R2 SQL - R2 SQL now supports window functions, DISTINCT, and set operations
R2 SQL now supports window functions, SELECT DISTINCT , set operations, and additional aggregates, making it easier to write analytical queries without preprocessing your data elsewhere. R2 SQL is Cloudflare's serverless, distributed SQL engine for querying Apache Iceberg ↗ tables stored in R2 Data Catalog .
Also shipped Jun 22, 2026Cloudflare in June 2026 →
Customer-managed encryption key (CMEK) support for Cloud SQL enhanced backups is generally available
Customer-managed encryption key (CMEK) support for Cloud SQL enhanced backups is generally available. You can protect your CMEK-enabled Cloud SQL instances using Google Cloud Backup and DR Service. For more information, see Choose your backup option . Cloud SQL for SQL Server
SDK Releases: MCP Server
- v0.10.0 - Added Music v2 model and endpoints, MCP tool annotations for all 24 tools, Python 3.14 support, Singapore data residency, EU/IN residency shorthand aliases, graceful shutdown handling for client disconnections, and fixes for voice preview creation and output directory path resolution.
What if your product built itself?
PostHog has released a pipeline that ingests product signals, uses research agents to identify actionable problems, and automatically opens GitHub pull requests.
Preview data changes in Netlify Database
You can now preview proposed data changes for your Netlify database with a Git-style diff view, then apply part or all of those changes to a production version of your database.
Refresh Token metadata is now Generally Available
We're excited to announce that **Refresh Token Metadata** is now **Generally Available** for Enterprise customers. Refresh Token Metadata allows you to attach custom key-value pairs to refresh tokens, enabling richer context storage and more personalized authentication experiences.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Workflows rollback handlers now include step context
Workflows makes it easier to build reliable multi-step applications that can recover when downstream systems fail. Rollback handlers now receive the original step context via a ctx object for the step being rolled back. This includes ctx.step.name , ctx.step.count , ctx.attempt , and the step config with defaults applied.
Data Localization Suite - Regionalized IP Bindings for Regional Services
Regional Services now supports Regionalized IP Bindings , letting you regionalize traffic at the IP layer for prefixes you bring to Cloudflare through Bring Your Own IP (BYOIP) .
Speed - Cloudflare AMP/SXG is now end of life
Cloudflare Accelerated Mobile Pages (AMP) and Signed Exchanges (SXG) support has reached end of life. The features have been disabled since October 2025, so customers who had them configured should see no change to their traffic. Customers will no longer be able to configure AMP/SXG through API or rulesets. The Zone API will start throwing errors.
WAF Release - 2026-06-23
This week's release introduces new managed protection to address a critical pre-authentication OS command injection vulnerability in Ivanti Sentry (CVE-2026-10520). Key Findings CVE-2026-10520: An OS command injection vulnerability in Ivanti Sentry allows remote, unauthenticated attackers to execute arbitrary system commands with root privileges.
Cloudflare One Client for macOS (version 2026.6.782.1)
A new Beta release for the macOS Cloudflare One Client is now available on the beta releases downloads page . This beta release introduces upgraded security of device registration to be hardware-backed. Registration tokens can now be generated in the Secure Enclave whenever available to provide stronger protection against device impersonation.
AI Search - Control AI Search similarity cache freshness
AI Search now gives you more control over similarity cache freshness. Similarity cache helps reduce latency and inference cost by reusing responses for semantically similar queries. With these updates, you can choose how long responses are eligible for reuse and clear cached responses when they may be stale.
Audit Logs v2 , Organization-level audit logs in Cloudflare dashboard
You can now, as an Organization Super Administrator, view organization-level audit logs in the Cloudflare dashboard, in addition to the existing API access . Organization audit logs help you monitor activity across your organization.
Logs - New WebSocket Analytics Logpush dataset and updated fields
Cloudflare has updated Logpush datasets : New datasets WebSocket Analytics : A new dataset with fields including BytesReceivedClient , BytesReceivedOrigin , BytesSentClient , BytesSentOrigin , ClientASN , ClientIP , ClientRequestHost , ClientRequestPath , ClientRequestUserAgent , ColoCode , ConnectionCloseReason , ConnectionCloseSource , ConnectionID ...