Releasesby GlyphAI Crawl Control - New Robots.txt tab for tracking crawler compliance
AI Crawl Control now includes a Robots.txt tab that provides insights into how AI crawlers interact with your robots.txt files. What's new The Robots.txt tab allows you to: Monitor the health status of robots.txt files across all your hostnames, including HTTP status codes, and identify hostnames that need a robots.txt file.
Also shipped Oct 21, 2025Cloudflare in October 2025 →
AI-Powered User Feedback Summary and Categories in Open Beta
With the new AI-generated Feedback Summary, you’ll see a concise overview of your feedback trends, highlighting 2–3 recurring themes so you can quickly understand what users are saying, without reading every comment.
Next.js 16 is ready to deploy on Netlify
The Next.js 16 release is here and Netlify is ready. Deploy the latest version, including Turbopack, React Compiler, and enhanced caching APIs, with zero configuration.
Enforce Git-based workflows for production deploys
Now you can require all production deploys to go through a Git-based workflow. When enabled in your project settings, this setting prevents: Accidental production publishes from the Netlify CLI, MCP server, or API Promoting Deploy Previews or branch deploys to production through the Netlify UI This ensures that both team members and AI agents follow your...
Favorite data sources
Finding the right data source among dozens of similar options wastes precious time and disrupts your workflow. As Grafana instances grow, data source discovery becomes increasingly frustrating. Favorite data sources solves this with a simple star icon ⭐️ which is available in the data source picker and when editing a data source.
Improved concurrency handling in the Cart AJAX API and Storefront Cart GraphQL API
As of October 10, 2025, the Cart AJAX API and Storefront Cart GQL API now processes simultaneous requests. For example, when sending two cart add requests at the same time, the Cart AJAX API executes both requests. Previously, the Cart AJAX and GraphQL APIs were inconsistent in handling concurrent requests. This sometimes resulted in requests being dropped.
New: Unlisted Product Status
UNLISTED is available as a new product status value in the 2025-10 GraphQL Admin API and REST Admin APIs, as well as in the Webhooks API. The Unlisted status hides products from store search and recommendations (including collections), all sales channels, internet searches and Shopify Catalog , while still allowing access via a direct URL.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Gateway - Schedule DNS policies from the UI
Admins can now create scheduled DNS policies directly from the Zero Trust dashboard, without using the API. You can configure policies to be active during specific, recurring times, such as blocking social media during business hours or gaming sites on school nights.
WAF Release - 2025-10-20
This week’s update introduces an enhanced rule that expands detection coverage for a critical vulnerability in Oracle E-Business Suite. It also improves an existing rule to provide more reliable coverage in request processing.
WAF Release - 2025-10-23 - Emergency
This week highlights enhancements to detection signatures improving coverage for vulnerabilities in Adobe Commerce and Magento Open Source, linked to CVE-2025-54236. Key Findings This vulnerability allows unauthenticated attackers to take over customer accounts through the Commerce REST API and, in certain configurations, may lead to remote code execution.
Workers AI Markdown Conversion: New endpoint to list supported formats
Developers can now programmatically retrieve a list of all file formats supported by the Markdown Conversion utility in Workers AI. You can use the env.AI binding: await env. AI . toMarkdown ().
Workers Preview URL default behavior now matches your workers.dev setting
We have updated the default behavior for Cloudflare Workers Preview URLs . Going forward, if a preview URL setting is not explicitly configured during deployment, its default behavior will automatically match the setting of your workers.dev subdomain .
WAF Release - 2025-10-24 - Emergency
This week’s release introduces a new detection signature that enhances coverage for a critical vulnerability in Windows Server Update Services (WSUS), tracked as CVE-2025-59287. Key Findings The vulnerability allows unauthenticated attackers to potentially achieve remote code execution.
Workers - Automatic resource provisioning for KV, R2, and D1
Previously, if you wanted to develop or deploy a worker with attached resources, you'd have to first manually create the desired resources. Now, if your Wrangler configuration file includes a KV namespace, D1 database, or R2 bucket that does not yet exist on your account, you can develop locally and deploy your application seamlessly, without having to run...
Workers - Build TanStack Start apps with the Cloudflare Vite plugin
The Cloudflare Vite plugin now supports TanStack Start ↗ apps. Get started with new or existing projects. New projects Create a new TanStack Start project that uses the Cloudflare Vite plugin via the create-cloudflare CLI: npm yarn pnpm npm create cloudflare@latest -- my-tanstack-start-app --framework=tanstack-start yarn create cloudflare...