Workers - Declare required secrets in your Wrangler configuration
The new secrets configuration property lets you declare the secret names your Worker requires in your Wrangler configuration file. Required secrets are validated during local development and deploy, and used as the source of truth for type generation.
Also shipped Mar 25, 2026Cloudflare in March 2026 →
Modal 1.4.0
We've made significant CLI enhancements so that Modal logs can be more accessible to coding agents: The modal app logs and modal container logs commands now have the ability to fetch historical logs using counting (e.g. --tail 1000) or time-based (e.g., --since 4h, --until 2026-03-15, etc.) configuration.
Attribution Alerts
Set alerts scoped to specific teams, services, environments, and more using cost attribution labels We’re excited to announce the general availability of Attribution Alerts in the Cost Management and Billing app!
The Shopify CLI app release `--force` flag is deprecated and will be removed
We are deprecating the --force flag on the shopify app deploy and shopify app release commands. The flag will be removed in a Shopify CLI release in May 2026. Why we're making this change The --force flag skips all confirmation prompts, including for extension deletions that can permanently remove data on installed shops.
New Filters for List Session Replays
What it is: Two new filters are now available on the List Session Replays API endpoint. 'amplitude_id' (integer) returns replays tied to a specific Amplitude user ID. 'replay_id' accepts up to 100 IDs in 'device_id/session_id' format and fetches those sessions directly, bypassing pagination.
Improvements to Distributions
What it is: Frequency charts, histogram charts, session length, and time-to-convert now support normalization, PDF, and CDF views. Normalization scales each series so its bars sum to 1, making groups with different sample sizes directly comparable , for example, U.S.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Data Loss Prevention - Detect and sanitize HAR files
HTTP Archive (HAR) files are used by engineering and support teams to capture and share web traffic logs for troubleshooting. However, these files routinely contain highly sensitive data , including session cookies, authorization headers, and other credentials , that can pose a significant risk if uploaded to third-party services without being reviewed or...
logpush, Logs - Logpush , More granular timestamps
Logpush now supports higher-precision timestamp formats for log output. You can configure jobs to output timestamps at millisecond or nanosecond precision. This is available in both the Logpush UI in the Cloudflare dashboard and the Logpush API .
Rules - New mTLS certificate fields for Transform Rules
Cloudflare now exposes four new fields in the Transform Rules phase that encode client certificate data in RFC 9440 ↗ format. Previously, forwarding client certificate information to your origin required custom parsing of PEM-encoded fields or non-standard HTTP header formats.
Access - Code Mode for MCP server portals
MCP server portals support Code Mode MCP server patterns , a technique that reduces context window usage by replacing individual tool definitions with a single code execution tool. Code Mode is turned on by default on all portals. To turn it off, edit the portal in Access controls > AI controls and turn off Code Mode under Basic information .
Access - Context optimization for MCP server portals
MCP server portals support two context optimization options that reduce how many tokens tool definitions consume in the model's context window. Both options are activated by appending the optimize_context query parameter to the portal URL. minimize_tools Strips tool descriptions and input schemas from all upstream tools, leaving only their names.
Containers - Easily connect Containers and Sandboxes to Workers
Containers and Sandboxes now support connecting directly to Workers over HTTP. This allows you to call Workers functions and bindings , like KV or R2 , from within the container at specific hostnames. Run Worker code Define an outbound handler to capture any HTTP request or use outboundByHost to capture requests to individual hostnames and IPs.
Data Loss Prevention - Streaming ZIP file scanning removes per-file size limits
DLP now processes ZIP files using a streaming handler that scans archive contents element-by-element as data arrives. This removes previous file size limitations and improves memory efficiency when scanning large archives. Microsoft Office documents (DOCX, XLSX, PPTX) also benefit from this improvement, as they use ZIP as a container format.
Durable Objects, Workers - Access Durable Object jurisdiction via `ctx.id.jurisdiction`
ctx.id.jurisdiction inside a Durable Object now reports the jurisdiction the object was created in , for example "eu" when accessed through env.MY_DURABLE_OBJECT.jurisdiction("eu") , so you can make region-aware decisions without passing the jurisdiction through method arguments or persisting it in storage.