What's Changed

• fix(INS-3850): revalidate a project's old organization cache when it moves parents by @yaoweiprc in #10513
• fix(INS-3850): re-check Konnect organization visibility before restoring it on cold start by @yaoweiprc in #10518
• fix: One line editor can enter new line issue by @cwangsmv in #10514
• fix(INS-3836): show the Konnect-moved notice only after a migration conflict is resolved by @yaoweiprc in #10521
• fix: Both spec and collection should allow import test suites in git sync by @cwangsmv in #10524
• Fix: Do not flush on blur on one-line-editor if it is read-only by @cwangsmv in #10534
• fix(sidebar): don't crash the collection filter on non-string doc fields by @ZxBing0066 in #10525
• fix(event-stream): only read event shaped lines from the event log by @ZxBing0066 in #10522
• chore(sandbox): disable quick.js sandbox temporarily by @ihexxa in #10536
• Fix: Add loading indicator and avoid unmount editor to update tag for tag editor by @cwangsmv in #10537
• fix(mcp): correct Add/Delete Item for nested object params by @CurryYangxx in #10546
• Chore: bump vault plugin version by @cwangsmv in #10547
• fix(environment-editor): treat empty JSON content as invalid JSON by @ZxBing0066 in #10540
• fix(INS-3507): restrict git-sync and legacy-folder writes to canSync model types by @kwburns-kong in #10531
• Change Konnect migration wording. by @yaoweiprc in #10550
• feat(export): add Export OpenAPI Spec to the collection context menu by @ZxBing0066 in #10538
• fix(insomnia): run plugin yarn info in a controlled temp dir by @Tyagiquamar in #10505
• fix(script): use liquid sync method in render - INS-3789 by @ihexxa in #10523
• chore(ci): make the cycle check runnable on Windows and report drift honestly [INS-3904] by @yaoweiprc in #10548
• refactor(sidebar): own the project shell in one layout route [INS-3903] by @yaoweiprc in #10541
• chore: bump app version to 13.3.0 by @insomnia-infra in #10552
• ci(ksai): add KSAI through the public mirror by @bartsmykla in #10551
• fix: constrain file template tag by @kwburns-kong in #10528
• fix: parse quoted CSV fields in collection runner data by @ZxBing0066 in #10557
• fix: de-flake import deep-link cURL auto-scan smoke test by @ZxBing0066 in #10555
• fix(toast): stop toast animations from swallowing clicks by @ZxBing0066 in #10553
• fix(key-value-editor): stop ListBox typeahead from swallowing typed spaces by @ZxBing0066 in #10563
• feat: Add base model schema and deep strict utility by @cwangsmv in #10515
• feat: Unify and migrate environment model to use Zod schema and infer type by @cwangsmv in #10516
• chore: bump @faker-js/faker@9.7.0 to 10.6.0 by @kwburns-kong in #10569
• ci(ksai): start a KSAI run only for people who can write to the repository by @bartsmykla in #10578
• fix: Environment schema git export order issue by @cwangsmv in #10580
• chore: bump dependencies by @kwburns-kong in #10444
• fix: validate paths stay within their intended base directory by @kwburns-kong in #10443
• chore: bump app version to 13.3.1 by @insomnia-infra in #10579
• feat(import): paste a cURL with no editable focus to start the import flow by @ZxBing0066 in #10566
• chore(ui): remove unreachable ImportModal instances by @ZxBing0066 in #10590
• fix: regenerate document ids on project storage conversion by @ZxBing0066 in #10565
• feat: change data model to support confidential control by @CurryYangxx in #10479
• feat: Migrate mock-server and mock-route zod schema and type definitions by @cwangsmv in #10520
• test(INS-3783): cover cookie id stability across Set-Cookie responses by @yaoweiprc in #10592
• feat: show variable source in live preview and hover tooltip by @ZxBing0066 in #10583
• fix(project-modal): close modal on redirect by comparing pathname by @bobqiu-kong in #10593
• feat: Migrate mcp request and related model types using zod by @cwangsmv in #10526
• feat: Implement UX for marking environments as confidential by @CurryYangxx in #10480
• fix: Warn when a Git Sync change cannot be discarded [INS-3830] by @yaoweiprc in #10585
• fix: script corrupt vault into plaintext by @CurryYangxx in #10601
• feat: Migrate collection and document workspace zod schema and type definitions- #10520 by @cwangsmv in #10582
• fix: resolve vault secrets in variable source and address review feedback by @ZxBing0066 in #10608
• feat: Add incompatible fields check for git sync document by @cwangsmv in #10591
• chore(deps): bump dependencies by @kwburns-kong in #10586
• fix: pin kong/release-script docker action to a digest by @kwburns-kong in #10449
• fix：dragging a request to another collection within same project is a… by @xiaodemen in #10612
• fix: dropping on a design is allowed by @xiaodemen in #10613
• chore(deps): bump jsdom and protobuf/connect major dependencies by @kwburns-kong in #10587
• Chore: Bump ai plugin to v1.0.12 and update dependencies by @cwangsmv in #10626
• fix(scripting): allow form-data body updates via script by @ryan-willis in #10576
• fix(mock): strip trailing slash from self-hosted mock server URL [INS-3897] by @yaoweiprc in #10627
• fix: bracket-quote pm variable names that aren't valid identifiers by @cwangsmv in #10604
• feat(Git Diff): Add an entity-level diff engine [1/8] by @yaoweiprc in #10615
• feat: confidential value policy and render engine by @CurryYangxx in #10509
• feat: apply confidential policy to preview surfaces by @CurryYangxx in #10510
• feat: Add incompatible fields check for cloud sync document by @cwangsmv in #10605
• fix: stop restamping ApiSpec.modified on startup and git round-trips by @ZxBing0066 in #10625
• feat: mask confidential value in timeline (http request & script) by @CurryYangxx in #10519
• feat: Add F2 shortcut to rename entity name on sidebar by @cwangsmv in #10614
• feat(Git Diff): Add a read-only Visual diff view [2/8] by @yaoweiprc in #10616
• chore: update undici version by @notjaywu in #10635
• refactor: decouple scripting environment imports by @ZxBing0066 in #10482
• feat(Git Diff): Add Visual diff cards for the remaining entity types [3/8] by @yaoweiprc in #10617
• feat: handle websocket socket.io mcp response by @CurryYangxx in #10589
• feat: support delete shortcut in the sidebar by @ihexxa in #10633
• fix: keep variable source in sync with live preview edits by @ZxBing0066 in #10639
• feat/option toggle prompt by @CurryYangxx in #10607
• feat(Git Diff): Stage and unstage individual entities [4/8] by @yaoweiprc in #10618
• feat: Debug Mode setting that enables the Git commit diagnostic panel [INS-3829] by @yaoweiprc in #10470
• fix: ignore inherited keys when resolving variable source by @ZxBing0066 in #10640
• feat(Git Diff): Discard individual entities and write them as Git Sync exports [5/8] by @yaoweiprc in #10619
• fix/confidential variable by @CurryYangxx in #10629
• feat: Show validation errors for invalid MCP tool/resource/prompt list responses by @cwangsmv in #10554
• fix(Git Diff): No Discard for an added base environment or cookie jar [6/8] by @yaoweiprc in https://github.com/Kong/inso...

