13.4.0 📦

What's Changed

• fix(INS-3850): revalidate a project's old organization cache when it moves parents by @yaoweiprc in #10513
• fix(INS-3850): re-check Konnect organization visibility before restoring it on cold start by @yaoweiprc in #10518
• fix: One line editor can enter new line issue by @cwangsmv in #10514
• fix(INS-3836): show the Konnect-moved notice only after a migration conflict is resolved by @yaoweiprc in #10521
• fix: Both spec and collection should allow import test suites in git sync by @cwangsmv in #10524
• Fix: Do not flush on blur on one-line-editor if it is read-only by @cwangsmv in #10534
• fix(sidebar): don't crash the collection filter on non-string doc fields by @ZxBing0066 in #10525
• fix(event-stream): only read event shaped lines from the event log by @ZxBing0066 in #10522
• chore(sandbox): disable quick.js sandbox temporarily by @ihexxa in #10536
• Fix: Add loading indicator and avoid unmount editor to update tag for tag editor by @cwangsmv in #10537
• fix(mcp): correct Add/Delete Item for nested object params by @CurryYangxx in #10546
• Chore: bump vault plugin version by @cwangsmv in #10547
• fix(environment-editor): treat empty JSON content as invalid JSON by @ZxBing0066 in #10540
• fix(INS-3507): restrict git-sync and legacy-folder writes to canSync model types by @kwburns-kong in #10531
• Change Konnect migration wording. by @yaoweiprc in #10550
• feat(export): add Export OpenAPI Spec to the collection context menu by @ZxBing0066 in #10538
• fix(insomnia): run plugin yarn info in a controlled temp dir by @Tyagiquamar in #10505
• fix(script): use liquid sync method in render - INS-3789 by @ihexxa in #10523
• chore(ci): make the cycle check runnable on Windows and report drift honestly [INS-3904] by @yaoweiprc in #10548
• refactor(sidebar): own the project shell in one layout route [INS-3903] by @yaoweiprc in #10541
• chore: bump app version to 13.3.0 by @insomnia-infra in #10552
• ci(ksai): add KSAI through the public mirror by @bartsmykla in #10551
• fix: constrain file template tag by @kwburns-kong in #10528
• fix: parse quoted CSV fields in collection runner data by @ZxBing0066 in #10557
• fix: de-flake import deep-link cURL auto-scan smoke test by @ZxBing0066 in #10555
• fix(toast): stop toast animations from swallowing clicks by @ZxBing0066 in #10553
• fix(key-value-editor): stop ListBox typeahead from swallowing typed spaces by @ZxBing0066 in #10563
• feat: Add base model schema and deep strict utility by @cwangsmv in #10515
• feat: Unify and migrate environment model to use Zod schema and infer type by @cwangsmv in #10516
• chore: bump @faker-js/faker@9.7.0 to 10.6.0 by @kwburns-kong in #10569
• ci(ksai): start a KSAI run only for people who can write to the repository by @bartsmykla in #10578
• fix: Environment schema git export order issue by @cwangsmv in #10580
• chore: bump dependencies by @kwburns-kong in #10444
• fix: validate paths stay within their intended base directory by @kwburns-kong in #10443
• chore: bump app version to 13.3.1 by @insomnia-infra in #10579
• feat(import): paste a cURL with no editable focus to start the import flow by @ZxBing0066 in #10566
• chore(ui): remove unreachable ImportModal instances by @ZxBing0066 in #10590
• fix: regenerate document ids on project storage conversion by @ZxBing0066 in #10565
• feat: change data model to support confidential control by @CurryYangxx in #10479
• feat: Migrate mock-server and mock-route zod schema and type definitions by @cwangsmv in #10520
• test(INS-3783): cover cookie id stability across Set-Cookie responses by @yaoweiprc in #10592
• feat: show variable source in live preview and hover tooltip by @ZxBing0066 in #10583
• fix(project-modal): close modal on redirect by comparing pathname by @bobqiu-kong in #10593
• feat: Migrate mcp request and related model types using zod by @cwangsmv in #10526
• feat: Implement UX for marking environments as confidential by @CurryYangxx in #10480
• fix: Warn when a Git Sync change cannot be discarded [INS-3830] by @yaoweiprc in #10585
• fix: script corrupt vault into plaintext by @CurryYangxx in #10601
• feat: Migrate collection and document workspace zod schema and type definitions- #10520 by @cwangsmv in #10582
• fix: resolve vault secrets in variable source and address review feedback by @ZxBing0066 in #10608
