Agents, Workers - Agents SDK v0.2.24 with resumable streaming, MCP improvements, and schedule fixes
The latest release of @cloudflare/agents ↗ brings resumable streaming, significant MCP client improvements, and critical fixes for schedules and Durable Object lifecycle management. Resumable streaming AIChatAgent now supports resumable streaming, allowing clients to reconnect and continue receiving streamed responses without losing data.
Also shipped Nov 26, 2025Cloudflare in November 2025 →
Vector Buckets in Public Alpha
Supabase Vector Buckets are now in Public Alpha and can be managed directly from the dashboard, allowing users to store, index, and query vector embeddings at scale alongside other project storage.
Nova-3 Multilingual Now Supports Keyterm Prompting
Keyterm Prompting has been expanded to include the Nova-3 multilingual model. Previously, this feature was only available for monolingual Nova-3 models , now you can use keyterms with both.
Alert rule list page updates
The alert rule page has received a total redesign. The new page features a smoother, faster, and more flexible design to help make your alert rule management easier. The new alert rule page features two views, each with their own uses. The Grouped view is arranged by namespaces, so you can drill down to the specific groups you’re looking for.
Enhanced Alert Visualization for Streamlined Triage
When monitoring complex systems, quickly identifying and prioritizing critical incidents among a large volume of firing or pending alerts can often slow down incident response. We have built an entirely new way to visualize and display alerts.
feldera 0.197.0
- [SQL] Handle deindex operators with fanout for unused field propagation [web-console] Include profiler-lib in web-console automatic prebuild script ci: run aggtests in parallel using xargs docs: documentation for parallel compilation rust: upgrade to latest stable 1.91.1 [SQL] Improve unused field removal
go-redis 9.17.1
🐛 Bug Fixes - add wait to keyless commands list by @marcoferrer - fix(time): remove cached time optimization by @ndyakov 🧰 Maintenance - chore(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 - chore(deps): bump actions/checkout from 5 to 6 - chore(script): fix help call in tag.sh by @ndyakov Contributors We'd like to thank all the...
More from Cloudflare developer platformEvery Cloudflare developer platform release →
API Shield - New Zombie API detection for API Shield
API Shield now automatically detects zombie endpoints , saved endpoints that have not received traffic for an extended period. When detected, the cf-risk-zombie risk label is applied. The scan runs daily alongside existing risk scans. Endpoints are labeled after 32 days without traffic.
Cache - Audit Logs for Cache Purge Events
You can now review detailed audit logs for cache purge events, giving you visibility into what purge requests were sent, what they contained, and by whom. Audit your purge requests via the Dashboard or API for all purge methods: Purge everything List of prefixes List of tags List of hosts List of files Example The detailed audit payload is visible within...
Workers AI - Launching FLUX.2 [dev] on Workers AI
We've partnered with Black Forest Labs (BFL) to bring their latest FLUX.2 [dev] model to Workers AI! This model excels in generating high-fidelity images with physical world grounding, multi-language support, and digital asset creation. You can also create specific super images with granular controls like JSON prompting.
Radar - Cloud Services Observability in Cloudflare Radar
Radar introduces HTTP Origins insights, providing visibility into the status of traffic between Cloudflare's global network and cloud-based origin infrastructure. The new Origins API provides provides the following endpoints: /origins - Lists all origins (cloud providers and associated regions).
WAF Release - 2025-11-24
This week highlights enhancements to detection signatures improving coverage for vulnerabilities in FortiWeb, linked to CVE-2025-64446, alongside new detection logic expanding protection against PHP Wrapper Injection techniques. Key Findings This vulnerability enables an unauthenticated attacker to bypass access controls by abusing the CGIINFO header.
WAF Release - 2025-12-01
This week’s release introduces new detections for remote code execution attempts targeting Monsta FTP (CVE-2025-34299), alongside improvements to an existing XSS detection to enhance coverage.
Containers, R2 - Mount R2 buckets in Containers
Containers now support mounting R2 buckets as FUSE (Filesystem in Userspace) volumes, allowing applications to interact with R2 using standard filesystem operations.
Containers - New CPU Pricing for Containers and Sandboxes
Containers and Sandboxes pricing for CPU time is now based on active usage only, instead of provisioned resources. This means that you now pay less for Containers and Sandboxes. An Example Before and After Imagine running the standard-2 instance type for one hour, which can use up to 1 vCPU, but on average you use only 20% of your CPU capacity.