What's Changed

• fix(ci): work around macOS stapling issue in release build by @notjaywu in #10647
• Chore: Add unite test for MCP streamable http request by @cwangsmv in #10648
• fix: attribute project environment page sources to the project by @ZxBing0066 in #10649
• fix: Loose the id meta check for certain request models by @cwangsmv in #10656
• fix: keep variable source tooltip interactive in the environments modal by @ZxBing0066 in #10650
• fix: MCP primitive UI issue when returning item with same name by @cwangsmv in #10655
• fix: closing modal when deleting workspace by @ihexxa in #10657
• fix: Hashcorp vault form to support the new credential pattern by @cwangsmv in #10658

Full Changelog: https://github.com/Kong/insomnia/compare/core@13.4.0-beta.0...core@13.4.0-beta.1

What's Changed

• fix(INS-3850): revalidate a project's old organization cache when it moves parents by @yaoweiprc in #10513
• fix(INS-3850): re-check Konnect organization visibility before restoring it on cold start by @yaoweiprc in #10518
• fix: One line editor can enter new line issue by @cwangsmv in #10514
• fix(INS-3836): show the Konnect-moved notice only after a migration conflict is resolved by @yaoweiprc in #10521
• fix: Both spec and collection should allow import test suites in git sync by @cwangsmv in #10524
• Fix: Do not flush on blur on one-line-editor if it is read-only by @cwangsmv in #10534
• fix(sidebar): don't crash the collection filter on non-string doc fields by @ZxBing0066 in #10525
• fix(event-stream): only read event shaped lines from the event log by @ZxBing0066 in #10522
• chore(sandbox): disable quick.js sandbox temporarily by @ihexxa in #10536
• Fix: Add loading indicator and avoid unmount editor to update tag for tag editor by @cwangsmv in #10537
• fix(mcp): correct Add/Delete Item for nested object params by @CurryYangxx in #10546
• Chore: bump vault plugin version by @cwangsmv in #10547
• fix(environment-editor): treat empty JSON content as invalid JSON by @ZxBing0066 in #10540
• fix(INS-3507): restrict git-sync and legacy-folder writes to canSync model types by @kwburns-kong in #10531
• Change Konnect migration wording. by @yaoweiprc in #10550
• feat(export): add Export OpenAPI Spec to the collection context menu by @ZxBing0066 in #10538
• fix(insomnia): run plugin yarn info in a controlled temp dir by @Tyagiquamar in #10505
• fix(script): use liquid sync method in render - INS-3789 by @ihexxa in #10523
• chore(ci): make the cycle check runnable on Windows and report drift honestly [INS-3904] by @yaoweiprc in #10548
• refactor(sidebar): own the project shell in one layout route [INS-3903] by @yaoweiprc in #10541
• chore: bump app version to 13.3.0 by @insomnia-infra in #10552
• ci(ksai): add KSAI through the public mirror by @bartsmykla in #10551
• fix: constrain file template tag by @kwburns-kong in #10528
• fix: parse quoted CSV fields in collection runner data by @ZxBing0066 in #10557
• fix: de-flake import deep-link cURL auto-scan smoke test by @ZxBing0066 in #10555
• fix(toast): stop toast animations from swallowing clicks by @ZxBing0066 in #10553
• fix(key-value-editor): stop ListBox typeahead from swallowing typed spaces by @ZxBing0066 in #10563
• feat: Add base model schema and deep strict utility by @cwangsmv in #10515
• feat: Unify and migrate environment model to use Zod schema and infer type by @cwangsmv in #10516
• chore: bump @faker-js/faker@9.7.0 to 10.6.0 by @kwburns-kong in #10569
• ci(ksai): start a KSAI run only for people who can write to the repository by @bartsmykla in #10578
• fix: Environment schema git export order issue by @cwangsmv in #10580
• chore: bump dependencies by @kwburns-kong in #10444
• fix: validate paths stay within their intended base directory by @kwburns-kong in #10443
• chore: bump app version to 13.3.1 by @insomnia-infra in #10579
• feat(import): paste a cURL with no editable focus to start the import flow by @ZxBing0066 in #10566
