{"collection":{"slug":"application-platforms","name":"Application Platforms"},"digest":{"id":"cwd_4Ag6GW0REKNLt2Lj-7pex","weekStart":"2026-10-12","title":"Next.js patches critical RCEs as Vercel opens its platform to Python, daemons, and persistent storage","intro":"Next.js shipped emergency patches for two critical unauthenticated remote code execution flaws in use cache and the Image Optimization API, while Vercel's platform week brought Python support, Daemons, Bring Your Own Cloud, and persistent Drives to general availability.","body":"### Next.js closes two critical RCE holes\n\nThe week's most urgent news is a pair of critical unauthenticated remote code execution vulnerabilities in Next.js, patched across both the current and previous major lines. The flaws let attackers run arbitrary code through [use cache functions that return typed arrays](/release/rel_dLlbBnoJD1rKLyTZepjhb-next-js-v16-4-1-patches-two-critical-unauthenticated-rce-vulnerabilities) and through the [Image Optimization API when SVG files are used](/release/rel_CJ2rniZrAqIgxNq_4y9jt-next-js-v15-5-28-patches-critical-rce-in-image-optimization-api), with a high-severity denial of service in the App Router using Server Actions fixed alongside them. Anyone running either major version should upgrade immediately; there is no workaround short of the patch.\n\nCloudflare moved to blunt the same class of attack. An [emergency Cloudflare Managed Ruleset rule](/release/rel_bCFkCuqjxq2qvBqDi1bbr-cloudflare-waf-adds-emergency-managed-rule-blocking-rce-exploitation-in-web) is now set to Block, targeting active exploitation of a critical RCE in popular web frameworks where malformed path sequences let attackers execute system commands with web server privileges. That rule protects unpatched applications regardless of whether they run on Cloudflare.\n\n### Vercel opens the platform beyond JavaScript\n\nVercel's platform week was largely about expanding what it can run. [Python is now generally available](/release/rel_-IezBZI3k5MOJzpnSJzWu-vercel-makes-python-support-generally-available) for APIs, full-stack applications, and AI agents, with automatic framework detection and native SDKs — the clearest signal yet that Vercel is no longer a JavaScript-only host. Workloads that don't fit the request/response model got a home too: [Vercel Daemons entered public beta](/release/rel_WBkW7csedCMSDYD6-s0S6-vercel-daemons-enters-public-beta-for-queue-consumers-and-ci-runners) for queue consumers, workflow workers, and self-hosted CI runners. Stateful work got a foundation with [Vercel Drives reaching general availability](/release/rel_5gpx7kGYqHb6Yphfx6U6h-vercel-drives-now-generally-available-for-persistent-sandbox-storage), persistent storage you mount into a Sandbox so files outlive it, with forking for parallel workers. Enterprises with data-residency or compliance constraints can now run on their own infrastructure, as [Bring Your Own Cloud on AWS is generally available](/release/rel_oFO-PqYDw6FZwsNq_NZCw-vercel-bring-your-own-cloud-on-aws-reaches-general-availability).\n\nAround the edges, Vercel Connect picked up two capabilities for agent-driven access: [Enterprise-Managed Authorization](/release/rel_HnSCW3HVcx0fQXHck0UvU-vercel-connect-adds-enterprise-managed-authorization-via-identity-provider) so apps and agents act on behalf of users with access governed by the identity provider, and [MCP Events support](/release/rel_1Z970N-tWv0fv9DsXZXZm-vercel-brings-mcp-events-support-to-vercel-connect-in-public-beta) so agents can watch MCP servers and react when events arrive. The AI Gateway added [Meta's Muse Spark Open](/release/rel_9xUPGoqmgWSYTZXdbf8xJ-vercel-ai-gateway-adds-meta-muse-spark-open-model) and the free stealth model [Cat Jam](/release/rel_fOsCPu84X3pSWgv9Ay9YN-vercel-ai-gateway-adds-cat-jam-stealth-model-for-free), both callable with one API key and no provider account, while [Token Pass entered early access](/release/rel_PR7t2SvVOSAjiDiRXfbw--vercel-launches-token-pass-with-80-monthly-credit-for-open-weight-models) with $80 in monthly open-weight model credit for $30.