Releasesby GlyphCloudflare One - IPv6 CIDR routes for Cloudflare Mesh
Cloudflare Mesh nodes now support IPv6 CIDR routes. You can advertise both IPv4 and IPv6 subnets through your Mesh nodes, making IPv6-only or dual-stack private networks reachable from any enrolled device.
Also shipped May 6, 2026Cloudflare in May 2026 →
Introducing @supabase/server
Supabase introduced @supabase/server to provide stateless authentication, RLS-scoped clients, and server-side CORS support. The package is designed to reduce boilerplate code for server-side implementations.
Secure more apps with External Access Tokens and Private Publishing
Replit has made Private Publishing available to Core and Starter plan users and introduced External Access Tokens for all private apps. These features allow secure access to private deployments without exposing them to the public internet.
Data migrations in Prisma 8
Prisma 8 allows developers to write data migrations in TypeScript, enabling column backfilling and data transformation alongside schema changes.
Introducing Create-Prisma: Start a Prisma App With One Command
The new create-prisma CLI tool allows developers to initialize a Prisma application with a single command. It includes a starter schema, seed data, database scripts, and optional Prisma Postgres setup.
Prefect 3.7: infrastructure decorators and plugins are GA
Two of our most-requested experimental surfaces graduate to general availability, flows can render their own dependency graphs, and prepared workspaces now run with uv.
Resend Email Provider is now Generally Available
 We're excited to announce that __Resend__ is now __Generally Available__ as an out-of-the-box email delivery provider in Auth0!
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Email security - Cloudy Summaries in PhishNet O365
PhishNet users can now access Cloudy summaries directly within the email investigation experience. When reviewing a message in PhishNet, users will see an AI-generated summary that provides additional context and key details about the email.
Radar - TLD Nameserver Performance in Cloudflare Radar
Radar now provides TLD authoritative nameserver performance insights, measuring response time (latency) as observed from Cloudflare's 1.1.1.1 resolver infrastructure when forwarding queries upstream to TLD nameservers.
Security Center - TAXII support added to Threat Events API
The Cloudforce One Threat Events API now supports TAXII ↗ as an output format, enabling standardized, automated sharing of cyber threat intelligence with your existing security stack.
Workers, WAF - WAF and framework adapter mitigations for React and Next.js vulnerabilities
Multiple security vulnerabilities were disclosed by the React team and Vercel affecting React Server Components and Next.js. These include denial of service, middleware and proxy bypass, server-side request forgery, cross-site scripting, and cache poisoning issues across a range of severity levels.
Cloudflare One Appliance, Cloudflare One, Cloudflare WAN - Custom DHCP options on Cloudflare One Appliance
When the Cloudflare One Appliance is acting as the DHCP server for a LAN, you can now configure custom DHCP options on the leases it issues. This unlocks workflows such as PXE / iPXE boot, VoIP phone provisioning, and vendor-specific client configuration.
Cloudflare One Appliance, Cloudflare One, Cloudflare WAN - Source-based breakout and prioritization on Cloudflare One Appliance
Breakout and traffic prioritization rules on the Cloudflare One Appliance can now match by source in addition to destination application. You can pin breakout or priority behavior to: A source LAN interface , VLANs attached to that LAN are included automatically. A source IP address, range, or CIDR block.
Cloudflare One Appliance, Cloudflare One, Cloudflare WAN - Self-serve provisioning of Cloudflare One Virtual Appliance via API
You can now create, rotate, and delete Cloudflare One Virtual Appliance instances and their license keys directly via the API and Terraform. Create a virtual appliance and receive a license key: POST /accounts/{account_id}/magic/connectors with device.provision_license: true .
Security Center - CSV export and adjustable page density for RFIs
You can now export your Requests for Information (RFI) history to a CSV document and customize your dashboard view by choosing how many RFI records to load per page.