• chore(ui): remove unreachable ImportModal instances by @ZxBing0066 in #10590
• fix: regenerate document ids on project storage conversion by @ZxBing0066 in #10565
• feat: change data model to support confidential control by @CurryYangxx in #10479
• feat: Migrate mock-server and mock-route zod schema and type definitions by @cwangsmv in #10520
• test(INS-3783): cover cookie id stability across Set-Cookie responses by @yaoweiprc in #10592
• feat: show variable source in live preview and hover tooltip by @ZxBing0066 in #10583
• fix(project-modal): close modal on redirect by comparing pathname by @bobqiu-kong in #10593
• feat: Migrate mcp request and related model types using zod by @cwangsmv in #10526
• feat: Implement UX for marking environments as confidential by @CurryYangxx in #10480
• fix: Warn when a Git Sync change cannot be discarded [INS-3830] by @yaoweiprc in #10585
• fix: script corrupt vault into plaintext by @CurryYangxx in #10601
• feat: Migrate collection and document workspace zod schema and type definitions- #10520 by @cwangsmv in #10582
• fix: resolve vault secrets in variable source and address review feedback by @ZxBing0066 in #10608
• feat: Add incompatible fields check for git sync document by @cwangsmv in #10591
• chore(deps): bump dependencies by @kwburns-kong in #10586
• fix: pin kong/release-script docker action to a digest by @kwburns-kong in #10449
• fix：dragging a request to another collection within same project is a… by @xiaodemen in #10612
• fix: dropping on a design is allowed by @xiaodemen in #10613
• chore(deps): bump jsdom and protobuf/connect major dependencies by @kwburns-kong in #10587
• Chore: Bump ai plugin to v1.0.12 and update dependencies by @cwangsmv in #10626
• fix(scripting): allow form-data body updates via script by @ryan-willis in #10576
• fix(mock): strip trailing slash from self-hosted mock server URL [INS-3897] by @yaoweiprc in #10627
• fix: bracket-quote pm variable names that aren't valid identifiers by @cwangsmv in #10604
• feat(Git Diff): Add an entity-level diff engine [1/8] by @yaoweiprc in #10615
• feat: confidential value policy and render engine by @CurryYangxx in #10509
• feat: apply confidential policy to preview surfaces by @CurryYangxx in #10510
• feat: Add incompatible fields check for cloud sync document by @cwangsmv in #10605
• fix: stop restamping ApiSpec.modified on startup and git round-trips by @ZxBing0066 in #10625
• feat: mask confidential value in timeline (http request & script) by @CurryYangxx in #10519
• feat: Add F2 shortcut to rename entity name on sidebar by @cwangsmv in #10614
• feat(Git Diff): Add a read-only Visual diff view [2/8] by @yaoweiprc in #10616
• chore: update undici version by @notjaywu in #10635
• refactor: decouple scripting environment imports by @ZxBing0066 in #10482
• feat(Git Diff): Add Visual diff cards for the remaining entity types [3/8] by @yaoweiprc in #10617
• feat: handle websocket socket.io mcp response by @CurryYangxx in #10589
• feat: support delete shortcut in the sidebar by @ihexxa in #10633
• fix: keep variable source in sync with live preview edits by @ZxBing0066 in #10639
• feat/option toggle prompt by @CurryYangxx in #10607
• feat(Git Diff): Stage and unstage individual entities [4/8] by @yaoweiprc in #10618
• feat: Debug Mode setting that enables the Git commit diagnostic panel [INS-3829] by @yaoweiprc in #10470
• fix: ignore inherited keys when resolving variable source by @ZxBing0066 in #10640
• feat(Git Diff): Discard individual entities and write them as Git Sync exports [5/8] by @yaoweiprc in #10619
• fix/confidential variable by @CurryYangxx in #10629
• feat: Show validation errors for invalid MCP tool/resource/prompt list responses by @cwangsmv in #10554
• fix(Git Diff): No Discard for an added base environment or cookie jar [6/8] by @yaoweiprc in https://github.com/Kong/inso...

