Releasesby GlyphWAF - WAF Release - 2026-07-01
This release adds targeted coverage for a path traversal flaw in Fortinet FortiSandbox (CVE-2026-39813) and transitions the Anomaly:Header:User-Agent - Fake Bing or MSN Bot rule action from Block to Disabled.
Also shipped Jul 1, 2026Cloudflare in July 2026 →
Fivetran Context Layer is in public preview
Context Layer builds a context layer from documentation sources, systems of record and analytical sources, then connects it to an organization's AI coding and chat tools.
Fivetran sunsets the AVEVA PI and Delighted connectors
New AVEVA PI and Delighted connections are blocked from July 1, 2026. Existing AVEVA PI connections stop syncing July 23, 2026, and Delighted connections are paused after the Delighted API deprecation.
Fivetran Move a Connection REST API endpoint enters beta
A new beta endpoint moves connections from one destination group to another.
Workload identity federation for Snowflake workloads that access external services (General availability)
Snowflake can now act as the OpenID Connect (OIDC) provider when Snowflake workloads authenticate to external services. To use this capability, create a secret of type WORKLOAD_IDENTITY_FEDERATION and share its issuer URL and subject identifier with the external service to establish trust.
Veeva Vault connector (Beta)
The Veeva Vault connector is now available in Lakeflow Connect in Beta . Workspace admins can control access to this feature from the Previews page. The connector uses Veeva's Direct Data API to ingest all standard objects, custom objects, system tables, and audit trail tables from your Vault instance into Databricks.
MySQL integrated CDC pipeline is now in Beta
The integrated CDC pipeline for MySQL is now in Beta . An integrated CDC pipeline ingests change data from MySQL into Databricks using a single pipeline, combining extraction and application into one pipeline update. Unlike the standard gateway-based architecture, an integrated CDC pipeline requires no separate ingestion gateway.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Cloudflare One Client for Linux (version 2026.6.836.0)
A new GA release for the Linux Cloudflare One Client is now available on the stable releases downloads page . This package is the same release as 2026.6.822.0, with a fix for our RPM package. Previously the repository served a single build to every OS version, so an install could pull a dependency that isn't available on that release.
Access - Fix redirect URL fragment encoding for single-page applications
Access now correctly preserves URL fragment characters ( / , ? , = , & , ; ) when redirecting users back to an application after login. Previously, these characters were encoded with encodeURIComponent , which mangled fragment-based routes used by single-page applications (SPAs).
Access - Independent MFA for infrastructure applications
Access for Infrastructure now supports independent multi-factor authentication (MFA) for SSH connections using YubiKey PIV keys. This adds a hardware-backed second factor to SSH access, ensuring that a compromised device session alone is not sufficient to reach your servers.
Bots - New options to manage AI traffic
Not all AI traffic is the same. Now, all customers , including those on the Free plan , can manage AI crawlers based on what they actually do on your site. Cloudflare groups AI traffic into three behaviors you can control independently: Search, Agent, and Training .
Bots - More visibility into bot traffic with BotBase and Business Insights
With Content Independence Day 2026, Enterprise Bot Management customers get two new tools that make bot traffic far easier to see and reason about: BotBase , a searchable directory of every bot Cloudflare tracks, and Business Insights , a dashboard that shows how much value each crawler sends back to your business.
Containers - Use Google Artifact Registry images with Containers
Containers now support Google Artifact Registry ↗ images. After you configure credentials, you can use a fully qualified Google Artifact Registry image reference in your Wrangler configuration instead of first pushing the image to Cloudflare Registry.
Cloudflare Images - Images binding is now billed per unique transformation
The Images binding is now billed per unique transformation, matching the model already used for URL-based transformations. Repeat requests for the same combination of source image and parameters within the same calendar month are counted only once.
Vectorize - Reduced end-to-end latency for vector changes
We have greatly improved the throughput of the Vectorize write-ahead log (WAL) ↗ . As a result, we have significantly reduced the end-to-end latency for a vector change to become queryable: median latency has dropped from 2 minutes to under 30 seconds, and p99 latency from 5 minutes to under 2 minutes.