Internal release
This release1 fixBug fixesAI-tallied from the release notesInternal tooling changes: IWYU guidelines added to AGENTS.md with rust_io_link_check removed, and a server bench test deflaked.
npx @buildinternet/releases get cloudflareRecently shipped Clef-omni with native audio and video input, Sandbox SDK 1.0, and GA Cloudflare One Clients on desktop.
Clef-omni reads audio and video directly. It takes WAV or MP3 and MP4 or WebM alongside text and images in one request, aligning a video's soundtrack with its frames instead of chaining a transcriber to a text model. Clef-flash is now cheaper than Jev, and Clef is faster.
Sandbox SDK 1.0 puts each sandbox under your own Durable Object. A class picks the image and instance size per sandbox, snapshots and restores files (public beta), streams command I/O, and sets when each sandbox stops. Deploys no longer restart running sandboxes.
Basin, AI Search, and agent tooling shipped. Basin (formerly Data Platform) collects and queries events; Pipelines ingests from Workers, HTTP, and Logpush into Iceberg or R2. AI Search defaults to hybrid search, folding Workers AI embedding and reranking into its pricing; billing starts November 1, 2026. Artifacts is in open beta, deploying repos to Workers. @cloudflare/workers-oauth-provider v1 splits the authorization and resource servers. Durable Objects stay alive for pending I/O at compatibility date 2026-10-01.
Cache invalidation is new; purging got costlier. The invalidate_cache endpoint marks content stale and revalidates with your origin, reusing cached bodies on 304. Purge now forces a Cache Reserve miss, billed as a Class A operation.
Cloudflare One Clients hit GA on desktop. Split-tunnel excluded resources are no longer briefly blocked during reconnect, and connects are faster with lower memory use.
Rules gained new controls, and unsafe-topic categories changed. hash_in_range() is GA, and cf.appsec.request.failed_detections exposes detection failures to custom and rate limiting rules. Rules using removed cf.llm.prompt.unsafe_topic_categories values no longer match. WAF added blocking detections for F5 BIG-IP, Citrix NetScaler, GitLab, and WordPress flaws.
Internal tooling changes: IWYU guidelines added to AGENTS.md with rust_io_link_check removed, and a server bench test deflaked.
Durable Object retry policy can now be set per stub, and a transient marker is added for Durable Object call failures. Stream constructors have pinned behavior for how they read source, sink, and transformer members, and a queued ReadableStream's source is released once its algorithms clear.
Local Explorer can now send one-off Cron Trigger invocations to a Worker's scheduled() handler during local development, removing the need to construct request URLs when testing handler behavior. The browser interface supports invoking configured cron expressions, building ad hoc expressions, setting reusable scheduled times, and inspecting outcomes and noRetry() status, and the same operation is exposed via the Local Explorer API, which takes an exact Worker name plus a cron expression and optional scheduled time.
Local Explorer can now send one-off Cron Trigger invocations to a Worker's scheduled() handler during local development via cf dev, wrangler dev, or the Cloudflare Vite plugin, removing the need to construct request URLs. The Local Explorer API exposes the same operation for tools and AI agents, targeting an exact Worker name with a cron expression and optional scheduled time.
Cloudflare CLI 1.0.0-beta.16 adds cf docs search, which queries live Cloudflare documentation and returns up to five ranked JSON results with title, description, and URL; an Internet connection is required. The release also standardizes generated command names to kebab-case, so cf accounts billing getCredits becomes cf accounts billing get-credits.
Cloudflare CLI 1.0.0-beta.16 adds cf docs search, which queries live Cloudflare documentation and returns up to five ranked JSON results with title, description, and URL. Generated command names are standardized to kebab-case, so cf accounts billing getCredits becomes cf accounts billing get-credits.
The trigram tokenizer for AI Search keyword search now matches Japanese, Chinese, and Korean queries, including full natural-language questions without spaces, which previously were treated as single exact phrases and usually returned no results. CJK content should set keyword_tokenizer to trigram instead of porter, though changing the tokenizer triggers a full reindex.