\n\n### Cloudflare's network and Gateway grow sharper\n\nCloudflare Tunnel got dramatically more room to scale: the default route limit jumped from 1,000 to 50,000 per account, and [Tunnels for Platforms](/release/rel_5TUAGas1gCi8cS3j7RXwJ-cloudflare-one-raises-default-tunnel-route-limit-to-50-000-and-adds-paid-tunnels) lets accounts buy past the included 1,000 tunnels. The [same change landed on the Core Platform side](/release/rel_DupR0Bjy60SsuJJsnx8xH-cloudflare-tunnel-raises-default-routes-to-50-000-and-adds-tunnels-for-platforms). Elsewhere in Cloudflare One, the [Linux client hit general availability](/release/rel_RPmGzSjJ7mI7HjD22t0H4-cloudflare-one-client-for-linux-2026-8-2110-hits-ga-fixes-split-tunnel-reconnect) with a fix for split-tunnel reconnect loops, [custom applications](/release/rel_FZ92PL0SRoBXWSV2nd3zm-cloudflare-one-gateway-application-library-now-supports-custom-applications) arrived in the Gateway Application Library, [BGP route filtering](/release/rel_PWyQt8nf3bK9dWXbwoihR-cloudflare-one-adds-bgp-route-filtering-for-ipsec-and-gre-tunnels) came to IPsec and GRE tunnels, and DLP custom patterns can now [call Workers to validate matches](/release/rel_gxT7cK-nKJZNYbXZ7oevM-cloudflare-one-lets-workers-validate-dlp-custom-pattern-matches) with organization-specific logic. The Gateway–Workers integration entered public beta, letting a Forward action [run your own code on permitted traffic](/release/rel_FwiGIh4Lie2M-fT4ufdRJ-cloudflare-one-gateway-workers-integration-enters-public-beta).\n\nOn the developer side, [Stream WebRTC live streaming went generally available](/release/rel_nix4aE6B6mDC43r2XGvXR-cloudflare-stream-webrtc-live-streaming-is-generally-available), the [Agents SDK gained a persistent browser tool](/release/rel_orURPl36MSy_2WuvlX1QM-cloudflare-agents-sdk-adds-persistent-browser-tool-with-lasting-tabs-and-logins) that keeps tabs and logins across turns, [Local Explorer can invoke Cron Triggers](/release/rel_APcO3GEluXnnr-aegCgTi-cloudflare-developer-platform-local-explorer-can-invoke-cron-triggers), and [AI Search keyword queries now match Japanese, Chinese, and Korean](/release/rel_MccF6ZgLSaEsSzVnBf99K-cloudflare-ai-search-keyword-search-now-matches-japanese-chinese-and-korean). The [Cloudflare CLI added cf docs search](/release/rel_rll_etEgwzI5hlB2QQ-p7-cloudflare-cli-1-0-0-beta-16-adds-cf-docs-search-with-kebab-case-command-rename), Workers AI welcomed [Pipecat's PhoneLLM Mini](/release/rel_iBNZp-gblVHI93CM16k5x-cloudflare-workers-ai-adds-pipecat-phonellm-mini-for-realtime-voice-agents) for realtime voice agents, and the [Workers SDK moved Access dev config](/release/rel_Qj3sRzZhL0HyJeyoFEp81-cloudflare-workers-sdk-config-0-26-0-adds-access-local-dev-configuration) under access.dev.\n\n### Tooling churn: Turborepo, Railpack, and the AI SDK\n\nBuild tooling saw steady refinement rather than headline changes. [Turborepo shipped dozens of performance optimizations](/release/rel_6GPSaGz_B4DyDdcA7Eb7X-turborepo-v2-11-9-ships-dozens-of-performance-optimizations-and-turbo-setup) across lockfile parsing, cache archives, and file watching, plus a root-only turbo setup policy. [Railpack added Zig builds and Turborepo cache reuse](/release/rel_G90sqwjZT0yPs1l5Oo7Em-railpack-v0-42-0-adds-zig-builds-and-turborepo-cache-reuse), so unchanged workspace packages skip rebuilding. The AI SDK family