Releasesby GlyphCloudflare Fundamentals - Improved OAuth experience for consent and management
OAuth allows third-party applications to access your Cloudflare account on your behalf , like when Wrangler deploys Workers or when monitoring tools read your analytics. You now have granular control over which accounts these applications can access, plus the ability to revoke access anytime.
Also shipped Apr 14, 2026Cloudflare in April 2026 →
Free unlimited seats on Pro, unlimited form submissions, & updated credit rates
We're introducing some pricing updates to our Credit-based plans. Here's a quick summary of the changes, explained more below. Unlimited seats on the Pro plan Unlimited form submissions on all Credit plans Updated credit rates for bandwidth, compute, and web requests To understand more on why we're making these changes, check out our official Netlify blog...
Multi-Resource Refresh Tokens (MRRT) is now Generally Available
Following the successful Early Access period that began on August 11, 2025, we are excited to announce that MRRT is now available to all customers with full production support.
Deprecated data source APIs disabled by default
Data source APIs that referenced data sources using a numeric id were deprecated in Grafana v9.0 in favor of APIs that reference data sources using a uid instead. In Grafana v13.0, these deprecated APIs are disabled by default.
Grafana Advisor is now generally available-health checks for your Grafana instance to keep things running smoothly
Grafana Advisor is now generally available in Grafana v13.0. You can use Advisor to uncover issues affecting the health of your Grafana instances, such as: Data sources with a failing health check that will result in failed queries Outdated plugins, which might be insecure or lacking the latest fixes and features Misconfigured SSO settings Checks run once a...
Grafana database metrics deprecation
The following Prometheus metrics are now deprecated in Grafana v13, and will be removed in a future release: go_sql_stats_connections_max_open go_sql_stats_connections_open go_sql_stats_connections_in_use go_sql_stats_connections_idle go_sql_stats_connections_waited_for go_sql_stats_connections_blocked_seconds go_sql_stats_connections_closed_max_idle...
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Data Loss Prevention - DLP account-level settings
Account-level DLP settings are now available in Cloudflare One. You can now configure advanced DLP settings at the account level, including OCR, AI context analysis, and payload masking. This provides consistent enforcement across all DLP profiles and simplifies configuration management.
Browser Run - Manage Browser Rendering sessions with Wrangler CLI
Browser Rendering now supports wrangler browser commands, letting you create, manage, and view browser sessions directly from your terminal, streamlining your workflow. Since Wrangler handles authentication, you do not need to pass API tokens in your commands.
Cloudflare One - Introducing Cloudflare Mesh
Cloudflare Mesh is now available ( blog post ↗ ). Mesh connects your services and devices with post-quantum encrypted networking, allowing you to route traffic privately between servers, laptops, and phones over TCP, UDP, and ICMP. What Cloudflare Mesh does Assigns a private Mesh IP to every enrolled device and node.
Data Loss Prevention - Detect Cloudflare API tokens with DLP
The Credentials and Secrets DLP profile now includes three new predefined entries for detecting Cloudflare API credentials: Entry name Token prefix Detects Cloudflare User API Key cfk_ User-scoped API keys Cloudflare User API Token cfut_ User-scoped API tokens Cloudflare Account Owned API Token cfat_ Account-scoped API tokens These detections target the new...
Gateway, Data Loss Prevention - Configure how sensitive data appears in DLP payload logs
You can now configure how sensitive data matches are displayed in your DLP payload match logs , giving your incident response team the context they need to validate alerts without compromising your security posture.
logpush, Logs - Logpush to BigQuery , Cloudflare dashboard support
You can now configure Logpush jobs to Google BigQuery directly from the Cloudflare dashboard, in addition to the existing API-based setup. Previously, setting up a BigQuery Logpush destination required using the Logpush API.
Radar - Generate citations on Cloudflare Radar
Radar shareable widgets now include a generate citation action, making it easier to reference Cloudflare Radar ↗ data in research papers and other publications. Select the citation icon to open a modal with five supported citation styles: BibTeX APA MLA Chicago RIS Explore the feature on any shareable widget at Cloudflare Radar ↗ .
WAF - Email obfuscation decode script is now non-render-blocking
The decode script injected by Email Address Obfuscation now loads with the defer attribute. This means the script no longer blocks page rendering. It downloads in parallel with HTML parsing and executes after the document is fully parsed, before the DOMContentLoaded event.