Full Changelog: https://github.com/Kong/insomnia/compare/core@13.3.0...core@13.3.1

Full Changelog: https://github.com/Kong/insomnia/compare/core@13.3.0...core@13.3.1-beta.1

What's Changed

• fix(database): emit change notifications on document duplication by @ryan-willis in #10387
• fix: JSON format vault config is showing in the tag when edit credential by @cwangsmv in #10384
• fix(codemirror): guard unsound TextMarker assertion in nunjucks-tags drag handler by @pavkout in #10379
• fix: pressing Enter within a modal triggers primary CTA properly by @fiosman in #10381
• fix: revert electron-builder to previous version to fix macOS build by @godfrzero in #10394
• feat: tooltip for disabled generate collection button [INS-3502] by @ryan-willis in #10396
• PoC: opt-in QuickJS sandbox for pre-request/after-response scripts by @jackkav in #10382
• fix(build): macos latest by @notjaywu in #10400
• fix(ci): skip circular refs PR comment when count is unchanged by @jackkav in #10391
• feat(quickjs): insomnia.sendRequest() bridge for the QuickJS script sandbox by @jackkav in #10392
• fix(release): resolve previous tag by semver precedence by @kwburns-kong in #10408
• fix: apply proxy setting to SSE requests by @ryan-willis in #10413
• fix: default project selection on import modal by @ryan-willis in #10414
• chore: templating, var and scripting tests by @shelby-moore in #10275
• refactor: storage rule fetching by @CurryYangxx in #10409
• refactor: learning feature fetching by @CurryYangxx in #10421
• fix(ui): prevent button label shrunk by @notjaywu in #10423
• fix(ui): fix button alignment by @notjaywu in #10285
• fix(smoke-test): implement graceful close for WebSocket connections by @bobqiu-kong in #10417
• chore(settings): remove dead Write() permission rule by @ZxBing0066 in #10424
• fix: Plugin action no loaded in request/requestGroup context menu when right click by @cwangsmv in #10416
• Fix: Secret type environment input hanging and data update issue by @cwangsmv in #10420
• fix: change tanstack query option by @CurryYangxx in #10426
• fix(ui): re-render url bar templates on project environment switch by @ZxBing0066 in #10425
• fix(git): fix folder naming, relocation, and resurrection bugs for git-synced projects by @pavkout in #10428
• fix: prevent overwritting by empty content by @CurryYangxx in #10411
• fix(smoke-test): handle stale overlay click handling in project page interactions by @bobqiu-kong in #10415
• fix(ui): wrap runner message by @notjaywu in #10434
• refactor: remote files fetching by @CurryYangxx in #10429
• fix(git): don't write empty git author identity when opening local git projects by @ZxBing0066 in #10430
• fix(test): improve stability of git local repo tests by @bobqiu-kong in #10433
• fix(test): impove test stability of git repository relocation tests by @bobqiu-kong in #10436
• fix(ui): restore h-fit on cookies modal by @ZxBing0066 in #10437
• Fix: Use optimistic update when toggle request folder in sidebar by @cwangsmv in #10432
• Update localstorage key by @yaoweiprc in #10401
• chore: support dynamic port for dev by @ZxBing0066 in #10308
• refactor: move organization to service layer by @xiaodemen in #10390
• chore: bump app version to 13.2.0 by @insomnia-infra in #10439
• Refactor/vcs by @xiaodemen in #10427
• fix(cloud-sync): surface stale/reverted staged changes instead of silently committing them [INS-3520] by @yaoweiprc in #10438
• fix(network): send fully rendered request for SSE connections by @ZxBing0066 in #10445
