Releasesby GlyphWAF - WAF Release - 2026-04-21
This week's release introduces a new detection for a Remote Code Execution (RCE) vulnerability in Apache ActiveMQ (CVE-2026-34197) and an updated signature for Magento 2 - Unrestricted File Upload. Alongside these detections, we are continuing our work on rule refinements to provide deeper security insights for our customers.
Also shipped Apr 21, 2026Cloudflare in April 2026 →
Meet Replit Security Agent
Replit Security Agent performs comprehensive security reviews of codebases using a hybrid approach with Semgrep and HoundDog.ai. It automates threat modeling and vulnerability identification before projects are published.
AI Credits Controls for Billing Groups
Enterprise plan admins can now assign and monitor AI credit consumption by billing group.
Amplitude Wizard CLI: Agentic Onboarding for Builders
What it is: The Wizard CLI runs in your terminal via 'npx @amplitude/wizard'. It asks questions about your tech stack and what you want to track, then generates SDK configuration and setup code based on your answers.
Agent skills for Replicate
Agent skills that give coding assistants expert knowledge about finding, comparing, running, and prompting AI models on Replicate.
LlamaIndex 0.14.21
Release Notes [2026-04-21] llama-index-callbacks-honeyhive [0.5.0] chore(deps): bump the pip group across 87 directories with 2 updates ( #21382 ) chore(deps): bump the pip group across 68 directories with 2 updates ( #21394 ) llama-index-core [0.14.21] fix(core): prevent KeyError in DocumentSummaryIndex.delete_nodes when invalid node ID is provided (...
GPT Image 2 now available in AI Gateway
OpenAI’s GPT Image 2 is now available through AI Gateway. You can call this model from Netlify Functions without configuring API keys; the AI Gateway provides the connection to OpenAI for you.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Cloudflare Network Firewall, Magic Transit, Cloudflare WAN - Country rules supported in Unified Routing
Cloudflare Advanced Network Firewall Country rules are now supported for accounts using Unified Routing mode. This feature requires a Cloudflare Advanced Network Firewall subscription. You can create firewall rules that match traffic based on source or destination country to enforce geographic access policies across your network.
Cloudflare Fundamentals - Network Overview page in the dashboard
A new Network Overview page in the Cloudflare dashboard gives you a single starting point for network security and connectivity products. From the Network Overview page, you can: Connect resources with Cloudflare Tunnel - Create tunnels to connect your infrastructure to Cloudflare without exposing it to the public Internet.
Workflows - Additional step context and ReadableStream support now available in Workflows step.do()
Workflows now provides additional context inside step.do() callbacks and supports returning ReadableStream to handle larger step outputs. Step context properties The step.do() callback receives a context object with new properties alongside attempt : step.name , The name passed to step.do() step.count , How many times a step with that name has been invoked...
Containers - Container logs page now includes relevant Worker and Durable Object logs
The Container logs page now displays related Worker and Durable Object logs alongside container logs. This co-locates all relevant log events for a container application in one place, making it easier to trace requests and debug issues. You can filter to a single source when you need to isolate Container, Worker, or Durable Object output.
Cloudflare Fundamentals, Workers - Introducing Billable Usage dashboard and Budget alerts
Pay-as-you-go customers can now monitor usage-based costs and configure spend alerts through two new features: the Billable Usage dashboard and Budget alerts. Billable Usage dashboard The Billable Usage dashboard provides daily visibility into usage-based costs across your Cloudflare account.
Logs - Logpush subrequest merging for HTTP requests
When a Cloudflare Worker intercepts a visitor request, it can dispatch additional outbound fetch calls called subrequests. By default, each subrequest generates its own log entry in Logpush, resulting in multiple log lines per visitor request.
Workers - WebSocket binary messages now delivered as Blob by default
Binary frames received on a WebSocket are now delivered to the message event as Blob ↗ objects by default. This matches the WebSocket specification ↗ and standard browser behavior. Previously, binary frames were always delivered as ArrayBuffer ↗ . The binaryType property on WebSocket controls the delivery type on a per-WebSocket basis.
Analytics, Log Explorer - Custom dashboards available to all customers
Custom Dashboards are now available to all Cloudflare customers. Build personalized views that highlight the metrics most critical to your infrastructure and security posture, moving beyond standard product dashboards. This update significantly expands the data available for visualization.