--- title: Changelogs image: https://edgetunnel-b2h.pages.dev/cf-twitter-card.png --- > Documentation Index > Fetch the complete documentation index at: https://edgetunnel-b2h.pages.dev/changelog/llms.txt > Use this file to discover all available pages before exploring further. [Skip to content](#%5Ftop) # Changelog New updates and improvements at Cloudflare. [ Subscribe to RSS ](https://edgetunnel-b2h.pages.dev/changelog/rss/index.xml) [ View RSS feeds ](https://edgetunnel-b2h.pages.dev/fundamentals/new-features/available-rss-feeds/) All products ![hero image](https://edgetunnel-b2h.pages.dev/_astro/hero.CVYJHPAd_26AMqX.svg) Dec 12, 2025 1. ### [R2 SQL now supports aggregations and schema discovery](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-12-aggregation-support-and-more/) [ R2 SQL ](https://edgetunnel-b2h.pages.dev/r2-sql/) R2 SQL now supports aggregation functions, `GROUP BY`, `HAVING`, along with schema discovery commands to make it easy to explore your data catalog. #### Aggregation Functions You can now perform aggregations on Apache Iceberg tables in [R2 Data Catalog](https://edgetunnel-b2h.pages.dev/r2/data-catalog/) using standard SQL functions including `COUNT(*)`, `SUM()`, `AVG()`, `MIN()`, and `MAX()`. Combine these with `GROUP BY` to analyze data across dimensions, and use `HAVING` to filter aggregated results. ```sql -- Calculate average transaction amounts by department SELECT department, COUNT(*), AVG(total_amount) FROM my_namespace.sales_data WHERE region = 'North' GROUP BY department HAVING COUNT(*) > 50 ORDER BY AVG(total_amount) DESC ``` ```sql -- Find high-value departments SELECT department, SUM(total_amount) FROM my_namespace.sales_data GROUP BY department HAVING SUM(total_amount) > 50000 ``` #### Schema Discovery New metadata commands make it easy to explore your data catalog and understand table structures: * `SHOW DATABASES` or `SHOW NAMESPACES` \- List all available namespaces * `SHOW TABLES IN namespace_name` \- List tables within a namespace * `DESCRIBE namespace_name.table_name` \- View table schema and column types ```bash ❯ npx wrangler r2 sql query "{ACCOUNT_ID}_{BUCKET_NAME}" "DESCRIBE default.sales_data;" ⛅️ wrangler 4.54.0 ───────────────────────────────────────────── ┌──────────────────┬────────────────┬──────────┬─────────────────┬───────────────┬───────────────────────────────────────────────────────────────────────────────────────────────────┐ │ column_name │ type │ required │ initial_default │ write_default │ doc │ ├──────────────────┼────────────────┼──────────┼─────────────────┼───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤ │ sale_id │ BIGINT │ false │ │ │ Unique identifier for each sales transaction │ ├──────────────────┼────────────────┼──────────┼─────────────────┼───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤ │ sale_timestamp │ TIMESTAMPTZ │ false │ │ │ Exact date and time when the sale occurred (used for partitioning) │ ├──────────────────┼────────────────┼──────────┼─────────────────┼───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤ │ department │ TEXT │ false │ │ │ Product department (8 categories: Electronics, Beauty, Home, Toys, Sports, Food, Clothing, Books) │ ├──────────────────┼────────────────┼──────────┼─────────────────┼───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤ │ category │ TEXT │ false │ │ │ Product category grouping (4 categories: Premium, Standard, Budget, Clearance) │ ├──────────────────┼────────────────┼──────────┼─────────────────┼───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤ │ region │ TEXT │ false │ │ │ Geographic sales region (5 regions: North, South, East, West, Central) │ ├──────────────────┼────────────────┼──────────┼─────────────────┼───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤ │ product_id │ INT │ false │ │ │ Unique identifier for the product sold │ ├──────────────────┼────────────────┼──────────┼─────────────────┼───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤ │ quantity │ INT │ false │ │ │ Number of units sold in this transaction (range: 1-50) │ ├──────────────────┼────────────────┼──────────┼─────────────────┼───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤ │ unit_price │ DECIMAL(10, 2) │ false │ │ │ Price per unit in dollars (range: $5.00-$500.00) │ ├──────────────────┼────────────────┼──────────┼─────────────────┼───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤ │ total_amount │ DECIMAL(10, 2) │ false │ │ │ Total sale amount before tax (quantity × unit_price with discounts applied) │ ├──────────────────┼────────────────┼──────────┼─────────────────┼───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤ │ discount_percent │ INT │ false │ │ │ Discount percentage applied to this sale (0-50%) │ ├──────────────────┼────────────────┼──────────┼─────────────────┼───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤ │ tax_amount │ DECIMAL(10, 2) │ false │ │ │ Tax amount collected on this sale │ ├──────────────────┼────────────────┼──────────┼─────────────────┼───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤ │ profit_margin │ DECIMAL(10, 2) │ false │ │ │ Profit margin on this sale as a decimal percentage │ ├──────────────────┼────────────────┼──────────┼─────────────────┼───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤ │ customer_id │ INT │ false │ │ │ Unique identifier for the customer who made the purchase │ ├──────────────────┼────────────────┼──────────┼─────────────────┼───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤ │ is_online_sale │ BOOLEAN │ false │ │ │ Boolean flag indicating if sale was made online (true) or in-store (false) │ ├──────────────────┼────────────────┼──────────┼─────────────────┼───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤ │ sale_date │ DATE │ false │ │ │ Calendar date of the sale (extracted from sale_timestamp) │ └──────────────────┴────────────────┴──────────┴─────────────────┴───────────────┴───────────────────────────────────────────────────────────────────────────────────────────────────┘ Read 0 B across 0 files from R2 On average, 0 B / s ``` To learn more about the new aggregation capabilities and schema discovery commands, check out the [SQL reference](https://edgetunnel-b2h.pages.dev/r2-sql/sql-reference/). If you're new to R2 SQL, visit our [getting started guide](https://edgetunnel-b2h.pages.dev/r2-sql/get-started/) to begin querying your data. Dec 11, 2025 1. ### [SentinelOne as Logpush destination](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-11-sentinelone-destination/) [ Logs ](https://edgetunnel-b2h.pages.dev/logs/) Cloudflare Logpush now supports **SentinelOne** as a native destination. Logs from Cloudflare can be sent to [SentinelOne AI SIEM ↗](https://www.sentinelone.com/) via [Logpush](https://edgetunnel-b2h.pages.dev/logs/logpush/). The destination can be configured through the Logpush UI in the Cloudflare dashboard or by using the [Logpush API](https://edgetunnel-b2h.pages.dev/api/resources/logpush/subresources/jobs/). For more information, refer to the [Destination Configuration](https://edgetunnel-b2h.pages.dev/logs/logpush/logpush-job/enable-destinations/sentinelone/) documentation. Dec 