• fix(main): compare full origin, not string prefix, for renderer nav guard by @kwburns-kong in #10442
• fix(test): improve cloud sync tests to handle asynchronous loading and increase timeout by @bobqiu-kong in #10440
• fix: Expand folder issue when no request group meta found by @cwangsmv in #10453
• docs: add a skill file for scripting feature bug fix by @ihexxa in #10418
• fix(mock-response-extractor): await patchMockRoute and navigate to updated route [INS-3470] by @yaoweiprc in #10397
• fix: initial entry by @CurryYangxx in #10456
• fix: use unique id for remote files in command search to avoid the list jammed by @ZxBing0066 in #10461
• fix: set persist-credentials: false on non-pushing actions/checkout steps by @kwburns-kong in #10447
• chore: fix playwright port detect by @ZxBing0066 in #10462
• feat: e2e re-run only fails by @amy-kong-hq in #10457
• fix(ui): re-render pane templates on project environment switch by @ZxBing0066 in #10467
• One VCS instance per workspace [INS-2026] by @yaoweiprc in #10458
• feat(ui): split environment picker into project/collection dropdowns by @ZxBing0066 in #10446
• fix(ui): hide project environment picker in scratchpad by @ZxBing0066 in #10472
• fix(git): enable bidirectional sync for local projects without a remote by @CurryYangxx in #10471
• chore: add KSAI workflow by @ZxBing0066 in #10474
• fix: prevent environment blank row focus race by @ZxBing0066 in #10473
• feat(SSE): add stream summary extraction for SSE responses by @ZxBing0066 in #10455
• chore: remove KSAI workflow by @ZxBing0066 in #10478
• refactor: account data fetching by @CurryYangxx in #10463
• fix(autocomplete): render autocomplete hint rows via DOM APIs instead of innerHTML [INS-3686] by @kwburns-kong in #10465
• feat: Apply proxy to plugin if only when proxyScope is all by @cwangsmv in #10484
• feat(sync): allow deleting unsynced remote files from the project dashboard [INS-2026] by @yaoweiprc in #10477
• fix: Update the vault tag id when paste the vault tag by @cwangsmv in #10402
• fix: prevent environment rename freeze caused by keyboard drag session by @ZxBing0066 in #10486
• fix: Update vault plugin version and trust proxy scope settings by @cwangsmv in #10487
• feat: Merge document and collection workspace and add settings to hide legacy test by @cwangsmv in #10460
• chore: replace madge circular-reference check with dependency-cruiser by @ZxBing0066 in #10468
• test: mitigate sidebar-focus-onboarding flaky timeout with reload fallback by @bobqiu-kong in #10489
• feat: V13.3 onboarding content by @cwangsmv in #10476
• fix: fix sidebar drop indicator and actual landing spot by @Ali-Sab in #10435
• feat: open Import modal with a selected tab via bare deep-link params by @ZxBing0066 in #10488
• Fix: onboarding content still show after first view by @cwangsmv in #10493
• fix(INS-3620): tag cookie assignment origin by @kwburns-kong in #10475
• fix: New Collection API issues and UI adjustment by @cwangsmv in #10503
• fix: Change behavior to show test tab in collection view by @cwangsmv in #10504
• test: fix sidebar-focus-onboarding flake by waiting on the focus header by @ZxBing0066 in #10507
• feat(konnect): move Konnect projects into a global Control Planes organization [INS-3148] by @yaoweiprc in #10315

New Contributors

• @bobqiu-kong made their first contribution in #10417
• @amy-kong-hq made their first contribution in #10457

Full Changelog: https://github.com/Kong/insomnia/compare/core@13.2.0...core@13.3.0

Full Changelog: https://github.com/Kong/insomnia/compare/core@13.3.0-beta.0...core@13.3.0-beta.1

