--- title: Developer platform Changelog image: https://edgetunnel-b2h.pages.dev/cf-twitter-card.png --- > Documentation Index > Fetch the complete documentation index at: https://edgetunnel-b2h.pages.dev/changelog/llms.txt > Use this file to discover all available pages before exploring further. [Skip to content](#%5Ftop) # Changelog New updates and improvements at Cloudflare. [ Subscribe to RSS ](https://edgetunnel-b2h.pages.dev/changelog/rss/index.xml) [ View RSS feeds ](https://edgetunnel-b2h.pages.dev/fundamentals/new-features/available-rss-feeds/) Developer platform ![hero image](https://edgetunnel-b2h.pages.dev/_astro/hero.CVYJHPAd_26AMqX.svg) Oct 24, 2025 1. ### [Automatic resource provisioning for KV, R2, and D1](https://edgetunnel-b2h.pages.dev/changelog/post/2025-10-24-automatic-resource-provisioning/) [ Workers ](https://edgetunnel-b2h.pages.dev/workers/) Previously, if you wanted to develop or deploy a worker with attached resources, you'd have to first manually create the desired resources. Now, if your Wrangler configuration file includes a KV namespace, D1 database, or R2 bucket that does not yet exist on your account, you can develop locally and deploy your application seamlessly, without having to run additional commands. Automatic provisioning is launching as an open beta, and we'd love to hear your feedback to help us make improvements! It currently works for KV, R2, and D1 bindings. You can disable the feature using the `--no-x-provision` flag. To use this feature, update to wrangler@4.45.0 and add bindings to your config file _without_ resource IDs e.g.: **JSONC** ```jsonc { "kv_namespaces": [{ "binding": "MY_KV" }], "d1_databases": [{ "binding": "MY_DB" }], "r2_buckets": [{ "binding": "MY_R2" }], } ``` `wrangler dev` will then automatically create these resources for you locally, and on your next run of `wrangler deploy`, Wrangler will call the Cloudflare API to create the requested resources and link them to your Worker. Though resource IDs will be automatically written back to your Wrangler config file after resource creation, resources will stay linked across future deploys even without adding the resource IDs to the config file. This is especially useful for shared templates, which now no longer need to include account-specific resource IDs when adding a binding. Oct 24, 2025 1. ### [Build TanStack Start apps with the Cloudflare Vite plugin](https://edgetunnel-b2h.pages.dev/changelog/post/2025-10-24-tanstack-start/) [ Workers ](https://edgetunnel-b2h.pages.dev/workers/) The [Cloudflare Vite plugin](https://edgetunnel-b2h.pages.dev/workers/vite-plugin/) now supports [TanStack Start ↗](https://tanstack.com/start/) apps. Get started with new or existing projects. #### New projects Create a new TanStack Start project that uses the Cloudflare Vite plugin via the `create-cloudflare` CLI: npm yarn pnpm ``` npm create cloudflare@latest -- my-tanstack-start-app --framework=tanstack-start ``` ``` yarn create cloudflare my-tanstack-start-app --framework=tanstack-start ``` ``` pnpm create cloudflare@latest my-tanstack-start-app --framework=tanstack-start ``` #### Existing projects Migrate an existing TanStack Start project to use the Cloudflare Vite plugin: 1. Install `@cloudflare/vite-plugin` and `wrangler` npm yarn pnpm bun ``` npm i -D @cloudflare/vite-plugin wrangler ``` ``` yarn add -D @cloudflare/vite-plugin wrangler ``` ``` pnpm add -D @cloudflare/vite-plugin wrangler ``` ``` bun add -d @cloudflare/vite-plugin wrangler ``` 1. Add the Cloudflare plugin to your Vite config **vite.config.ts** ```ts import { defineConfig } from "vite"; import { tanstackStart } from "@tanstack/react-start/plugin/vite"; import viteReact from "@vitejs/plugin-react"; import { cloudflare } from "@cloudflare/vite-plugin"; export default defineConfig({ plugins: [ cloudflare({ viteEnvironment: { name: "ssr" } }), tanstackStart(), viteReact(), ], }); ``` 1. Add your Worker config file * [ wrangler.jsonc ](#tab-panel-3543) * [ wrangler.toml ](#tab-panel-3544) **JSONC** ```jsonc { "$schema": "./node_modules/wrangler/config-schema.json", "name": "my-tanstack-start-app", // Set this to today's date "compatibility_date": "2026-07-20", "compatibility_flags": [ "nodejs_compat" ], "main": "@tanstack/react-start/server-entry" } ``` **TOML** ```toml "$schema" = "./node_modules/wrangler/config-schema.json" name = "my-tanstack-start-app" # Set this to today's date compatibility_date = "2026-07-20" compatibility_flags = [ "nodejs_compat" ] main = "@tanstack/react-start/server-entry" ``` 1. Modify the scripts in your `package.json` **package.json** ```json { "scripts": { "dev": "vite dev", "build": "vite build && tsc --noEmit", "start": "node .output/server/index.mjs", "preview": "vite preview", "deploy": "npm run build && wrangler deploy", "cf-typegen": "wrangler types" } } ``` See the [TanStack Start framework guide](https://edgetunnel-b2h.pages.dev/workers/framework-guides/web-apps/tanstack-start/) for more info. Oct 23, 2025 1. ### [Workers AI Markdown Conversion: New endpoint to list supported formats](https://edgetunnel-b2h.pages.dev/changelog/post/2025-10-23-new-markdown-conversion-endpoint/) [ Workers AI ](https://edgetunnel-b2h.pages.dev/workers-ai/) Developers can now programmatically retrieve a list of all file formats supported by the [Markdown Conversion utility](https://edgetunnel-b2h.pages.dev/workers-ai/features/markdown-conversion/) in Workers AI. You can use the [env.AI](https://edgetunnel-b2h.pages.dev/workers-ai/configuration/bindings/) binding: **TypeScript** ```typescript await env.AI.toMarkdown().supported() ``` Or call the REST API: ```bash curl https://api.cloudflare.com/client/v4/accounts/{ACCOUNT_ID}/ai/tomarkdown/supported \ -H 'Authorization: Bearer {API_TOKEN}' ``` Both return a list of file formats that users can convert into Markdown: ```json [ { "extension": ".pdf", "mimeType": "application/pdf", }, { "extension": ".jpeg", "mimeType": "image/jpeg", }, ... ] ``` Learn more about our [Markdown Conversion utility](https://edgetunnel-b2h.pages.dev/workers-ai/features/markdown-conversion/). Oct 23, 2025 1. ### [Workers Preview URL default behavior now matches your workers.dev setting](https://edgetunnel-b2h.pages.dev/changelog/post/2025-10-23-preview-url-default-behavior/) [ Workers ](https://edgetunnel-b2h.pages.dev/workers/) We have updated the default behavior for Cloudflare Workers [Preview URLs](https://edgetunnel-b2h.pages.dev/workers/versions-and-deployments/preview-urls/). **Going forward, if a preview URL setting is not [explicitly configured](https://edgetunnel-b2h.pages.dev/workers/versions-and-deployments/preview-urls/#toggle-preview-urls-enable-or-disable) during deployment, its default behavior will automatically match the setting of your [workers.dev subdomain](https://edgetunnel-b2h.pages.dev/workers/configuration/routing/workers-dev/).