Releasesby GlyphData Loss Prevention - Source code detection improvements
Data Loss Prevention (DLP) source code detection now focuses on identifying whole source code file uploads and downloads. Previously, source code detection performed partial scans resulting in a higher rate of false positives.
Also shipped Jul 10, 2026Cloudflare in July 2026 →
Online Feature Store (Public Preview)
Online Feature Store is now available in public preview. Serve the latest feature values with low-latency online retrieval backed by Snowflake Postgres for real-time ML applications such as fraud detection, recommendations, and personalization.
Databricks-provided MCP Services will GA soon
Databricks-provided MCP Services for SaaS applications such as Slack, GitHub, Atlassian, and Google Drive will soon be generally available, with both read and write operations enabled by default. Admins and users can disable MCP Services and individual tools in Unity Gateway . See Connect agents to tools with MCP Services .
Secrets in Unity Catalog (Public Preview)
You can now store, govern, and access secrets as securable objects in Unity Catalog. A Unity Catalog secret uses the three-level namespace ( catalog.schema.secret ) and is governed by Unity Catalog privileges, so you can apply the same access controls and auditing that you use for other data assets. See Secrets in Unity Catalog .
Dreams research preview adds Claude Fable 5 and Claude Sonnet 5
Dreams, in research preview, now supports Claude Fable 5 and Claude Sonnet 5.
Agentic autofix for code scanning alerts in public preview
Agentic autofix is now in public preview for all code scanning alerts. It remediates alerts generated by CodeQL and third-party scanning tools by working across your codebase the way a developer would, it explores relevant files, proposes a fix, and reruns the original analysis to confirm the fix closes the alert before opening a pull request for your...
supabase-js will require TypeScript 5.0+ from January 31, 2027
@supabase/supabase-js will require TypeScript 5.0 starting January 31, 2027, dropping support for TypeScript 4.7 to 4.9.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Workers AI - Plain text output for Markdown Conversion
The Markdown Conversion service now supports a new output conversion option that controls the format of the converted content. Set output.format to text to receive plain text with Markdown syntax removed. The default value is markdown , so existing conversions are unchanged. Use the env.AI binding: await env. AI .
Workflows now supports delay functions when retrying
With Workflows , you can configure built-in retry behavior for each step. Previously, you could configure step retries with fixed delay durations, such as seconds, minutes, or hours, and backoff strategies such as constant , linear , or exponential . Step retries now support dynamic delay functions.
Digital Experience Monitoring - Wi-Fi signal and network performance analytics for Cloudflare One Client devices
Digital Experience Monitoring (DEX) provides visibility into device, network, and application performance across your Cloudflare SASE deployment. The Device Monitoring page now analyzes hardware and network data between a Cloudflare One Client device and Cloudflare's edge, so you can diagnose connectivity and performance issues.
DNS - New DNS Firewall UX with more dashboard settings
The DNS Firewall page in the Cloudflare dashboard has been refreshed, bringing several settings that were previously API-only into the UI and modernizing how you view and manage your DNS Firewall clusters.
Durable Objects, Workers - New Durable Object namespaces must use the SQLite storage backend
If your account does not already have a key-value (KV) backed Durable Object namespace, you can no longer create new ones. New Durable Object namespaces must use the SQLite storage backend , which has been recommended for all new Durable Objects since it became generally available ↗ in 2024.
Cloudflare Tunnel, Cloudflare Tunnel for SASE, Cloudflare Mesh - Zero Trust Networks route endpoints and Cloudflare Tunnel connections field retiring on October 5, 2026
On October 5, 2026 , two changes take effect across the Zero Trust Networks API and Cloudflare Tunnel API : the CIDR-encoded route endpoints are removed, and tunnel list and get responses no longer include the connections field.
Workers - Send npm package dependency metadata with Worker uploads
Wrangler now collects npm package dependency information from your project's package.json during wrangler deploy and wrangler versions upload , and includes it in the upload metadata sent to the Cloudflare API.
AI Search - Filter AI Search list items by exact object key
In AI Search , you can upload files to an instance, or connect a data source such as an R2 bucket, to make your content searchable with natural language. Each file becomes an item identified by an object key (its filename or path). The list items endpoint returns the items in an instance.