What's Changed

• fix(database): emit change notifications on document duplication by @ryan-willis in #10387
• fix: JSON format vault config is showing in the tag when edit credential by @cwangsmv in #10384
• fix(codemirror): guard unsound TextMarker assertion in nunjucks-tags drag handler by @pavkout in #10379
• fix: pressing Enter within a modal triggers primary CTA properly by @fiosman in #10381
• fix: revert electron-builder to previous version to fix macOS build by @godfrzero in #10394
• feat: tooltip for disabled generate collection button [INS-3502] by @ryan-willis in #10396
• PoC: opt-in QuickJS sandbox for pre-request/after-response scripts by @jackkav in #10382
• fix(build): macos latest by @notjaywu in #10400
• fix(ci): skip circular refs PR comment when count is unchanged by @jackkav in #10391
• feat(quickjs): insomnia.sendRequest() bridge for the QuickJS script sandbox by @jackkav in #10392
• fix(release): resolve previous tag by semver precedence by @kwburns-kong in #10408
• fix: apply proxy setting to SSE requests by @ryan-willis in #10413
• fix: default project selection on import modal by @ryan-willis in #10414
• chore: templating, var and scripting tests by @shelby-moore in #10275
• refactor: storage rule fetching by @CurryYangxx in #10409
• refactor: learning feature fetching by @CurryYangxx in #10421
• fix(ui): prevent button label shrunk by @notjaywu in #10423
• fix(ui): fix button alignment by @notjaywu in #10285
• fix(smoke-test): implement graceful close for WebSocket connections by @bobqiu-kong in #10417
• chore(settings): remove dead Write() permission rule by @ZxBing0066 in #10424
• fix: Plugin action no loaded in request/requestGroup context menu when right click by @cwangsmv in #10416
• Fix: Secret type environment input hanging and data update issue by @cwangsmv in #10420
• fix: change tanstack query option by @CurryYangxx in #10426
• fix(ui): re-render url bar templates on project environment switch by @ZxBing0066 in #10425
• fix(git): fix folder naming, relocation, and resurrection bugs for git-synced projects by @pavkout in #10428
• fix: prevent overwritting by empty content by @CurryYangxx in #10411
• fix(smoke-test): handle stale overlay click handling in project page interactions by @bobqiu-kong in #10415
• fix(ui): wrap runner message by @notjaywu in #10434
• refactor: remote files fetching by @CurryYangxx in #10429
• fix(git): don't write empty git author identity when opening local git projects by @ZxBing0066 in #10430
• fix(test): improve stability of git local repo tests by @bobqiu-kong in #10433
• fix(test): impove test stability of git repository relocation tests by @bobqiu-kong in #10436
• fix(ui): restore h-fit on cookies modal by @ZxBing0066 in #10437
• Fix: Use optimistic update when toggle request folder in sidebar by @cwangsmv in #10432
• Update localstorage key by @yaoweiprc in #10401
• chore: support dynamic port for dev by @ZxBing0066 in #10308
• refactor: move organization to service layer by @xiaodemen in #10390
• chore: bump app version to 13.2.0 by @insomnia-infra in #10439
• Refactor/vcs by @xiaodemen in #10427
• fix(cloud-sync): surface stale/reverted staged changes instead of silently committing them [INS-3520] by @yaoweiprc in #10438
• fix(network): send fully rendered request for SSE connections by @ZxBing0066 in #10445
• fix(main): compare full origin, not string prefix, for renderer nav guard by @kwburns-kong in #10442
• fix(test): improve cloud sync tests to handle asynchronous loading and increase timeout by @bobqiu-kong in #10440
• fix: Expand folder issue when no request group meta found by @cwangsmv in #10453
• docs: add a skill file for scripting feature bug fix by @ihexxa in #10418
• fix(mock-response-extractor): await patchMockRoute and navigate to updated route [INS-3470] by @yaoweiprc in #10397
• fix: initial entry by @CurryYangxx in #10456
• fix: use unique id for remote files in command search to avoid the list jammed by @ZxBing0066 in #10461
• fix: set persist-credentials: false on non-pushing actions/checkout steps by @kwburns-kong in #10447
• chore: fix playwright port detect by @ZxBing0066 in #10462
• feat: e2e re-run only fails by @amy-kong-hq in #10457
• fix(ui): re-render pane templates on project environment switch by @ZxBing0066 in #10467
• One VCS instance per workspace [INS-2026] by @yaoweiprc in #10458
• feat(ui): split environment picker into project/collection dropdowns by @ZxBing0066 in #10446
• fix(ui): hide project environment picker in scratchpad by @ZxBing0066 in #10472
• fix(git): enable bidirectional sync for local projects without a remote by @CurryYangxx in #10471
• chore: add KSAI workflow by @ZxBing0066 in #10474
• fix: prevent environment blank row focus race by @ZxBing0066 in #10473
• feat(SSE): add stream summary extraction for SSE responses by @ZxBing0066 in #10455
• chore: remove KSAI workflow by @ZxBing0066 in #10478
• refactor: account data fetching by @CurryYangxx in #10463
• fix(autocomplete): render autocomplete hint rows via DOM APIs instead of innerHTML [INS-3686] by @kwburns-kong in #10465
• feat: Apply proxy to plugin if only when proxyScope is all by @cwangsmv in #10484
• feat(sync): allow deleting unsynced remote files from the project dashboard [INS-2026] by @yaoweiprc in #10477
• fix: Update the vault tag id when paste the vault tag by @cwangsmv in #10402
• fix: prevent environment rename freeze caused by keyboard drag session by @ZxBing0066 in #10486
• fix: Update vault plugin version and trust proxy scope settings by @cwangsmv in #10487
• feat: Merge document and collection workspace and add settings to hide legacy test by @cwangsmv in #10460
• chore: replace madge circular-reference check with dependency-cruiser by @ZxBing0066 in #10468
• test: mitigate sidebar-focus-onboarding flaky timeout with reload fallback by @bobqiu-kong in #10489
• feat: V13.3 onboarding content by @cwangsmv in #10476
• fix: fix sidebar drop indicator and actual landing spot by @Ali-Sab in #10435
• feat: open Import modal with a selected tab via bare deep-link params by @ZxBing0066 in #10488
• Fix: onboarding content still show after first view by @cwangsmv in #10493
• fix(INS-3620): tag cookie assignment origin by @kwburns-kong in #10475
• fix: New Collection API issues and UI adjustment by @cwangsmv in #10503
• fix: Change behavior to show test tab in collection view by @cwangsmv in #10504
• test: fix sidebar-focus-onboarding flake by waiting on the focus header by @ZxBing0066 in #10507
• feat(konnect): move Konnect projects into a global Control Planes organization [INS-3148] by @yaoweiprc in #10315

