7.0.0 (2025-07-28)

Thanks to @ecolinet, @theoforger, @Muntaner, @ashishajr, @patkujawa-wf, @niklasweimann, @alanbondarun, @benkio, @dhth, @verigak, @markphilpot, @lambrospetrou, @aresler, @nfj25, @nwellnhof, @YannickAlex07, @lu-zero, @RaghavSood, @tjbrockmeyer,

Take a tour of this new version here!

Breaking Changes:

• Add replaceRegex filter and fix replace filter to not take regex #4018

Enhancements:

• Add query for HTTP redirects #922
• Add urlQueryParam filter #2199
• Show curl command when error format option is set to long #2226
• Add option to configure max-time per request #3162
• Add date comparison predicates #3480
• Add pinnedpubkey cli option #3563
• Add base64 url safe encode and decode filters #3840
• parse curl's --cookie flag #3877
• Show hurl --help with color #3882

Bugs Fixed:

• Fix incorrect curl command for POST redirect #2797
• Fix hurlfmt to disallow invalid header argument in curl command #3668
• Parse verbose flag in curl command #3760
• Keep secret value forever, even if a secret variable override an existing one #3898
• Fix zsh completion #3938
• Parse cookie Expires date attribute with '-' #3956
• Replace deprecated libxml2 initGenericErrorDefaultFunc with xmlSetGenericErrorFunc #3975
• HTML report: fix span for lines in comment. #4002

Security Issues Fixed:

• Fix JavaScript injection in HTML report through regex literal #4125