Releasesby GlyphAccess - Policies for bookmark applications
You can now assign Access policies to bookmark applications . This lets you control which users see a bookmark in the App Launcher based on identity, device posture, and other policy rules. Previously, bookmark applications were visible to all users in your organization.
Also shipped Feb 17, 2026Cloudflare in February 2026 →
Cloud Run source deployment supports Ubuntu 24 LTS base images in General Availability
Cloud Run source deployment supports Ubuntu 24 LTS base images in General Availability . This builder is available under gcr.io/buildpacks/builder:google-24 . For more information, see Builders .
Forms - Flows Auth0 Send SMS and Auth0 Make Call Actions
We’re excited to announce that we added __Flows Auth0 Send SMS and Auth0 Make Call Actions__! This new feature allows you to send phone messages from Flows using the customized Phone Provider at your Auth0 Tenant.
Analyze errors in Frontend Observability with Grafana Assistant
Debugging frontend errors just got easier. From the Errors drawer in Grafana Cloud Frontend Observability, click the Analyze button to kick off Grafana Assistant’s root cause analysis investigation.
URL Preview Feature Requirement Update
We’ve introduced a new URL Tracking plugin for the Amplitude Session Replay Browser SDK! This enhancement ensures we accurately capture client-side navigations in SPAs (Single Page Applications), a critical prerequisite for features like Jump to Key Moments.
Guardrails 0.9.0
- 0.9.0 by @CalebCourierhttps://github.com/ /pull/1400 Migration Guide https://guardrailsai.com/guardrails/docs/migration-guides/0-9-migration v0.8.2...v0.9.0
Guardrails 0.8.2
- Bump sqlparse from 0.5.3 to 0.5.4 in the pip group across 1 directory by @dependabot [bot] in #1407 v0.8.2 Summary Bug fix for config file based integration with guardrails-api before 0.9.0 release. v0.8.1...v0.8.2
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Access - Streamlined clientless browser isolation for private applications
A new Allow clientless access setting makes it easier to connect users without a device client to internal applications, without using public DNS. Previously, to provide clientless access to a private hostname or IP without a published application , you had to create a separate bookmark application pointing to a prefixed Clientless Web Isolation URL (for...
Agents, Workers - Agents SDK v0.5.0: Protocol message control, retry utilities, data parts, and @cloudflare/ai-chat v0.1.0
The latest release of the Agents SDK ↗ adds built-in retry utilities, per-connection protocol message control, and a fully rewritten @cloudflare/ai-chat with data parts, tool approval persistence, and zero breaking changes. Retry utilities A new this.retry() method lets you retry any async operation with exponential backoff and jitter.
Cloudflare One, Cloudflare WAN, Cloudflare Network Firewall, Network Flow - Cloudflare One Product Name Updates
We are updating naming related to some of our Networking products to better clarify their place in the Zero Trust and Secure Access Service Edge (SASE) journey. We are retiring some older brand names in favor of names that describe exactly what the products do within your network.
Containers - Docker-in-Docker support added to Containers and Sandboxes
Sandboxes and Containers now support running Docker for "Docker-in-Docker" setups. This is particularly useful when your end users or agents want to run a full sandboxed development environment.
Analytics - New cfWorker metric in Server-Timing header
The Server-Timing header now includes a new cfWorker metric that measures time spent executing Cloudflare Workers, including any subrequests performed by the Worker. This helps developers accurately identify whether high Time to First Byte (TTFB) is caused by Worker processing or slow upstream dependencies.
Cloudflare Fundamentals - Content encoding support for Markdown for Agents and other improvements
When AI systems request pages from any website that uses Cloudflare and has Markdown for Agents enabled, they can express the preference for text/markdown in the request: our network will automatically and efficiently convert the HTML to markdown, when possible, on the fly.
WAF Release - 2026-02-16
This week’s release introduces new detections for CVE-2025-68645 and CVE-2025-31125. Key Findings CVE-2025-68645: A Local File Inclusion (LFI) vulnerability in the Webmail Classic UI of Zimbra Collaboration Suite (ZCS) 10.0 and 10.1 allows unauthenticated remote attackers to craft requests to the /h/rest endpoint, improperly influence internal dispatching...
Workers - Quick Editor devtools replaced with log viewer
Cloudflare has deprecated the Workers Quick Editor dev tools inspector and replaced it with a lightweight log viewer. This aligns our logging with wrangler tail and gives us the opportunity to focus our efforts on bringing benefits from the work we have invested in observability, which would not be possible otherwise.