Releasesby GlyphWAF - WAF Release - 2026-09-10 - Emergency
This update provides immediate defense against a high-severity, actively exploited zero-day vulnerability targeting Adobe Commerce and Magento Open Source storefronts.
Also shipped Sep 10, 2026Cloudflare in September 2026 →
BigQuery conversational analytics adds ML.CORRELATION in preview
Conversational analytics can now use ML.CORRELATION to calculate statistical correlations between a target column and one or more metric columns in a table.
BigQuery ML.METRICS evaluates predictions without a stored model
The preview ML.METRICS function computes classification or regression evaluation metrics on any table or query with actual and predicted values, with no need to create or reference a stored model.
You can use the AI.CAUSAL_EFFECT function to quantify the impact of specific interventions on time series data
You can use the AI.CAUSAL_EFFECT function to quantify the impact of specific interventions on time series data. This feature is in Preview .
BigQuery Data Engineering Agent integrates with BigQuery Graph
The Data Engineering Agent now uses BigQuery Graph for extra context between source and destination schemas, improving schema mapping accuracy in data engineering pipelines. It is generally available.
Using dbt artifacts for Slim CI and defer to production in dbt Projects on Snowflake (General availability)
Slim CI, defer to production, failed-execution recovery, and concurrent execution are now generally available for dbt Projects on Snowflake. Reuse dbt artifacts from recent production executions to accelerate development, streamline CI/CD workflows, and recover from failed production runs without maintaining a separate artifact store.
External secret providers (Preview)
External secret providers are now in preview. If your organization already keeps API keys, database passwords, and similar values in AWS Secrets Manager, Azure Key Vault, or Google Cloud Secret Manager, Snowflake can read those values when a query needs them, so you don't have to maintain a second copy in a Snowflake secret .
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Workflows - Default instance retention for new Workflows on Workers Paid is seven days
Workflows created on or after September 10, 2026, on the Workers Paid plan retain completed and errored instance state for seven days by default (previously 30 days). The seven day default helps to reduce storage costs by default. The maximum retention limit remains 30 days. The retention period for existing Workflows is unchanged.
Containers - Use Cloudflare Containers with Codex via the OpenAI Agents API
The OpenAI Agents API gives your application access to Codex through an OpenAI-managed API. OpenAI manages sessions, orchestration, context compaction, and recovery while your application provides tools and uses Cloudflare Containers as the execution environment.
Agents - Inspect Voice Agent turn latency and outcomes
@cloudflare/voice v0.4.0 now lets you inspect where each Voice Agent turn spends time and how it ends. client. addEventListener ( "turnmetrics" , ( turn ) => { console. log (turn.outcome, turn.turnTotalMs); }); About the Voice package The @cloudflare/voice package lets you build real-time voice agents with Cloudflare Agents.
AI Search supports extensionless R2 objects with Content-Type metadata
AI Search can index R2 objects without filename extensions when they include supported Content-Type metadata. This supports object keys that do not include file extensions while preserving file-type validation during indexing. For supported file types and Content-Type requirements, refer to R2 data sources .
Cloudflare One Client for macOS (version 2026.8.1290.1)
A new Beta release for the macOS Cloudflare One Client is now available on the beta releases downloads page . This beta release includes the following changes and improvements: Added support for routing non-RFC 1918 local IPv4 networks through the WARP tunnel when unrestricted LAN inclusion is enabled by policy or MDM.
Cloudflare One Client for Windows (version 2026.8.1290.1)
A new Beta release for the Windows Cloudflare One Client is now available on the beta releases downloads page . This beta release includes the following changes and improvements: Added support for routing non-RFC 1918 local IPv4 networks through the WARP tunnel when unrestricted LAN inclusion is enabled by policy or MDM.
AI Gateway custom costs support cache tokens
AI Gateway custom costs now support cache-read and cache-write token rates. This lets custom cost metrics reflect negotiated cache pricing across providers. Add per_cache_read_token or per_cache_write_token to the cf-aig-custom-cost header: { "per_token_in" : 0.000001 , "per_token_out" : 0.000002 , "per_cache_read_token" : 0.0000001 ...
Browser Isolation, Cloudflare One - Improved iOS tap-to-type experience for Browser Isolation
Browser Isolation has improved the tap-to-type experience for users on iOS devices. Previously, Browser Isolation displayed a full-screen overlay with the message tap to type when users focused a text field. The prompt now appears inline over the focused text field, reducing disruption when users enter text in isolated sessions.