Releasesby GlyphPipelines - Pipelines and R2 Data Catalog now supported in Terraform
Cloudflare Pipelines ingests streaming data via Workers or HTTP endpoints, transforms it with SQL, and writes it to R2 as Apache Iceberg tables. R2 Data Catalog manages those Iceberg tables, compaction, and compatibility with query engines like R2 SQL , Spark , and DuckDB .
Also shipped May 4, 2026Cloudflare in May 2026 →
Branching Without Git Is Now The Default
Supabase has made branching without Git the default configuration for all projects, simplifying the development workflow for users.
Cross-Event Querying is now Generally Available
Cross-Event Querying is now generally available: join queries across logs, metrics, and spans.
Add actor field to subscription contract and billing attempt mutations
We have introduced a new actor field in subscription mutations to help you track who initiated an action - whether it was the customer, the merchant, or the partner app's automated system. You can now include an actor argument when creating billing attempts or editing subscription contracts.
Default value of `appliesOnSubscription` changed to `true` for app discount inputs
The default value of appliesOnSubscription has been changed from false to true on the DiscountCodeAppInput and DiscountAutomaticAppInput input types in GraphQL Admin API. No action is required. This default value change has no effect on how discounts are applied at checkout.
Cog 0.19.3
Changelog 0780450 Bump version to 0.19.3 ( #2995 ) cac3e91 feat: experimental managed weights ( #2974 )
Aura-2 Voice Controls , Speed and Pronunciation
Aura-2 TTS voices now support runtime speed and pronunciation controls in English and Spanish, available on both batch and streaming WebSocket endpoints. Together, these controls give developers finer-grained tools to improve naturalness , tuning pacing and correcting pronunciation to match their needs.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Cache - Pingora now powers Cloudflare's cache
Cloudflare's cache now runs on a new proxy built on Pingora ↗ , the Rust-based framework that already serves a significant portion of Cloudflare's network traffic. The new proxy is faster, more memory-safe, and designed to evolve our cache architecture. It delivers immediate performance improvements and enables new caching capabilities.
Cloudflare Fundamentals - Keyboard shortcuts for the Cloudflare dashboard
You can now navigate, switch context, and take common actions in the Cloudflare dashboard without leaving your keyboard. Press ? anywhere to see the full list. Keyboard shortcuts can be disabled by visiting your profile settings ↗ .
Radar - New routing widgets on Cloudflare Radar
Radar is expanding its Routing section ↗ with two new widgets that give a deeper view into how networks announce address space and how RPKI ROA coverage evolves over time.
WAF Release - 2026-05-04
This week's release focuses on new detections to expand coverage across command injection, SQL injection, PHP object injection, remote code execution, and XSS attack vectors. Key Findings Existing rule enhancements have been deployed to improve detection resilience against broad classes of web attacks and strengthen behavioral coverage.
Email security - Cloudy Summaries in PhishNet O365
PhishNet users can now access Cloudy summaries directly within the email investigation experience. When reviewing a message in PhishNet, users will see an AI-generated summary that provides additional context and key details about the email.
Cloudflare One - IPv6 CIDR routes for Cloudflare Mesh
Cloudflare Mesh nodes now support IPv6 CIDR routes. You can advertise both IPv4 and IPv6 subnets through your Mesh nodes, making IPv6-only or dual-stack private networks reachable from any enrolled device.
Radar - TLD Nameserver Performance in Cloudflare Radar
Radar now provides TLD authoritative nameserver performance insights, measuring response time (latency) as observed from Cloudflare's 1.1.1.1 resolver infrastructure when forwarding queries upstream to TLD nameservers.
Security Center - TAXII support added to Threat Events API
The Cloudforce One Threat Events API now supports TAXII ↗ as an output format, enabling standardized, automated sharing of cyber threat intelligence with your existing security stack.