** This change is intended to provide a more intuitive and secure experience by aligning your preview URL's default state with your `workers.dev` configuration to prevent cases where a preview URL might remain public even after you disabled your `workers.dev` route. **What this means for you:** * **If neither setting is configured:** both the workers.dev route and the preview URL will default to enabled * **If your workers.dev route is enabled and you do not explicitly set Preview URLs to enabled or disabled:** Preview URLs will default to enabled * **If your workers.dev route is disabled and you do not explicitly set Preview URLs to enabled or disabled:** Preview URLs will default to disabled You can override the default setting by explicitly enabling or disabling the preview URL in your Worker's configuration through the [API](https://edgetunnel-b2h.pages.dev/api/resources/workers/subresources/scripts/subresources/subdomain/), [Dashboard](https://edgetunnel-b2h.pages.dev/workers/versions-and-deployments/preview-urls/#from-the-dashboard), or [Wrangler](https://edgetunnel-b2h.pages.dev/workers/versions-and-deployments/preview-urls/#from-the-wrangler-configuration-file). **Wrangler Version Behavior** The default behavior depends on the version of Wrangler you are using. This new logic applies to the latest version. Here is a summary of the behavior across different versions: * **Before v4.34.0:** Preview URLs defaulted to enabled, regardless of the workers.dev setting. * **v4.34.0 up to (but not including) v4.44.0:** Preview URLs defaulted to disabled, regardless of the workers.dev setting. * **v4.44.0 or later:** Preview URLs now default to matching your workers.dev setting. **Why we’re making this change** In July, [we introduced preview URLs to Workers](https://edgetunnel-b2h.pages.dev/changelog/2025-07-23-workers-preview-urls/), which let you preview code changes before deploying to production. This made disabling your Worker’s workers.dev URL an ambiguous action — the preview URL, served as a subdomain of `workers.dev` (ex: `preview-id-worker-name.account-name.workers.dev`) would still be live even if you had disabled your Worker’s `workers.dev` route. If you misinterpreted what it meant to disable your `workers.dev` route, you might unintentionally leave preview URLs enabled when you didn’t mean to, and expose them to the public Internet. To address this, we made a [one-time update](https://edgetunnel-b2h.pages.dev/changelog/2025-09-17-update-preview-url-setting/) to disable preview URLs on existing Workers that had their workers.dev route disabled and changed the default behavior to be disabled for all new deployments where a preview URL setting was not explicitly configured. While this change helped secure many customers, it was disruptive for customers who keep their `workers.dev` route enabled and actively use the preview functionality, as it now required them to explicitly enable preview URLs on every redeployment.This new, more intuitive behavior ensures that your preview URL settings align with your `workers.dev` configuration by default, providing a more secure and predictable experience. **Securing access to `workers.dev` and preview URL endpoints** To further secure your `workers.dev` subdomain and preview URL, you can [enable Cloudflare Access with a single click](https://edgetunnel-b2h.pages.dev/changelog/2025-10-03-one-click-access-for-workers/) in your Worker's settings to limit access to specific users or groups. Oct 16, 2025 1. ### [View and edit Durable Object data in UI with Data Studio (Beta)](https://edgetunnel-b2h.pages.dev/changelog/post/2025-10-16-durable-objects-data-studio/) [ Durable Objects ](https://edgetunnel-b2h.pages.dev/durable-objects/)[ Workers ](https://edgetunnel-b2h.pages.dev/workers/) ![Screenshot of Durable Objects Data Studio](https://edgetunnel-b2h.pages.dev/_astro/do-data-studio.BfCcgtkq_Z4LLzm.webp) You can now view and write to each Durable Object's storage using a UI editor on the Cloudflare dashboard. Only Durable Objects using [SQLite storage](https://edgetunnel-b2h.pages.dev/durable-objects/best-practices/access-durable-objects-storage/#create-sqlite-backed-durable-object-class) can use Data Studio. [ Go to **Durable Objects** ](https://dash.cloudflare.com/?to=/:account/workers/durable-objects) Data Studio unlocks easier data access with Durable Objects for prototyping application data models to debugging production storage usage. Before, querying your Durable Objects data required deploying a Worker. To access a Durable Object, you can provide an object's unique name or ID generated by Cloudflare. Data Studio requires you to have at least the `Workers Platform Admin` role, and all queries are captured with audit logging for your security and compliance needs. Queries executed by Data Studio send requests to your remote, deployed objects and incur normal usage billing. To learn more, visit the Data Studio [documentation](https://edgetunnel-b2h.pages.dev/durable-objects/observability/data-studio/). If you have feedback or suggestions for the new Data Studio, please share your experience on [Discord ↗](https://discord.com/channels/595317990191398933/773219443911819284) Oct 10, 2025 1. ### [Worker startup time limit increased to 1 second](https://edgetunnel-b2h.pages.dev/changelog/post/2025-10-10-increased-startup-time/) [ Workers ](https://edgetunnel-b2h.pages.dev/workers/) You can now upload a Worker that takes up 1 second to parse and execute its global scope. Previously, startup time was limited to 400 ms. This allows you to run Workers that import more complex packages and execute more code prior to requests being handled. For more information, see the documentation on [Workers startup limits](https://edgetunnel-b2h.pages.dev/workers/platform/limits/#worker-startup-time). Oct 09, 2025 1. ### [You can now deploy full-stack apps on Workers using Terraform](https://edgetunnel-b2h.pages.dev/changelog/post/2025-10-09-assets-terraform/) [ Workers ](https://edgetunnel-b2h.pages.dev/workers/) You can now upload Workers with [static assets](https://edgetunnel-b2h.pages.dev/workers/static-assets/) (like HTML, CSS, JavaScript, images) with the [Cloudflare Terraform provider v5.11.0 ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/5.11.0/docs), making it even easier to deploy and manage full-stack apps with IaC. **Previously**, you couldn't use Terraform to upload static assets without writing custom scripts to handle generating an [asset manifest](https://edgetunnel-b2h.pages.dev/workers/static-assets/direct-upload/#upload-manifest), calling the [Cloudflare API to upload assets in chunks](https://edgetunnel-b2h.pages.dev/workers/static-assets/direct-upload/#upload-static-assets), and handling change detection. **Now**, you simply define the directory where your assets are built, and we handle the rest. Check out the [examples](https://edgetunnel-b2h.pages.dev/changelog/#examples) for what this looks like in