11, 2025 1. ### [WAF Release - 2025-12-11 - Emergency](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-11-emergency-waf-release/) [ WAF ](https://edgetunnel-b2h.pages.dev/waf/) This emergency release introduces rules for CVE-2025-55183 and CVE-2025-55184, targeting server-side function exposure and resource-exhaustion patterns, respectively. **Key Findings** Added coverage for Leaking Server Functions (CVE-2025-55183) and React Function DoS detection (CVE-2025-55184). **Impact** These updates strengthen protection for server-function abuse techniques (CVE-2025-55183, CVE-2025-55184) that may expose internal logic or disrupt application availability. | Ruleset | Rule ID | Legacy Rule ID | Description | Previous Action | New Action | Comments | | -------------------------- | ----------- | -------------- | ----------------------------------------------------- | --------------- | ---------- | ------------------------------------------------------------------- | | Cloudflare Managed Ruleset | ...fefb4e9b | N/A | React - Leaking Server Functions - CVE:CVE-2025-55183 | N/A | Block | This was labeled as Generic - Server Function Source Code Exposure. | | Cloudflare Free Ruleset | ...251e86aa | N/A | React - Leaking Server Functions - CVE:CVE-2025-55183 | N/A | Block | This was labeled as Generic - Server Function Source Code Exposure. | | Cloudflare Managed Ruleset | ...102ec699 | N/A | React - DoS - CVE:CVE-2025-55184 | N/A | Disabled | This was labeled as Generic – Server Function Resource Exhaustion. | Dec 10, 2025 1. ### [Pay Per Crawl (Private beta) - Discovery API, custom pricing, and advanced configuration](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-10-pay-per-crawl-enhancements/) [ AI Crawl Control ](https://edgetunnel-b2h.pages.dev/ai-crawl-control/) Pay Per Crawl is introducing enhancements for both AI crawler operators and site owners, focusing on programmatic discovery, flexible pricing models, and granular configuration control. #### For AI crawler operators #### Discovery API A new authenticated API endpoint allows verified crawlers to programmatically discover domains participating in Pay Per Crawl. Crawlers can use this to build optimized crawl queues, cache domain lists, and identify new participating sites. This eliminates the need to discover payable content through trial requests. The API endpoint is `GET https://crawlers-api.ai-audit.cfdata.org/charged_zones` and requires Web Bot Auth authentication. Refer to [Discover payable content](https://edgetunnel-b2h.pages.dev/ai-crawl-control/features/pay-per-crawl/use-pay-per-crawl-as-ai-owner/discover-payable-content/) for authentication steps, request parameters, and response schema. #### Payment header signature requirement Payment headers (`crawler-exact-price` or `crawler-max-price`) must now be included in the Web Bot Auth `signature-input` header components. This security enhancement prevents payment header tampering, ensures authenticated payment intent, validates crawler identity with payment commitment, and protects against replay attacks with modified pricing. Crawlers must add their payment header to the list of signed components when [constructing the signature-input header](https://edgetunnel-b2h.pages.dev/ai-crawl-control/features/pay-per-crawl/use-pay-per-crawl-as-ai-owner/crawl-pages/#22-sign-your-request-with-web-bot-auth). #### New `crawler-error` header Pay Per Crawl error responses now include a new `crawler-error` header with 11 specific [error codes](https://edgetunnel-b2h.pages.dev/ai-crawl-control/features/pay-per-crawl/use-pay-per-crawl-as-ai-owner/error-codes/) for programmatic handling. Error response bodies remain unchanged for compatibility. These codes enable robust error handling, automated retry logic, and accurate spending tracking. #### For site owners #### Configure free pages Site owners can now offer free access to specific pages like homepages, navigation, or discovery pages while charging for other content. Create a [Configuration Rule](https://edgetunnel-b2h.pages.dev/ai-crawl-control/features/pay-per-crawl/use-pay-per-crawl-as-site-owner/advanced-configuration/#disable-pay-per-crawl-by-uri-pattern) in **Rules** \> **Configuration Rules**, set your URI pattern using wildcard, exact, or prefix matching on the **URI Full** field, and enable the **Disable Pay Per Crawl** setting. When disabled for a URI pattern, crawler requests pass through without blocking or charging. Some paths are always free to crawl. These paths are: `/robots.txt`, `/sitemap.xml`, `/security.txt`, `/.well-known/security.txt`, `/crawlers.json`. #### Get started **AI crawler operators**: [Discover payable content](https://edgetunnel-b2h.pages.dev/ai-crawl-control/features/pay-per-crawl/use-pay-per-crawl-as-ai-owner/discover-payable-content/) | [Crawl pages](https://edgetunnel-b2h.pages.dev/ai-crawl-control/features/pay-per-crawl/use-pay-per-crawl-as-ai-owner/crawl-pages/) **Site owners**: [Advanced configuration](https://edgetunnel-b2h.pages.dev/ai-crawl-control/features/pay-per-crawl/use-pay-per-crawl-as-site-owner/advanced-configuration/) Dec 10, 2025 1. ### [WAF Release - 2025-12-10 - Emergency](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-10-emergency-waf-release/) [ WAF ](https://edgetunnel-b2h.pages.dev/waf/) This additional week's emergency release introduces improvements to our existing rule for React – Remote Code Execution – CVE-2025-55182 - 2, along with two new generic detections covering server-side function exposure and resource-exhaustion patterns. **Key Findings** Enhanced detection logic for React – RCE – CVE-2025-55182, added Generic – Server Function Source Code Exposure, and added Generic – Server Function Resource Exhaustion. **Impact** These updates strengthen protection against React RCE exploitation attempts and broaden coverage for common server-function abuse techniques that may expose internal logic or disrupt application availability. | Ruleset | Rule ID | Legacy Rule ID | Description | Previous Action | New Action | Comments | | -------------------------- | ----------- | -------------- | ------------------------------------------------------ | --------------- | ---------- | ------------------------------ | | Cloudflare Managed Ruleset | ...15fce168 | N/A | React - Remote Code Execution - CVE:CVE-2025-55182 - 2 | N/A | Block | This is an improved detection. | | Cloudflare Free Ruleset | ...74746aff | N/A | React - Remote Code Execution - CVE:CVE-2025-55182 - 2 | N/A | Block | This is an improved detection. | | Cloudflare Managed Ruleset | ...fefb4e9b | N/A | Generic - Server Function Source Code Exposure | N/A | Block | This is a new detection. | | Cloudflare Free Ruleset | ...251e86aa | N/A | Generic - Server Function Source Code Exposure | N/A | Block | This is a new detection. | | Cloudflare Managed Ruleset | ...102ec699 | N/A | Generic - Server Function Resource Exhaustion | N/A | Disabled | This is a new detection. | Dec 09, 2025 1. ### [WARP client for Windows (version 2025.10.118.1)](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-09-warp-windows-beta/) [ Cloudflare One Client ](https://edgetunnel-b2h.pages.dev/cloudflare-one/team-and-resources/devices/cloudflare-one-client/) A new Beta release for the Windows WARP client is now available on the [beta releases downloads page](https://edgetunnel-b2h.pages.dev/cloudflare-one/team-and-resources/devices/cloudflare-one-client/download/beta-releases/). This release contains minor fixes and improvements. **Changes and improvements** * The [Local Domain Fallback](https://edgetunnel-b2h.pages.dev/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/route-traffic/local-domains/) feature has been fixed for devices running WARP client version 2025.4.929.0 and newer. Previously, these devices could experience failures with Local Domain Fallback unless a fallback server was explicitly configured. This configuration is no longer a requirement for the feature to function correctly. * [Proxy mode](https://edgetunnel-b2h.pages.dev/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/modes/#local-proxy-mode) now supports transparent HTTP proxying in addition to CONNECT-based proxying. * Fixed an issue where sending large messages to the WARP daemon by Inter-Process Communication (IPC) could cause WARP to crash and result in service interruptions. **Known issues** * For Windows 11 24H2 users, Microsoft has confirmed a regression that may lead to performance issues like mouse lag, audio cracking, or other slowdowns. Cloudflare recommends users experiencing these issues upgrade to a minimum [Windows 11 24H2 KB5062553](https://support.microsoft.com/en-us/topic/july-8-2025-kb5062553-os-build-26100-4652-523e69cb-051b-43c6-8376-6a76d6caeefd) or higher for resolution. * Devices with KB5055523 installed may receive a warning about `Win32/ClickFix.ABA` being present in the installer. To resolve this false positive, update Microsoft Security Intelligence to [version 1.429.19.0](https://www.microsoft.com/en-us/wdsi/definitions/antimalware-definition-release-notes?requestVersion=1.429.19.0) or later. * DNS resolution may be broken when the following conditions are all true: * WARP is in Secure Web Gateway without DNS filtering (tunnel-only) mode. * A custom DNS server address is configured on the primary network adapter. * The custom DNS server address on the primary network adapter is changed while WARP is connected. To work around this issue, reconnect the WARP client by toggling off and back on. Dec 09, 2025 1. ### [WARP client for macOS (version 2025.10.118.1)](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-09-warp-macos-beta/) [ Cloudflare One Client ](https://edgetunnel-b2h.pages.dev/cloudflare-one/team-and-resources/devices/cloudflare-one-client/) A new Beta release for the macOS WARP client is now available on the [beta releases downloads page](https://edgetunnel-b2h.pages.dev/cloudflare-one/team-and-resources/devices/cloudflare-one-client/download/beta-releases/). This release contains minor fixes and improvements. **Changes and improvements** * The [Local Domain Fallback](https://edgetunnel-b2h.pages.dev/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/route-traffic/local-domains/) feature has been fixed for devices running WARP client version 2025.4.929.0 and newer. Previously, these devices could experience failures with Local Domain Fallback unless a fallback server was explicitly configured. This configuration is no longer a requirement for the feature to function correctly. * [Proxy mode](https://edgetunnel-b2h.pages.dev/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/modes/#local-proxy-mode) now supports transparent HTTP proxying in addition to CONNECT-based proxying. Dec 08, 2025 1. ### [Python cold start improvements](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-08-python-cold-start-improvements/) [ Workers ](https://edgetunnel-b2h.pages.dev/workers/) Python Workers now feature improved cold start performance, reducing initialization time for new Worker instances. This improvement is particularly noticeable for Workers with larger dependency sets or complex initialization logic. Every time you deploy a Python Worker, a memory snapshot is captured after the top level of the Worker is executed. This snapshot captures all imports, including package imports that are often costly to load. The memory snapshot is loaded when the Worker is first started, avoiding the need to reload the Python runtime and all dependencies on each cold start. We set up a benchmark that imports common packages ([httpx ↗](https://www.python-httpx.org/), [fastapi ↗](https://fastapi.tiangolo.com/) and [pydantic ↗](https://docs.pydantic.dev/latest/)) to see how Python Workers stack up against other platforms: | Platform | Mean Cold Start (ms) | | ------------------------- | -------------------- | | Cloudflare Python Workers | 1027 | | AWS Lambda | 2502 | | Google Cloud Run | 3069 | These benchmarks run continuously. You can view the results and the methodology on our [benchmark page ↗](https://cold.edgeworker.net). In additional testing, we have found that without any memory snapshot, the cold start for this benchmark takes around 10 seconds, so this change improves cold start performance by roughly a factor of 10. To get started with Python Workers, check out our [Python Workers overview](https://edgetunnel-b2h.pages.dev/workers/languages/python/). Dec 08, 2025 1. ### [Easy Python package management with Pywrangler](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-08-python-pywrangler/) [ Workers ](https://edgetunnel-b2h.pages.dev/workers/) We are introducing a brand new tool called Pywrangler, which simplifies package management in Python Workers by automatically installing Workers-compatible Python packages into your project. With Pywrangler, you specify your Worker's Python dependencies in your `pyproject.toml` file: **TOML** ```toml [project] name = "python-beautifulsoup-worker" version = "0.1.0" description = "A simple Worker using beautifulsoup4" requires-python = ">=3.12" dependencies = [ "beautifulsoup4" ] [dependency-groups] dev = [ "workers-py", "workers-runtime-sdk" ] ``` You can then develop and deploy your Worker using the following commands: ```bash uv run pywrangler dev uv run pywrangler deploy ``` Pywrangler automatically downloads and vendors the necessary packages for your Worker, and these packages are bundled with the Worker when you deploy. Consult the [Python packages documentation](https://edgetunnel-b2h.pages.dev/workers/languages/python/packages/) for full details on Pywrangler and Python package management in Workers. Dec 08, 2025 1. ### [Wrangler config is optional when using Vite plugin](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-08-vite-optional-config/) [ Workers ](https://edgetunnel-b2h.pages.dev/workers/) When using the [Cloudflare Vite plugin](https://edgetunnel-b2h.pages.dev/workers/vite-plugin/) to build and deploy Workers, a Wrangler configuration file is now optional for assets-only (static) sites. If no `wrangler.toml`, `wrangler.json`, or `wrangler.jsonc` file is found, the plugin generates sensible defaults for an assets-only site. The `name` is based on the `package.json` or the project directory name, and the `compatibility_date` uses