landed a [breaking change to managed event subscriptions](/release/rel_d6pWOtUq66Zm2m5FQ4pzN-ai-sdk-ai-sdk-mcp-2-0-76-changes-managed-event-subscriptions-to-ttlms), [image input and a 262k-token context option](/release/rel_SJKi8AkWEL4DcaNxisfHz-ai-sdk-typesafe-ai-3-0-19-adds-image-input-support-and-262k-token-context-option), a [fix for lowercased URL paths](/release/rel_6WX1WycBnfHlXCxbL5Jkq-ai-sdk-provider-utils-5-0-60-fixes-case-sensitive-url-path-handling), and [native Pi MCP handling](/release/rel_KFGLmwffwOvSzgqzG7z44-ai-sdk-harness-pi-1-0-154-deprecates-mcpsettings-and-swaps-mcp-adapter-for). Railway, meanwhile, added [activity feed filters, guided IaC migration, and CLI cron jobs](/release/rel_vdyrur1DWvugu2Fho63QC-railway-adds-activity-feed-filters-guided-iac-migration-and-cli-cron-jobs).","releaseIds":["rel_dLlbBnoJD1rKLyTZepjhb","rel_CJ2rniZrAqIgxNq_4y9jt","rel_bCFkCuqjxq2qvBqDi1bbr","rel_-IezBZI3k5MOJzpnSJzWu","rel_WBkW7csedCMSDYD6-s0S6","rel_5gpx7kGYqHb6Yphfx6U6h","rel_oFO-PqYDw6FZwsNq_NZCw","rel_HnSCW3HVcx0fQXHck0UvU","rel_1Z970N-tWv0fv9DsXZXZm","rel_9xUPGoqmgWSYTZXdbf8xJ","rel_fOsCPu84X3pSWgv9Ay9YN","rel_PR7t2SvVOSAjiDiRXfbw-","rel_5TUAGas1gCi8cS3j7RXwJ","rel_DupR0Bjy60SsuJJsnx8xH","rel_RPmGzSjJ7mI7HjD22t0H4","rel_FZ92PL0SRoBXWSV2nd3zm","rel_PWyQt8nf3bK9dWXbwoihR","rel_gxT7cK-nKJZNYbXZ7oevM","rel_FwiGIh4Lie2M-fT4ufdRJ","rel_nix4aE6B6mDC43r2XGvXR","rel_orURPl36MSy_2WuvlX1QM","rel_APcO3GEluXnnr-aegCgTi","rel_MccF6ZgLSaEsSzVnBf99K","rel_rll_etEgwzI5hlB2QQ-p7","rel_iBNZp-gblVHI93CM16k5x","rel_Qj3sRzZhL0HyJeyoFEp81","rel_6GPSaGz_B4DyDdcA7Eb7X","rel_G90sqwjZT0yPs1l5Oo7Em","rel_d6pWOtUq66Zm2m5FQ4pzN","rel_SJKi8AkWEL4DcaNxisfHz","rel_6WX1WycBnfHlXCxbL5Jkq","rel_KFGLmwffwOvSzgqzG7z44","rel_vdyrur1DWvugu2Fho63QC"],"releaseCount":194,"generatedAt":"2026-10-19T06:17:30.764Z","releases":[{"id":"rel_dLlbBnoJD1rKLyTZepjhb","title":"Next.js v16.4.1 patches two critical unauthenticated RCE vulnerabilities","path":"/release/rel_dLlbBnoJD1rKLyTZepjhb-critical-unauthenticated-rces-patched-in-use-cache-and-image-optimization","url":"https://github.com/vercel/next.js/releases/tag/v16.4.1","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":{"slug":"nextjs","name":"Next.js"},"importance":5,"composition":{"bugs":3,"features":0,"enhancements":0},"publishedAt":"2026-10-14T17:47:59.000Z"},{"id":"rel_CJ2rniZrAqIgxNq_4y9jt","title":"Next.js v15.5.28 patches critical RCE in Image Optimization API","path":"/release/rel_CJ2rniZrAqIgxNq_4y9jt-critical-rce-in-image-optimization-api-patched","url":"https://github.com/vercel/next.js/releases/tag/v15.5.28","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":{"slug":"nextjs","name":"Next.js"},"importance":5,"composition":{"bugs":2,"features":0,"enhancements":0},"publishedAt":"2026-10-14T17:47:49.000Z"},{"id":"rel_bCFkCuqjxq2qvBqDi1bbr","title":"Cloudflare WAF adds emergency managed rule blocking RCE exploitation in web frameworks","path":"/release/rel_bCFkCuqjxq2qvBqDi1bbr-emergency-waf-rule-blocks-active-rce-exploitation","url":"https://developers.cloudflare.com/changelog/post/2026-10-14-emergency-waf-release/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"application-security","name":"Application Security"},"importance":4,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-14T00:00:00.000Z"},{"id":"rel_-IezBZI3k5MOJzpnSJzWu","title":"Vercel makes Python support generally available","path":"/release/rel_-IezBZI3k5MOJzpnSJzWu-python-on-vercel-now-generally-available","url":"https://vercel.com/changelog#python-on-vercel-is-now-generally-available","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":4,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_WBkW7csedCMSDYD6-s0S6","title":"Vercel Daemons enters public beta for queue