Cloudflare Fundamentals - Enhanced HTTP/3 request cancellation visibility
Enhanced HTTP/3 request cancellation visibility Cloudflare now provides more accurate visibility into HTTP/3 client request cancellations, giving you better insight into real client behavior and reducing unnecessary load on your origins. Previously, when an HTTP/3 client cancelled a request, the cancellation was not always actioned immediately.
Also shipped Jan 19, 2026Cloudflare in January 2026 →
Ephemeral Sessions with Actions - General Availability
As part of our Continuous Session Protection, you can now configure ephemeral (non-persistent) sessions using Actions. This allows enterprise customers to dynamically control whether a session is stored in a persistent cookie or only in memory. Ephemeral sessions: * Exist only in memory and are cleared when the browser or app is closed.
Security Update: Multiple vulnerabilities in React Router and Remix
The React Router team has disclosed six security vulnerabilities affecting React Router and Remix. Here's what Netlify customers need to know. Vulnerabilities Vulnerability: CVE-2025-61686 Path traversal Remix versions: ≤2.17.1 React Router versions & modes: 7.0.0–7.9.3<br/> All modes Vulnerability: CVE-2025-68470 Open redirect Remix versions: - React...
Dashboard operations for read-only users
Why it's changing This change ensures that read-only access is enforced consistently across the New Relic platform, maintaining uniform governance and technical integrity.
Revamped gauge visualization
We’ve reimagined the gauge visualization to provide more options and several new variations to make your dashboards more informative and more appealing. The Circular shape has been introduced as an alternative to the existing Arc gauge under the new Style option.
Inline Batching API Release
Inline batching has been released, allowing users to create batch jobs without uploading files.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
AI Search path filtering for website and R2 data sources
AI Search now includes path filtering for both website and R2 data sources. You can now control which content gets indexed by defining include and exclude rules for paths. By controlling what gets indexed, you can improve the relevance and quality of your search results.
AI Search - Create AI Search instances programmatically via REST API
You can now create AI Search instances programmatically using the API . For example, use the API to create instances for each customer in a multi-tenant application or manage AI Search alongside your other infrastructure.
KV - New Workers KV Dashboard UI
Workers KV has an updated dashboard UI with new dashboard styling that makes it easier to navigate and see analytics and settings for a KV namespace. The new dashboard features a streamlined homepage for easy access to your namespaces and key operations, with consistent design with the rest of the dashboard UI updates.
Rules - New functions for array and map operations
New functions for array and map operations Cloudflare Rulesets now include new functions that enable advanced expression logic for evaluating arrays and maps. These functions allow you to build rules that match against lists of values in request or response headers, enabling use cases like country-based blocking using custom headers.
Cloudflare Fundamentals, SDK - Cloudflare Typescript SDK v6.0.0-beta.1 now available
Disclaimer: Please note that v6.0.0-beta.1 is in Beta and we are still testing it for stability. Full Changelog: v5.2.0...v6.0.0-beta.1 ↗ In this release, you'll see a large number of breaking changes.
Cloudflare Fundamentals, Terraform - Terraform v5.16.0 now available
In January 2025, we announced the launch of the new Terraform v5 Provider. We greatly appreciate the proactive engagement and valuable feedback from the Cloudflare community following the v5 release.
WAF Release - 2026-01-20
This week's release focuses on improvements to existing detections to enhance coverage. Key Findings Existing rule enhancements have been deployed to improve detection resilience against SQL injection.
Workers - Use auxiliary Workers alongside full-stack frameworks
Auxiliary Workers are now fully supported when using full-stack frameworks, such as React Router and TanStack Start , that integrate with the Cloudflare Vite plugin . They are included alongside the framework's build output in the build output directory. Note that this feature requires Vite 7 or above.