the latest date supported by your installed Miniflare version. This allows easier setup for static sites using Vite. Note that SPAs will still need to [set assets.not\_found\_handling to single-page-application ↗](https://edgetunnel-b2h.pages.dev/workers/static-assets/routing/single-page-application/) in order to function correctly. Dec 08, 2025 1. ### [Configure Workers programmatically using the Vite plugin](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-08-vite-programmatic-config/) [ Workers ](https://edgetunnel-b2h.pages.dev/workers/) The [Cloudflare Vite plugin](https://edgetunnel-b2h.pages.dev/workers/vite-plugin/) now supports programmatic configuration of Workers without a Wrangler configuration file. You can use the `config` option to define Worker settings directly in your Vite configuration, or to modify existing configuration loaded from a Wrangler config file. This is particularly useful when integrating with other build tools or frameworks, as it allows them to control Worker configuration without needing users to manage a separate config file. #### The `config` option The Vite plugin's new `config` option accepts either a partial configuration object or a function that receives the current configuration and returns overrides. This option is applied after any config file is loaded, allowing the plugin to override specific values or define Worker configuration entirely in code. #### Example usage Setting `config` to an object to provide configuration values that merge with defaults and config file settings: **vite.config.ts** ```ts import { defineConfig } from "vite"; import { cloudflare } from "@cloudflare/vite-plugin"; export default defineConfig({ plugins: [ cloudflare({ config: { name: "my-worker", compatibility_flags: ["nodejs_compat"], send_email: [ { name: "EMAIL", }, ], }, }), ], }); ``` Use a function to modify the existing configuration: **vite.config.ts** ```ts import { defineConfig } from "vite"; import { cloudflare } from "@cloudflare/vite-plugin"; export default defineConfig({ plugins: [ cloudflare({ config: (userConfig) => { delete userConfig.compatibility_flags; }, }), ], }); ``` Return an object with values to merge: **vite.config.ts** ```ts import { defineConfig } from "vite"; import { cloudflare } from "@cloudflare/vite-plugin"; export default defineConfig({ plugins: [ cloudflare({ config: (userConfig) => { if (!userConfig.compatibility_flags.includes("no_nodejs_compat")) { return { compatibility_flags: ["nodejs_compat"] }; } }, }), ], }); ``` #### Auxiliary Workers Auxiliary Workers also support the `config` option, enabling multi-Worker architectures without config files. Define auxiliary Workers without config files using `config` inside the `auxiliaryWorkers` array: **vite.config.ts** ```ts import { defineConfig } from "vite"; import { cloudflare } from "@cloudflare/vite-plugin"; export default defineConfig({ plugins: [ cloudflare({ config: { name: "entry-worker", main: "./src/entry.ts", services: [{ binding: "API", service: "api-worker" }], }, auxiliaryWorkers: [ { config: { name: "api-worker", main: "./src/api.ts", }, }, ], }), ], }); ``` For more details and examples, see [Programmatic configuration](https://edgetunnel-b2h.pages.dev/workers/vite-plugin/reference/programmatic-configuration/). Dec 05, 2025 1. ### [Terraform v5.14.0 now available](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-05-terraform-v5140-provider/) [ Cloudflare Fundamentals ](https://edgetunnel-b2h.pages.dev/fundamentals/)[ Terraform ](https://edgetunnel-b2h.pages.dev/terraform/) Earlier this year, we announced the launch of the new Terraform v5 Provider. We are aware of the high number of issues reported by the Cloudflare community related to the v5 release. We have committed to releasing improvements on a [2-3 week cadence ↗](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5774) to ensure its stability and reliability, including the v5.14 release. We have also pivoted from an [issue-to-issue approach to a resource-per-resource approach ↗](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6237) \- we will be focusing on specific resources to not only stabilize the resource but also ensure it is migration-friendly for those migrating from v4 to v5. Thank you for continuing to raise issues. They make our provider stronger and help us build products that reflect your needs. This release includes bug fixes, the stabilization of even more popular resources, and more. #### Deprecation notice Resource affected: `api_shield_discovery_operation` Cloudflare continuously discovers and updates API endpoints and web assets of your web applications. To improve the maintainability of these dynamic resources, we are working on reducing the need to actively engage with discovered operations. The corresponding public API endpoint of [discovered operations ↗](https://edgetunnel-b2h.pages.dev/api/resources/api%5Fgateway/subresources/discovery/subresources/operations/) is not affected and will continue to be supported. #### Features * **pages\_project**: Add v4 -> v5 migration tests ([#6506 ↗](https://github.com/cloudflare/terraform-provider-cloudflare/pull/6506)) #### Bug fixes * **account\_members**: Makes member policies a set ([#6488 ↗](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6488)) * **pages\_project**: Ensures non empty refresh plans ([#6515 ↗](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6515)) * **R2**: Improves sweeper ([#6512 ↗](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6512)) * **workers\_kv**: Ignores value import state for verify ([#6521 ↗](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6521)) * **workers\_script**: No longer treats the migrations attribute as WriteOnly ([#6489 ↗](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6489)) * **workers\_script**: Resolves resource drift when worker has unmanaged secret ([#6504 ↗](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6504)) * **zero\_trust\_device\_posture\_rule**: Preserves input.version and other fields ([#6500 ↗](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6500)) and ([#6503 ↗](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6503)) * **zero\_trust\_dlp\_custom\_profile**: Adds sweepers for `dlp_custom_profile` * **zone\_subscription|account\_subscription**: Adds `partners_ent` as valid enum for `rate_plan.id` ([#6505 ↗](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6505)) * **zone**: Ensures datasource model schema parity ([#6487 ↗](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6487)) * **subscription**: Updates import signature to accept account\_id/subscription\_id to import account subscription ([#6510 ↗](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6510)) #### Upgrade to newer version We suggest waiting to migrate to v5 while we work on stabilization. This helps with avoiding any blocking issues while the Terraform resources are actively being [stabilized ↗](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6237). We will be releasing a new migration tool in March 2026 to help support v4 to v5 transitions for our most popular resources. #### For more information * [Terraform