Releasesby GlyphWorkers Analytics Engine, Workers - Workers Analytics Engine SQL now supports filtering using HAVING and LIKE
You can now use the HAVING clause and LIKE pattern matching operators in Workers Analytics Engine ↗ . Workers Analytics Engine allows you to ingest and store high-cardinality data at scale and query your data through a simple SQL API.
Also shipped Jan 7, 2026Cloudflare in January 2026 →
Updated left navigation bar in Figma Design
Refreshed navigation bar and an edge-to-edge variables authoring modal for easier navigation.
truss 0.12.3
- Migrate truss watch GQL queries from model name to ID Weights config Schema feat(truss): Use client-side filtering for model lookup by name and team Support warnings in truss validation Release 0.12.3
feldera 0.218.0
- [SQL] Fix incorrect rewriting when uninterning in right side of LEFT JOIN [profiler] Handle correctly statistics of nested regions pipeline-manager: bump jsonwebtoken to 10.2.0 [dbsp, adapters] Add some missing region annotations. [dbsp] Split large outputs in chain_aggregate.
spark-nlp 6.3.1
📢 Spark NLP 6.3.1: LLM Backend Upgrade and Document Processing Improvements Spark NLP 6.3.1 focuses on strengthening distributed local LLM inference by upgrading the jsl-llamacpp backend to a newer llama.cpp release, while also delivering important improvements in document structure handling and metadata consistency.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Access - Cloudflare admin activity logs capture creation of DNS over HTTP (DoH) users
Cloudflare admin activity logs now capture each time a DNS over HTTP (DoH) user is created. These logs can be viewed from the Cloudflare One dashboard ↗ , pulled via the Cloudflare API , and exported through Logpush .
Workers, Queues - Get notified when your Workers builds succeed or fail
You can now receive notifications when your Workers' builds start, succeed, fail, or get cancelled using Event Subscriptions . Workers Builds publishes events to a Queue that your Worker can read messages from, and then send notifications wherever you need , Slack, Discord, email, or any webhook endpoint.
Workers - Shell tab completions for Wrangler CLI
Wrangler now includes built-in shell tab completion support, making it faster and easier to navigate commands without memorizing every option. Press Tab as you type to autocomplete commands, subcommands, flags, and even option values like log levels. Tab completions are supported for Bash, Zsh, Fish, and PowerShell.
Containers - Custom container instance types now available for all users
Custom instance types are now enabled for all Cloudflare Containers users. You can now specify specific vCPU, memory, and disk amounts, rather than being limited to pre-defined instance types . Previously, only select Enterprise customers were able to customize their instance type.
Email security - Enhanced visibility for post-delivery actions
The Action Log now provides enriched data for post-delivery actions to improve troubleshooting. In addition to success confirmations, failed actions now display the targeted Destination folder and a specific failure reason within the Activity field. Note Error messages will vary depending on whether you are using Google Workspace or Microsoft 365.
Rules - Metro code field now available in Rules
The ip.src.metro_code field in the Ruleset Engine is now populated with DMA (Designated Market Area) data. You can use this field to build rules that target traffic based on geographic market areas, enabling more granular location-based policies for your applications.
Security Center - Cloudflare Threat Events now support STIX2 format
We are excited to announce that Cloudflare Threat Events now supports the STIX2 (Structured Threat Information Expression) format. This was a highly requested feature designed to streamline how security teams consume and act upon our threat intelligence.
WAF Release - 2026-01-12
This week's release focuses on improvements to existing detections to enhance coverage. Key Findings Existing rule enhancements have been deployed to improve detection resilience against SQL Injection.