Releasesby GlyphWAF - WAF Release - 2026-10-28
This release introduces updates to the underlying rule expressions for PHP out-of-memory (OOM) vulnerabilities CVE-2026-109618, CVE-2026-109619 and CVE-2026-115560. The improvements are iterative changes based on reports from Security Researchers as part of PHP Capture the Flag (CTF) challenge ↗︎ .
Also shipped Oct 28, 2026Cloudflare in October 2026 →
Gemini Enterprise: Support for Brazil ( br ) region (GA with allowlist)
Gemini Enterprise is now generally available in the Brazil region with support for at-rest data residency and machine learning processing.
Match monitoring depth to workload needs with Infrastructure Basic
Datadog introduced the Infrastructure Basic tier, a lightweight monitoring option designed for lower-priority workloads to track host health and resource usage.
ChatGPT Pro and Business subscribers can claim monthly API credits
Eligible ChatGPT Pro and Business subscribers can now claim up to $500 per month in free API credits by linking an API organization to their subscription.
Upcoming end of life for the Genie One MCP Beta endpoint
The Genie One MCP Beta endpoint will reach end of life on November 30, 2026. Users must migrate to the generally available system.ai.genie_one_mcp MCP in Unity Gateway.
Serverless GPU for clean room notebooks is now generally available
Databricks has made serverless GPU compute generally available for clean room notebooks, enabling model inference and training over shared data.
Route and orchestrate models with GitHub Copilot Fusion
GitHub Copilot Fusion is now generally available, providing intelligent routing and orchestration across multiple models to balance performance and cost.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Access, Cloudflare One - Filter MCP tool-call analytics by response status
MCP tool-call analytics now support a response_status query parameter on timeseries endpoints. This allows developers to filter metrics by success, error, or cached status to better monitor tool performance.
Agents, Browser Run - Agents SDK: Preview dev servers in the browser without public URLs
The Cloudflare Agents SDK now supports internal hostnames for persistent browsers. This allows agents to preview dev servers running in sandboxes or containers without exposing them to the public internet.
China Network, Challenges, Bots - China-native Challenge Pages for the China Network
Challenge Pages served via the Cloudflare China Network now use Turnstile widgets hosted in Mainland China. This reduces latency and improves reliability by eliminating cross-border requests for visitors in the region.
Workers, Cloudflare CLI - Serve Workers Static Assets from a URL path prefix
Workers Static Assets now support serving files from a URL path prefix without requiring directory structure changes. Developers can configure this using the base_path setting in Wrangler or cloudflare.config.ts.
Workers Builds now retains builds and build logs for 90 days
Workers Builds now stores build logs for 90 days. Developers can access these logs via the Deployments tab or the API, after which they are automatically removed.
Workers VPC - Select a virtual network for VPC Network bindings
VPC Network bindings can select a specific virtual network by setting network_id to cf1:vnet:<UUID> , where the UUID is the ID of the virtual network. Continue to use cf1:network to select your account's default virtual network. Multiple bindings can select different virtual networks.
Access, Cloudflare One - Google Workspace SCIM user provisioning through generic SAML
System for Cross-domain Identity Management (SCIM) is an open standard that synchronizes user identities between an identity provider and a service. For more information, refer to SCIM provisioning . Google Workspace is rolling out custom SCIM profiles in beta.
Agents SDK: Agent Skills are files in your agent's Workspace
Agent Skills in the Cloudflare Agents SDK are now files. Write a folder with a SKILL.md into your agent's Computer ↗︎ Workspace, under /workspace/.agents/skills/ , and the agent can use it on its next turn. You do not need a build step or a deploy, and the agent can write its own skills.