Cloudflare One - New Cloudflare One Navigation and Product Experience
The Zero Trust dashboard and navigation is receiving significant and exciting updates. The dashboard is being restructured to better support common tasks and workflows, and various pages have been moved and consolidated.
Also shipped Nov 17, 2025Cloudflare in November 2025 →
1.143.1 (2025-11-13)
Bug Fixes Deflake WaiterTest ( #2600 ) ( 298c8db ) deps: Update the Java code generator (gapic-generator-java) to 2.64.1 ( b210251 ) Dependencies Remove OpenTelemetry semconv dependency ( #2611 ) ( 240fc37 ) Update actions/checkout action to v5 ( #2592 ) ( 6ca466d ) Update dependency com.google.cloud:google-cloud-bigquery to v2.55.3 ( #2602 ) ( d14106c )...
Add DNS records across teams in your organization
If you have a Netlify Organization, you can now add a DNS record that has a DNS zone from a different team in your Netlify organization. Previously, DNS records could only be added to DNS zones in the Netlify team that managed them, limiting those with Netlify Organizations.
Session Replay – Quality of life updates
We’ve made a few changes to make replays easier to use and share.
Shopify Dev MCP now supports POS UI extensions
The Shopify Dev MCP server now includes support for code generation for POS (Point of Sale) UI extensions . With this update, you can use the Shopify Dev MCP as a virtual pair programmer within your preferred IDE.
astronomer 1.0.1
Changes: 2025-11-17 17:13:25 cb722258: Release 1.0.1 2025-11-14 15:02:20 1277b7be: release 1.0.1-rc4 2025-11-13 23:54:18 29eb9679: Update houston image from 1.0.41 to 1.0.42 and ui image from 1.0.26 to 1.0.27 2025-11-14 08:57:52 a061ee69: update kuiper reloader version 0.1.14 2025-11-13 15:41:57 3f39c025: Fix houston dataplane sync cronjob script 2025-11-13...
More from Cloudflare developer platformEvery Cloudflare developer platform release →
WAF Release - 2025-11-17
This week highlights enhancements to detection signatures improving coverage for vulnerabilities in DELMIA Apriso, linked to CVE-2025-6205. Key Findings This vulnerability allows unauthenticated attackers to gain privileged access to the application. The latest update provides enhanced detection logic for resilient protection against exploitation attempts.
Email security - Adjustment to Final Disposition Column
Adjustment to Final Disposition column The Final Disposition column in Submissions > Team Submissions tab is changing for non-Phishguard customers. What's Changing Column will be called Status instead of Final Disposition Column status values will now be: Submitted , Accepted or Rejected .
AI Search support for crawling login protected website content
AI Search now supports custom HTTP headers for website crawling, solving a common problem where valuable content behind authentication or access controls could not be indexed. Previously, AI Search could only crawl publicly accessible pages, leaving knowledge bases, documentation, and other protected content out of your search results.
Cloudflare Fundamentals, Terraform - Terraform v5.13.0 now available
Earlier this year, we announced the launch of the new Terraform v5 Provider. We are aware of the high number of issues reported by the Cloudflare community related to the v5 release. We have committed to releasing improvements on a 2-3 week cadence ↗ to ensure its stability and reliability, including the v5.13 release.
Access - Generate Cloudflare Access SSH certificate authority (CA) directly from the Cloudflare dashboard
SSH with Cloudflare Access for Infrastructure allows you to use short-lived SSH certificates to eliminate SSH key management and reduce security risks associated with lost or stolen keys. Previously, users had to generate this certificate by using the Cloudflare API ↗ directly.
CASB - New SaaS Security weekly digests with API CASB
You can now stay on top of your SaaS security posture with the new CASB Weekly Digest notification. This opt-in email digest is delivered to your inbox every Monday morning and provides a high-level summary of your organization's Cloudflare API CASB findings from the previous week.
Containers, R2 - Mount R2 buckets in Containers
Containers now support mounting R2 buckets as FUSE (Filesystem in Userspace) volumes, allowing applications to interact with R2 using standard filesystem operations.
Containers - New CPU Pricing for Containers and Sandboxes
Containers and Sandboxes pricing for CPU time is now based on active usage only, instead of provisioned resources. This means that you now pay less for Containers and Sandboxes. An Example Before and After Imagine running the standard-2 instance type for one hour, which can use up to 1 vCPU, but on average you use only 20% of your CPU capacity.