--- collection: application-platforms collection_name: Application Platforms week_start: 2026-09-28 title: Cloudflare opens the agent stack while Next.js patches cache poisoning release_count: 209 generated: 2026-10-05 canonical: https://releases.sh/collections/application-platforms/digest/2026-09-28 --- # Cloudflare opens the agent stack while Next.js patches cache poisoning Cloudflare shipped a broad expansion of its agent and data platform this week — a Web Search API, the first in-house Workers AI models, Git-backed Artifacts, and a Sandbox SDK that hands sandboxes to your own Durable Objects — while Next.js issued security patches for a high-severity SSRF bug and cache poisoning in SSG and ISR pages. ### Cloudflare builds out the agent stack The week's biggest theme was giving AI agents real infrastructure to stand on. Cloudflare launched a [Web Search API in beta](https://developers.cloudflare.com/changelog/post/2026-10-02-introducing-web-search-api/), letting agents query the live web through a choice of Ceramic.ai, Exa, or Linkup, with requests flowing through AI Gateway so they show up in your logs and bill at provider list price with no markup. Grounding models in real results is the point; you can also bring your own provider key. Two more pieces landed squarely in agent territory. [Durable Objects now stay alive while I/O is pending](https://developers.cloudflare.com/changelog/post/2026-10-01-pending-io-keep-alive/) — bindings, RPC calls to other Durable Objects, container monitoring, waitUntil promises, and timers — so a submitted job no longer dies when its client disconnects. And the [Artifacts versioned file system entered open beta](https://developers.cloudflare.com/changelog/post/2026-10-01-artifacts-open-beta/), a Git-speaking store built so you can keep a repository per project, user, session, or task, deploy them to Workers through Workers Builds, and pick US or EU storage. The [Sandbox SDK hit 1.0](https://developers.cloudflare.com/changelog/post/2026-09-30-sandbox-sdk-1-0/), letting your own Durable Object class drive each sandbox container through the container API — choosing image and instance size at start, snapshotting and restoring workspaces, streaming command I/O, and serving authenticated previews from sandbox ports. The [Agents SDK added a PiHarness beta](https://developers.cloudflare.com/changelog/post/2026-10-02-pi-harness/) for durable long-running Pi agents. Cloudflare also [open-sourced its first Workers AI models](https://developers.cloudflare.com/changelog/post/2026-10-01-clef-workers-ai/), Clef and Clef-flash, which return probabilities over typed questions rather than free-form text, plus an RL fine-tuning service for adapting them. ### Data residency and an analytics platform go GA [Basin reached general availability](https://developers.cloudflare.com/changelog/post/2026-10-01-basin-ga/) as Cloudflare's end-to-end analytics platform — Pipelines for ingestion, Catalog for Iceberg tables, SQL for querying — and [each Pipelines stream now ingests up to 1 GB/s](https://developers.cloudflare.com/changelog/post/2026-10-01-stream-ingest-limit-increase/), a 200x jump over the old 5 MB/s ceiling. [AI Search went GA too](https://developers.cloudflare.com/changelog/post/2026-10-01-ai-search-generally-available/) with usage-based billing from November 1 and hybrid search on by default. Data localization got concrete: [KV namespace jurisdictions are generally available](https://developers.cloudflare.com/changelog/post/2026-10-02-kv-jurisdictions-ga/) with `eu`, `us`, and `fedramp` options fixed at creation, and D1 added a US jurisdiction for databases that must run and persist in the United States. Wrangler and the config packages followed with the [Analytics SQL binding and graduated Basin commands](https://github.com/cloudflare/workers-sdk/releases/tag/wrangler%404.145.0), accompanied by matching support in the [typed configuration package](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/config%400.22.0), [codemods](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/codemods%400.3.0), and [deploy helpers](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/deploy-helpers%400.19.0), plus a [US jurisdiction for Container apps](https://github.com/cloudflare/workers-sdk/releases/tag/wrangler%404.147.0) and a [local Workflows createBatch API](https://github.com/cloudflare/workers-sdk/releases/tag/wrangler%404.146.0). Elsewhere on the platform, the [Workers OAuth Provider reached