consumers and CI runners","path":"/release/rel_WBkW7csedCMSDYD6-s0S6-vercel-daemons-beta-runs-queue-consumers-and-workers","url":"https://vercel.com/changelog#vercel-daemons-is-now-in-public-beta","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":4,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_5gpx7kGYqHb6Yphfx6U6h","title":"Vercel Drives now generally available for persistent sandbox storage","path":"/release/rel_5gpx7kGYqHb6Yphfx6U6h-vercel-drives-reach-ga","url":"https://vercel.com/changelog#vercel-drives-is-now-generally-available","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":4,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_oFO-PqYDw6FZwsNq_NZCw","title":"Vercel Bring Your Own Cloud on AWS reaches general availability","path":"/release/rel_oFO-PqYDw6FZwsNq_NZCw-bring-your-own-cloud-on-aws-now-ga","url":"https://vercel.com/changelog#bring-your-own-cloud-on-aws-is-now-generally-available","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":4,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_HnSCW3HVcx0fQXHck0UvU","title":"Vercel Connect adds Enterprise-Managed Authorization via identity provider","path":"/release/rel_HnSCW3HVcx0fQXHck0UvU-vercel-connect-adds-enterprise-managed-auth","url":"https://vercel.com/changelog#vercel-connect-adds-enterprise-managed-authorization","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_1Z970N-tWv0fv9DsXZXZm","title":"Vercel brings MCP Events support to Vercel Connect in public beta","path":"/release/rel_1Z970N-tWv0fv9DsXZXZm-mcp-events-support-lands-in-vercel-connect-beta","url":"https://vercel.com/changelog#mcp-events-support-in-vercel-connect-is-now-in-public-beta","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_9xUPGoqmgWSYTZXdbf8xJ","title":"Vercel AI Gateway adds Meta Muse Spark Open model","path":"/release/rel_9xUPGoqmgWSYTZXdbf8xJ-muse-spark-open-now-on-ai-gateway","url":"https://vercel.com/changelog#muse-spark-open-now-available-on-ai-gateway","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_fOsCPu84X3pSWgv9Ay9YN","title":"Vercel AI Gateway adds Cat Jam stealth model for free","path":"/release/rel_fOsCPu84X3pSWgv9Ay9YN-cat-jam-stealth-model-free-on-ai-gateway","url":"https://vercel.com/changelog#cat-jam-is-now-available-in-stealth-for-free-on-ai-gateway","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_PR7t2SvVOSAjiDiRXfbw-","title":"Vercel launches Token Pass with $80 monthly credit for open-weight models","path":"/release/rel_PR7t2SvVOSAjiDiRXfbw--token-pass-80-model-credit-for-30","url":"https://vercel.com/changelog#introducing-token-pass","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_5TUAGas1gCi8cS3j7RXwJ","title":"Cloudflare One raises default Tunnel route limit to 50,000 and adds paid tunnels beyond 1,000","path":"/release/rel_5TUAGas1gCi8cS3j7RXwJ-tunnel-routes-jump-to-50-000-per-account-extra-tunnels-4-50-mo","url":"https://developers.cloudflare.com/changelog/post/2026-10-16-tunnels-for-platforms-and-50k-routes/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"cloudflare-one","name":"Cloudflare One"},"importance":4,"composition":{"bugs":0,"features":2,"enhancements":0},"publishedAt":"2026-10-16T00:00:00.000Z"},{"id":"rel_DupR0Bjy60SsuJJsnx8xH","title":"Cloudflare Tunnel raises default routes to 50,000 and adds Tunnels for Platforms","path":"/release/rel_DupR0Bjy60SsuJJsnx8xH-default-routes-jump-to-50k-tunnels-per-account-now-purchasable","url":"https://developers.cloudflare.com/changelog/post/2026-10-16-tunnels-for-platforms-and-50k-routes/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"core-platform","name":"Core Platform"},"importance":3,"composition":{"bugs":0,"features":2,"enhancements":0},"publishedAt":"2026-10-16T00:00:00.000Z"},{"id":"rel_RPmGzSjJ7mI7HjD22t0H4","title":"Cloudflare