Releasesby GlyphEmail Service - Suppress recipients for one sending domain
Email Sending suppressions now have a scope : account : The suppression applies to every sending domain and subdomain in your account. This is the default. sending_domain : The suppression applies to one sending domain only. A suppression for mail.myappexample.com does not block mail from myappexample.com .
Also shipped Sep 25, 2026Cloudflare in September 2026 →
Tags for dashboards, notebooks, Databricks apps, and Genie Agents are now generally available
You can now apply tags to dashboards, notebooks, Databricks apps, and Genie Agents to organize and categorize your workspace assets. This capability is now generally available. Both governed and ungoverned key-value tags are supported. See Apply tags to Unity Catalog securable objects .
Default Enablement of Copilot Features for Copilot Business and Enterprise
We’re introducing a new global default policy for generally available GitHub Copilot features and supported client capabilities in enterprise and organization Copilot settings. For the next 28 days, you can configure this policy, but it won’t affect feature access for your users yet.
CLI v0.8.1 | CLI
CLI v0.8.1 Continue local work in the cloud: Use cr code handoff --summary to start a new cloud Coding Agent task with your session summary, an optional plan, and an automatically discovered transcript when available. Clearer handoff results: See transfer progress, the branch and commit, transferred filenames, and a direct link to the cloud task.
Free VMs without an account, tracing, OpenCode on Cloud Agents
Your next project can start with an SSH command. This week, we're opening up free VMs with no account required, introducing tracing in Priority Boarding, and bringing OpenCode to Cloud Agents. Let's get into it!
[In preview] Public Preview: Azure HorizonDB supports PostgreSQL 18
Azure HorizonDB is a fully managed, PostgreSQL-compatible, cloud-native database service designed for scalable, high-performance workloads.Azure HorizonDB, now in public preview, includes PostgreSQL 18 support.Learn more.
Private saved views for repository issues and “Relates to” issue relationship is generally available
Private saved views for repository issues Repository issues pages now support private saved views, making it easier to create and save personalized views of your issues. “Relates to” issue relationship The “Relates to” issue relationship now works across the REST API, GraphQL API, webhooks, timeline events, issues search, and projects search.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Browser Run, Queues - Subscribe to Browser Run crawl events
Browser Run crawl jobs can publish lifecycle events to Cloudflare Queues . Subscribe to started, updated, and finished events to track progress or trigger downstream processing without polling.
Cloudflare Network Firewall, Magic Transit, Cloudflare WAN - Managed Rulesets supported in Unified Routing
Cloudflare Advanced Network Firewall Managed Rulesets are now supported for accounts using Unified Routing mode. For the full list of feature availability, refer to Check feature availability before upgrading .
WAF Release - 2026-09-25 - Emergency
This update provides immediate defense against critical vulnerabilities affecting WordPress and JFrog Artifactory, including path traversal, local file inclusion (LFI), cross-site scripting (XSS), and authentication bypass exploits. Key Findings CVE-2026-87902: A high-severity Path Traversal and Local File Inclusion (LFI) vulnerability affecting WordPress.
Workers tracing , new getActiveSpan(), recordException(), startSpan(), and setAttributes() APIs
Custom spans in Workers now support more of the OpenTelemetry span API, so you can instrument more of your code and record errors directly on your spans. tracing.startSpan(name) creates a span without making it the active span, and returns it. Other spans do not nest under it. Call span.end() when the operation is complete.
Workers - See every release and gradual deployment on Workers Metrics charts
Workers Metrics charts now show every release in the selected time range, including the full progression of gradual deployments . This makes it easier to correlate changes in memory, CPU time, errors, or latency with the code that was serving traffic.
1.1.1.1 - RFC 8509 root key trust anchor sentinel support
1.1.1.1 now supports RFC 8509 ↗ root key trust anchor sentinels. They let you check whether the responding resolver trusts a DNSSEC root key ahead of a key rollover. To check for KSK-2024 (key tag 38696), query DNSSEC-signed names in dnstest.dev : # On a sentinel-aware resolver that trusts KSK-2024: # Returns NOERROR with an A answer.
R2 - R2 bandwidth usage metrics
New R2 product-level Metrics page in the Cloudflare dashboard shows bandwidth usage. You can view usage across all buckets or per bucket. Go to R2 Metrics ↗ Bandwidth throughput is split by object upload and download. The GraphQL Analytics API exposes the same bandwidth usage metrics that power the dashboard for your queries and analytics.
Access, Cloudflare One - MCP server portals are now generally available
MCP server portals are now generally available to all Cloudflare customers. A portal gives users one endpoint for approved Model Context Protocol (MCP) servers. Cloudflare Access logs tool, prompt, and resource activity.