Releasesby GlyphR2, R2 Data Catalog - R2 Data Catalog now supports read-only API tokens
R2 Data Catalog now accepts read-only API tokens, so query engines and clients that only read data no longer need a read-write token. Previously, every catalog operation required an Admin Read & Write token, which granted read-only clients more access than they needed.
Also shipped Jul 13, 2026Cloudflare in July 2026 →
BigQuery Apache Iceberg managed tables get partitioning and transactions GA
Table partitioning, multi-statement transactions and advanced runtime are now generally available for Apache Iceberg managed tables in BigQuery.
Cross-cloud Lakehouse now supports Snowflake as a remote catalog provider (Preview)
Cross-cloud Lakehouse now supports Snowflake as a remote catalog provider (Preview). You can configure federated catalogs to query data stored in Snowflake directly from Google Cloud using BigQuery or Apache Spark without migrating data or building complex ETL pipelines. For more information, see Set up cross-cloud Lakehouse for Snowflake .
BigQuery project caps limit slots and concurrency per project in preview
Project caps, also called scheduling policies, limit maximum slots and concurrency for each project within a BigQuery reservation, helping control shared capacity.
BigQuery Overview page is generally available
The BigQuery Overview page is a hub for tutorials, features and resources, with guided paths for users of all skill levels.
BigQuery Migration Service MCP server for SQL translation is GA
The MCP server translates SQL queries into GoogleSQL, generates DDL from input queries and explains SQL translations, letting AI tools drive warehouse migrations.
BigQuery Data Transfer Service incremental Salesforce transfers are GA
Incremental data transfers from Salesforce in the BigQuery Data Transfer Service are now generally available.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Agents, Workers - Agents can respond to MCP elicitation requests
Agents connected to Model Context Protocol (MCP) servers with addMcpServer can now handle elicitation ↗ requests. Elicitation lets an MCP server request user input while it handles a tool call. Form mode collects structured, non-sensitive data. URL mode asks for consent before opening an out-of-band flow, such as third-party authorization or payment.
Bots - Precursor introduces session-based bot detection
Precursor is rolling out to all customers starting today. Precursor is client-side JavaScript that enables session-based bot detection. You can read the announcement blog ↗ for background on why we built Precursor and how session-level behavioral detection works.
Cloudflare Fundamentals - Origin Content Signals for Markdown for Agents
Markdown for Agents now preserves security- and cache-relevant response headers from your origin when converting HTML to Markdown: Markdown for Agents preserves security headers such as Strict-Transport-Security (HSTS), Content-Security-Policy (CSP), X-Frame-Options , Set-Cookie , and CORS headers (for example, Access-Control-Allow-Origin ) on the converted...
R2 Data Catalog compaction now optimizes manifest files
R2 Data Catalog , a managed Apache Iceberg ↗ catalog built into R2, now automatically optimizes manifest files as part of compaction . Manifest files track the data files that make up an Iceberg table.
WAF Release - 2026-07-14
This release introduces new rules targeting critical infrastructure vulnerabilities. These include an unauthenticated memory disclosure flaw in Citrix NetScaler ADC and Gateway (CVE-2026-8451) and a high-severity pre-authentication remote code execution (RCE) vulnerability in Progress Kemp LoadMaster (CVE-2026-8037).
Cloudflare Web Analytics - Improved reliability for account-wide Web Analytics dashboards
Cloudflare Web Analytics (Real User Monitoring) has rolled out performance optimizations to significantly improve the stability and loading speed of account-wide dashboards.
Workers - Platforms can now create Temporary Accounts via the Cloudflare API
Platforms can now create temporary preview accounts through the Cloudflare REST API. This lets your platform deploy a live Worker before the user signs in to Cloudflare. With the Temporary Accounts API, coding agents, AI app builders, and other platforms can build a similar flow for generated Workers and supported resources.
Gateway, DNS - Internal DNS is now generally available
Internal DNS is now generally available. Internal DNS provides authoritative and recursive DNS for private networks on the same global network and control plane you already use for public DNS, Zero Trust, and application services. Why it matters Consolidate DNS operations.