Releasesby GlyphGateway - Create Gateway firewall policies with natural language
Cloudflare Gateway now supports natural language policy creation for DNS , HTTP , and Network firewall policies. Administrators can describe the outcome they want in plain language, and Cloudflare will generate a complete policy rule that populates the policy builder form.
Also shipped May 12, 2026Cloudflare in May 2026 →
Introducing Generative Data Apps
🥟 Introducing: Generative Data Apps Today, we're introducing Generative data apps in beta. Anyone can build a powerful app simply by prompting the Hex agent. Everything stays grounded in your trusted data, helping you avoid inconsistencies or hallucinations while building powerful, flexible dashboards and apps.
Shopify App Pricing: charge for usage, recurring subscriptions, or both
Shopify App Pricing supports subscriptions, usage-based charges, or combined models, configured in the Partner Dashboard. What's new: Managed Pricing is now Shopify App Pricing Shopify App Pricing replaces Managed Pricing as Shopify’s default billing solution that gets configured during app submission in the Partner Dashboard.
Support for Postgres 14 ending July 1, 2026
Supabase support for Postgres 14 ends on July 1, 2026. Remaining Postgres 14 projects will be upgraded automatically, while projects using removed extensions like timescaledb, plv8, or pgjwt will be paused.
Nova-3 Multilingual Model Update
Numerals Support Expanded for Nova-3 Multilingual Numeral formatting is now supported for all Nova-3 multilingual languages , except Hindi and Japanese. This enhancement means Nova-3 multilingual can now convert spoken numbers to digits (e.g., "three hundred" → "300") for English, Spanish, French, German, Russian, Portuguese, Italian, and Dutch.
Dify 1.14.1 - Security hardening, workflow stability, and cleaner self-hosted deployments
🚀 What's New in v1.14.1? v1.14.1 is a patch release focused on security hardening, workflow and knowledge-base stability, deployment cleanup, and continued UI platform migration after v1.14.0. 🔐 Security Self-hosted SECRET_KEY hardening , Docker deployments no longer rely on a public default key.
Secure your Account API with ACR EA
Auth0's ACR EA release empowers you to secure Account API token issuance by enforcing step-up authentication for sensitive scopes. Whether your users are managing their authentication factors via Universal Login or Embedded flows, you can now gate access through Actions-driven policies or enable a secure-by-default toggle.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Cloudflare One, Access - Refreshed Access login page
The Access login page and one-time password (OTP) page now feature a refreshed design that improves visual consistency, user trust, and mobile responsiveness. Before: After: The updated login experience includes: Unified authentication card - All sign-in options (identity provider buttons, email input, OTP) now appear in a single card with consistent...
Cloudflare WAN, Magic Transit, Cloudflare One - New accounts assigned a single IPv4 anycast address
New Magic Transit and Cloudflare WAN accounts are now assigned a single IPv4 anycast address by default. Cloudflare handles failures on its network automatically by advertising your endpoint IP from multiple nodes across many globally distributed data centers. To handle failures on your network, configure two tunnels from separate routers.
Containers - SSH through Wrangler is now enabled by default for Containers
SSH through Wrangler is now enabled by default for Containers . Previously, you had to set ssh.enabled to true in your Container configuration before you could connect. This change does not expose any publicly accessible ports on your Container.
R2, R2 Data Catalog - R2 Data Catalog now exposes metrics via the GraphQL Analytics API
R2 Data Catalog is a managed Apache Iceberg data catalog built directly into your R2 bucket that allows you to connect query engines like R2 SQL , Spark, Snowflake, and DuckDB to your data in R2. You can now query analytics for your R2 Data Catalog warehouses via Cloudflare's GraphQL Analytics API .
Security Center - Agent Readiness scores now available in URL Scanner via the Cloudflare Dashboard
We’ve added a new Agent Readiness tab to URL Scanner reports accessible via the Cloudflare dashboard. This feature evaluates your site against emerging AI standards and provides six specialized scores to help you optimize for the next generation of AI agents and automated discovery. The Internet is shifting from a human-read web to a machine-read web.
Agents, Workers - Agents SDK v0.12.4: chat recovery, routing retries, durable Think submissions, and Voice connection control
The latest release of the Agents SDK ↗ brings more reliable chat recovery, fixes Agent state synchronization during reconnects, adds durable submissions for Think, exposes routing retry configuration, and adds connection control for Voice agents.
Logs - New Logpush datasets and updated fields across multiple Logpush datasets in Cloudflare Logs
Cloudflare has updated Logpush datasets : New datasets Email Security Post-Delivery Events : A new dataset with fields including AlertID , CompletedAt , Destination , FinalDisposition , Folder , From , FromName , MessageID , MessageTimestamp , MicrosoftTenantID , Operation , PostfixID , Reasons , Recipient , RequestedAt , RequestedBy , RequestedDisposition...
Cloudflare Web Analytics - /cdn-cgi/rum endpoint now returns 405 for non-POST requests
The /cdn-cgi/rum beacon endpoint now returns 405 Method Not Allowed for non-POST requests instead of 404 Not Found . The response includes an Allow: POST, OPTIONS header per RFC 9110 §15.5.6 ↗ . Previously, sending a GET or other non-POST request to this endpoint returned a 404 , which was misleading because it suggested the endpoint did not exist.