New Contributors

• @bobqiu-kong made their first contribution in #10417
• @amy-kong-hq made their first contribution in #10457

Full Changelog: https://github.com/Kong/insomnia/compare/core@13.2.0...core@13.3.0-beta.0

What's Changed

• fix: Previous response will show after a request is sent successfully by @cwangsmv in #10239
• fix(INS-2933): let empty-input request creation and re-focus the first-request input on project switch by @pavkout in #10240
• fix: button size by @notjaywu in #10241
• feat(templating): capability-aware sandbox context construction (C2) by @jackkav in #10226
• feat(INS-2933): add request_url_length to Request Created analytics event by @pavkout in #10243
• chore: enable retries for playwright smoke tests by @fiosman in #10234
• fix: don't count auto-derived file name as a changed field in new workspace modal by @fiosman in #10246
• fix: handle lint process error by terminating it and resetting the reference by @ZxBing0066 in #9871
• feat(templating): surface profiles + ceiling + migration warning (P1) by @jackkav in #10242
• fix: cloud sync test flaky by @CurryYangxx in #10238
• Feat/basic components m0 by @CurryYangxx in #10230
• chore: emit and upload junit test results per shard by @fiosman in #10253
• fix(import): always show collection picker by @ryan-willis in #10262
• feat(undo): broaden undo-history persistence via a stable historyKey by @jackkav in #10233
• feat: add a tooltip for show/hide secret on auth tab by @shelby-moore in #10263
• feat(templating): vetted npm libraries in the sandbox — uuid + ajv (M3) by @jackkav in #10244
• fix: stop reusing blank-row ids in key-value editors [INS-2598] by @pavkout in #10260
• fix: restore visible keyboard focus indicators across the app by @pavkout in #10268
• fix: route v3 spaces SDK through proxy-aware fetch by @Ali-Sab in #10265
• fix(first-request): polish input UI and fix cURL method detection [INS-3055] by @pavkout in #10267
• feat: show number of matches when filtering a JSON response by @fiosman in #10261
• fix: deep-link mcp workspace matching by @ryan-willis in #10269
• perf: rewrite command palette search to eliminate UI freezes and stale results by @ZxBing0066 in #10257
• feat(templating): multi-file plugins via in-sandbox module map (M4) by @jackkav in #10256
• fix: collection runner ux by @ryan-willis in #10271
• fix(sidebar): deduplicate repeated request IDs by @ryan-willis in #10179
• fix: support prompt tag in main process by @CurryYangxx in #10251
• fix: guard against infinite loops by @ryan-willis in #10281
• fix: prevent blur-flush from persisting empty rows or re-enabling disabled rows in EnvironmentKVEditor by @pavkout in #10278
• fix(first-request): remove double focus outline and stop cURL method sync while typing by @pavkout in #10287
• fix(first-request): add spacing below quick actions/examples row (treatment A) by @pavkout in #10288
• feat(templating): (L1) discover user-plugin exports in the sandbox instead of nodeRequire (PR 9) by @jackkav in #10276
• feat(templating): (H1) route user-plugin request hooks through the sandbox (PR 10a) by @jackkav in #10279
• fix: workspace import targeting by @ryan-willis in #10291
• fix: show full value on hover for truncated single-line fields by @fiosman in #10273
• chore: bump app version to 13.1.0 by @insomnia-infra in #10296
• feat(templating): (H1) route user-plugin response hooks through the sandbox (PR 10b) by @jackkav in #10286
• fix: Prevent redundant backend requests by @xiaodemen in #10284
• fix: Add unique ids for cloud sync remote files by @cwangsmv in #10303
• feat: Add a new option to disable launch browser automatically for MCP oauth workflow by @cwangsmv in #10266