• feat: Add incompatible fields check for git sync document by @cwangsmv in #10591
• chore(deps): bump dependencies by @kwburns-kong in #10586
• fix: pin kong/release-script docker action to a digest by @kwburns-kong in #10449
• fix：dragging a request to another collection within same project is a… by @xiaodemen in #10612
• fix: dropping on a design is allowed by @xiaodemen in #10613
• chore(deps): bump jsdom and protobuf/connect major dependencies by @kwburns-kong in #10587
• Chore: Bump ai plugin to v1.0.12 and update dependencies by @cwangsmv in #10626
• fix(scripting): allow form-data body updates via script by @ryan-willis in #10576
• fix(mock): strip trailing slash from self-hosted mock server URL [INS-3897] by @yaoweiprc in #10627
• fix: bracket-quote pm variable names that aren't valid identifiers by @cwangsmv in #10604
• feat(Git Diff): Add an entity-level diff engine [1/8] by @yaoweiprc in #10615
• feat: confidential value policy and render engine by @CurryYangxx in #10509
• feat: apply confidential policy to preview surfaces by @CurryYangxx in #10510
• feat: Add incompatible fields check for cloud sync document by @cwangsmv in #10605
• fix: stop restamping ApiSpec.modified on startup and git round-trips by @ZxBing0066 in #10625
• feat: mask confidential value in timeline (http request & script) by @CurryYangxx in #10519
• feat: Add F2 shortcut to rename entity name on sidebar by @cwangsmv in #10614
• feat(Git Diff): Add a read-only Visual diff view [2/8] by @yaoweiprc in #10616
• chore: update undici version by @notjaywu in #10635
• refactor: decouple scripting environment imports by @ZxBing0066 in #10482
• feat(Git Diff): Add Visual diff cards for the remaining entity types [3/8] by @yaoweiprc in #10617
• feat: handle websocket socket.io mcp response by @CurryYangxx in #10589
• feat: support delete shortcut in the sidebar by @ihexxa in #10633
• fix: keep variable source in sync with live preview edits by @ZxBing0066 in #10639
• feat/option toggle prompt by @CurryYangxx in #10607
• feat(Git Diff): Stage and unstage individual entities [4/8] by @yaoweiprc in #10618
• feat: Debug Mode setting that enables the Git commit diagnostic panel [INS-3829] by @yaoweiprc in #10470
• fix: ignore inherited keys when resolving variable source by @ZxBing0066 in #10640
• feat(Git Diff): Discard individual entities and write them as Git Sync exports [5/8] by @yaoweiprc in #10619
• fix/confidential variable by @CurryYangxx in #10629
• feat: Show validation errors for invalid MCP tool/resource/prompt list responses by @cwangsmv in #10554
• fix(Git Diff): No Discard for an added base environment or cookie jar [6/8] by @yaoweiprc in #10637
• fix(Git Diff): Don't let stage / unstage / discard actions overlap [7/8] by @yaoweiprc in #10638
• fix(vul): update grpc reflection deps by @notjaywu in #10642
• fix: keep confidential flags through v5 export/import and Git Sync by @CurryYangxx in #10632
• Fix/socket io&websocket payload in export by @CurryYangxx in #10634
• fix(sidebar): scope the del shortcut without backspace by @ihexxa in #10644
• feat(Git Diff): Warn when a file isn't in the format Insomnia writes [8/8] by @yaoweiprc in #10641
• fix(one-line-editor): after clicking add button, focus should be on the new one line editor by @ihexxa in #10631
• fix: MCP connection issue caused by undici upgrade by @cwangsmv in #10645
• fix(ci): work around macOS stapling issue in release build by @notjaywu in #10647
• Chore: Add unite test for MCP streamable http request by @cwangsmv in #10648
• fix: attribute project environment page sources to the project by @ZxBing0066 in #10649
• fix: Loose the id meta check for certain request models by @cwangsmv in #10656
• fix: keep variable source tooltip interactive in the environments modal by @ZxBing0066 in #10650
• fix: MCP primitive UI issue when returning item with same name by @cwangsmv in #10655
• fix: closing modal when deleting workspace by @ihexxa in #10657
• fix: Hashcorp vault form to support the new credential pattern by @cwangsmv in #10658

New Contributors

• @Tyagiquamar made their first contribution in #10505
• @bartsmykla made their first contribution in #10551

Full Changelog: https://github.com/Kong/insomnia/compare/core@13.3.1...core@13.4.0