Provider ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs) * [Documentation on using Terraform with Cloudflare ↗](https://edgetunnel-b2h.pages.dev/terraform/) Dec 05, 2025 1. ### [Increased WAF payload limit for all plans](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-05-rcs-vuln/) [ WAF ](https://edgetunnel-b2h.pages.dev/waf/) Cloudflare WAF now inspects request-payload size of up to 1 MB across all plans to enhance our detection capabilities for React RCE (CVE-2025-55182). **Key Findings** React payloads commonly have a default maximum size of 1 MB. Cloudflare WAF previously inspected up to 128 KB on Enterprise plans, with even lower limits on other plans. **Update:** We later reinstated the maximum request-payload size the Cloudflare WAF inspects. Refer to [Updating the WAF maximum payload values](https://edgetunnel-b2h.pages.dev/changelog/2025-12-05-waf-max-payload-size-change/) for details. Dec 05, 2025 1. ### [Updating the WAF maximum payload values](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-05-waf-max-payload-size-change/) [ WAF ](https://edgetunnel-b2h.pages.dev/waf/) We are reinstating the maximum request-payload size the Cloudflare WAF inspects, with WAF on Enterprise zones inspecting up to 128 KB. **Key Findings** On [December 5, 2025](https://edgetunnel-b2h.pages.dev/changelog/2025-12-05-rcs-vuln/), we initially attempted to increase the maximum WAF payload limit to 1 MB across all plans. However, an automatic rollout for all customers proved impractical because the increase led to a surge in false positives for existing managed rules. This issue was particularly notable within the Cloudflare Managed Ruleset and the Cloudflare OWASP Core Ruleset, impacting customer traffic. **Impact** Customers on paid plans can increase the limit to 1 MB for any of their zones by contacting Cloudflare Support. Free zones are already protected up to 1 MB and do not require any action. Dec 04, 2025 1. ### [Connect to remote databases during local development with wrangler dev](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-04-hyperdrive-remote-database-local-dev/) [ Hyperdrive ](https://edgetunnel-b2h.pages.dev/hyperdrive/) You can now connect directly to remote databases and databases requiring TLS with `wrangler dev`. This lets you run your Worker code locally while connecting to remote databases, without needing to use `wrangler dev --remote`. The `localConnectionString` field and `CLOUDFLARE_HYPERDRIVE_LOCAL_CONNECTION_STRING_` environment variable can be used to configure the connection string used by `wrangler dev`. **JSONC** ```jsonc { "hyperdrive": [ { "binding": "HYPERDRIVE", "id": "your-hyperdrive-id", "localConnectionString": "postgres://user:password@remote-host.example.com:5432/database?sslmode=require" } ] } ``` Learn more about [local development with Hyperdrive](https://edgetunnel-b2h.pages.dev/hyperdrive/configuration/local-development/). Dec 04, 2025 1. ### [One-click Access protection for Workers now creates reusable Cloudflare Access policies](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-03-reusable-access-policies/) [ Workers ](https://edgetunnel-b2h.pages.dev/workers/) Workers applications now use reusable [Cloudflare Access policies](https://edgetunnel-b2h.pages.dev/cloudflare-one/access-controls/policies/) to reduce duplication and simplify access management across multiple Workers. Previously, enabling Cloudflare Access on a Worker created per-application policies, unique to each application. Now, we create reusable policies that can be shared across applications: * **Preview URLs**: All Workers preview URLs share a single "Cloudflare Workers Preview URLs" policy across your account. This policy is automatically created the first time you enable Access on any preview URL. By sharing a single policy across all preview URLs, you can configure access rules once and have them apply company-wide to all Workers which protect preview URLs. This makes it much easier to manage who can access preview environments without having to update individual policies for each Worker. * **Production workers.dev URLs**: When enabled, each Worker gets its own reusable policy (named ` - Production`) by default. We recognize production services often have different access requirements and having individual policies here makes it easier to configure service-to-service authentication or protect internal dashboards or applications with specific user groups. Keeping these policies separate gives you the flexibility to configure exactly the right access rules for each production service. When you disable Access on a production Worker, the associated policy is automatically cleaned up if it's not being used by other applications. This change reduces policy duplication, simplifies cross-company access management for preview environments, and provides the flexibility needed for production services. You can still customize access rules by editing the reusable policies in the Zero Trust dashboard. To enable Cloudflare Access on your Worker: 1. In the Cloudflare dashboard, go to **Workers & Pages**. 2. Select your Worker. 3. Go to **Settings** \> **Domains & Routes**. 4. For `workers.dev` or Preview URLs, click **Enable Cloudflare Access**. 5. Optionally, click **Manage Cloudflare Access** to customize the policy. For more information on configuring Cloudflare Access for Workers, refer to the [Workers Access documentation](https://edgetunnel-b2h.pages.dev/workers/configuration/routing/workers-dev/#manage-access-to-workersdev). Dec 03, 2025 1. ### [Reclassifications to Submissions](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-03-submission-terminology-update/) [ Email security ](https://edgetunnel-b2h.pages.dev/cloudflare-one/email-security/) We have updated the terminology “Reclassify” and “Reclassifications” to “Submit” and “Submissions” respectively. This update more accurately reflects the outcome of providing these items to Cloudflare. Submissions are leveraged to tune future variants of campaigns. To respect data sanctity, providing a submission does not change the original disposition of the emails submitted. ![nav_example](https://edgetunnel-b2h.pages.dev/_astro/reclassification-submission.B6nL5Hw7_Z2qliyJ.webp) This applies to all Email Security packages: * **Advantage** * **Enterprise** * **Enterprise + PhishGuard** Dec 03, 2025 1. ### [WAF Release - 2025-12-03 - Emergency](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-03-emergency-waf-release/) [ WAF ](https://edgetunnel-b2h.pages.dev/waf/) The WAF rule deployed yesterday to block unsafe deserialization-based RCE has been updated. The rule description now reads “React – RCE – CVE-2025-55182”, explicitly mapping to the recently disclosed React Server Components vulnerability. Detection logic remains unchanged. **Key Findings** Rule description updated to reference React – RCE – CVE-2025-55182 while retaining existing unsafe-deserialization detection. **Impact** Improved classification and traceability with no change to coverage against remote code execution attempts. | Ruleset | Rule ID | Legacy Rule ID | Description | Previous Action | New