Releasesby IbisAccess, Cloudflare One - Account context in Access deny redirects
Update2 days agoUnverifiedAdded Oct 16, 2026
App-aware Cloudflare Access deny redirects include an account_id query parameter when account context is available. Custom block pages can use it to identify the account that owns the application represented by kid .
Topics: SQL
More Cloudflare developer platform releases
Every Cloudflare developer platform releaseCloudflare One, Access - Infrastructure applications support a configurable session duration
Infrastructure applications now have a configurable session duration with a default value of 24 hours. You can set the session duration when creating or editing an infrastructure application in the dashboard or via the API.
DNS - Configure Advanced Custom Nameservers with nameserver sets (beta)
Nameserver sets are now available in beta to Enterprise accounts. A nameserver set groups two to five custom nameserver names with Cloudflare-assigned IP addresses. You can assign the set to zones in the same account. Enterprise customers using Cloudflare DNS can create Advanced Custom Nameserver sets.
Rules - Remove surrounding bytes with trim functions
Cloudflare Rules supports three new functions for removing surrounding bytes. Use them to remove whitespace before comparing request values. All HTTP products support these functions on all plans: trim() removes bytes from both ends. trim_start() removes bytes from the start. trim_end() removes bytes from the end.
WAF Release - 2026-10-14 - Emergency
This emergency release adds a new managed rule to block active exploitation of a critical remote code execution (RCE) vulnerability found in popular web frameworks.
Cloudflare One, Gateway - Application Library now supports custom applications
Starting today, you can create custom applications in the Application Library and reference them in Gateway DNS, Network, and HTTP policies. You can define an application with hostnames, IP subnets, or both. Then, optionally add TCP or UDP ports or port ranges to restrict HTTP and Network matching.
Cloudflare One - Validate data loss prevention matches with Cloudflare Workers
Data loss prevention (DLP) custom pattern entries can use Cloudflare Workers in your account to validate matches with organization-specific logic. Your Worker can adjust a match's confidence or reject the match. For setup steps and the Worker contract, refer to Validate data loss prevention matches with Cloudflare Workers .
Cloudflare WAN, Magic Transit, Cloudflare One - BGP route filtering for IPsec and GRE tunnels
Cloudflare WAN and Magic Transit IPsec and GRE tunnels now support BGP import and export filtering. Create reusable filter profiles that specify an allow or deny action and a list of Classless Inter-Domain Routing (CIDR) targets with exact, more-specific, or prefix-length matching. Each tunnel supports one import filter and one export filter.
Cloudflare One, Workers, Gateway - Gateway and Workers integration is now in public beta
Cloudflare Gateway now integrates with Cloudflare Workers in public beta on all Zero Trust plans. You can use the Forward action in Gateway HTTP policies to run your own code on matching, permitted traffic without managing a separate proxy.
Also shipped on Oct 14, 2026
Cloudflare in October 2026Workspace-level package repositories for Databricks Apps are generally available
Workspace admins can now configure default Python and npm package repositories for Databricks Apps. Apps inherit the workspace configuration while still allowing app-level overrides. See Configure default package repositories .
The Apache Hive catalog endpoint in the Lakehouse runtime catalog is now generally available (GA)
The Apache Hive catalog endpoint in the Lakehouse runtime catalog is now generally available (GA). This integration lets you use the metastore as a serverless, central metadata layer, enabling seamless data sharing and unified querying across Apache Spark, Apache Hive, and BigQuery.
Metadata migration from Dataproc Metastore to Lakehouse is now generally available (GA)
Metadata migration from Dataproc Metastore to Lakehouse is now generally available (GA). You can perform a one-time backfill migration or dry run to migrate metadata from a Dataproc Metastore service to an Apache Iceberg REST catalog endpoint or a Hive catalog endpoint using the Google Cloud console, the gcloud CLI, or the REST API.
Conversational analytics now lets you create a conversation with all of the data sources in multiple...
Conversational analytics now lets you create a conversation with all of the data sources in multiple projects, or create a conversation with a dataset . These features are generally available (GA).
You can publish a BigQuery Conversational Analytics agent in Gemini Enterprise
You can publish a BigQuery Conversational Analytics agent in Gemini Enterprise . This feature is now generally available (GA).
The AI.AGG function now supports the output_schema argument, which lets you specify the schema of the...
The AI.AGG function now supports the output_schema argument, which lets you specify the schema of the function output as a comma-separated list of fields. This feature is generally available (GA).