Terraform configuration. You can get started today with [the Cloudflare Terraform provider (v5.11.0) ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/5.11.0/docs), using either the existing [cloudflare\_workers\_script resource ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/workers%5Fscript), or the beta [cloudflare\_worker\_version resource ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/worker%5Fversion). #### Examples #### With `cloudflare_workers_script` Here's how you can use the existing [cloudflare\_workers\_script ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/5.11.0/docs/resources/workers%5Fscript) resource to upload your Worker code and assets in one shot. ```hcl resource "cloudflare_workers_script" "my_app" { account_id = var.account_id script_name = "my-app" content_file = "./dist/worker/index.js" content_sha256 = filesha256("./dist/worker/index.js") main_module = "index.js" # Just point to your assets directory - that's it! assets = { directory = "./dist/static" } } ``` #### With `cloudflare_worker`, `cloudflare_worker_version`, and `cloudflare_workers_deployment` And here's an example using the beta [cloudflare\_worker\_version ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/5.11.0/docs/resources/worker%5Fversion) resource, alongside the [cloudflare\_worker ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/worker) and [cloudflare\_workers\_deployment ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/5.11.0/docs/resources/workers%5Fdeployment) resources: ```hcl # This tracks the existence of your Worker, so that you # can upload code and assets separately from tracking Worker state. resource "cloudflare_worker" "my_app" { account_id = var.account_id name = "my-app" } resource "cloudflare_worker_version" "my_app_version" { account_id = var.account_id worker_id = cloudflare_worker.my_app.id # Just point to your assets directory - that's it! assets = { directory = "./dist/static" } modules = [{ name = "index.js" content_file = "./dist/worker/index.js" content_type = "application/javascript+module" }] } resource "cloudflare_workers_deployment" "my_app_deployment" { account_id = var.account_id script_name = cloudflare_worker.my_app.name strategy = "percentage" versions = [{ version_id = cloudflare_worker_version.my_app_version.id percentage = 100 }] } ``` #### What's changed Under the hood, the Cloudflare Terraform provider now handles the same logic that Wrangler uses for static asset uploads. This includes scanning your assets directory, computing hashes for each file, generating a manifest with file metadata, and calling the Cloudflare API to upload any missing files in chunks. We support large directories with parallel uploads and chunking, and when the asset manifest hash changes, we detect what's changed and trigger an upload for _only_ those changed files. #### Try it out * Get started with [the Cloudflare Terraform provider (v5.11.0) ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/5.11.0/docs) * You can use either the existing [cloudflare\_workers\_script resource ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/workers%5Fscript) to upload your Worker code and assets in one resource. * Or you can use the new beta [cloudflare\_worker\_version resource ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/worker%5Fversion) (along with the [cloudflare\_worker ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/worker) and [cloudflare\_workers\_deployment ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/5.11.0/docs/resources/workers%5Fdeployment)) resources to more granularly control the lifecycle of each Worker resource. Oct 09, 2025 1. ### [You can now deploy and manage Workflows in Terraform](https://edgetunnel-b2h.pages.dev/changelog/post/2025-10-09-workflows-terraform/) [ Workers ](https://edgetunnel-b2h.pages.dev/workers/) You can now create and manage [Workflows](https://edgetunnel-b2h.pages.dev/workflows/) using Terraform, now supported in the [Cloudflare Terraform provider v5.11.0 ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/workflow). Workflows allow you to build durable, multi-step applications -- without needing to worry about retrying failed tasks or managing infrastructure. Now, you can deploy and manage Workflows through Terraform using the new [cloudflare\_workflow resource ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/workflow): ```hcl resource "cloudflare_workflow" "my_workflow" { account_id = var.account_id workflow_name = "my-workflow" class_name = "MyWorkflow" script_name = "my-worker" } ``` #### Examples Here are full examples of how to configure `cloudflare_workflow` in Terraform, using the existing [cloudflare\_workers\_script resource ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/workers%5Fscript), and the beta [cloudflare\_worker\_version resource ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/worker%5Fversion). #### With `cloudflare_workflow` and `cloudflare_workers_script` ```hcl resource "cloudflare_workers_script" "workflow_worker" { account_id = var.cloudflare_account_id script_name = "my-workflow-worker" content_file = "${path.module}/../dist/worker/index.js" content_sha256 = filesha256("${path.module}/../dist/worker/index.js") main_module = "index.js" } resource "cloudflare_workflow" "workflow" { account_id = var.cloudflare_account_id workflow_name = "my-workflow" class_name = "MyWorkflow" script_name = cloudflare_workers_script.workflow_worker.script_name } ``` #### With `cloudflare_workflow`, and the new beta resources You can more granularly control the lifecycle of each Worker resource using the beta [cloudflare\_worker\_version ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/5.11.0/docs/resources/worker%5Fversion) resource, alongside the [cloudflare\_worker ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/worker) and [cloudflare\_workers\_deployment ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/5.11.0/docs/resources/workers%5Fdeployment) resources. ```hcl resource "cloudflare_worker" "workflow_worker" { account_id = var.cloudflare_account_id name = "my-workflow-worker" } resource "cloudflare_worker_version" "workflow_worker_version" { account_id = var.cloudflare_account_id worker_id = cloudflare_worker.workflow_worker.id main_module = "index.js" modules = [{ name = "index.js" content_file = "${path.module}/../dist/worker/index.js" content_type = "application/javascript+module" }] } resource "cloudflare_workers_deployment" "workflow_deployment" { account_id = var.cloudflare_account_id script_name = cloudflare_worker.workflow_worker.name strategy = "percentage" versions = [{ version_id = cloudflare_worker_version.workflow_worker_version.id percentage = 100 }] } resource "cloudflare_workflow" "my_workflow" { account_id = var.cloudflare_account_id workflow_name = "my-workflow" class_name = "MyWorkflow" script_name = cloudflare_worker.workflow_worker.name } ``` #### Try it out * Get started with [the Cloudflare Terraform provider (v5.11.0) ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/5.11.0/docs) and the new [cloudflare\_workflow resource ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/workflow). Oct 07, 2025 1. ### [New Overview Page for Cloudflare Workers](https://edgetunnel-b2h.pages.dev/changelog/post/2025-10-06-new-worker-overview-page/) [ Workers ](https://edgetunnel-b2h.pages.dev/workers/) ![Screenshot of the Workers overview page in the Cloudflare dashboard](https://edgetunnel-b2h.pages.dev/_astro/workers-overview.BM_exs4R_IaSn9.webp) Each of your Workers now has a new overview page in the Cloudflare dashboard. The goal is to make it easier to understand your Worker without digging through multiple tabs. Think of it as a new home base, a place to get a high-level overview on what's going on. It's the first place you land when you open a Worker in the dashboard, and it gives you an immediate view of what’s going on. You can see requests, errors, and CPU time at a glance. You can view and add bindings, and see recent versions of your app, including who published them. Navigation is also simpler, with visually distinct tabs at the top of the page. At the bottom right you'll find guided steps for what to do next that are based on the state of your Worker, such as adding a [binding](https://edgetunnel-b2h.pages.dev/workers/runtime-apis/bindings/) or connecting a custom domain. We plan to add more here over time. Better insights, more controls, and ways to manage your Worker from one page. If you have feedback or suggestions for the new Overview page or your Cloudflare Workers experience in general, we'd love to hear from you. Join the Cloudflare developer community on [Discord ↗](https://discord.com/channels/595317990191398933/1064502845061210152). Oct 06, 2025 1. ### [R2 Data Catalog table-level compaction](https://edgetunnel-b2h.pages.dev/changelog/post/2025-10-06-data-catalog-table-compaction/) [ R2 ](https://edgetunnel-b2h.pages.dev/r2/) You can now enable compaction for individual [Apache Iceberg ↗](https://iceberg.apache.org/) tables in [R2 Data Catalog](https://edgetunnel-b2h.pages.dev/r2/data-catalog/), giving you fine-grained control over different workloads. ```bash # Enable compaction for a specific table (no token required) npx wrangler r2 bucket catalog compaction enable --target-size 256 ``` This allows you to: * Apply different target file sizes per table * Disable compaction for specific tables * Optimize based on table-specific access patterns Learn more at [Manage catalogs](https://edgetunnel-b2h.pages.dev/r2/data-catalog/manage-catalogs/). Oct 03, 2025 1. ### [One-click Cloudflare Access for Workers](https://edgetunnel-b2h.pages.dev/changelog/post/2025-10-03-one-click-access-for-workers/) [ Workers ](https://edgetunnel-b2h.pages.dev/workers/) You can now enable [Cloudflare Access](https://edgetunnel-b2h.pages.dev/cloudflare-one/access-controls/policies/) for your [workers.dev](https://edgetunnel-b2h.pages.dev/workers/configuration/routing/workers-dev/) and [Preview URLs](https://edgetunnel-b2h.pages.dev/workers/versions-and-deployments/preview-urls/) in a single click. ![Screenshot of the Enable/Disable Cloudflare Access button on the workers.dev route settings page](https://edgetunnel-b2h.pages.dev/_astro/workers-access.DGGYThLx_1YsjKO.webp) Access allows you to limit access to your Workers to specific users or groups. You can limit access to yourself, your teammates, your organization, or anyone else you specify in your [Access policy](https://edgetunnel-b2h.pages.dev/cloudflare-one/access-controls/policies/). To enable Cloudflare Access: 1. In the Cloudflare dashboard, go to the **Workers & Pages** page. [ Go to **Workers & Pages** ](https://dash.cloudflare.com/?to=/:account/workers-and-pages) 2. In **Overview**, select your Worker. 3. Go to **Settings** \> **Domains & Routes**. 4. For `workers.dev` or Preview URLs, click **Enable Cloudflare Access**. 5. Optionally, to configure the Access application, click **Manage Cloudflare Access**. There, you can change the email addresses you want to authorize. View [Access policies](https://edgetunnel-b2h.pages.dev/cloudflare-one/access-controls/policies/#selectors) to learn about configuring alternate rules. To fully secure your application, it is important that you validate the JWT that Cloudflare Access adds to the `Cf-Access-Jwt-Assertion` header on the incoming request. The following code will validate the JWT using the [jose NPM package ↗](https://www.npmjs.com/package/jose): **JavaScript** ```javascript import { jwtVerify, createRemoteJWKSet } from "jose"; export default { async fetch(request, env, ctx) { // Verify the POLICY_AUD environment variable is set if (!env.POLICY_AUD) { return new Response("Missing required audience", { status: 403, headers: { "Content-Type": "text/plain" }, }); } // Get the JWT from the request headers const token = request.headers.get("cf-access-jwt-assertion"); // Check if token exists if (!token) { return new Response("Missing required CF Access JWT", { status: 403, headers: { "Content-Type": "text/plain" }, }); } try { // Create JWKS from your team domain const JWKS = createRemoteJWKSet( new URL(`${env.TEAM_DOMAIN}/cdn-cgi/access/certs`), ); // Verify the JWT const { payload } = await jwtVerify(token, JWKS, { issuer: env.TEAM_DOMAIN, audience: env.POLICY_AUD, }); // Token is valid, proceed with your application logic return new Response(`Hello ${payload.email || "authenticated user"}!`, { headers: { "Content-Type": "text/plain" }, }); } catch (error) { // Token verification failed return new Response(`Invalid token: ${error.message}`, { status: 403, headers: { "Content-Type": "text/plain" }, }); } }, }; ``` #### Required environment variables Add these [environment variables](https://edgetunnel-b2h.pages.dev/workers/configuration/environment-variables/) to your Worker: * `POLICY_AUD`: Your application's AUD tag * `TEAM_DOMAIN`: `https://.cloudflareaccess.com` Both of these appear in the modal that appears when you enable Cloudflare Access. You can set these variables by adding them to your Worker's [Wrangler configuration file](https://edgetunnel-b2h.pages.dev/workers/wrangler/configuration/), or via the Cloudflare dashboard under **Workers & Pages** \> **your-worker** \> **Settings** \> **Environment Variables**. Oct 02, 2025 1. ### [New Deepgram Flux model available on Workers AI](https://edgetunnel-b2h.pages.dev/changelog/post/2025-10-02-deepgram-flux/) [ Workers AI ](https://edgetunnel-b2h.pages.dev/workers-ai/) Deepgram's newest Flux model [@cf/deepgram/flux](https://edgetunnel-b2h.pages.dev/workers-ai/models/flux/) is now available on Workers AI, hosted directly on Cloudflare's infrastructure. We're excited to be a launch partner with Deepgram and offer their new Speech Recognition model built specifically for enabling voice agents. Check out [Deepgram's blog ↗](https://deepgram.com/flux) for more details on the release. The Flux model can be used in conjunction with Deepgram's speech-to-text model [@cf/deepgram/nova-3](https://edgetunnel-b2h.pages.dev/workers-ai/models/nova-3/) and text-to-speech model [@cf/deepgram/aura-1](https://edgetunnel-b2h.pages.dev/workers-ai/models/aura-1/) to build end-to-end voice agents. Having Deepgram on Workers AI takes advantage of our edge GPU infrastructure, for ultra low latency voice AI applications. #### Promotional Pricing For the month of October 2025, Deepgram's Flux model will be free to use on Workers AI. Official pricing will be announced soon and charged after the promotional pricing period ends on October 31, 2025\. Check out the [model page](https://edgetunnel-b2h.pages.dev/workers-ai/models/flux/) for pricing details in the future. #### Example Usage The new Flux model is WebSocket only as it requires live bi-directional streaming in order to recognize speech activity. 