Action | Comments | | -------------------------- | ----------- | -------------- | -------------------------------- | --------------- | ---------- | ------------------------------------------------------- | | Cloudflare Managed Ruleset | ...5fb92fba | N/A | React - RCE - CVE:CVE-2025-55182 | N/A | Block | Rule metadata description changed. Detection unchanged. | | Cloudflare Free Ruleset | ...99702280 | N/A | React - RCE - CVE:CVE-2025-55182 | N/A | Block | Rule metadata description changed. Detection unchanged. | Dec 02, 2025 1. ### [WAF Release - 2025-12-02 - Emergency](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-02-emergency-waf-release/) [ WAF ](https://edgetunnel-b2h.pages.dev/waf/) This week's emergency release introduces a new rule to block a critical RCE vulnerability in widely-used web frameworks through unsafe deserialization patterns. **Key Findings** New WAF rule deployed for RCE Generic Framework to block malicious POST requests containing unsafe deserialization patterns. If successfully exploited, this vulnerability allows attackers with network access via HTTP to execute arbitrary code remotely. **Impact** * Successful exploitation allows unauthenticated attackers to execute arbitrary code remotely through crafted serialization payloads, enabling complete system compromise, data exfiltration, and potential lateral movement within affected environments. | Ruleset | Rule ID | Legacy Rule ID | Description | Previous Action | New Action | Comments | | -------------------------- | ----------- | -------------- | ----------------------- | --------------- | ---------- | ------------------------ | | Cloudflare Managed Ruleset | ...5fb92fba | N/A | RCE Generic - Framework | N/A | Block | This is a new detection. | | Cloudflare Free Ruleset | ...99702280 | N/A | RCE Generic - Framework | N/A | Block | This is a new detection. | Dec 01, 2025 1. ### [WAF Release - 2025-12-01](https://edgetunnel-b2h.pages.dev/changelog/post/2025-12-01-waf-release/) [ WAF ](https://edgetunnel-b2h.pages.dev/waf/) This week’s release introduces new detections for remote code execution attempts targeting Monsta FTP (CVE-2025-34299), alongside improvements to an existing XSS detection to enhance coverage. **Key Findings** * CVE-2025-34299 is a critical remote code execution flaw in Monsta FTP, arising from improper handling of user-supplied parameters within the file-handling interface. Certain builds allow crafted requests to bypass sanitization and reach backend PHP functions that execute arbitrary commands. Attackers can send manipulated parameters through the web panel to trigger command execution within the application’s runtime environment. **Impact** If exploited, the vulnerability enables full remote command execution on the underlying server, allowing takeover of the hosting environment, unauthorized file access, and potential lateral movement. As the flaw can be triggered without authentication on exposed Monsta FTP instances, it represents a severe risk for publicly reachable deployments. | Ruleset | Rule ID | Legacy Rule ID | Description | Previous Action | New Action | Comments | | -------------------------- | ----------- | -------------- | ------------------------------------------------------- | --------------- | ---------- | ---------------------------------------------------------------------------------------- | | Cloudflare Managed Ruleset | ...a4fcc8a8 | N/A | Monsta FTP - Remote Code Execution - CVE:CVE-2025-34299 | Log | Block | This is a new detection | | Cloudflare Managed Ruleset | ...b7492846 | N/A | XSS - JS Context Escape - Beta | Log | Block | This rule is merged into the original rule "XSS - JS Context Escape" (ID: ...7a3769d3 ) | Nov 26, 2025 1. ### [Agents SDK v0.2.24 with resumable streaming, MCP improvements, and schedule fixes](https://edgetunnel-b2h.pages.dev/changelog/post/2025-11-26-agents-resumable-streaming/) [ Agents ](https://edgetunnel-b2h.pages.dev/agents/)[ Workers ](https://edgetunnel-b2h.pages.dev/workers/) The latest release of [@cloudflare/agents ↗](https://github.com/cloudflare/agents) brings resumable streaming, significant MCP client improvements, and critical fixes for schedules and Durable Object lifecycle management. #### Resumable streaming `AIChatAgent` now supports resumable streaming, allowing clients to reconnect and continue receiving streamed responses without losing data. This is useful for: * Long-running AI responses * Users on unreliable networks * Users switching between devices mid-conversation * Background tasks where users navigate away and return * Real-time collaboration where multiple clients need to stay in sync Streams are maintained across page refreshes, broken connections, and syncing across open tabs and devices. #### Other improvements * Default JSON schema validator added to MCP client * [Schedules ↗](https://edgetunnel-b2h.pages.dev/agents/runtime/execution/schedule-tasks/) can now safely destroy the agent #### MCP client API improvements The `MCPClientManager` API has been redesigned for better clarity and control: * **New `registerServer()` method**: Register MCP servers without immediately connecting * **New `connectToServer()` method**: Establish connections to registered servers * **Improved reconnect logic**: `restoreConnectionsFromStorage()` now properly handles failed connections **TypeScript** ```ts // Register a server to Agent const { id } = await this.mcp.registerServer({ name: "my-server", url: "https://my-mcp-server.example.com", }); // Connect when ready await this.mcp.connectToServer(id); // Discover tools, prompts and resources await this.mcp.discoverIfConnected(id); ``` The SDK now includes a formalized `MCPConnectionState` enum with states: `idle`, `connecting`, `authenticating`, `connected`, `discovering`, and `ready`. #### Enhanced MCP discovery MCP discovery fetches the available tools, prompts, and resources from an MCP server so your agent knows what capabilities are available. The `MCPClientConnection` class now includes a dedicated `discover()` method with improved reliability: * Supports cancellation via AbortController * Configurable timeout (default 15s) * Discovery failures now throw errors immediately instead of silently continuing #### Bug fixes * Fixed a bug where [schedules ↗](https://edgetunnel-b2h.pages.dev/agents/runtime/execution/schedule-tasks/) meant to fire immediately with this.schedule(0, ...) or `this.schedule(new Date(), ...)