See your organization’s AI credits usage history
Admins on Organization and Enterprise plans can now view historical AI credit usage data to better plan for future costs.
Also shipped Jan 12, 2026Figma in January 2026 →
WAF Release - 2026-01-12
This week's release focuses on improvements to existing detections to enhance coverage. Key Findings Existing rule enhancements have been deployed to improve detection resilience against SQL Injection.
Email security - Enhanced visibility for post-delivery actions
The Action Log now provides enriched data for post-delivery actions to improve troubleshooting. In addition to success confirmations, failed actions now display the targeted Destination folder and a specific failure reason within the Activity field. Note Error messages will vary depending on whether you are using Google Workspace or Microsoft 365.
Rules - Metro code field now available in Rules
The ip.src.metro_code field in the Ruleset Engine is now populated with DMA (Designated Market Area) data. You can use this field to build rules that target traffic based on geographic market areas, enabling more granular location-based policies for your applications.
Security Center - Cloudflare Threat Events now support STIX2 format
We are excited to announce that Cloudflare Threat Events now supports the STIX2 (Structured Threat Information Expression) format. This was a highly requested feature designed to streamline how security teams consume and act upon our threat intelligence.
Workers - Validate your generated types with `wrangler types --check`
Wrangler now supports a --check flag for the wrangler types command. This flag validates that your generated types are up to date without writing any changes to disk. This is useful in CI/CD pipelines where you want to ensure that developers have regenerated their types after making changes to their Wrangler configuration.
Standardization of Asset URL Version Parameters
We're updating the format of versioning query parameters appended to store assets such as CSS and JS. Previously, some assets used a bare numeric query parameter, (for example, ?108 ), while others used a key-value format with the v query parameter. Moving forward, all asset URLs will consistently use the ?v=VERSION_STRING format for versioning.
More from FigmaEvery Figma release →
Enterprise key management
Enterprise Key Management (EKM) allows your organization to encrypt Figma file data with your own AWS Key Management Service (KMS) keys.
Figma for Jira update
Starting today, the Figma for Jira app supports webhooks, so teams can get instant design status updates like “Ready for Dev” directly in Jira tickets, with no admin setup required.
Updated left navigation bar in Figma Design
Refreshed navigation bar and an edge-to-edge variables authoring modal for easier navigation.
Embed your Figma Make prototypes
You can now embed Figma Make prototypes in Figma Design, FigJam, and Figma Slides to discuss, iterate, and align.
Discovery pipeline update: User prompts now included
Available for Governance+ customers
FigJam diagramming in Claude
Prompt to turn conversations, documents, and images into visual diagrams to break down complexity and visualize the bigger picture.
New Glass effect updates
The Glass effect is now generally available, with new updates that let you do more with Glass in Figma.