Releasesby GlyphCloudflare Fundamentals - Introducing self-managed OAuth clients
Today we are launching self-managed OAuth, enabling developers to build third-party applications that integrate with Cloudflare via OAuth. This provides a more secure, user-friendly, and manageable alternative to API tokens. OAuth lets third-party applications act on behalf of a user to access their Cloudflare account.
Also shipped Jun 3, 2026Cloudflare in June 2026 →
Meet Replit SEO Agent
Replit has introduced an SEO Agent that scans applications for discoverability issues and provides automated fixes, alongside improved default SEO metadata for new apps.
Pay-as-you-go AI credits on the Professional plan
Admins on the Professional plan can now purchase additional AI credits on a pay-as-you-go basis.
React app import
Live on cloud • All plans Public beta 4.0 Edge • All plans Public beta 4.0.17 Stable • All plans Public beta Retool's new app builder now supports importing React apps from external sources, such as Replit, Lovable, and Claude Code, for further refinement and development in Retool.
Angular v22 is now supported
Angular v22 was released today and it is supported on Netlify on day one. To upgrade, follow the Angular upgrade steps and update @netlify/angular-runtime to v4.0.0 or later. Notable changes Minimum Node.js version: Angular v22 requires Node.js 22.12.0 or later. Make sure your Netlify site is configured to use a supported Node.js version .
The public endpoint when creating a dedicated inference deployment is now disabled by default
The public endpoint when creating a dedicated inference deployment is now disabled by default. For more information on how to enable access, see Use Dedicated Inference Endpoint.
Plan smarter with more context in Make
Three Make updates to help you plan, ground, and keep momentum while you build.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Access - SAML assertion encryption for identity providers
Cloudflare Access now supports SAML assertion encryption for identity provider integrations. When turned on, your identity provider encrypts SAML assertions using a Cloudflare-managed certificate before sending them through the user's browser. Only Access can decrypt these assertions, protecting sensitive identity data even after TLS termination.
Workers - New Workers bulk secrets API endpoint
You can now create, update, or delete multiple secrets for your Worker in a single request using the bulk secrets endpoint . Include a secret with a value to create or update. Set a secret to null to delete. Secrets not included in the request are left unchanged.
Workers - Store Wrangler's OAuth credentials in your OS keychain
Wrangler can now store the OAuth credentials returned by wrangler login in an AES-256-GCM ↗ -encrypted file, with the encryption key held in your operating system keychain. The default behavior is unchanged , credentials still live in a plaintext TOML file unless you opt in.
Access - Share identity providers across accounts with IdP federation
Cloudflare Access now supports IdP federation , which allows organizations to share a single identity provider across multiple Cloudflare accounts. Instead of configuring the same IdP (for example, Okta or Entra ID) separately in every account, you configure it once in a source account and share it with the other accounts in your organization.
Cloudflare Fundamentals, Workers, D1, R2, KV, Queues, Vectorize, Durable Objects, Containers - Billable usage and budget alerts now in product sidebars
Pay-as-you-go customers can now view billable usage and create budget alerts directly from the product overview pages for Workers & Pages , D1 , R2 , Workers KV , Queues , Vectorize , Durable Objects , and Containers . A new sidebar widget shows current-period spend and the billing cycle date range, alongside a button to create a budget alert.
Pipelines, Workers - Pipeline binding configuration field renamed to stream
The pipeline field inside the pipelines binding configuration in your Wrangler configuration file has been renamed to stream . The old field is deprecated but still accepted. Update your configuration to use stream to avoid the deprecation warning.
Workflows, Workers - Schedule Workflow instances directly from your Workflow binding
You can now attach cron schedules directly to a Workflow binding in wrangler.jsonc . Each scheduled run creates a new Workflow instance automatically, so you do not need to define a separate Worker with a scheduled handler just to trigger your Workflow on an interval.
Agents, Workers - Agents SDK v0.14.0: Agent Skills, messengers, scheduled tasks, Workflows, and hardened chat recovery
The latest release of the Agents SDK ↗ adds four new ways to build with @cloudflare/think : on-demand Agent Skills, chat messengers (starting with Telegram), declarative scheduled tasks, and durable reasoning steps inside Workflows.