` would not fire * Fixed an issue where schedules that took longer than 30 seconds would occasionally time out * Fixed SSE transport now properly forwards session IDs and request headers * Fixed AI SDK stream events conversion to UIMessageStreamPart #### Upgrade To update to the latest version: ```sh npm i agents@latest ``` Nov 25, 2025 1. ### [New Zombie API detection for API Shield](https://edgetunnel-b2h.pages.dev/changelog/post/2025-11-25-zombie-endpoint-risk-label/) [ API Shield ](https://edgetunnel-b2h.pages.dev/api-shield/) API Shield now automatically detects zombie endpoints — saved endpoints that have not received traffic for an extended period. When detected, the `cf-risk-zombie` [risk label](https://edgetunnel-b2h.pages.dev/api-shield/management-and-monitoring/endpoint-labels/#risk-labels) is applied. The scan runs daily alongside existing risk scans. Endpoints are labeled after 32 days without traffic. Zombie endpoints may indicate deprecated or forgotten API surface area that could pose a security risk. Review these endpoints and consider removing them from Endpoint Management if they are no longer in use. Also consider using a [fallthrough rule](https://edgetunnel-b2h.pages.dev/api-shield/security/schema-validation/#add-validation-by-adding-a-fallthrough-rule) to prevent communication with endpoints removed from Endpoint Management. Nov 25, 2025 1. ### [Audit Logs for Cache Purge Events](https://edgetunnel-b2h.pages.dev/changelog/post/2025-11-25-audit-logs-for-cache-purge-events/) [ Cache / CDN ](https://edgetunnel-b2h.pages.dev/cache/) You can now review detailed audit logs for cache purge events, giving you visibility into what purge requests were sent, what they contained, and by whom. Audit your purge requests via the Dashboard or API for all purge methods: * Purge everything * List of prefixes * List of tags * List of hosts * List of files #### Example The detailed audit payload is visible within the Cloudflare Dashboard (under **Manage Account** \> **Audit Logs**) and via the API. Below is an example of the Audit Logs v2 payload structure: ```json { "action": { "result": "success", "type": "create" }, "actor": { "id": "1234567890abcdef", "email": "user@example.com", "type": "user" }, "resource": { "product": "purge_cache", "request": { "files": [ "https://example.com/images/logo.png", "https://example.com/css/styles.css" ] } }, "zone": { "id": "023e105f4ecef8ad9ca31a8372d0c353", "name": "example.com" } } ``` #### Get started To get started, refer to the [Audit Logs documentation](https://edgetunnel-b2h.pages.dev/fundamentals/account/account-security/audit-logs/). Nov 25, 2025 1. ### [Launching FLUX.2 \[dev\] on Workers AI](https://edgetunnel-b2h.pages.dev/changelog/post/2025-11-25-flux-2-dev-workers-ai/) [ Workers AI ](https://edgetunnel-b2h.pages.dev/workers-ai/) We've partnered with Black Forest Labs (BFL) to bring their latest FLUX.2 \[dev\] model to Workers AI! This model excels in generating high-fidelity images with physical world grounding, multi-language support, and digital asset creation. You can also create specific super images with granular controls like JSON prompting. Read the [BFL blog ↗](https://bfl.ai/flux2) to learn more about the model itself. Read our [Cloudflare blog ↗](https://blog.cloudflare.com/flux-2-workers-ai) to see the model in action, or try it out yourself on our [multi modal playground ↗](https://multi-modal.ai.cloudflare.com/). Pricing documentation is available on the [model page](https://edgetunnel-b2h.pages.dev/workers-ai/models/flux-2-dev/) or [pricing page](https://edgetunnel-b2h.pages.dev/workers-ai/platform/pricing/). Note, we expect to drop pricing in the next few days after iterating on the model performance. #### Workers AI Platform specifics The model hosted on Workers AI is able to support up to 4 image inputs (512x512 per input image). Note, this image model is one of the most powerful in the catalog and is expected to be slower than the other image models we currently support. One catch to look out for is that this model takes multipart form data inputs, even if you just have a prompt. With the REST API, the multipart form data input looks like this: ```bash curl --request POST \ --url 'https://api.cloudflare.com/client/v4/accounts/{ACCOUNT}/ai/run/@cf/black-forest-labs/flux-2-dev' \ --header 'Authorization: Bearer {TOKEN}' \ --header 'Content-Type: multipart/form-data' \ --form 'prompt=a sunset at the alps' \ --form steps=25 --form width=1024 --form height=1024 ``` With the Workers AI binding, you can use it as such: **JavaScript** ```javascript const form = new FormData(); form.append('prompt', 'a sunset with a dog'); form.append('width', '1024'); form.append('height', '1024'); //this dummy request is temporary hack //we're pushing a change to address this soon const formRequest = new Request('http://dummy', { method: 'POST', body: form }); const formStream = formRequest.body; const formContentType = formRequest.headers.get('content-type') || 'multipart/form-data'; const resp = await env.AI.run("@cf/black-forest-labs/flux-2-dev", { multipart: { body: formStream, contentType: formContentType } }); ``` The parameters you can send to the model are detailed here: JSON Schema for Model **Required Parameters** * `prompt` (string) - Text description of the image to generate **Optional Parameters** * `input_image_0` (string) - Binary image * `input_image_1` (string) - Binary image * `input_image_2` (string) - Binary image * `input_image_3` (string) - Binary image * `steps` (integer) - Number of inference steps. Higher values may improve quality but increase generation time * `guidance` (float) - Guidance scale for generation. Higher values follow the prompt more closely * `width` (integer) - Width of the image, default `1024` Range: 256-1920 * `height` (integer) - Height of the image, default `768` Range: 256-1920 * `seed` (integer) - Seed for reproducibility ```plaintext ## Multi-Reference Images The FLUX.2 model is great at generating images based on reference images. You can use this feature to apply the style of one image to another, add a new character to an image, or iterate on past generate images. You would use it with the same multipart form data structure, with the input images in binary. For the prompt, you can reference the images based on the index, like `take the subject of image 1 and style it like image 0` or even use natural language like `place the dog beside the woman`. Note: you have to name the input parameter as `input_image_0`, `input_image_1`, `input_image_2` for it to work correctly. All input images must be smaller than 512x512. ```bash curl --request POST \ --url 'https://api.cloudflare.com/client/v4/accounts/{ACCOUNT}/ai/run/@cf/black-forest-labs/flux-2-dev' \ --header 'Authorization: Bearer {TOKEN}' \ --header 'Content-Type: multipart/form-data' \ --form 'prompt=take the subject of image 1 and style it like image 0' \ --form input_image_0=@/Users/johndoe/Desktop/icedoutkeanu.png \ --form input_image_1=@/Users/johndoe/Desktop/me.png \ --form steps=25 --form width=1024 --form height=1024 ``` Through Workers AI Binding: **JavaScript** ```javascript //helper function to convert ReadableStream to Blob async function streamToBlob(stream: ReadableStream, contentType: string): Promise { const reader = stream.getReader(); const chunks = []; while (true) { const { done, value } = await reader.read(); if (done) break; chunks.push(value); } return new Blob(chunks, { type: contentType }); } const image0 = await fetch("http://image-url"); const image1 = await fetch("http://image-url"); const form = new FormData(); const image_blob0 = await streamToBlob(image0.body, "image/png"); const image_blob1 = await streamToBlob(image1.body, "image/png"); form.append('input_image_0', image_blob0) form.append('input_image_1', image_blob1) form.append('prompt', 'take the subject of