Releasesby GlyphCloudflare Fundamentals - Revamped Member Management UI
As Cloudflare's platform has grown, so has the need for precise, role-based access control. We’ve redesigned the Member Management experience in the Dashboard to help administrators more easily discover, assign, and refine permissions for specific principals.
Also shipped Oct 30, 2025Cloudflare in October 2025 →
Buy credit packs on demand
Starting today, you can purchase credit packs directly from your Netlify Dashboard. Only Team Owners with a credit-based Personal or Pro plan can purchase credit packs.
Workload identity federation
- New: Use workload identity federation ( beta ) for creation of federated OIDC workload identities from third-party providers to authenticate requests to the Tailscale API . New: tailscale-client-go-v2 can use workload identity federation for authentication. New: The Tailscale Terraform provider can use workload identity federation for authentication.
The `cartDiscountCodeUpdate` mutation now requires the `discountCodes` field
As part of the GraphQL Storefront API 2026-01 release , the cartDiscountCodesUpdate mutation now requires the discountCodes argument to be included. Previously, mutation calls without the discountCodes argument were allowed, but would not actually modify the cart in any way.
Tailscale v1.90.5
Linux Fixed: Tailscale SSH no longer hangs for 10s when connecting to tsrecorder . This affected tailnets that use Tailscale SSH recording .
Tailscale container image v1.90.5
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . Note: This version contains no changes except for library updates.
Tailscale Kubernetes operator v1.90.5
A new release of the Tailscale Kubernetes operator is available. For guidance on installing and updating, refer to our installation instructions . New: DNSConfig nameserver supports Pods with IPv6 addresses and will serve AAAA records. New: DNSConfig nameserver supports specifying a replica count for high-availability deployment.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Cloudflare Fundamentals - Introducing email two-factor authentication
Two-factor authentication (2FA) is one of the best ways to protect your account from the risk of account takeover. Cloudflare has offered phishing resistant 2FA options including hardware based keys (for example, a Yubikey) and app based TOTP (time-based one-time password) options which use apps like Google or Microsoft's Authenticator app.
Rules - New TCP-based fields available in Rulesets
Build rules based on TCP transport and latency Cloudflare now provides two new request fields in the Ruleset engine that let you make decisions based on whether a request used TCP and the measured TCP round-trip time between the client and Cloudflare.
WAF Release - 2025-10-30 - Emergency
This week’s release introduces a new detection signature that enhances coverage for a critical vulnerability in Oracle E-Business Suite, tracked as CVE-2025-61884. Key Findings The flaw is easily exploitable and allows an unauthenticated attacker with network access to compromise Oracle Configurator, which can grant access to sensitive resources and...
Workers - Access Workers preview URLs from the Build details page
You can now access preview URLs directly from the build details page, making it easier to test your changes when reviewing builds in the dashboard. What's new A Preview button now appears in the top-right corner of the build details page for successful builds Click it to instantly open the latest preview URL Matches the same experience you're familiar with...
Security Center - Report logo misuse to Cloudflare directly from the Brand Protection dashboard
The Brand Protection logo query dashboard now allows you to use the Report to Cloudflare button to submit an Abuse report directly from the Brand Protection logo queries dashboard. While you could previously report new domains that were impersonating your brand before, now you can do the same for websites found to be using your logo without your permission.
Workers, Durable Objects, Browser Run - Workers WebSocket message size limit increased from 1 MiB to 32 MiB
Workers, including those using Durable Objects and Browser Rendering , may now process WebSocket messages up to 32 MiB in size. Previously, this limit was 1 MiB. This change allows Workers to handle use cases requiring large message sizes, such as processing Chrome Devtools Protocol messages.
Workflows, Workers - Increased Workflows instance and concurrency limits
We've raised the Cloudflare Workflows account-level limits for all accounts on the Workers paid plan : Instance creation rate increased from 100 workflow instances per 10 seconds to 100 instances per second Concurrency limit increased from 4,500 to 10,000 workflow instances per account These increases mean you can create new instances up to 10x faster, and...
Access private hostname applications support all ports/protocols
Cloudflare Access for private hostname applications can now secure traffic on all ports and protocols. Previously, applying Zero Trust policies to private applications required the application to use HTTPS on port 443 and support Server Name Indicator (SNI). This update removes that limitation.