One Client for Linux 2026.8.2110 hits GA, fixes split-tunnel reconnect loop","path":"/release/rel_RPmGzSjJ7mI7HjD22t0H4-linux-client-hits-ga-split-tunnel-reconnect-loop-fixed","url":"https://developers.cloudflare.com/changelog/post/2026-10-12-warp-linux-ga/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"cloudflare-one","name":"Cloudflare One"},"importance":4,"composition":{"bugs":1,"features":1,"enhancements":0},"publishedAt":"2026-10-12T19:16:09.000Z"},{"id":"rel_FZ92PL0SRoBXWSV2nd3zm","title":"Cloudflare One Gateway Application Library now supports custom applications","path":"/release/rel_FZ92PL0SRoBXWSV2nd3zm-gateway-application-library-supports-custom-applications","url":"https://developers.cloudflare.com/changelog/post/2026-10-15-app-library-custom-applications/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"cloudflare-one","name":"Cloudflare One"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":3},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_PWyQt8nf3bK9dWXbwoihR","title":"Cloudflare One adds BGP route filtering for IPsec and GRE tunnels","path":"/release/rel_PWyQt8nf3bK9dWXbwoihR-bgp-import-export-filtering-for-ipsec-and-gre-tunnels","url":"https://developers.cloudflare.com/changelog/post/2026-10-15-bgp-filter-profiles/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"cloudflare-one","name":"Cloudflare One"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_gxT7cK-nKJZNYbXZ7oevM","title":"Cloudflare One lets Workers validate DLP custom pattern matches","path":"/release/rel_gxT7cK-nKJZNYbXZ7oevM-workers-now-validate-dlp-custom-pattern-matches","url":"https://developers.cloudflare.com/changelog/post/2026-10-15-dlp-custom-validation-workers/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"cloudflare-one","name":"Cloudflare One"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_FwiGIh4Lie2M-fT4ufdRJ","title":"Cloudflare One Gateway workers integration enters public beta","path":"/release/rel_FwiGIh4Lie2M-fT4ufdRJ-gateway-forward-action-runs-workers-on-permitted-traffic","url":"https://developers.cloudflare.com/changelog/post/2026-10-15-gateway-workers-public-beta/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"cloudflare-one","name":"Cloudflare One"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_nix4aE6B6mDC43r2XGvXR","title":"Cloudflare Stream WebRTC live streaming is generally available","path":"/release/rel_nix4aE6B6mDC43r2XGvXR-stream-webrtc-live-streaming-reaches-ga","url":"https://developers.cloudflare.com/changelog/post/2026-10-15-stream-live-webrtc-ga/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":4,"composition":{"bugs":0,"features":1,"enhancements":1},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_orURPl36MSy_2WuvlX1QM","title":"Cloudflare Agents SDK adds persistent browser tool with lasting tabs and logins","path":"/release/rel_orURPl36MSy_2WuvlX1QM-persistent-browser-tool-keeps-tabs-and-logins-between-turns","url":"https://developers.cloudflare.com/changelog/post/2026-10-13-persistent-browser/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":4,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-13T00:00:00.000Z"},{"id":"rel_APcO3GEluXnnr-aegCgTi","title":"Cloudflare Developer Platform Local Explorer can invoke Cron Triggers","path":"/release/rel_APcO3GEluXnnr-aegCgTi-cron-triggers-invocable-from-local-explorer","url":"https://developers.cloudflare.com/changelog/post/2026-10-17-local-explorer-cron-triggers/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":3,"composition":{"bugs":0,"features":2,"enhancements":0},"publishedAt":"2026-10-17T00:00:00.000Z"},{"id":"rel_MccF6ZgLSaEsSzVnBf99K","title":"Cloudflare AI Search keyword search now