What Kong/insomnia shipped

This week: fixed iteration data rows cycling in order for runs with more iterations than rows; fixed tab state in e2e app tests; added stable test ids and the insomnia-test Playwright framework with a smoke spec and CI workflow; fixed smoke test trace file names.

This week in Insomnia: fixed collection runs with uploaded CSV or JSON data files so rows cycle in order when iterations exceed rows. Fixed tab state being clobbered by autofocus and route sync in the end-to-end app tests. Added stable test ids to UI controls and introduced the insomnia-test Playwright and Electron end-to-end framework with a single smoke spec and a CI workflow. Also fixed smoke test trace file names that could break artifact upload, and refactored inter-process communication for easier use.

13.4.0 is out. Git-backed project sync now only writes inside the project's workspace folder, even with symlinks. Sync flags are cleared when a project leaves cloud sync, node-forge is bumped for a security fix, and the workspace delete modal closes properly.

Insomnia 13.4.0 is out. Cloning, pulling and syncing a git-backed project can now only write files inside that project's workspace folder, even when the repository contains symlinks or paths that resolve outside it. Stale uncommitted-changes and unpushed-changes flags are cleared after a project leaves cloud sync, so overview cards no longer misreport changes. node-forge was upgraded for a security fix, and the workspace delete modal now closes and calls its deleted callback once. Smaller fixes include a longer snooze option on the scratchpad sign-up tip, a clearer invalid-format message in visual diff, and a variable source tooltip in the environments modal that can be hovered and clicked.

This week in Insomnia: a visual diff view for Git staging with entity-level stage and discard, warnings for hand-edited sync files, confidential values masked across WebSocket, Socket.IO and MCP timelines, and F2 to rename sidebar items.

This week's Insomnia updates focus on Git Sync and protecting secrets. The git staging modal gains a visual diff view with entity-level stage, unstage and discard, and Git Sync now warns when a file isn't in the format Insomnia writes. Confidential values are masked in WebSocket, Socket.IO, MCP and gRPC Stream timelines and stay flagged through v5 export, import and Git Sync. Socket.IO and WebSocket request bodies now survive export. Also included: F2 to rename sidebar items, a Delete shortcut scoped without Backspace, and a fix that strips trailing slashes from self-hosted mock server URLs.

This week: vault secrets no longer get written back as plaintext when scripts run, environment variables can be marked confidential, git sync warns about incompatible documents, and cURL paste now starts an import without focusing a field.

This week in Insomnia: running pre-request or after-response scripts with vault in scripts enabled could replace encrypted secret values in the database with plaintext, and that is fixed. Environment variables gain lock and unlock controls for marking them confidential, backed by data model changes and a setting to hide secret values in preview and console. Git sync now warns when a project contains incompatible documents, shows unrecognized fields in the diff view, and warns when a committed YAML file is not in the format Insomnia generates so discarding changes does not silently fail. Variable hover tooltips show where a value comes from, including vault secrets. Pasting a cURL command with no editable field focused now starts the import flow.

Insomnia 13.3.1 is out. This week: path containment checks for backup, data dir and git fs operations, fixed environment export field order, environment and base models moved to Zod schemas, dependency bumps including a CVE fix.

Insomnia 13.3.1 is out. This week's changes include containment checks in restoreBackup, the data directory IPC handler and the git fs client, so a supplied path cannot resolve outside the directory it is meant to operate in. The environment schema export order issue is fixed, and the environment and base models now use Zod schemas with inferred types, with a utility for deep strict nested schemas. Dependencies were bumped, including faker 10.6.0 which resolves a reported CVE, and a run now starts only for people who can write to the repository.

This week: cookies preserve their source through exports, CSV imports handle quoted fields correctly, spaces stop disappearing in variable editors, and toasts stop blocking clicks.

New fixes in Insomnia: cookie metadata now persists through export/import cycles, CSV parsing respects RFC 4180 quoted fields, the environment variables editor stops eating spaces, toast notifications won't steal clicks, and improved test stability for import features.

Insomnia 13.3.0 is out. Export OpenAPI specs directly from collections, improved environment editor stability, and fixes for git-sync safety and event-stream handling.

Insomnia 13.3.0 is available now. This release adds Export OpenAPI Spec to the collection menu for easier API documentation workflows, converts variable interpolation to sync for better reliability, and fixes several critical issues including git-sync validation and sidebar crashes. Download the latest version to get these improvements.

Insomnia V13.3 ships with Control Planes organization consolidation, improved drag-and-drop sidebar reordering, and fixes for Konnect migration edge cases. Test suite imports in git sync and cleaner cookie handling included.

This week's Insomnia updates focus on consolidating Konnect organization management through the new Control Planes organization, improving the overall workspace structure. V13.3 introduces API Collections merging legacy types, fixes sidebar drag-and-drop precision, and resolves critical Konnect migration issues. Test suite git sync imports and refined cookie handling round out the improvements.