HubSpot Developer Changelog

XSS Sanitization for CRM properties containing HTML

Announced: April 25, 2024

Beginning on July 29th, updates to rich text CRM properties will have any HTML sanitized before the value is stored in HubSpot.

Advanced auth and scope settings for public apps

Live: October 21, 2024

Today we're releasing an update to the auth settings for public apps. This update will add new options for choosing the scopes used by your app. The new settings are currently optional, but they will be required beginning on October 21.

March 2024 Rollup

Announced: April 1, 2024

March brings new HubL features for the HubSpot CMS, pinning engagements using the CRM API, new reporting for associations, expanded limits for CRM exports, and a new component for custom UI extensions.

Restricting the inboxId query parameter in the Beta Conversations API

Live: January 31, 2024

We'll be limiting requests to the GET /conversations/v3/conversations/threads endpoint to allow only a single inboxId query parameter.

Changes to primary labels for HubSpot-defined association labels

Announced: December 15, 2023

We're changing the labels for some of the HubSpot-defined associations between companies and other CRM objects.

Updated recommendations for storing OAuth access tokens

Announced: December 15, 2023

We're updating our recommendation for storing access tokens to allow tokens to be at least 512 characters in length.

Update to Forms API v3 and the lifecycle stage

Announced: December 12, 2023

This post serves as an update to the previous post on the lifecycle stage in forms. This post covers the details for the Forms API v3, which were missing from the previous post.

Increasing the size of contact record IDs

Announced: December 7, 2023

Beginning in March 2024, we'll be updating the system that generates contact record IDs. This will affect the id for the v3 Contacts API, the vid for the legacy Contacts API, and the hs_object_id property returned with either API.

October 2023 Rollup

Announced: October 31, 2023

October brings us webhooks for private apps, multiple updates to the HubSpot CMS, and updates for UI Extensions using React.

New permission requirements for installing public apps

Announced: October 4, 2023

What's changing? Beginning on Monday, October 16th, the App Marketplace Access permission will be required for the first install of any public app. This change will affect any HubSpot user installing any public app, when the app has not been...

Upcoming Sunset: Growth default theme for the HubSpot CMS

Live: March 15, 2025

What’s changing Starting on March 15, 2025, the default CMS Growth theme will no longer be available for new HubSpot portals. After this date, existing HubSpot portals will retain access to the Growth theme but will not receive any further features...

Reminder: Breaking Change for Enhanced Validations for Non-String Properties in HubSpot's CRMObject APIs

Live: April 7, 2025

Days until the change takes effect: 60 days

Breaking Change: Large Export Partitioning and Association Limits for the CRM Export API

Live: April 28, 2025

On April 28th, 2025, we will be updating the CRM Exports API to bring it closer to feature parity with the in-app export tool as well as improve the overall performance of the API allowing for quicker file delivery. Exports that exceed one million...

Breaking Change for DateTime Properties in Marketing Emails

Live: April 16, 2025

Starting April 16th, 2025, any DateTime properties in your HubSpot CRM used as personalization tokens in Marketing Emails will now include both the date and time stored in the property rather than just the date.

Breaking Change: Removed Support for Referencing Custom Object Types by Base Name

Live: April 29, 2025

We are removing the undocumented support for requesting custom object types by their base name (GET/crm/v3/objects/{baseName}) in HubSpot public APIs. All custom object types must be referenced by their unique identifier (object type ID, fully...

Public Beta: Automatic Deactivation of Exposed Tokens

Live: April 7, 2025

To enhance the security of our platform and protect our customers, we are introducing an automatic token deactivation public beta feature on October 8th, 2024, for any HubSpot tokens publicly exposed in GitHub repositories. This update is designed...

Breaking Change: Enhanced Validations for Non-String Properties in HubSpot's CRMObject APIs

Live: April 7, 2025

Starting April 7th, 2025, HubSpot will implement enhanced validations for non-string property values, including enumeration and multi-value enumeration property values submitted via the CRMObject APIs. This change aims to improve data integrity and...

Update: Legacy CTA Sunset

Live: March 31, 2025

Based on community feedback, we have updated our approach to transitioning from Legacy CTAs to the new CTA editor in HubSpot. In Q1 2025, new CTAs cannot be created by the Legacy CTA editor. Below are more details explaining the plan and changes to...

Upcoming Sunset: V1 Contact Lists API

Live: May 30, 2025

What’s changing? The V1 Contact Lists API will sunset on May 30th, 2025. After this date, calls made to the v1 endpoints will no longer function. We're sunsetting the V1 Contact Lists API to focus our development efforts on the improved V3 Lists...

Developer References

Developer Community

App Ecosystem New

Template Marketplace

App Partner Program

Latest Posts

XSS Sanitization for CRM properties containing HTML

Advanced auth and scope settings for public apps

March 2024 Rollup

Restricting the inboxId query parameter in the Beta Conversations API

Changes to primary labels for HubSpot-defined association labels

Updated recommendations for storing OAuth access tokens

Update to Forms API v3 and the lifecycle stage

Increasing the size of contact record IDs

October 2023 Rollup

New permission requirements for installing public apps

Upcoming Sunset: Growth default theme for the HubSpot CMS

Reminder: Breaking Change for Enhanced Validations for Non-String Properties in HubSpot's CRMObject APIs

Breaking Change: Large Export Partitioning and Association Limits for the CRM Export API

Breaking Change for DateTime Properties in Marketing Emails

Breaking Change: Removed Support for Referencing Custom Object Types by Base Name

Public Beta: Automatic Deactivation of Exposed Tokens

Breaking Change: Enhanced Validations for Non-String Properties in HubSpot's CRMObject APIs

Update: Legacy CTA Sunset

Upcoming Sunset: V1 Contact Lists API