matches Japanese, Chinese, and Korean queries","path":"/release/rel_MccF6ZgLSaEsSzVnBf99K-cjk-keyword-search-now-works-with-trigram-tokenizer","url":"https://developers.cloudflare.com/changelog/post/2026-10-16-cjk-keyword-search/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-16T00:00:00.000Z"},{"id":"rel_rll_etEgwzI5hlB2QQ-p7","title":"Cloudflare CLI 1.0.0-beta.16 adds `cf docs search` with kebab-case command rename","path":"/release/rel_rll_etEgwzI5hlB2QQ-p7-cf-docs-search-ships-command-names-move-to-kebab-case","url":"https://developers.cloudflare.com/changelog/post/2026-10-16-docs-search/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":1},"publishedAt":"2026-10-16T00:00:00.000Z"},{"id":"rel_iBNZp-gblVHI93CM16k5x","title":"Cloudflare Workers AI adds Pipecat PhoneLLM Mini for realtime voice agents","path":"/release/rel_iBNZp-gblVHI93CM16k5x-phonellm-mini-lands-on-workers-ai-for-voice-agents","url":"https://developers.cloudflare.com/changelog/post/2026-10-15-phonellm-mini-workers-ai/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_Qj3sRzZhL0HyJeyoFEp81","title":"Cloudflare Workers SDK config 0.26.0 adds Access local dev configuration","path":"/release/rel_Qj3sRzZhL0HyJeyoFEp81-access-dev-config-moves-to-config-access-dev","url":"https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/config%400.26.0","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-14T05:57:31.000Z"},{"id":"rel_6GPSaGz_B4DyDdcA7Eb7X","title":"Turborepo v2.11.9 ships dozens of performance optimizations and `turbo setup`","path":"/release/rel_6GPSaGz_B4DyDdcA7Eb7X-dozens-of-perf-optimizations-turbo-setup-gains-policy","url":"https://github.com/vercel/turborepo/releases/tag/v2.11.9","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":{"slug":"turborepo","name":"Turborepo"},"importance":3,"composition":{"bugs":3,"features":16,"enhancements":40},"publishedAt":"2026-10-16T19:07:18.000Z"},{"id":"rel_G90sqwjZT0yPs1l5Oo7Em","title":"Railpack v0.42.0 adds Zig builds and Turborepo cache reuse","path":"/release/rel_G90sqwjZT0yPs1l5Oo7Em-zig-builds-supported-turborepo-cache-reused-across-builds","url":"https://github.com/railwayapp/railpack/releases/tag/v0.42.0","org":{"slug":"railway","name":"Railway","avatarUrl":"https://media.releases.sh/orgs/railway.png","githubHandle":"railwayapp"},"product":null,"importance":3,"composition":{"bugs":2,"features":2,"enhancements":0},"publishedAt":"2026-10-15T23:33:57.000Z"},{"id":"rel_d6pWOtUq66Zm2m5FQ4pzN","title":"AI SDK @ai-sdk/mcp 2.0.76 changes managed event subscriptions to ttlMs","path":"/release/rel_d6pWOtUq66Zm2m5FQ4pzN-managed-event-subscriptions-now-take-ttlms-not-expiresat","url":"https://github.com/vercel/ai/releases/tag/%40ai-sdk/mcp%402.0.76","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":0,"enhancements":1},"publishedAt":"2026-10-15T03:21:11.000Z"},{"id":"rel_SJKi8AkWEL4DcaNxisfHz","title":"AI SDK typesafe-ai 3.0.19 adds image input support and 262k-token context option","path":"/release/rel_SJKi8AkWEL4DcaNxisfHz-decision-models-accept-png-and-jpeg-inputs-262k-context-opt-in","url":"https://github.com/vercel/ai/releases/tag/%40ai-sdk/typesafe-ai%403.0.19","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":2,"enhancements":1},"publishedAt":"2026-10-15T02:26:50.000Z"},{"id":"rel_6WX1WycBnfHlXCxbL5Jkq","title":"AI SDK provider-utils 5.0.60 fixes case-sensitive URL path handling","path":"/release/rel_6WX1WycBnfHlXCxbL5Jkq-url-paths-and-query-values-keep-their-casing","url":"https://github.com/vercel/ai/releases/tag/%40ai-sdk/provider-utils%405.0.60","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":1,"features":0,"enhancements":0},"publishedAt":"2026-10-15T02:26:14.000Z"},{"id":"rel_KFGLmwffwOvSzgqzG7z44","title":"AI SDK