Releasesby GlyphCloudflare One Appliance, Cloudflare One, Cloudflare WAN - Download the Cloudflare One Virtual Appliance for your hypervisor from the dashboard
When you register a Cloudflare One Virtual Appliance , you can now select your hypervisor and download the appliance directly from the dashboard , no need to look up asset URLs. On the Connectors page, select Add an appliance , choose Virtual appliance , then select your hypervisor: VMware ESXi , Proxmox , or libvirt/KVM .
Also shipped Aug 24, 2026Cloudflare in August 2026 →
BigQuery data agent monitoring with Google Cloud Observability in preview
Teams can monitor the performance, adoption, latency and costs of BigQuery data agents and their conversations using Google Cloud Observability.
Verkada connector (Beta)
The Verkada connector is now available in Lakeflow Connect in Beta . Workspace admins can control access to this feature from the Previews page. The connector ingests organization audit logs and access users from your Verkada organization into Databricks. Authentication uses a Verkada organization API key. See Verkada connector .
Private network gateway is in Private Preview
Private network gateway is in Private Preview . A private network gateway connects Databricks serverless compute to resources in your VPC, on-premises systems, and the internet through a single managed gateway, reusing your existing network connectivity configuration (NCC).
Connect to the Databricks Genie app in Microsoft Teams with your workspace URL (Public Preview)
When you sign in to the Databricks Genie app in Microsoft Teams, you can now enter your workspace URL instead of a server hostname to connect to your Databricks account. See Databricks Genie app in Microsoft Teams .
The INSERT, UPDATE, and DELETE privileges are in Beta
The INSERT , UPDATE , and DELETE privileges are in Beta in Unity Catalog. These privileges are least-privilege alternatives to MODIFY that let you grant write access to a table's data without also granting the ability to change its schema or other metadata. The privileges require Databricks Runtime 18.1 or above.
Gemini Enterprise: D&B Commercial Graph data store (Preview)
The D&B Commercial Graph data store is available in Public Preview in Gemini Enterprise. You can connect D&B Commercial Graph to search and import company data using natural language. For more information, see Connect D&B Commercial Graph .
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Radar - RPKI ASPA path validation on Cloudflare Radar
Radar adds an ASPA validation tool ↗ to its Routing section ↗ . Enter a BGP AS_PATH and the tool checks it against the Autonomous System Provider Authorization (ASPA) ↗ records currently published in the RPKI, returning a verdict of Valid , Invalid , or Unknown .
Workers - Preserve exception details in console logs
Console methods now preserve exception details in your Worker's logs. When your Worker logs an exception, the corresponding log entry includes the exception name, message, and stack. For example, your Worker can catch and log an exception: try { throw new Error ( "Deliberately created exception" ); } catch (error) { console.
Access - Grace periods for service token rotation
Cloudflare Access administrators can now choose a grace period when rotating a service token secret. Both secrets remain valid during the grace period, giving administrators time to update services without interrupting authentication. The dashboard offers grace periods from one hour to 30 days. Administrators can also revoke the previous secret immediately.
Access - Temporarily turn off Access service tokens
Cloudflare Access administrators can now temporarily turn off service tokens without deleting them. A disabled token cannot authenticate, but its configuration remains available so administrators can turn it on again later. Turning off a token also stops any previous secret in an active rotation grace period.
AI Search - Store larger custom metadata values in AI Search
AI Search supports larger custom metadata values within a shared 10 KiB metadata envelope for each vector. The envelope includes AI Search system metadata and JSON overhead, so it is not a per-field limit. The first 64 UTF-8 bytes of each indexed string remain filterable. For details, refer to Metadata attributes .
API Shield - Symmetric key support for JWT validation
API Shield JSON Web Token validation now supports symmetric keys that use the HS256 , HS384 , and HS512 algorithms. You can configure HMAC verification keys in the Cloudflare dashboard or with the Cloudflare API. Cloudflare never stores symmetric credentials in plaintext. API responses do not include the credential.
Cloudflare One, Access - MCP server portals support MCP 2026-07-28 specification
MCP server portals support the stateless MCP 2026-07-28 specification for client and upstream server connections. The portal's /mcp endpoint automatically accepts stateless MCP 2026-07-28 requests and earlier 2025 Streamable HTTP clients.
Durable Objects - Prevent Durable Object alarm retries when using `ctx.abort()`
By default, an alarm interrupted by ctx.abort() retries after the Durable Object resets. Pass { retryAlarm: false } when the alarm should stop instead: src/index.js js import { DurableObject } from "cloudflare:workers" ; export class CleanupTask extends DurableObject { async alarm () { await this .ctx.storage. deleteAll (); this .ctx.