Releasesby IbisWAF - WAF Release - 2026-10-12
BetayesterdayUnverifiedAdded Oct 13, 2026
This release introduces new detections to mitigate recent vulnerabilities affecting TanStack and Atlassian products. Key Findings CVE-2026-102989: A reflected Cross-Site Scripting (XSS) vulnerability affecting TanStack.
Topics: Security
More Cloudflare developer platform releases
Every Cloudflare developer platform releaseCloudflare One Client for Windows (version 2026.8.2110.0)
A new GA release for the Windows Cloudflare One Client is now available on the stable releases downloads page . This hotfix resolves an issue where the client could repeatedly disconnect and reconnect when a split tunnel configuration with hostname-based entries failed to apply.
Cloudflare One Client for macOS (version 2026.8.2110.0)
A new GA release for the macOS Cloudflare One Client is now available on the stable releases downloads page . This hotfix resolves an issue where the client could repeatedly disconnect and reconnect when a split tunnel configuration with hostname-based entries failed to apply.
Cloudflare One Client for Linux (version 2026.8.2110.0)
A new GA release for the Linux Cloudflare One Client is now available on the stable releases downloads page . This hotfix resolves an issue where the client could repeatedly disconnect and reconnect when a split tunnel configuration with hostname-based entries failed to apply.
Agents - New web_fetch tool in the Agents SDK for reading webpages and documents, with automatic markdown conversion
The Cloudflare Agents SDK now provides a web_fetch tool that reads webpages, PDFs, and supported Office documents, using Workers AI Markdown Conversion to turn them into text the model can read. The tool requests Markdown directly from sites that support Markdown for Agents and formats JSON for the model.
Agents, Workers - Run OpenCode 2.0 on Cloudflare with the Agents SDK
The Agents SDK now supports OpenCode 2.0 ↗︎ through the experimental OpenCodeHarness . Run OpenCode inside a plain Durable Object, with sessions stored in SQLite and Lifecycle jobs that wake interrupted work after eviction. The agents/models/opencode provider connects OpenCode to Workers AI through the AI binding.
Agents - New web_search tool in the Agents SDK, powered by the Cloudflare Web Search API
The Cloudflare Agents SDK now provides a web_search tool that searches the public web through the Cloudflare Web Search API , powered by ceramic.ai, Exa, and Linkup . When you give the web_search tool to your agent, the model provides a query and max results, and receives back a short numbered list of titles, URLs, and trimmed descriptions.
API Shield - Run schema learning on demand
You can now manually request an API Shield schema learning run without waiting for the weekly schedule. Use this during testing after sending representative traffic to your API. In Web Assets > Operations , open the More options menu for the operations table and select Ad-hoc learn schema . In the Schema learning dialog, select Run learning .
Cloudflare One - Unified dashboard navigation for Zero Trust
The Cloudflare dashboard now combines Zero Trust and main dashboard navigation. You can move between Cloudflare products from the same navigation. All customers can browse Zero Trust products from the primary navigation. Zero Trust customers can also access other services from this navigation.
Also shipped on Oct 12, 2026
Cloudflare in October 2026Change an incident’s conference bridge without leaving Slack with /pd meeting now Generally Available
Run /pd meeting during an incident, paste the new link, and PagerDuty updates the incident card instantly with a Join meeting button in the channel. Scribe Agent follows along to the new meeting on its own, so you keep the transcript for your post-incident review. Available to customers using the Pa...
New Incident Workflow action: Get Slack Mentions for Incident Participants now Generally Available
This new Incident Workflow action pulls the assignees, acknowledgers, and role holders on an incident and turns them into Slack @mentions. Pair it with Send Slack Message to tag everyone involved without hard-coding names, so the same workflow works across every team and rotation. Available to Pager...
Conference bridge selection in the Slack declare modal now Generally Available
Declare an incident with /pd declare and choose one of your pre-configured PagerDuty conference bridges from a dropdown, or paste a meeting URL if you don't have one set up. The bridge is on the incident from the moment it's declared, so responders can join from Slack in one click. Available to cust...
Incremental data transfers for the BigQuery Data Transfer Service for PostgreSQL and ServiceNow are now...
Incremental data transfers for the BigQuery Data Transfer Service for PostgreSQL and ServiceNow are now generally available (GA).
Support for Budget spend caps to pause your Cloud Run workloads is in General Availability (GA)
Support for Budget spend caps to pause your Cloud Run workloads is in General Availability (GA) .
Unity Gateway Skills API and developer tools are available in Beta
The Unity Gateway Skills REST API is now available in Beta , with create, read, update, list, delete, and finalize support across Databricks developer tools: Databricks CLI Python SDK Go SDK Go Modular SDK Java SDK JavaScript SDK See the Skills API and SDK reference .