Platforms push isolation, observability, and API migrations

Isolated environments for every change

The week's biggest developer-experience story came from Cloudflare's Developer Platform, which launched Worker Previews for isolated pull-request testing. Each preview runs under the same Worker with its own code, configuration, URL, and observability, walled off from production and every other preview, and Durable Objects and Containers get their namespaces and storage provisioned automatically. You deploy them through Wrangler or Workers Builds and serve them on workers.dev or a custom domain. The tooling caught up quickly: Wrangler learned to support Containers in preview deployments with the Build Output a few days later.

Observability got its own pass. Workers Metrics charts now annotate releases and gradual deployments, rendering rollouts as a shaded band that widens as traffic shifts, so you can correlate a memory or latency spike with the exact version serving traffic. Custom tracing spans picked up more of the OpenTelemetry API, including getActiveSpan, recordException, startSpan, and setAttributes. R2 also gained a bandwidth usage metrics page in the dashboard, backed by the same data the GraphQL Analytics API exposes.

Beyond that, the platform's edge services matured: Browser Run crawl jobs can publish lifecycle events to Queues so you can react to crawl.started and crawl.finished without polling, and Email Sending suppressions gained a per-domain scope, meaning a bounce on mail.myappexample.com no longer blocks mail from the parent domain.

Cloudflare One opens MCP portals

Cloudflare One's MCP server portals reached general availability, giving every customer a single endpoint for approved Model Context Protocol servers with Access logging of tool, prompt, and resource activity. The beta-to-GA gap added real substance: Gateway routing for HTTP logging and DLP scanning, Code Mode policies, static OAuth client credentials, session management, service token authentication, and Logpush export. For teams wiring agents into internal systems, this is the control plane that was missing.

In the broader platform tooling, Wrangler's week was dominated by deployment control. It added Durable Objects code update strategies — immediate for code swaps that skip hibernation, or deferred with a configurable max delay — and the same capability landed across the Workers SDK's deployment helpers and deploy-helpers. Codemods gained a wrangler-to-cf migration plus a clean-worktree safety check that halts before touching a dirty repository. The local dev story advanced on Workflows declared in ctx.exports, now usable in wrangler dev, the Vite plugin, and Miniflare, with Wrangler and the SDK also accepting Workflow exports and UDP connect handlers. Wrangler removed the experimental Container image env binding, a breaking change for managed Containers. Runtime-side, workerd raised the SQLite row limit to 8 MiB and made Durable Object retries configurable, alongside TCP connect and TransformStream fixes. Lower-priority churn filled out the rest of the Workers line.

A hard deadline for Perplexity and a security day

The AI SDK's Perplexity provider migrated language generation to the Agent API across every supported major line, including the 3.x branch and the 2.x branch. The Sonar Chat Completions API is supported only until September 27, 2026, so this is a forced migration: model IDs and provider options give way to Agent API presets and tools, request and response metadata change, and Sonar PDF input plus image and video results disappear. Reasoning effort now runs through providerOptions.perplexity.reasoning. The OpenAI provider took a friendlier change — reasoning effort can now shift mid-conversation on the 4.x line — and quiverai picked up Arrow 2 models through the Responses API.

Vercel's own platform added Claude Opus 5.5 to AI Gateway with adaptive thinking and a 1M context window, and let TanStack AI MCP clients authenticate with Vercel Connect. Security patches were mandatory reading: Next.js fixed a remote code execution flaw in next/og ImageResponse, Turborepo patched two CVEs and stabilized remote artifact fetching, and Cloudflare's WAF pushed emergency rules for WordPress and JFrog Artifactory CVEs.