Releases Index

Application Platforms

Managed hosting for web apps and APIs — push code, skip the ops.

This week's digestNov 2 – 8, 2026

Cloudflare trims its model catalog as the Workers toolchain hardens

Cloudflare is retiring sixteen LLMs and a batch of image, speech, and embedding models from Workers AI, while its Agents SDK cuts streaming storage writes by roughly 27x. AI Gateway and the AI SDK both tightened up around credentials, redirects, and refusals.

Read the digest210 releases covered
In this issue
01A model catalog cull on Workers AIDeveloper PlatformDeveloper Platform4 releases02Workers runtime and tooling stabilizeWorkersWorkersDeveloper PlatformDeveloper Platform6 releases03AI SDK tightens the edgesVercelVercel10 releases04Access, scheduling, and previewsCloudflare OneCloudflare OneVercelVercelRenderRender5 releases
EarlierOct 26Cloudflare rewires its developer primitives while Vercel chases Node 26 and AI routingOct 19Certificate compromise forces a coordinated trust resetAll digests →
Week of Nov 9in progress · digest Monday
TueNov 10, 202614 releases
Cloudflare
CloudflareCloudflare14
MonNov 9, 20266 releases
Fly.ioCloudflareVercel
Daily summary

Cloudflare's Workers toolchain hardens auth, previews, and D1 provisioning

Cloudflare's Workers toolchain saw the day's substantive changes: a same-origin fix for preview-token redirects, D1 jurisdiction auto-provisioning, an auth-profile mechanism replacing persisted account selections, and a Node.js 22.12 floor for Wrangler and Miniflare, while AI SDK added Claude Fable 5.2 and Next.js and flyctl shipped routine fixes.

  • Cloudflare's edge-preview proxy now restricts /.update-preview-token redirects to same-origin paths, closing a hole that let the endpoint bounce browsers to arbitrary sites.
  • Cloudflare tooling can pass an auth profile to child processes via CLOUDFLARE_AUTH_PROFILE, but cf and the Vite/Vitest plugins no longer persist account selections, so multi-account setups re-prompt unless accountId is set.
  • D1 bindings without a database_id can set a jurisdiction to auto-provision the database in that region, and Wrangler's d1 export gained a --compatibility flag for dumping remote databases with virtual tables like FTS5.
  • Miniflare and Wrangler now require Node.js 22.12.0 or later, and Miniflare cleans up containers for Container-enabled Durable Objects once they're unused.
  • AI SDK added Claude Fable 5.2 and meta/muse-ember model IDs across its Anthropic, Vertex, Bedrock, and gateway providers; Next.js fixed deployed RSC responses after revalidation and auto-compresses route handler responses.
Fly.ioFly.io2
fly-gov0.11.10
flyctlv0.5.6
CloudflareCloudflare2
Developer Platform

Flagship gets official Rust SDK

Flagship now has an official Rust SDK that evaluates flags from async Rust server applications through OpenFeature, using the same targeting rules and percentage rollouts as the other SDKs. The provider evaluates flags over HTTP by default, with optional local evaluation for in-process checks, and requires Rust 1.88 or later and a Tokio runtime.

Details
Workersv1.20261110.1
VercelVercel2
Next.jsv16.4.6
AI SDK@ai-sdk/gateway@2.0.178
+12