• feat: Enhance response viewer behavior when receives large response content by @cwangsmv in #9740
• feat(undo): preserve editor undo history across tab changes by @jackkav in #10299
• fix(smoke-test): add missing /v3/users/me/onboarding mock endpoint by @ZxBing0066 in #10309
• chore: bump node-libcurl for electron 43 and windows arm support [INS-3111] by @ryan-willis in #10305
• feat(templating): (A1) route user-plugin actions through the sandbox by @jackkav in #10293
• fix: consolidate user-agent disable logic by @ryan-willis in #10310
• chore: hide 'generate-docs' command and skip hidden commands in documentation generation by @ZxBing0066 in #10314
• fix(templating): re-verify symlink containment on response.setBody writes by @kwburns-kong in #10301
• feat: surface OAuth2 request logs in Console timeline (INS-1284) by @yaoweiprc in #10250
• fix(ci): resolve cloudsmith authz error by @notjaywu in #10321
• fix: Add textValue to method selector to avoid dev build warnings by @cwangsmv in #10323
• chore(ci): add step-security/harden-runner in audit mode by @kwburns-kong in #10300
• fix(script): setting invalid value to environment value should be rejected - INS-2957 by @ihexxa in #10249
• feat(templating): (T1) flip trust model — pluginSandboxEnabled + per-plugin elevated opt-in by @jackkav in #10318
• feat: Persistent link of vault tag with local credential item by @cwangsmv in #10221
• feat(templating): (S1) capability & bridge-handler scoping audit by @jackkav in #10320
• feat: Add app data service and enhance the sidebar cache logic by @cwangsmv in #10333
• fix: e2e smoke test flaky by @cwangsmv in #10348
• fix(plugins): missing plugins (#10295) INS-3364 by @kwburns-kong in #10317
• fix(templating): resolve the QuickJS sandbox engine module before any plugin's code runs by @kwburns-kong in #10345
• refactor: org features fetching by @CurryYangxx in #10354
• fix: Plugin actions is missing in the workspace dropdown on sidebar- #10356 by @cwangsmv in #10358
• fix: large responses now download correctly [INS-2365] by @arora-r in #9807
• feat: add enterprise user activity events for request/document actions by @fiosman in #10337
• fix: prevent Git credential overwrite when authorizing a second account of the same provider [INS-3035] by @pavkout in #10316
• feat(git): name app-managed git folders after their project instead of a bare hex id by @pavkout in #10349
• feat: add sidebar collection focus mode (INS-2912) by @pavkout in #10324
• fix: remove horizontal scrollbar in Plugins settings tab [INS-3490] by @pavkout in #10366
• fix: Sidebar data not updated when offline by @cwangsmv in #10369
• Chore: Refine the workspace data hook and add a pending state for sidebar by @cwangsmv in #10359
• Apply runner filters to requests/iterations as well as tests [INS-3348] by @godfrzero in #10353
• fix: Create workspace below the focus item when created in sidebar by @cwangsmv in #10370
• fix(undo): keep undo history when toggling markdown write/preview and request-script tabs by @jackkav in #10351
• fix(git): recover gracefully when a push fails after a successful commit [INS-3013] by @pavkout in #10372
• feat(settings): add proxyIntegrations option for first-party integrations by @gatzjames in #10363
• fix(script): .response.cookies.toObject() should return an object by @ihexxa in #10307
• fix: Navigation issue when create workspace from shortcut & workspace dropdown issue by @cwangsmv in #10383
• refactor(templating): retire templateTagSandboxEnabled, unify on pluginSandboxEnabled by @jackkav in #10364
• fix(deps): security dependency bumps by @kwburns-kong in https...

Full Changelog: https://github.com/Kong/insomnia/compare/core@13.2.0-beta.0...core@13.2.0-beta.1