Releasesby GlyphRepo-aware settings, Secure DB queries, IPv4 Private Networks
Last week, [we merged a PR from a hot air balloon in Mexico City](https://railway.com/changelog/2025-10-10-retreat-v8) (yes, really). This week, we're back on the ground and back to shipping.
Also shipped Oct 17, 2025Railway in October 2025 →
What's new in Sigma
Admin IP Allowlist for UI/Application (GA) You can configure an IP allowlist for the Sigma UI. After enabling the allowlist, you can add individual IP addresses or ranges of addresses in CIDR notation. Only users in the allowlist are able to access the Sigma application through the user interface. For more information, see Restrict access to Sigma by IP .
Security Center - New Application Security reports (Closed Beta)
Cloudflare's new Application Security report , currently in Closed Beta, is now available in the dashboard. Go to Security reports ↗ The reports are generated monthly and provide cyber security insights trends for all of the Enterprise zones in your Cloudflare account.
WAF - New detections released for WAF managed rulesets
This week we introduced several new detections across Cloudflare Managed Rulesets, expanding coverage for high-impact vulnerability classes such as SSRF, SQLi, SSTI, Reverse Shell attempts, and Prototype Pollution.
FGA Logging API Now Generally Available
__FGA Logging API Now Generally Available__ The Auth0 FGA Logging API is now Generally Available (GA). This dedicated endpoint provides a comprehensive audit trail for every interaction with the FGA system. You can now programmatically retrieve detailed logs for auditing, debugging, and monitoring.
Console improvements, infrastructure updates, and E2E testing guides release - Oct 17, 2025
Configure scale to zero in the console. Scale plan users can now adjust their scale to zero timeout directly in the Neon Console. Simply select Edit compute fro...
Email security - On-Demand Security Report
You can now generate on-demand security reports directly from the Cloudflare dashboard. This new feature provides a comprehensive overview of your email security posture, making it easier than ever to demonstrate the value of Cloudflare’s Email security to executives and other decision makers.
More from RailwayEvery Railway release →
Magic Config, HTTP Metrics, Secure DB queries
Last week, one of our newest additions was repo-aware settings, giving you autocomplete for your Railway config paths. This week? We're doubling down on the zero-config magic. Railway now automatically detects the environment variables your code needs and surfaces them right when you're configuring your service.
Railway Goes to the Land of Tacos and Lucha Libre
# Railway x Mexico City  [Art by **gerazay**](https://www.instagram.com/gerazay/) ¡Buenos Dias!
Enterprise SSO, More Magic Config, Metal Builders
Happy Halloween! 🎃 While everyone else is dressing up in costumes and pretending to be something they're not, we're helping your team members prove they are *exactly* who they say they are , with enterprise Single Sign-On (SSO).
Notifications, Buckets in Templates, Better RBAC
It’s November, and while your inbox is starting to be quieter, the Railway dashboard just got a lot more helpful. This week we're bringing dashboard notifications to Priority Boarding so the important stuff finds you right where you're working , no more tab-hopping to figure out what's happening with your deploys.
Better Webhooks, Better Service Settings, Office Hours
Between year-end shipping sprints and Black Friday load tests, it’s peak alert fatigue season. This week we’re shipping better webhooks so you only get pinged when it matters, smarter service settings that catch misconfigurations before they bite you, and [open office hours](https://cal.com/team/railway/railway-office-hours) with the Railway team for folks...
Notifications, Conductor Queue
This week is all about staying ahead of issues: Notifications graduate from Priority Boarding to General Availability, giving everyone a real-time view of what’s happening across projects and environments. There’s also a new way for our community Conductors to triage questions faster.
Buckets, AI Magic Config, Restricted Environments, and more
Happy Thanksgiving to those celebrating! 🦃 We've got something to be thankful for , Buckets are now generally available! No more reaching for third-party storage solutions; Railway's got you covered.
Smart Canvas, Magic Config IV
December is here and so is our final stretch of shipping before the holidays. While everyone else is debating whether it's too early to play Christmas music (it's not), we've been heads-down making Railway smarter about telling you what's actually going on with your services. This week is all about visibility.