# What changed in httpsnippet

> 10 changes in httpsnippet 2 to 3 from its official release notes, upgrade guides and advisories: 2 breaking, 2 security, 2 new APIs and options. Each one cited. Sources checked 2026-10-23. HTML: https://unstale.sh/npm/httpsnippet/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## httpsnippet 3

### Security

- Fixes critical and high vulnerabilities. (3.0.10) — [release notes](https://github.com/Kong/httpsnippet/releases/tag/v3.0.10)

## httpsnippet 2

### Breaking changes

- Support for Node versions below 10 was dropped. (2.0.0) — [release notes](https://github.com/Kong/httpsnippet/releases/tag/2.0.0)
- The `qs` option was removed from node-fetch. (2.0.0) — [release notes](https://github.com/Kong/httpsnippet/releases/tag/2.0.0)

### Security

- Security fixes were made via Dependabot. (2.0.0) — [release notes](https://github.com/Kong/httpsnippet/releases/tag/2.0.0)

### New APIs and options

- Added the `--globoff` option to shell_curl. (2.0.0) — [release notes](https://github.com/Kong/httpsnippet/releases/tag/2.0.0)
- Options can now be passed through to the target. (2.0.0) — [release notes](https://github.com/Kong/httpsnippet/releases/tag/2.0.0)

### Fixes and other changes

- Removed an unnecessary boundary from curl output. (2.0.0) — [release notes](https://github.com/Kong/httpsnippet/releases/tag/2.0.0)
- Form URL-encoded data is now properly wrapped in the fetch target. (2.0.0) — [release notes](https://github.com/Kong/httpsnippet/releases/tag/2.0.0)
- FormData is now properly applied to the JavaScript fetch target. (2.0.0) — [release notes](https://github.com/Kong/httpsnippet/releases/tag/2.0.0)
- Generated JavaScript fetch requests were matched to node-fetch. (2.0.0) — [release notes](https://github.com/Kong/httpsnippet/releases/tag/2.0.0)