Releasesby GlyphRules - New cryptographic functions , encode_base64() and sha256()
Cloudflare Rulesets now includes encode_base64() and sha256() functions, enabling you to generate signed request headers directly in rule expressions. These functions support common patterns like constructing a canonical string from request attributes, computing a SHA256 digest, and Base64-encoding the result.
Also shipped Jan 22, 2026Cloudflare in January 2026 →
Visualization suggestions updates
Visualization Suggestions , which were introduced in Grafana 8.3.0 , have been updated to provide more applicable suggestions, and are now the default method to select a panel visualization.
Expo SDK 55 Beta is now available
Learn about the changes, how to try it out, and how to give feedback.
Modal 1.3.1
- We've improved our experimental support for Python 3.14t (free-threaded Python) inside Modal containers. The container environment will now use the Python implementation of the Protobuf runtime rather than the incompatible upb implementation.
Monitor your dedicated inference endpoints with the new Metrics API, providing Prometheus-compatible metrics...
Monitor your dedicated inference endpoints with the new Metrics API, providing Prometheus-compatible metrics for requests, tokens, latency percentiles, and endpoint health. Metrics are aggregated at the minute level and integrate directly with Prometheus. Learn more in our Metrics guide.
Customize your navigation in Linear Mobile
Now you can customize Linear Mobile to fit your daily workflow. Personalize the bottom toolbar to prioritize the features you use the most. Rearrange the main navigation items, or pin specific projects, initiatives, and documents for quick access.
IS SET and NOT SET device posture operators
- New: IS SET and NOT SET have been added as device posture operators.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Cloudflare One, Access - Require Access protection for zones
You can now require Cloudflare Access protection for all hostnames in your account. When enabled, traffic to any hostname that does not have a matching Access application is automatically blocked. This deny-by-default approach prevents accidental exposure of internal resources to the public Internet.
Access - New granular API token permissions for Cloudflare Access
Three new API token permissions are available for Cloudflare Access, giving you finer-grained control when building automations and integrations: Access: Organizations Revoke , Grants the ability to revoke user sessions in a Zero Trust organization.
Workers - New Placement Hints for Workers
You can now configure Workers to run close to infrastructure in legacy cloud regions to minimize latency to existing services and databases. This is most useful when your Worker makes multiple round trips.
Cloudflare Fundamentals - New 2FA Experience for Login
In an effort to improve overall user security, users without 2FA will be prompted upon login to enroll in email 2FA. This will improve user security posture while minimizing friction. Users without email 2FA enabled will see a prompt to secure their account with additional factors upon logging in.
Pages - Increased Pages file limit to 100,000 for paid plans
Paid plans can now have up to 100,000 files per Pages site, increased from the previous limit of 20,000 files. To enable this increased limit, set the environment variable PAGES_WRANGLER_MAJOR_VERSION=4 in your Pages project settings. The Free plan remains at 20,000 files per site. For more details, refer to the Pages limits documentation .
Vectorize indexes now support up to 10 million vectors
You can now store up to 10 million vectors in a single Vectorize index, doubling the previous limit of 5 million vectors. This enables larger-scale semantic search, recommendation systems, and retrieval-augmented generation (RAG) applications without splitting data across multiple indexes.
AI Search path filtering for website and R2 data sources
AI Search now includes path filtering for both website and R2 data sources. You can now control which content gets indexed by defining include and exclude rules for paths. By controlling what gets indexed, you can improve the relevance and quality of your search results.
AI Search - Create AI Search instances programmatically via REST API
You can now create AI Search instances programmatically using the API . For example, use the API to create instances for each customer in a multi-tenant application or manage AI Search alongside your other infrastructure.