Sling 1.1.1

Sling 1.1.1 can tell you when a new version is out, and install it when you say so. It is off until you say yes.

New

• Update check, opt-in. The first time you run 1.1.1, a strip at the top of the window asks whether Sling may check GitHub for a new version. Say no and nothing is ever sent. Say yes and Sling asks api.github.com once a day for the newest release, sending only its version number: nothing about your requests, files or environments. Change your answer, or check by hand, in Settings.
• Installing an update. When a newer version exists, the strip offers Update, Later and Skip this version. Update downloads the installer and checks it against the SHA-256 checksum GitHub publishes (a download that does not match is deleted and never run). If you have unsaved changes, Sling asks about them first, and Cancel leaves everything as it was. Then the installer opens as usual and Sling closes. If another Sling window is open, Sling asks you to close it first, so nothing unsaved in it is lost.
• The installer offers to start Sling on its last page.

Note

Sling 1.1.1 is the first version with the update check, so it has to be installed by hand once. From here on, Sling tells you about new versions itself.

Sling 1.1.2-dev.17 (latest build of master)

The newest build of master, rebuilt on every merge. Unsigned, so SmartScreen
will warn; see the README.

Built from 3781b082fd0b4a162dbea13072935fc3c6e29a56.

For a fixed, reproducible build, use a versioned release instead.

Sling 1.1.0

Sling 1.1.0 is the first release since 1.0.0, and most of what makes Sling pleasant to use arrived in between.

Download Sling-Setup.exe: one installer for Windows 10 and 11, x64 and arm64. It installs for your user only, with no admin prompt.

Highlights

Auth you can see and set up by clicking

• Auth panel (Ctrl+Alt+A) shows which credential the request under the caret sends and where it is declared. Editing it rewrites the header or # @auth lines in your own document.
• Environment editor (Ctrl+E) creates and changes values, including the gitignored http-client.private.env.json, so a token no longer means hand-writing JSON.
• OAuth 2.0 authorization code with PKCE (# @auth oauth2-code), through your own browser and a loopback redirect.
• Tokens survive a restart, encrypted with Windows data protection under your account and scoped per folder and environment.
• A 401 refreshes the token and retries, and both attempts are shown.
• A token chip says which token is in force and how long it has left, and JWT notices warn about an expired token before you send it.

Finding and organising requests

• Quick open (Ctrl+P) searches every request in the folder by collection, file, name, verb and URL.
• Click a request in the rail to show it on its own; All requests brings the file back. Run all still runs the whole file.
• The rail now notices files created or changed outside Sling, and keeps its selection across a refresh.

Safer with files that live in git

• Sling notices when an open file changes on disk and offers Reload, Keep mine or Compare, with a real diff. It will not save over a version you have not seen.
• Every document is bound to the workspace that contains it, so one folder's environments never resolve into another folder's file.
• Picks up where you left off: the last folder, file, caret and pane sizes come back, and the File menu lists recent folders.

A nicer place to work

• Syntax highlighting in the request pane, driven by the same walk the parser does.
• A busy card with a running clock while a request is in flight, so Send visibly does something.
• Diagnostics you can act on: squiggles, a gutter mark, hover text, and a double-click jumps to the line. "Define it" on a missing variable.
• Ctrl+Space completion for directives, headers and variables.
• History, cookies, the import report and Compare open without replacing the response.
• A two-pane request column with a getting-started pane for an empty document, and new icons.

Fixes

• Sling now sends User-Agent: Sling/1.1.0 when a request writes none. GitHub's API, among others, answered 403 without one.
• The auth panel no longer reports a chained token such as {{login.response.body.$.access_token}}, or an @variable from the file, as "not defined".
• The second new file created in a row no longer lands at the workspace root instead of the selected collection.

Heads up

Sling is not code-signed, so Windows SmartScreen will warn you the first time you run the installer.