1. Create a worker that establishes a websocket connection with `@cf/deepgram/flux` **JavaScript** ```js export default { async fetch(request, env, ctx): Promise { const resp = await env.AI.run("@cf/deepgram/flux", { encoding: "linear16", sample_rate: "16000" }, { websocket: true }); return resp; }, } satisfies ExportedHandler; ``` 1. Deploy your worker ```bash npx wrangler deploy ``` 1. Write a client script to connect to your worker and start sending random audio bytes to it **JavaScript** ```js const ws = new WebSocket('wss://'); ws.onopen = () => { console.log('Connected to WebSocket'); // Generate and send random audio bytes // You can replace this part with a function // that reads from your mic or other audio source const audioData = generateRandomAudio(); ws.send(audioData); console.log('Audio data sent'); }; ws.onmessage = (event) => { // Transcription will be received here // Add your custom logic to parse the data console.log('Received:', event.data); }; ws.onerror = (error) => { console.error('WebSocket error:', error); }; ws.onclose = () => { console.log('WebSocket closed'); }; // Generate random audio data (1 second of noise at 44.1kHz, mono) function generateRandomAudio() { const sampleRate = 44100; const duration = 1; const numSamples = sampleRate * duration; const buffer = new ArrayBuffer(numSamples * 2); const view = new Int16Array(buffer); for (let i = 0; i < numSamples; i++) { view[i] = Math.floor(Math.random() * 65536 - 32768); } return buffer; } ``` Oct 02, 2025 1. ### [Workers Analytics Engine adds supports for new SQL functions](https://edgetunnel-b2h.pages.dev/changelog/post/2025-09-26-analytics-engine-sql-enhancements/) [ Workers Analytics Engine ](https://edgetunnel-b2h.pages.dev/analytics/analytics-engine/)[ Workers ](https://edgetunnel-b2h.pages.dev/workers/) You can now perform more powerful queries directly in [Workers Analytics Engine ↗](https://edgetunnel-b2h.pages.dev/analytics/analytics-engine/) with a major expansion of our SQL function library. Workers Analytics Engine allows you to ingest and store high-cardinality data at scale (such as custom analytics) and query your data through a simple SQL API. Today, we've expanded Workers Analytics Engine's SQL capabilities with several new functions: [**New aggregate functions:** ↗](https://edgetunnel-b2h.pages.dev/analytics/analytics-engine/sql-reference/aggregate-functions/) * `argMin()` \- Returns the value associated with the minimum in a group * `argMax()` \- Returns the value associated with the maximum in a group * `topK()` \- Returns an array of the most frequent values in a group * `topKWeighted()` \- Returns an array of the most frequent values in a group using weights * `first_value()` \- Returns the first value in an ordered set of values within a partition * `last_value()` \- Returns the last value in an ordered set of values within a partition [**New bit functions:** ↗](https://edgetunnel-b2h.pages.dev/analytics/analytics-engine/sql-reference/bit-functions/) * `bitAnd()` \- Returns the bitwise AND of two expressions * `bitCount()` \- Returns the number of bits set to one in the binary representation of a number * `bitHammingDistance()` \- Returns the number of bits that differ between two numbers * `bitNot()` \- Returns a number with all bits flipped * `bitOr()` \- Returns the inclusive bitwise OR of two expressions * `bitRotateLeft()` \- Rotates all bits in a number left by specified positions * `bitRotateRight()` \- Rotates all bits in a number right by specified positions * `bitShiftLeft()` \- Shifts all bits in a number left by specified positions * `bitShiftRight()` \- Shifts all bits in a number right by specified positions * `bitTest()` \- Returns the value of a specific bit in a number * `bitXor()` \- Returns the bitwise exclusive-or of two expressions [**New mathematical functions:** ↗](https://edgetunnel-b2h.pages.dev/analytics/analytics-engine/sql-reference/mathematical-functions/) * `abs()` \- Returns the absolute value of a number * `log()` \- Computes the natural logarithm of a number * `round()` \- Rounds a number to a specified number of decimal places * `ceil()` \- Rounds a number up to the nearest integer * `floor()` \- Rounds a number down to the nearest integer * `pow()` \- Returns a number raised to the power of another number [**New string functions:** ↗](https://edgetunnel-b2h.pages.dev/analytics/analytics-engine/sql-reference/string-functions/) * `lowerUTF8()` \- Converts a string to lowercase using UTF-8 encoding * `upperUTF8()` \- Converts a string to uppercase using UTF-8 encoding [**New encoding functions:** ↗](https://edgetunnel-b2h.pages.dev/analytics/analytics-engine/sql-reference/encoding-functions/) * `hex()` \- Converts a number to its hexadecimal representation * `bin()` \- Converts a string to its binary representation [**New type conversion functions:** ↗](https://edgetunnel-b2h.pages.dev/analytics/analytics-engine/sql-reference/type-conversion-functions/) * `toUInt8()` \- Converts any numeric expression, or expression resulting in a string representation of a decimal, into an unsigned 8 bit integer #### Ready to get started? Whether you're building usage-based billing systems, customer analytics dashboards, or other custom analytics, these functions let you get the most out of your data. [Get started ](https://edgetunnel-b2h.pages.dev/analytics/analytics-engine/get-started/) with Workers Analytics Engine and explore all available functions in our [SQL reference documentation](https://edgetunnel-b2h.pages.dev/analytics/analytics-engine/sql-reference/). Oct 01, 2025 1. ### [Larger Container instance types](https://edgetunnel-b2h.pages.dev/changelog/post/2025-10-01-new-container-instance-types/) [ Containers ](https://edgetunnel-b2h.pages.dev/containers/) New instance types provide up to 4 vCPU, 12 GiB of memory, and 20 GB of disk per container instance. | Instance Type | vCPU | Memory | Disk | | ------------- | ---- | ------- | ----- | | lite | 1/16 | 256 MiB | 2 GB | | basic | 1/4 | 1 GiB | 4 GB | | standard-1 | 1/2 | 4 GiB | 8 GB | | standard-2 | 1 | 6 GiB | 12 GB | | standard-3 | 2 | 8 GiB | 16 GB | | standard-4 | 4 | 12 GiB | 20 GB | The `dev` and `standard` instance types are preserved for backward compatibility and are aliases for `lite` and `standard-1`, respectively. The `standard-1` instance type now provides up to 8 GB of disk instead of only 4 GB. See the [getting started guide](https://edgetunnel-b2h.pages.dev/containers/get-started/) to deploy your first Container, and the [limits documentation](https://edgetunnel-b2h.pages.dev/containers/platform-details/limits/) for more details on the available instance types and limits. Sep 26, 2025 1. ### [Automatic loopback bindings via ctx.exports](https://edgetunnel-b2h.pages.dev/changelog/post/2025-09-26-ctx-exports/) [ Workers ](https://edgetunnel-b2h.pages.dev/workers/) The [ctx.exports API](https://edgetunnel-b2h.pages.dev/workers/runtime-apis/context/#exports) contains automatically-configured bindings corresponding to your Worker's top-level exports. For each top-level export extending `WorkerEntrypoint`, `ctx.exports` will contain a [Service Binding](https://edgetunnel-b2h.pages.dev/workers/runtime-apis/bindings/service-bindings) by the same name, and for each export extending `DurableObject` (and for which storage has been configured via a [migration](https://edgetunnel-b2h.pages.dev/durable-objects/reference/durable-objects-migrations/)), `ctx.exports` will contain a [Durable Object namespace binding](https://edgetunnel-b2h.pages.dev/durable-objects/api/namespace/). This means you no longer have to configure these bindings explicitly in `wrangler.jsonc`/`wrangler.toml`. Example: **JavaScript** ```js import { WorkerEntrypoint } from "cloudflare:workers"; export class Greeter extends WorkerEntrypoint { greet(name) { return `Hello, ${name}!`; } } export default { async fetch(request, env, ctx) { let greeting = await ctx.exports.Greeter.greet("World") return new Response(greeting); } } ``` At present, you must use [the enable\_ctx\_exports compatibility flag](https://edgetunnel-b2h.pages.dev/workers/configuration/compatibility-flags#enable-ctxexports) to enable this API, though it will be on by default in the future. [See the API reference for more information.](https://edgetunnel-b2h.pages.dev/workers/runtime-apis/context/#exports) Sep 25, 2025 1. ### [Pipelines now supports SQL transformations and Apache Iceberg](https://edgetunnel-b2h.pages.dev/changelog/post/2025-09-25-pipelines-sql/) [ Pipelines ](https://edgetunnel-b2h.pages.dev/pipelines/) Today, we're launching the new [Cloudflare Pipelines](https://edgetunnel-b2h.pages.dev/pipelines/): a streaming data platform that ingests events, transforms them with [SQL](https://edgetunnel-b2h.pages.dev/pipelines/sql-reference/select-statements/), and writes to [R2](https://edgetunnel-b2h.pages.dev/r2/) as [Apache Iceberg ↗](https://iceberg.apache.org/) tables or Parquet files. Pipelines can receive events via [HTTP endpoints](https://edgetunnel-b2h.pages.dev/pipelines/streams/writing-to-streams/#send-via-http) or [Worker bindings](https://edgetunnel-b2h.pages.dev/pipelines/streams/writing-to-streams/#send-via-workers), transform them with SQL, and deliver to R2 with exactly-once guarantees. This makes it easy to build analytics-ready warehouses for server logs, mobile application events, IoT telemetry, or clickstream data without managing streaming infrastructure. For example, here's a pipeline that ingests clickstream events and filters out bot traffic while extracting domain information: ```sql INSERT into events_table SELECT user_id, lower(event) AS event_type, to_timestamp_micros(ts_us) AS event_time, regexp_match(url, '^https?://([^/]+)')[1] AS domain, url, referrer, user_agent FROM events_json WHERE event = 'page_view' AND NOT regexp_like(user_agent, '(?i)bot|spider'); ``` Get started by creating a pipeline in the dashboard or running a single command in [Wrangler](https://edgetunnel-b2h.pages.dev/workers/wrangler/): ```bash npx wrangler pipelines setup ``` Check out our [getting started guide](https://edgetunnel-b2h.pages.dev/pipelines/getting-started/) to learn how to create a pipeline that delivers events to an [Iceberg table](https://edgetunnel-b2h.pages.dev/r2/data-catalog/) you can query with R2 SQL. Read more about today's announcement in our [blog post ↗](https://blog.cloudflare.com/cloudflare-data-platform). Sep 25, 2025 1. ### [Announcing R2 SQL](https://edgetunnel-b2h.pages.dev/changelog/post/2025-09-25-announcing-r2-sql-open-beta/) [ R2 SQL ](https://edgetunnel-b2h.pages.dev/r2-sql/) Today, we're launching the **open beta** for [R2 SQL](https://edgetunnel-b2h.pages.dev/r2-sql/): A serverless, distributed query engine that can efficiently analyze petabytes of data in [Apache Iceberg ↗](https://iceberg.apache.org/) tables managed by [R2 Data Catalog](https://edgetunnel-b2h.pages.dev/r2/data-catalog). R2 SQL is ideal for exploring analytical and time-series data stored in R2, such as logs, events from [Pipelines](https://edgetunnel-b2h.pages.dev/pipelines/), or clickstream and user behavior data. If you already have a table in R2 Data Catalog, running queries is as simple as: ```bash npx wrangler r2 sql query YOUR_WAREHOUSE " SELECT user_id, event_type, value FROM events.user_events WHERE event_type = 'CHANGELOG' or event_type = 'BLOG' AND __ingest_ts > '2025-09-24T00:00:00Z' ORDER BY __ingest_ts DESC LIMIT 100" ``` To get started with R2 SQL, check out our [getting started guide](https://edgetunnel-b2h.pages.dev/r2-sql/get-started/) or learn more about supported features in the [SQL reference](https://edgetunnel-b2h.pages.dev/r2-sql/sql-reference/). For a technical deep dive into how we built R2 SQL, read our [blog post ↗](https://blog.cloudflare.com/r2-sql-deep-dive/). Sep 25, 2025 1. ### [Browser Rendering Playwright GA, Stagehand support (Beta), and higher limits](https://edgetunnel-b2h.pages.dev/changelog/post/2025-09-25-br-playwright-ga-stagehand-limits/) [ Browser Run ](https://edgetunnel-b2h.pages.dev/browser-run/) We’re shipping three updates to Browser Rendering: * Playwright support is now Generally Available and synced with [Playwright v1.55 ↗](https://playwright.dev/docs/release-notes#version-155), giving you a stable foundation for critical automation and AI-agent workflows. * We’re also adding [Stagehand support (Beta)](https://edgetunnel-b2h.pages.dev/browser-run/stagehand/) so you can combine code with natural language instructions to build more resilient automations. * Finally, we’ve tripled [limits](https://edgetunnel-b2h.pages.dev/browser-run/limits/#workers-paid) for paid plans across both the [REST API](https://edgetunnel-b2h.pages.dev/browser-run/quick-actions/) and [Browser Sessions](https://edgetunnel-b2h.pages.dev/browser-run/#integration-methods) to