image 1and style it like image 0') //this dummy request is temporary hack //we're pushing a change to address this soon const formRequest = new Request('http://dummy', { method: 'POST', body: form }); const formStream = formRequest.body; const formContentType = formRequest.headers.get('content-type') || 'multipart/form-data'; const resp = await env.AI.run("@cf/black-forest-labs/flux-2-dev", { multipart: { body: form, contentType: "multipart/form-data" } }) ``` #### JSON Prompting The model supports prompting in JSON to get more granular control over images. You would pass the JSON as the value of the 'prompt' field in the multipart form data. See the JSON schema below on the base parameters you can pass to the model. JSON Prompting Schema ```json { "type": "object", "properties": { "scene": { "type": "string", "description": "Overall scene setting or location" }, "subjects": { "type": "array", "items": { "type": "object", "properties": { "type": { "type": "string", "description": "Type of subject (e.g., desert nomad, blacksmith, DJ, falcon)" }, "description": { "type": "string", "description": "Physical attributes, clothing, accessories" }, "pose": { "type": "string", "description": "Action or stance" }, "position": { "type": "string", "enum": ["foreground", "midground", "background"], "description": "Depth placement in scene" } }, "required": ["type", "description", "pose", "position"] } }, "style": { "type": "string", "description": "Artistic rendering style (e.g., digital painting, photorealistic, pixel art, noir sci-fi, lifestyle photo, wabi-sabi photo)" }, "color_palette": { "type": "array", "items": { "type": "string" }, "minItems": 3, "maxItems": 3, "description": "Exactly 3 main colors for the scene (e.g., ['navy', 'neon yellow', 'magenta'])" }, "lighting": { "type": "string", "description": "Lighting condition and direction (e.g., fog-filtered sun, moonlight with star glints, dappled sunlight)" }, "mood": { "type": "string", "description": "Emotional atmosphere (e.g., harsh and determined, playful and modern, peaceful and dreamy)" }, "background": { "type": "string", "description": "Background environment details" }, "composition": { "type": "string", "enum": [ "rule of thirds", "circular arrangement", "framed by foreground", "minimalist negative space", "S-curve", "vanishing point center", "dynamic off-center", "leading leads", "golden spiral", "diagonal energy", "strong verticals", "triangular arrangement" ], "description": "Compositional technique" }, "camera": { "type": "object", "properties": { "angle": { "type": "string", "enum": ["eye level", "low angle", "slightly low", "bird's-eye", "worm's-eye", "over-the-shoulder", "isometric"], "description": "Camera perspective" }, "distance": { "type": "string", "enum": ["close-up", "medium close-up", "medium shot", "medium wide", "wide shot", "extreme wide"], "description": "Framing distance" }, "focus": { "type": "string", "enum": ["deep focus", "macro focus", "selective focus", "sharp on subject", "soft background"], "description": "Focus type" }, "lens": { "type": "string", "enum": ["14mm", "24mm", "35mm", "50mm", "70mm", "85mm"], "description": "Focal length (wide to telephoto)" }, "f-number": { "type": "string", "description": "Aperture (e.g., f/2.8, the smaller the number the more blurry the background)" }, "ISO": { "type": "number", "description": "Light sensitivity value (comfortable range between 100 & 6400, lower = less sensitivity)" } } }, "effects": { "type": "array", "items": { "type": "string" }, "description": "Post-processing effects (e.g., 'lens flare small', 'subtle film grain', 'soft bloom', 'god rays', 'chromatic aberration mild')" } }, "required": ["scene", "subjects"] } ``` #### Other features to try * The model also supports the most common latin and non-latin character languages * You can prompt the model with specific hex codes like `#2ECC71` * Try creating digital assets like landing pages, comic strips, infographics too! Nov 24, 2025 1. ### [Cloud Services Observability in Cloudflare Radar](https://edgetunnel-b2h.pages.dev/changelog/post/2025-11-24-radar-cloud-observability/) [ Radar ](https://edgetunnel-b2h.pages.dev/radar/) [**Radar**](https://edgetunnel-b2h.pages.dev/radar/) introduces HTTP Origins insights, providing visibility into the status of traffic between Cloudflare's global network and cloud-based origin infrastructure. The new [Origins](https://edgetunnel-b2h.pages.dev/api/resources/radar/subresources/origins/) API provides provides the following endpoints: * [/origins](https://edgetunnel-b2h.pages.dev/api/resources/radar/subresources/origins/methods/list/) \- Lists all origins (cloud providers and associated regions). * [/origins/{origin}](https://edgetunnel-b2h.pages.dev/api/resources/radar/subresources/origins/methods/get/) \- Retrieves information about a specific origin (cloud provider). * [/origins/timeseries](https://edgetunnel-b2h.pages.dev/api/resources/radar/subresources/origins/methods/timeseries/) \- Retrieves normalized time series data for a specific origin, including the following metrics: * `REQUESTS`: Number of requests * `CONNECTION_FAILURES`: Number of connection failures * `RESPONSE_HEADER_RECEIVE_DURATION`: Duration of the response header receive * `TCP_HANDSHAKE_DURATION`: Duration of the TCP handshake * `TCP_RTT`: TCP round trip time * `TLS_HANDSHAKE_DURATION`: Duration of the TLS handshake * [/origins/summary](https://edgetunnel-b2h.pages.dev/api/resources/radar/subresources/origins/methods/summary/) \- Retrieves HTTP requests to origins summarized by a dimension. * [/origins/timeseries\_groups](https://edgetunnel-b2h.pages.dev/api/resources/radar/subresources/origins/methods/timeseries%5Fgroups/) \- Retrieves timeseries data for HTTP requests to origins grouped by a dimension. The following dimensions are available for the `summary` and `timeseries_groups` endpoints: * `region`: Origin region * `success_rate`: Success rate of requests (2XX versus 5XX response codes) * `percentile`: Percentiles of metrics listed above Additionally, the [Annotations](https://edgetunnel-b2h.pages.dev/api/resources/radar/subresources/annotations/) and [Traffic Anomalies](https://edgetunnel-b2h.pages.dev/api/resources/radar/subresources/traffic%5Fanomalies/) APIs have been extended to support origin outages and anomalies, enabling automated detection and alerting for origin infrastructure issues. ![Screenshot of the cloud service status heatmap](https://edgetunnel-b2h.pages.dev/_astro/cloud-service-status.DoGHSNmz_Z13ev1d.webp) Check out the [new Radar page ↗](https://radar.cloudflare.com/cloud-observatory). ```json {"@context":"https://schema.org","@type":"BlogPosting","@id":"https://edgetunnel-b2h.pages.dev/changelog/22/#page","headline":"Changelogs | Cloudflare Docs","url":"https://edgetunnel-b2h.pages.dev/changelog/22/","inLanguage":"en","image":"https://edgetunnel-b2h.pages.dev/cf-twitter-card.png","publisher":{"@type":"Organization","name":"Cloudflare","url":"https://www.cloudflare.com/"},"isPartOf":{"@type":"WebSite","@id":"https://edgetunnel-b2h.pages.dev/#website","name":"Cloudflare Docs","url":"https://edgetunnel-b2h.pages.dev/"}} ```