Agents, Workers - Agents SDK v0.4.0: Readonly connections, MCP security improvements, x402 v2 migration, and custom MCP OAuth providers
The latest release of the Agents SDK ↗ brings readonly connections, MCP protocol and security improvements, x402 payment protocol v2 migration, and the ability to customize OAuth for MCP server connections. Readonly connections Agents can now restrict WebSocket clients to read-only access, preventing them from modifying agent state.
Also shipped Feb 9, 2026Cloudflare in February 2026 →
Git Sync now available in Public Preview
Git Sync in Grafana lets you manage your dashboards as code as JSON files stored in GitHub. You and your team can use it to version control, collaborate, and automate deployments efficiently. This feature, now starting to roll out to all Grafana Cloud instances in Public Preview , lets you benefit from a native Git workflow directly from Grafana.
Organization-level Data Forwarding is now available
We've renewed first-party support for data forwarding and migrated users onto organization-level configuration. You can now forward your errors across projects to Splunk, Segment and Amazon SQS with a single settings change.
User groups are now available
You can now bulk share resources like files, projects and teams with user groups.
shopify.app.extensions() in App Bridge now supports POS UI extensions
The shopify.app.extensions() method in App Bridge now supports Point of Sale (POS) UI extensions , in addition to checkout, customer account, Admin, and Theme extensions. With this update, your embedded app can query the status of POS UI extensions along with other extension surfaces.
Hydrogen January 2026 release
The Hydrogen January 2026 release (v2026.1.0) is out. This is a quarterly API version bump to Storefront API 2026-01 and Customer Account API 2026-01. Updated Storefront API and Customer Account API to 2026-01 ( #3434 ) The cartDiscountCodesUpdate mutation now requires the discountCodes argument.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Agents - Interactive browser terminals in Sandboxes
The Sandbox SDK ↗ now supports PTY (pseudo-terminal) passthrough, enabling browser-based terminal UIs to connect to sandbox shells via WebSocket. sandbox.terminal(request) The new terminal() method proxies a WebSocket upgrade to the container's PTY endpoint, with output buffering for replay on reconnect.
AI Crawl Control - Analytics enhancements
AI Crawl Control metrics have been enhanced with new views, improved filtering, and better data visualization. Path pattern grouping In the Metrics tab > Most popular paths table, use the new Patterns tab that groups requests by URI pattern ( /blog/* , /api/v1/* , /docs/* ) to identify which site areas crawlers target most. Refer to the screenshot above.
AI Search now with more granular controls over indexing
Get your content updates into AI Search faster and avoid a full rescan when you do not need it. Reindex individual files without a full sync Updated a file or need to retry one that errored? When you know exactly which file changed, you can now reindex it directly instead of rescanning your entire data source.
Log Explorer - Tabs and pivots
Log Explorer now supports multiple concurrent queries with the new Tabs feature. Work with multiple queries simultaneously and pivot between datasets to investigate malicious activity more effectively. Key capabilities Multiple tabs: Open and switch between multiple query tabs to compare results across different datasets.
R2 SQL now supports approximate aggregation functions
R2 SQL now supports five approximate aggregation functions for fast analysis of large datasets. These functions trade minor precision for improved performance on high-cardinality data. New functions APPROX_PERCENTILE_CONT(column, percentile) , Returns the approximate value at a given percentile (0.0 to 1.0). Works on integer and decimal columns.
WAF Release - 2026-02-10
This week’s release changes the rule action from BLOCK to Disabled for Anomaly:Header:User-Agent - Fake Google Bot. Ruleset Rule ID Legacy Rule ID Description Previous Action New Action Comments Cloudflare Managed Ruleset ...6aa0bef8 N/A Anomaly:Header:User-Agent - Fake Google Bot Enabled Disabled We are changing the action for this rule from BLOCK to...
Cloudflare One Appliance, Cloudflare One, Cloudflare WAN - Post-quantum encryption support for Cloudflare One Appliance
Cloudflare One Appliance version 2026.2.0 adds post-quantum encryption support using hybrid ML-KEM (Module-Lattice-Based Key-Encapsulation Mechanism). The appliance now uses TLS 1.3 with hybrid ML-KEM for its connection to the Cloudflare edge.
Workers are no longer limited to 1000 subrequests
Workers no longer have a limit of 1000 subrequests per invocation, allowing you to make more fetch() calls or requests to Cloudflare services on every incoming request. This is especially important for long-running Workers requests, such as open websockets on Durable Objects or long-running Workflows , as these could often exceed this limit and error.