help you scale. To get started with Stagehand, refer to the [Stagehand](https://edgetunnel-b2h.pages.dev/browser-run/stagehand/) example that uses Stagehand and [Workers AI](https://edgetunnel-b2h.pages.dev/workers-ai/) to search for a movie on this [example movie directory ↗](https://demo.playwright.dev/movies), extract its details using natural language (title, year, rating, duration, and genre), and return the information along with a screenshot of the webpage. **Stagehand example** ```ts const stagehand = new Stagehand({ env: "LOCAL", localBrowserLaunchOptions: { cdpUrl: endpointURLString(env.BROWSER) }, llmClient: new WorkersAIClient(env.AI), verbose: 1, }); await stagehand.init(); const page = stagehand.page; await page.goto("https://demo.playwright.dev/movies"); // if search is a multi-step action, stagehand will return an array of actions it needs to act on const actions = await page.observe('Search for "Furiosa"'); for (const action of actions) await page.act(action); await page.act("Click the search result"); // normal playwright functions work as expected await page.waitForSelector(".info-wrapper .cast"); let movieInfo = await page.extract({ instruction: "Extract movie information", schema: z.object({ title: z.string(), year: z.number(), rating: z.number(), genres: z.array(z.string()), duration: z.number().describe("Duration in minutes"), }), }); await stagehand.close(); ``` ![Stagehand video](https://edgetunnel-b2h.pages.dev/images/browser-run/speedystagehand.gif) Sep 25, 2025 1. ### [AI Search (formerly AutoRAG) now with More Models To Choose From](https://edgetunnel-b2h.pages.dev/changelog/post/2025-09-25-ai-search-more-models/) [ AI Search ](https://edgetunnel-b2h.pages.dev/ai-search/) AutoRAG is now AI Search! The new name marks a new and bigger mission: to make world-class search infrastructure available to every developer and business. With AI Search you can now use models from different providers like OpenAI and Anthropic. By attaching your provider keys to the AI Gateway linked to your AI Search instance, you can use many more models for both embedding and inference. To use AI Search with other [model providers](https://edgetunnel-b2h.pages.dev/ai-search/configuration/models/): 1. **Add provider keys to AI Gateway** 1. Go to AI > AI Gateway in the dashboard. 2. Select or create an AI gateway. 3. In Provider Keys, choose your provider, click Add, and enter the key. 2. **Connect a gateway to AI Search**: When creating a new AI Search, select the AI Gateway with your provider keys. For an existing AI Search, go to Settings and switch to a gateway that has your keys under Resources. 3. **Select models**: Embedding models are only available to be changed when creating a new AI Search. Generation model can be selected when creating a new AI Search and can be changed at any time in Settings. Once configured, your AI Search instance will be able to reference models available through your AI Gateway when making a `/ai-search` request: **JavaScript** ```javascript export default { async fetch(request, env) { // Query your AI Search instance with a natural language question to an OpenAI model const result = await env.AI.autorag("my-ai-search").aiSearch({ query: "What's new for Cloudflare Birthday Week?", model: "openai/gpt-5" }); // Return only the generated answer as plain text return new Response(result.response, { headers: { "Content-Type": "text/plain" }, }); }, }; ``` In the coming weeks we will also roll out updates to align the APIs with the new name. The existing APIs will continue to be supported for the time being. Stay tuned to the [AI Search Changelog](https://edgetunnel-b2h.pages.dev/changelog/product/ai-search/) and [Discord ↗](https://discord.cloudflare.com/) for more updates! Sep 25, 2025 1. ### [Run more Containers with higher resource limits](https://edgetunnel-b2h.pages.dev/changelog/post/2025-09-24-higher-container-resource-limits/) [ Containers ](https://edgetunnel-b2h.pages.dev/containers/) You can now run more Containers concurrently with higher limits on CPU, memory, and disk. | Limit | New Limit | Previous Limit | | ---------------------------------------------- | --------- | -------------- | | Memory for concurrent live Container instances | 400GiB | 40GiB | | vCPU for concurrent live Container instances | 100 | 20 | | Disk for concurrent live Container instances | 2TB | 100GB | You can now run 1000 instances of the `dev` instance type, 400 instances of `basic`, or 100 instances of `standard` concurrently. This opens up new possibilities for running larger-scale workloads on Containers. See the [getting started guide](https://edgetunnel-b2h.pages.dev/containers/get-started/) to deploy your first Container, and the [limits documentation](https://edgetunnel-b2h.pages.dev/containers/platform-details/limits/) for more details on the available instance types and limits. Sep 25, 2025 1. ### [R2 Data Catalog now supports compaction](https://edgetunnel-b2h.pages.dev/changelog/post/2025-09-25-data-catalog-compaction/) [ R2 ](https://edgetunnel-b2h.pages.dev/r2/) You can now enable automatic compaction for [Apache Iceberg ↗](https://iceberg.apache.org/) tables in [R2 Data Catalog](https://edgetunnel-b2h.pages.dev/r2/data-catalog/) to improve query performance. Compaction is the process of taking a group of small files and combining them into fewer larger files. This is an important maintenance operation as it helps ensure that query performance remains consistent by reducing the number of files that needs to be scanned. To enable automatic compaction in R2 Data Catalog, find it under **R2 Data Catalog** in your R2 bucket settings in the dashboard. ![compaction-dash](https://edgetunnel-b2h.pages.dev/_astro/compaction.MLojYuHL_wkqll.webp) Or with [Wrangler](https://edgetunnel-b2h.pages.dev/workers/wrangler/), run: ```bash npx wrangler r2 bucket catalog compaction enable --target-size 128 --token ``` To get started with compaction, check out [manage catalogs](https://edgetunnel-b2h.pages.dev/r2/data-catalog/manage-catalogs/). For best practices and limitations, refer to [about compaction](https://edgetunnel-b2h.pages.dev/r2/data-catalog/table-maintenance/). Sep 23, 2025 1. ### [Improved support for running multiple Workers with \`wrangler dev\`](https://edgetunnel-b2h.pages.dev/changelog/post/2025-09-23-wrangler-dev-multi-config-cross-command-support/) [ Workers ](https://edgetunnel-b2h.pages.dev/workers/) You can run multiple Workers in a single dev command by passing multiple config files to `wrangler dev`: ```sh wrangler dev --config ./web/wrangler.jsonc --config ./api/wrangler.jsonc ``` Previously, if you ran the command above and then also ran wrangler dev for a different Worker, the Workers running in separate wrangler dev sessions could not communicate with each other. This prevented you from being able to use [Service Bindings ↗](https://edgetunnel-b2h.pages.dev/workers/runtime-apis/bindings/service-bindings/) and [Tail Workers ↗](https://edgetunnel-b2h.pages.dev/workers/observability/logs/tail-workers/) in local development, when running separate wrangler dev sessions. Now, the following works as expected: ```sh # Terminal 1: Run your application that includes both Web and API workers wrangler dev --config ./web/wrangler.jsonc --config ./api/wrangler.jsonc # Terminal 2: Run your auth worker separately wrangler dev --config ./auth/wrangler.jsonc ``` These Workers can now communicate with each other across separate dev commands, regardless of your development setup. **./api/src/index.ts** ```js export default { async fetch(request, env) { // This service binding call now works across dev commands const authorized = await env.AUTH.isAuthorized(request); if (!authorized) { return new Response("Unauthorized", { status: 401 }); } return new Response("Hello from API Worker!", { status: 200 }); }, }; ``` Check out the [Developing with multiple Workers](https://edgetunnel-b2h.pages.dev/workers/local-development/multi-workers) guide to learn more about the different approaches and when to use each one. Sep 19, 2025 1. ### [New Metrics View in AutoRAG](https://edgetunnel-b2h.pages.dev/changelog/post/2025-09-19-autorag-metrics/) [ AI Search ](https://edgetunnel-b2h.pages.dev/ai-search/) [AutoRAG](https://edgetunnel-b2h.pages.dev/ai-search/) now includes a **Metrics** tab that shows how your data is indexed and searched. Get a clear view of the health of your indexing pipeline, compare usage between `ai-search` and `search`, and see which files are retrieved most often. ![Metrics](https://edgetunnel-b2h.pages.dev/_astro/metrics.BBUwKIos_zR8bd.webp) You can find these metrics within each AutoRAG instance: * Indexing: Track how files are ingested and see status changes over time. * Search breakdown: Compare usage between `ai-search` and `search` endpoints. * Top file retrievals: Identify which files are most frequently retrieved in a given period. Try it today in [AutoRAG](https://edgetunnel-b2h.pages.dev/ai-search/get-started/). Sep 19, 2025 1. ### [Rate Limiting in Workers is now GA](https://edgetunnel-b2h.pages.dev/changelog/post/2025-09-19-ratelimit-workers-ga/) [ Workers ](https://edgetunnel-b2h.pages.dev/workers/) [Rate Limiting within Cloudflare Workers](https://edgetunnel-b2h.pages.dev/workers/runtime-apis/bindings/rate-limit/) is now Generally Available (GA). The `ratelimit` binding is now stable and recommended for all production workloads. Existing deployments using the unsafe binding will continue to function to allow for a smooth transition. For more details, refer to [Workers Rate Limiting](https://edgetunnel-b2h.pages.dev/workers/runtime-apis/bindings/rate-limit/) documentation. Sep 19, 2025 1. ### [Panic Recovery for Rust Workers](https://edgetunnel-b2h.pages.dev/changelog/post/2025-09-19-workers-rs-panic-recovery/) [ Workers ](https://edgetunnel-b2h.pages.dev/workers/) In [workers-rs ↗](https://github.com/cloudflare/workers-rs), Rust panics were previously non-recoverable. A panic would put the Worker into an invalid state, and further function calls could result in memory overflows or exceptions. Now, when a panic occurs, in-flight requests will throw 500 errors, but the Worker will automatically and instantly recover for future requests. This ensures more reliable deployments. Automatic panic recovery is enabled for all new workers-rs deployments as of version 0.6.5, with no configuration required. #### Fixing Rust Panics with Wasm Bindgen Rust Workers are built with Wasm Bindgen, which treats panics as non-recoverable. After a panic, the entire Wasm application is considered to be in an invalid state. We now attach a default panic handler in Rust: ```rust std::panic::set_hook(Box::new(move |panic_info| { hook_impl(panic_info); })); ``` Which is registered by default in the JS initialization: **JavaScript** ```js import { setPanicHook } from "./index.js"; setPanicHook(function (err) { console.error("Panic handler!", err); }); ``` When a panic occurs, we reset the Wasm state to revert the Wasm application to how it was when the application started. #### Resetting VM State in Wasm Bindgen We worked upstream on the Wasm Bindgen project to implement a new [\--experimental-reset-state-function compilation option ↗](https://github.com/wasm-bindgen/wasm-bindgen/pull/4644) which outputs a new `__wbg_reset_state` function. This function clears all internal state related to the Wasm VM, and updates all function bindings in place to reference the new WebAssembly instance. One other necessary change here was associating Wasm-created JS objects with an instance identity. If a JS object created by an earlier instance is then passed into a new instance later on, a new "stale object" error is specially thrown when using this feature. #### Layered Solution Building on this new Wasm Bindgen feature, layered with our new default panic handler, we also added a proxy wrapper to ensure all top-level exported class instantiations (such as for Rust Durable Objects) are tracked and fully reinitialized when resetting the Wasm instance. This was necessary because the workerd runtime will instantiate exported classes, which would then be associated with the Wasm instance. This approach now provides full panic recovery for Rust Workers on subsequent requests. Of course, we never want panics, but when they do happen they are isolated and can be investigated further from the error logs - avoiding broader service disruption. #### WebAssembly Exception Handling In the future, full support for recoverable panics could be implemented without needing reinitialization at all, utilizing the [WebAssembly Exception Handling ↗](https://github.com/WebAssembly/exception-handling/blob/main/proposals/exception-handling/Exceptions.md)proposal, part of the newly announced [WebAssembly 3.0 ↗](https://webassembly.org/news/2025-09-17-wasm-3.0/) specification. This would allow unwinding panics as normal JS errors, and concurrent requests would no longer fail. **We're making significant improvements to the reliability of [Rust Workers ↗](https://github.com/cloudflare/workers-rs). Join us in `#rust-on-workers` on the [Cloudflare Developers Discord ↗](https://discord.gg/cloudflaredev) to stay updated.** ```json {"@context":"https://schema.org","@type":"BlogPosting","@id":"https://edgetunnel-b2h.pages.dev/changelog/product-group/developer-platform/12/#page","headline":"Developer platform Changelog | Cloudflare Docs","url":"https://edgetunnel-b2h.pages.dev/changelog/product-group/developer-platform/12/","inLanguage":"en","image":"https://edgetunnel-b2h.pages.dev/cf-twitter-card.png","publisher":{"@type":"Organization","name":"Cloudflare","url":"https://www.cloudflare.com/"},"isPartOf":{"@type":"WebSite","@id":"https://edgetunnel-b2h.pages.dev/#website","name":"Cloudflare Docs","url":"https://edgetunnel-b2h.pages.dev/"}} ```