Releasesby GlyphCloudflare One Appliance, Cloudflare One, Cloudflare WAN - Self-serve registration of Cloudflare One Virtual Appliance in the dashboard
You can now register a Cloudflare One Virtual Appliance and generate its license key directly from the dashboard, without contacting your account team. On the Connectors page, select Add an appliance and choose Virtual appliance to register a virtual appliance and generate its authentication key.
Also shipped Jul 6, 2026Cloudflare in July 2026 →
Budgets are now generally available
Budgets, including budgets for Unity Gateway, are now generally available. Budgets let admins define spending thresholds. For requests managed through Unity Gateway, including Genie interactions, admins can set additional per-user thresholds and overrides, with configurable actions such as email alerting and usage blocking.
Private Link for account-level resources (Beta)
You can now use Private Link to privately connect to Databricks account-level resources, such as the account console, through a VPC interface endpoint instead of the public internet. See Configure inbound Private Link for account-level resources .
July 6, 2026
This serverless compute release includes updates from Databricks Runtime 18 . New features Spark Declarative Pipelines on Lakeflow streaming query ID : Spark Declarative Pipelines on Lakeflow can now set the streaming query ID on demand.
You can use Gemini in Spanner Studio to fix errors in your SQL queries
You can use Gemini in Spanner Studio to fix errors in your SQL queries. When you run a query that contains an error, you can click Fix to view a line-by-line comparison of your query and a recommended correction, along with an explanation of the change. This feature is available in Preview .
Modeling
- Added support for agent-specific AI context via the omni_agent Mustache namespace, allowing you to customize AI behavior on a per-agent basis. See Optimize models for Omni AI for more information.
Self-serve identity provider changes
- New: Users with the Owner role can switch their tailnet's identity provider from the admin console for supported providers ( beta ).
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Cloudflare One Client for Windows (version 2026.6.850.0)
A new GA release for the Windows Cloudflare One Client is now available on the stable releases downloads page . This hotfix addresses a Windows authentication issue in the embedded WebView2 browser. Single sign-on could fail to use the Windows primary account, causing users to be prompted for an interactive sign-in.
Workflows pricing adds per-step billing. Step and storage billing to start no earlier than August 10, 2026
Workflows pricing now includes per-step billing. Requests and CPU time billing have been enabled since the initial public beta and is not changing. Workflows adds step billing A step is each unit of work executed by a Workflow, including step operations such as sleeping or waiting for events .
Access, Cloudflare One - File transfer controls for browser-based RDP (beta)
You can now configure file transfer controls for browser-based RDP with Cloudflare Access, allowing you to restrict whether users can upload or download files between their local machine and the remote Windows server.
Browser Isolation, Cloudflare One - Browser Isolation support for authorization proxy endpoints
Browser Isolation now supports Gateway authorization proxy endpoints . You can apply HTTP Isolate policies to traffic routed through authorization proxy endpoints, the same way you can for traffic from the Cloudflare One Client. Previously, only source IP proxy endpoints supported Browser Isolation, and only with non-identity policies.
Browser Run - New Browser Run endpoint for accessibility trees
Browser Run now supports a standalone /accessibilityTree endpoint, giving agent and automation workflows direct access to the browser's accessibility tree for a rendered webpage. An accessibility tree is the browser's structured view of a rendered page: roles, names, states, values, and hierarchy.
Logs - New WebSocket Analytics Logpush dataset
Enterprise customers can now push per-connection WebSocket analytics to any Logpush destination using the new websocket_analytics dataset. Each log record is emitted when a WebSocket connection closes and includes fields that were previously only available to Cloudflare engineers via internal tooling.
R2, R2 Data Catalog - R2 Data Catalog warns before you delete data manually
R2 Data Catalog is a managed Apache Iceberg ↗ catalog built directly into your R2 bucket. Iceberg tracks your data through a tree of metadata files, so every insert, update, and delete must go through a catalog transaction.
AI Search - Filter AI Search list items by exact object key
In AI Search , you can upload files to an instance, or connect a data source such as an R2 bucket, to make your content searchable with natural language. Each file becomes an item identified by an object key (its filename or path). The list items endpoint returns the items in an instance.