Releasesby GlyphRealtime - Set custom validity windows for RealtimeKit auth tokens
RealtimeKit authentication tokens now support custom validity windows and individual token revocation. Developers can define specific start and end times for tokens to ensure access is limited to scheduled sessions.
Also shipped Nov 12, 2026Cloudflare in November 2026 →
Genie ZeroOps is available in Beta
Genie ZeroOps is now in beta, providing automated monitoring for jobs, pipelines, and tables. It detects failures and data quality issues, investigates root causes, and proposes fixes.
You can track table-level data lineage in Knowledge Catalog for BigQuery pipelines
You can track table-level data lineage in Knowledge Catalog for BigQuery pipelines. For more information, see Track data lineage . This feature is generally available (GA).
BigQuery generative AI functions now support the gemini-4-hydrogen model
BigQuery generative AI functions now support the gemini-4-hydrogen model. This model is generally available .
Amazon Aurora and RDS now support Graviton5-based R9g database instances
AWS Graviton5-based R9g database instances are now generally available for Amazon Aurora with PostgreSQL compatibility and MySQL compatibility, and for Amazon RDS for PostgreSQL, MySQL, and MariaDB.
[In preview] Public Preview: SQL performance monitoring for Azure SQL Managed Instance
The public preview of Microsoft-managed performance monitoring for Azure SQL Managed Instance is now available. Customers monitoring business-critical SQL Managed Instance workloads often rely on custom scripts and disconnected monitoring tools. This requ
Gemini Enterprise: Gemini 4 Hydrogen available in web app, mobile app, Workflow Builder, and AI developer tools
Gemini 4 Hydrogen is generally available (GA) for the Gemini Enterprise web app, mobile app, Workflow Builder, and AI developer tools. Location availability : Supported in global , us , and eu multi-regions, with data residency and ML processing support in us and eu . For more information, see Data residency for Gemini Enterprise .
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Realtime - Add noise cancellation to web apps built on RealtimeKit
The new @cloudflare/realtimekit-noise-cancellation package allows developers to add browser-based noise filtering to RealtimeKit applications. The feature activates automatically when a microphone is available.
Cloudflare Tunnel, Cloudflare Tunnel for SASE - Cloudflare Tunnel extends URL normalization
Cloudflare Tunnel now handles semicolon-delimited path parameters during URL normalization to improve security for Access-validated ingress rules. This behavior will be enabled by default for new releases starting February 8, 2027.
AI Search, D1 - AI Search supports D1 databases as a data source (beta)
AI Search can now use a D1 database as a data source. AI Search runs a read-only query that you provide and indexes each returned row as a separate document. Scheduled syncs keep the index current as rows are added, changed, or removed. Create D1-backed instances from the dashboard, the REST API, or the Workers binding.
Browser Run - Kitesurf is now open source
Kitesurf ↗︎ , Cloudflare's browser engine for AI agents, is now open source on GitHub ↗︎ under the Apache 2.0 license. You can inspect the source, run it locally, and deploy your own instance to your Cloudflare account. Kitesurf runs entirely on Cloudflare Workers.
D1 - Export D1 databases with virtual tables
You can now export a D1 database that contains virtual tables, such as full-text search tables using SQLite's FTS5 module ↗︎ or spatial index tables using the R*Tree module. Previously, export failed for any database containing virtual tables. To include virtual tables in the dump, set dump_options.compatibility to sqlite3_cli_only on the D1 export API .
Rules - New hash functions , sha1(), md5(), and sha512()
Cloudflare Rules supports three new hash functions: sha1() , md5() , and sha512() . Use them to compute hashes for systems that require these algorithms. Like the existing sha256() function, each accepts a string or byte array and returns raw bytes: Function Algorithm Output length md5() MD5 16 bytes sha1() SHA-1 20 bytes sha512() SHA-512 64 bytes For...
WAF - Manage AI Security for Apps with Terraform
You can now manage AI Security for Apps with Terraform. Version 5.29.0 of the Terraform Cloudflare provider adds two resources: cloudflare_ai_security ↗︎ : Turns AI Security for Apps on or off for a zone. cloudflare_ai_security_custom_topics ↗︎ : Defines the custom topics that AI Security for Apps scores each prompt against.
Workers AI - EmbeddingGemma 2 now available on Workers AI
@cf/google/embeddinggemma-2 is now available on Workers AI. EmbeddingGemma 2 is an open multimodal embedding model from Google DeepMind. It maps text (including code), images, video, and audio into a single 768-dimensional vector space, so you can search a mixed collection of products, documents, and media with one text query.