Releasesby IbisWAF - Updated unsafe topic detection for AI Security for Apps
Update2 days agoUnverifiedAdded Oct 9, 2026
AI Security for Apps now supports an updated set of categories for detecting unsafe topics in incoming prompts. The values available in cf.llm.prompt.unsafe_topic_categories have changed. Existing WAF custom rules remain valid, but rules that reference a removed or renamed category will no longer match that category.
More Cloudflare developer platform releases
Every Cloudflare developer platform releaseCloudflare One Client for macOS (version 2026.8.2100.0)
A new GA release for the macOS Cloudflare One Client is now available on the stable releases downloads page . This release includes the following highlights: Traffic to split tunnel excluded resources is no longer briefly blocked while the client is connecting or reconnecting. The client now keeps its learned split tunnel configuration across reconnects.
Cloudflare One Client for Windows (version 2026.8.2100.0)
A new GA release for the Windows Cloudflare One Client is now available on the stable releases downloads page . This release includes the following highlights: Traffic to split tunnel excluded resources is no longer briefly blocked while the client is connecting or reconnecting.
Cloudflare One Client for Linux (version 2026.8.2100.0)
A new GA release for the Linux Cloudflare One Client is now available on the stable releases downloads page . This release includes the following highlights: Traffic to split tunnel excluded resources is no longer briefly blocked while the client is connecting or reconnecting. The client now keeps its learned split tunnel configuration across reconnects.
Log Explorer - Query Log Explorer datasets from Observability Logs
Log Explorer datasets are now queried from the Logs page under Observability in the Cloudflare dashboard. The Logs page brings Log Explorer and Workers Observability datasets together with a shared filter builder, SQL editor, and visualizations. As part of this change, the Log Explorer menu is no longer shown in the dashboard navigation.
Cloudflare Fundamentals, Cloudflare One, Gateway, Organizations - Cloudflare Organizations is generally available
Cloudflare Organizations is now generally available for Enterprise customers and MSSP/Distributor partners. Organizations provides a top-level container for centrally managing accounts, members, analytics, and shared policies.
Workflows, Workers - Create Workflow instance batches by count or list
createBatch() now accepts an options object that creates up to 100 Workflow instances in one call. The result lists the created instances and explains why any others were not created. To use this form in local development and get its types from wrangler types , use Wrangler 4.148.0 or later. To create instances that share the same options, pass count .
AI Gateway - Standardize provider credential error responses in AI Gateway
AI Gateway's REST API now returns consistent responses when an AI provider rejects credentials. The change applies to POST /ai/run ↗︎ . Scenario Previous AI Gateway response New AI Gateway response ElevenLabs Provider-specific UserCredentialsError with HTTP 403 HTTP 401 with error code 2009 Google Vertex HTTP 500 for rejected credentials, with upstream...
DNS - Warnings when approaching your DNS records quota
The DNS records page in the Cloudflare dashboard now shows a warning once you have used 85% of your DNS records quota . The warning reflects the quota that applies to you. If your zone has its own quota, the warning shows that zone's usage. If your account uses an account-level DNS records quota , the warning shows your usage across all zones in the account.
Also shipped on Oct 7, 2026
Cloudflare in October 2026The microVM sandbox type is now Generally Available (GA) with GKE Sandbox in clusters that run version...
The microVM sandbox type is now Generally Available (GA) with GKE Sandbox in clusters that run version 1.37.0-gke.4713000 and later. MicroVM sandboxes provide hardware virtualization and isolation for untrusted workloads, AI agent runtimes, and multi-tenant environments.
SSH for Cloud Run services and instances is in Preview
SSH for Cloud Run services and instances is in Preview . Use this feature to establish a secure, interactive shell connection to your running instances.
Set credit usage limits and alerts for your workspace
Workspace admins and owners on paid plans can now set usage limits and alerts that keep shared credits under control. Set a credit threshold for the whole workspace, a project, a member, or, on Business and Enterprise plans, a group or an access token, and choose what happens when usage reaches it: an email or in-app alert, or a block that stops building or...
Faster inline text edits
Simple text changes you make with Edit text inline in the preview toolbar now apply in a few seconds. Text that your app builds from data or translates still takes a little longer.
Gemini 3.7 Flash is deprecated for your app's AI features
Google is retiring Gemini 3.7 Flash ( google/gemini-3.7-flash ), so it is now marked deprecated for your app's AI features and stops working on January 28, 2027. Apps that use it keep working until then, and Lovable no longer picks it for new AI features.
The Cost Analysis tab of the Billing page now includes Serverless Inference Live Usage, which lists the...
The Cost Analysis tab of the Billing page now includes Serverless Inference Live Usage, which lists the estimated cost and token counts of your Serverless Inference requests by model and model access key, for both teams and organizations. …