presigned URL modes. (#1912)
• Added NTLM authentication support on the desktop app. (#1998)

​

✨ Improvements

• Added a report-issue entry to make it easier to send us feedback. (#2027)

​

🐛 Fixes

• Importing older Requestly exports now restores environment variables that were missing an identifier. (#2021)
• Empty or corrupt local project files no longer break loading. (#1986)

​

🚀 New

• Added app-wide back and forward navigation buttons so you can move through screens you’ve visited. (#1974)
• Introduced the gRPC client with support for streaming requests. (#1951)

​

✨ Improvements

• Opening a specification tab for the first time is now faster. (#1980)

​

🐛 Fixes

• Creating a custom package with a duplicate name now shows a clear conflict message instead of a server error. (#1978)
• GraphQL responses that return HTML no longer crash response parsing. (#1989)

​

🚀 New

• Send and inspect gRPC requests with the new gRPC support. (#1917)

​

✨ Improvements

• Environments are now sorted alphabetically in the selector. (#1949)
• Clearer drag-and-drop indicators when reordering collections. (#1962)
• Bottom panel dock preferences now persist across sessions. (#1963)

​

🐛 Fixes

• The app now reloads automatically instead of erroring after a new version is deployed. (#1811)

​

🚀 New

• Added SSL certificate support, including client certificates and custom CA certificates. (#1797)
• Authenticate requests using HTTP Digest authentication. (#1945)
• Design and edit OpenAPI specifications with a dedicated editor, issues panel, and governance checks. (#1884)

​

🚀 New

• The Requestly CLI now supports running cloud collections. (#1591)
• Added five new authentication types for securing your requests. (#1784)
• Authenticate requests using JWT Bearer tokens with configurable payload directives. (#1834)

​

✨ Improvements

• Collection trees now remember expansion state per project and added a collapse-all button. (#1795)

​

🐛 Fixes

• The desktop window can now be dragged while the app is loading. (#1809)
• Pasting a cURL command that is not a valid request no longer fails silently. (#1923)

​

🚀 New

• The desktop app now downloads updates in the background with a progress bar. (#1587)
• Configure OAuth 2.0 and view the resulting token directly in the Authorization tab. (#1696)

​

🐛 Fixes

• Requests and environments now appear correctly when viewing multiple projects. (#1773)
• Variable values are now preserved when migrating local projects from the previous app. (#1775)
• Aligned the sidebar default sort order with the previous app. (#1776)

​

🚀 New

• Migrate your local projects from the previous desktop app into Requestly. (#1630)
• Complete interactive OAuth flows through a hosted callback so login redirects work on desktop. (#1672)

​

🐛 Fixes

• Fixed imports of older collections and environments that previously failed to load. (#1748)
• Importing now merges into your existing global environment instead of failing with a conflict. (#1739)

​

🚀 New

• Run your collections from the command line with the new Requestly CLI. (#1541)
• Authenticate requests with OAuth 2.0, including a token service and orchestration. (#1596)
• Use non-interactive OAuth 2.0 grants with automatic token refresh. (#1648)
• Sign requests with OAuth 1.0 directly from the Authorization tab. (#1572)

​

✨ Improvements

• Added contextual help hints across the API client. (#1659)

​

🐛 Fixes

• Older imported records without an explicit type now correctly default to HTTP requests. (#1674)

​

🚀 New

• An app-wide cookie jar lets you manage cookies with a Postman-style experience. (#1622)
• Import much larger files, with the limit raised from 30 MB to 100 MB. (#1550)
• Import API definitions from SoapUI projects. (#1531)
• Import an exported Requestly project archive directly. (#1602)

​

✨ Improvements

• Add a description column to the request headers editor. (#1601)
• Clear the script package cache with a new button to reclaim disk space. (#1524)

​

🚀 New

• Use npm packages directly in your scripts, with search and one-click install. (#1467)

​

✨ Improvements

• Postman imports now translate npm and jsr package requires in scripts. (#1520)
• The package library now always shows its split layout for a steadier view. (#1502)

​

🐛 Fixes

• The package library Save button now matches the size of other editors. (#1509)

​

🚀 New

• Run GraphQL subscriptions on the desktop app. (#1398)
• Create and reuse custom script packages across your requests with a new package library. (#1451)
• An SSL verification indicator now appears in the footer. (#1472)

​

🐛 Fixes

• Postman export now preserves template-prefixed URLs. (#1466)
• Scripts that use a top-level return now have their Postman-style calls transformed correctly. (#1428)

​

🚀 New

• Import HAR files directly, with captured requests turned into examples. (#1357)
• Local filesystem projects now detect and sync changes made outside the app. (#1386)

​

🐛 Fixes

• The Debug tab stays accessible even when a response returns an error. (#1450)
• HTTP/2 pseudo-headers are now filtered out of requests imported from HAR. (#1446)
• Postman export no longer wraps the collection in a duplicate root entry. (#1456)

​

🚀 New

• Inspect outgoing requests with new DevTools Console and Network panels. (#1362)
• Toggle SSL certificate verification on or off per request. (#1390)

​

✨ Improvements

• Empty projects now show helpful call-to-action prompts, and project creation is simpler. (#1343)

​

🐛 Fixes

• Template variables in the URL bar are now preserved, and dynamic variables resolve in code snippets. (#1377)
• Postman imports with array-based form-data file sources now parse correctly. (#1401)
• Root collection descriptions now import from Postman, and the overview scrollbar is hidden. (#1410)

​

🚀 New

• Run bulk operations on examples and import them from supported formats. (#1296)
• Create examples instantly from the sidebar and save them from a new dropdown. (#1348)

​

✨ Improvements

• Persisted example tabs now show a “Try it” button in place of Send. (#1358)
• Redesigned confirmation dialogs for clearer, more readable prompts. (#1316)

​

🐛 Fixes

• Variables now resolve correctly in generated code snippets, and request body content type is set properly. (#1361)
• Invalid GraphQL variables now show an inline validation error instead of failing silently. (#1373)
• Importing from cURL no longer carries over a stale Content-Length header. (#1366)