Releasesby GlyphContainers - Use FUSE in local Containers development
Miniflare now automatically grants local Containers the Docker privileges required for Filesystem in Userspace (FUSE). This applies to wrangler dev , the Cloudflare Vite plugin, and direct Miniflare use. Miniflare grants these privileges when the local Docker daemon runs inside a virtual machine (VM).
Also shipped Aug 20, 2026Cloudflare in August 2026 →
BigQuery adds ML.TREND, ML.SEASONALITY and ML.DETECT_CHANGE_POINTS in preview
New table-valued functions in the query editor and conversational analytics identify trends, repeating seasonal patterns and structural change points in time series data.
BigQuery Graph core processing limited to Enterprise editions from April 26, 2027
Standard edition and on-demand billing support for BigQuery Graph core graph processing is deprecated, with processing restricted to Enterprise and Enterprise Plus from April 26, 2027. Graph measures remain available except in Standard edition.
The run_bq_command tool exposes the bq command-line tool within the Cloud CLI remote MCP server
The run_bq_command tool exposes the bq command-line tool within the Cloud CLI remote MCP server. AI agents can now execute advanced BigQuery operations, such as job scheduling, job management, and reservation management, through a managed MCP endpoint. For more information, see Use the Cloud CLI remote MCP server . This feature is in Preview .
AI_EXTRACT and AI_PARSE_DOCUMENT support for client-side encrypted stages and network-restricted accounts (General availability)
AI_EXTRACT and AI_PARSE_DOCUMENT now support documents stored on stages that use client-side or server-side encryption, including in accounts that use PrivateLink or other network policies that restrict public network access to stages. For more information, see the following topics:
Cortex Agent code execution tool (Preview)
The Cortex Agent code execution tool is now in public preview. When you enable the tool on an agent, the agent can generate and run Python in a secure, isolated sandbox to process data, perform calculations, and produce visualizations.
Salesforce connector mTLS authentication is now generally available
Mutual TLS (mTLS) authentication for the Salesforce connector in Lakeflow Connect is now generally available. With mTLS, Databricks and Salesforce exchange and verify client certificates to establish two-way trust, combined with the OAuth client credentials flow. Choose it for API-only users or when your organization requires mTLS.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Browser Run - Run more headless browsers concurrently with Browser Run
Browser Run lets you automate headless browsers on Cloudflare's global network. Run full browser sessions for interactive workflows, or use Quick Actions for one-request tasks such as screenshots, PDFs, and capturing page content.
Durable Objects, Workers - View deployments for Durable Objects in the dashboard
Durable Object namespaces now have a Deployments tab in the Cloudflare dashboard, showing the versions of the backing Worker that are currently live and the traffic split between them. Go to Durable Objects ↗ A Durable Object namespace is backed by a Worker script, so its deployments are the same as that Worker's deployments.
Cloudflare Fundamentals - Optional OAuth scopes
We're announcing the GA of Optional OAuth Scopes. OAuth client developers can now classify configured scopes as required or optional in the Cloudflare dashboard. By default, all configured scopes remain required .
Logs - New Logpush datasets and updated fields across multiple Logpush datasets in Cloudflare Logs
Cloudflare has updated Logpush datasets : New datasets Account Abuse Protection Events : A new dataset with fields including AuthenticationIdentityProvider , AuthenticationMethod , AuthenticationStatus , BotScore , ClientASN , ClientCity , ClientCountry , ClientIP , Email , EphemeralID , EventSource , EventType , FraudEmailRisk , Host , JA4 , RayID ...
Logs, Log Explorer - Per-zone post-quantum visibility in Logpush and Log Explorer
Cloudflare Radar ↗ publishes global statistics on post-quantum key agreement adoption across all Cloudflare traffic, but until now customers had no way to see the same measurement scoped to their own zones. This is now possible because the http_requests Logpush dataset , also queryable in Log Explorer , includes a new ClientTLSKeyExchangeGroup field.
WAF - Leaked credentials detection now scans Authorization headers
Leaked credentials detection now scans the Authorization request header for Basic Authentication credentials. Previously, the detection only inspected request bodies, query strings, and headers for well-known web applications or custom detection locations, which meant credentials sent through HTTP Basic Authentication were not covered by default.
CASB - Automatically remediate Microsoft 365 and Google Workspace findings with API-based CASB remediation policies
Cloudflare CASB is an API-based (agentless) tool that continuously scans your SaaS and cloud applications for security misconfigurations and data exposure. You can now use CASB remediation policies to automatically fix a finding or send a webhook the moment CASB detects it, without manual triage.
Data Loss Prevention - Test Data Loss Prevention profiles without sending traffic through Gateway
Test scan lets you check how Data Loss Prevention (DLP) evaluates sample content before you apply a profile to production traffic. Paste text, upload a file, or upload a HAR file, then select the profiles you want to test. Test scan sends content directly to the DLP scanner.