v1](https://developers.cloudflare.com/changelog/post/2026-10-01-workers-oauth-provider-1x/) with authorization and resource servers split across Workers and validated over a Service Binding, [Monetization Gateway entered closed beta](https://developers.cloudflare.com/changelog/post/2026-09-30-closed-beta/) for charging agents over x402, and [Logpush opened to all plans](https://developers.cloudflare.com/changelog/post/2026-09-30-logpush-usage-based-pricing/) with usage-based pricing. [Workers Web Crypto added ML-KEM and ML-DSA](https://developers.cloudflare.com/changelog/post/2026-09-28-webcrypto-modern-algorithms/) behind a compatibility flag, while Core Platform pushed out [30 days of analytics on every plan](https://developers.cloudflare.com/changelog/post/2026-10-02-30-days-analytics-on-every-plan/), [Workers Observability data in Custom Dashboards](https://developers.cloudflare.com/changelog/post/2026-10-02-workers-observability-in-custom-dashboards/), and [self-serve Account API tokens](https://developers.cloudflare.com/changelog/post/2026-10-01-account-api-token-provisioning/). The workerd runtime chipped in a [Cache API invalidation method](https://github.com/cloudflare/workerd/releases/tag/v1.20261003.1) and [Durable Object snapshot APIs](https://github.com/cloudflare/workerd/releases/tag/v1.20261004.1). ### Security patches: Next.js, AI SDK, and the WAF Next.js spent the week closing holes. Its current line [patched a high-severity SSRF in Image Optimization](https://github.com/vercel/next.js/releases/tag/v16.3.8) alongside cache poisoning of SSG and ISR pages, cross-user content substitution, and Draft Mode content leaking into persisted pages; the 15.x line received the [SSG and ISR cache poisoning fixes](https://github.com/vercel/next.js/releases/tag/v15.5.27) it was missing. The canary channel separately closed a Draft Mode leak through cross-request "use cache" deduplication and an MCP middleware DNS rebinding issue, and pinned DNS resolution when fetching external images. The AI SDK shipped the same class of fix across two provider-utils lines: [SSRF in MCP OAuth metadata discovery](https://github.com/vercel/ai/releases/tag/%40ai-sdk/provider-utils%404.0.57) is closed, and [DNS validation and connection pinning survive frameworks wrapping global fetch](https://github.com/vercel/ai/releases/tag/%40ai-sdk/provider-utils%403.0.41). It also [gained a Topaz Labs provider](https://github.com/vercel/ai/releases/tag/%40ai-sdk/topaz%402.0.0). On the edge, Cloudflare's WAF [added an emergency block rule for CVE-2026-88771](https://developers.cloudflare.com/changelog/post/2026-10-01-emergency-waf-release/), an unauthenticated command execution flaw in Citrix NetScaler ADC and Gateway. ### Smaller but useful [Turborepo added task tags](https://github.com/vercel/turborepo/releases/tag/v2.11.6) with configuration inheritance and tag filtering in `query`, [Cloudflare Tunnel Quick Tunnels gained email authentication](https://developers.cloudflare.com/changelog/post/2026-10-02-protected-quick-tunnels/), and [Access learned strict service token authentication](https://developers.cloudflare.com/changelog/post/2026-10-02-strict-service-token-authentication/) that returns 401/403 instead of redirecting to a login page. On the model side, [Microsoft AI's audio models arrived on Vercel AI Gateway](https://vercel.com/changelog#microsoft-ai-models-are-now-available-on-ai-gateway). ## Releases covered ### Cloudflare - [Cloudflare launches Web Search API in beta with Ceramic.ai, Exa, and Linkup](https://developers.cloudflare.com/changelog/post/2026-10-02-introducing-web-search-api/) - [Cloudflare Durable Objects stay alive for pending I/O without a connected client](https://developers.cloudflare.com/changelog/post/2026-10-01-pending-io-keep-alive/) - [Cloudflare Artifacts enters open beta with Git-based versioned file system](https://developers.cloudflare.com/changelog/post/2026-10-01-artifacts-open-beta/) - [Cloudflare Sandbox SDK 1.0 puts each sandbox under your own Durable Object](https://developers.cloudflare.com/changelog/post/2026-09-30-sandbox-sdk-1-0/) - [Cloudflare Agents SDK adds PiHarness beta for durable Pi agents](https://developers.cloudflare.com/changelog/post/2026-10-02-pi-harness/) - [Cloudflare launches Clef decision models on Workers AI](https://developers.cloudflare.com/changelog/post/2026-10-01-clef-workers-ai/) - [Cloudflare Basin analytics platform reaches general