7.0.0 ([2025-07-28)](https://github.com/Orange-OpenSource/hurl/blob/master/CHANGELOG.md#7](https://github.com/Orange-OpenSource/hurl/blob/master/CHANGELOG.md/issues/7).0.0)

Thanks to @ecolinet, @theoforger, @Muntaner, @ashishajr, @patkujawa-wf, @niklasweimann, @alanbondarun, @benkio, @dhth, @verigak, @markphilpot, @lambrospetrou, @aresler, @nfj25, @nwellnhof, @YannickAlex07, @lu-zero, @RaghavSood, @tjbrockmeyer,

Breaking Changes:

• Add replaceRegex filter and fix replace filter to not take regex #4018

Enhancements:

• Add query for HTTP redirects #922
• Add urlQueryParam filter #2199
• Show curl command when error format option is set to long #2226
• Add option to configure max-time per request #3162
• Add date comparison predicates #3480
• Add pinnedpubkey cli option #3563
• Add base64 url safe encode and decode filters #3840
• parse curl's --cookie flag #3877
• Show hurl --help with color #3882
• Add toHex filter #3963
• Add first and last filters #3998
• Remove hex crate dependency #4011
• Small tweaks to --test progress output #4028
• Add support for negative values for nth filter #4050
• Add option to configure pinnedpubkey per request #4084
• Add timeline link on status label in source and run pages #4128
• Support template in nth filter parameter #4152
• Implement predicate isUuid #4179
• Improve captures error messages when filter chain returned no value #4214
• Add --ntlm cli option #4216
• Add --negotiate option #4246

Bugs Fixed:

• Fix incorrect curl command for POST redirect #2797
• Fix hurlfmt to disallow invalid header argument in curl command #3668
• Parse verbose flag in curl command #3760
• Keep secret value forever, even if a secret variable override an existing one #3898
• Fix zsh completion #3938
• Parse cookie Expires date attribute with '-' #3956
• Replace deprecated libxml2 initGenericErrorDefaultFunc with xmlSetGenericErrorFunc #3975
• HTML report: fix span for lines in comment. #4002
• Fix HTML closing tag for line with trailing comment #4017
• Add replaceRegex filter and fix replace filter to not take regex #4018
• Fix request body during redirections #4073
• Fix "variables" token in GraphQL HTML export #4117
• Support negative index in jsonpath #4154

Security Issues Fixed:

• Fix JavaScript injection in HTML report through regex literal #4125