availability](https://developers.cloudflare.com/changelog/post/2026-10-01-basin-ga/) - [Cloudflare Basin Pipelines raises per-stream ingest limit to 1 GB/s from 5 MB/s](https://developers.cloudflare.com/changelog/post/2026-10-01-stream-ingest-limit-increase/) - [Cloudflare AI Search reaches general availability with usage-based billing from November 1](https://developers.cloudflare.com/changelog/post/2026-10-01-ai-search-generally-available/) - [Cloudflare Workers KV namespace jurisdictions are now generally available](https://developers.cloudflare.com/changelog/post/2026-10-02-kv-jurisdictions-ga/) - [Wrangler 4.145.0 adds Analytics SQL binding and graduates Basin commands to stable](https://github.com/cloudflare/workers-sdk/releases/tag/wrangler%404.145.0) - [Workers @cloudflare/config 0.22.0 adds native Analytics SQL binding](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/config%400.22.0) - [Cloudflare Workers codemods 0.3.0 adds Analytics SQL binding and K2 migration](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/codemods%400.3.0) - [Workers deploy-helpers 0.19.0 adds Analytics SQL and K2 producer bindings](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/deploy-helpers%400.19.0) - [Wrangler 4.147.0 adds "us" jurisdiction for Container apps](https://github.com/cloudflare/workers-sdk/releases/tag/wrangler%404.147.0) - [Wrangler 4.146.0 adds local Workflows createBatch API and tunnel email filtering](https://github.com/cloudflare/workers-sdk/releases/tag/wrangler%404.146.0) - [Cloudflare Workers OAuth Provider hits v1 with split auth-server/resource-server API](https://developers.cloudflare.com/changelog/post/2026-10-01-workers-oauth-provider-1x/) - [Cloudflare Monetization Gateway enters closed beta for charging AI agents](https://developers.cloudflare.com/changelog/post/2026-09-30-closed-beta/) - [Cloudflare Logpush opens to all plans with usage-based pricing](https://developers.cloudflare.com/changelog/post/2026-09-30-logpush-usage-based-pricing/) - [Cloudflare Workers Web Crypto adds ML-KEM and ML-DSA behind compatibility flag](https://developers.cloudflare.com/changelog/post/2026-09-28-webcrypto-modern-algorithms/) - [Cloudflare Core Platform gives all plans 30 days of analytics data](https://developers.cloudflare.com/changelog/post/2026-10-02-30-days-analytics-on-every-plan/) - [Cloudflare Core Platform adds Workers Observability data to Custom Dashboards](https://developers.cloudflare.com/changelog/post/2026-10-02-workers-observability-in-custom-dashboards/) - [Cloudflare Core Platform lets account members self-serve create Account API tokens](https://developers.cloudflare.com/changelog/post/2026-10-01-account-api-token-provisioning/) - [Workers v1.20261003.1 adds ctx.cache.invalidate() to Cache API](https://github.com/cloudflare/workerd/releases/tag/v1.20261003.1) - [Cloudflare Workers v1.20261004.1 exposes Durable Object snapshot APIs](https://github.com/cloudflare/workerd/releases/tag/v1.20261004.1) - [Cloudflare WAF adds emergency block rule for Citrix NetScaler CVE-2026-88771](https://developers.cloudflare.com/changelog/post/2026-10-01-emergency-waf-release/) - [Cloudflare Tunnel adds email authentication for Quick Tunnels via --allowed-mail](https://developers.cloudflare.com/changelog/post/2026-10-02-protected-quick-tunnels/) - [Cloudflare One adds strict service token authentication for Access](https://developers.cloudflare.com/changelog/post/2026-10-02-strict-service-token-authentication/) ### Vercel - [Next.js v16.3.8 patches SSRF in Image Optimization and cache poisoning flaws](https://github.com/vercel/next.js/releases/tag/v16.3.8) - [Next.js v15.5.27 patches SSG and ISR cache poisoning vulnerabilities](https://github.com/vercel/next.js/releases/tag/v15.5.27) - [AI SDK provider-utils 4.0.57 fixes SSRF in MCP OAuth metadata discovery](https://github.com/vercel/ai/releases/tag/%40ai-sdk/provider-utils%404.0.57) - [AI SDK provider-utils 3.0.41 fixes MCP OAuth SSRF and preserves DNS validation when fetch is wrapped](https://github.com/vercel/ai/releases/tag/%40ai-sdk/provider-utils%403.0.41) - [AI SDK adds Topaz Labs provider in @ai-sdk/topaz 2.0.0](https://github.com/vercel/ai/releases/tag/%40ai-sdk/topaz%402.0.0) - [Turborepo v2.11.6 adds task tags with configuration inheritance and query filtering](https://github.com/vercel/turborepo/releases/tag/v2.11.6) - [Microsoft AI audio models for speech and transcription land on Vercel AI Gateway](https://vercel.com/changelog#microsoft-ai-models-are-now-available-on-ai-gateway)