harness-pi 1.0.154 deprecates mcpSettings and swaps MCP adapter for native Pi","path":"/release/rel_KFGLmwffwOvSzgqzG7z44-native-pi-mcp-replaces-adapter-toolprefix-and-outputguard-deprecated","url":"https://github.com/vercel/ai/releases/tag/%40ai-sdk/harness-pi%401.0.154","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":2,"features":3,"enhancements":0},"publishedAt":"2026-10-15T02:25:17.000Z"},{"id":"rel_vdyrur1DWvugu2Fho63QC","title":"Railway adds activity feed filters, guided IaC migration, and CLI cron jobs","path":"/release/rel_vdyrur1DWvugu2Fho63QC-activity-feed-filters-guided-iac-migration-cli-cron-jobs","url":"https://railway.com/changelog#activity-feed-filters-guided-iac-migration-cron-jobs-in-the-","org":{"slug":"railway","name":"Railway","avatarUrl":"https://media.releases.sh/orgs/railway.png","githubHandle":"railwayapp"},"product":null,"importance":3,"composition":{"bugs":0,"features":3,"enhancements":0},"publishedAt":"2026-10-16T00:00:00.000Z"}],"sections":[{"heading":"Next.js closes two critical RCE holes","anchor":"next-js-closes-two-critical-rce-holes","lede":"The week's most urgent news is a pair of critical unauthenticated remote code execution vulnerabilities in Next.js, patched across both the current and previous major lines.","releaseIds":["rel_dLlbBnoJD1rKLyTZepjhb","rel_CJ2rniZrAqIgxNq_4y9jt","rel_bCFkCuqjxq2qvBqDi1bbr"],"releases":[{"id":"rel_dLlbBnoJD1rKLyTZepjhb","title":"Next.js v16.4.1 patches two critical unauthenticated RCE vulnerabilities","path":"/release/rel_dLlbBnoJD1rKLyTZepjhb-critical-unauthenticated-rces-patched-in-use-cache-and-image-optimization","url":"https://github.com/vercel/next.js/releases/tag/v16.4.1","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":{"slug":"nextjs","name":"Next.js"},"importance":5,"composition":{"bugs":3,"features":0,"enhancements":0},"publishedAt":"2026-10-14T17:47:59.000Z"},{"id":"rel_CJ2rniZrAqIgxNq_4y9jt","title":"Next.js v15.5.28 patches critical RCE in Image Optimization API","path":"/release/rel_CJ2rniZrAqIgxNq_4y9jt-critical-rce-in-image-optimization-api-patched","url":"https://github.com/vercel/next.js/releases/tag/v15.5.28","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":{"slug":"nextjs","name":"Next.js"},"importance":5,"composition":{"bugs":2,"features":0,"enhancements":0},"publishedAt":"2026-10-14T17:47:49.000Z"},{"id":"rel_bCFkCuqjxq2qvBqDi1bbr","title":"Cloudflare WAF adds emergency managed rule blocking RCE exploitation in web frameworks","path":"/release/rel_bCFkCuqjxq2qvBqDi1bbr-emergency-waf-rule-blocks-active-rce-exploitation","url":"https://developers.cloudflare.com/changelog/post/2026-10-14-emergency-waf-release/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"application-security","name":"Application Security"},"importance":4,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-14T00:00:00.000Z"}]},{"heading":"Vercel opens the platform beyond JavaScript","anchor":"vercel-opens-the-platform-beyond-javascript","lede":"Vercel's platform week was largely about expanding what it can run.","releaseIds":["rel_-IezBZI3k5MOJzpnSJzWu","rel_WBkW7csedCMSDYD6-s0S6","rel_5gpx7kGYqHb6Yphfx6U6h","rel_oFO-PqYDw6FZwsNq_NZCw","rel_HnSCW3HVcx0fQXHck0UvU","rel_1Z970N-tWv0fv9DsXZXZm","rel_9xUPGoqmgWSYTZXdbf8xJ","rel_fOsCPu84X3pSWgv9Ay9YN","rel_PR7t2SvVOSAjiDiRXfbw-"],"releases":[{"id":"rel_-IezBZI3k5MOJzpnSJzWu","title":"Vercel makes Python support generally available","path":"/release/rel_-IezBZI3k5MOJzpnSJzWu-python-on-vercel-now-generally-available","url":"https://vercel.com/changelog#python-on-vercel-is-now-generally-available","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":4,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_WBkW7csedCMSDYD6-s0S6","title":"Vercel Daemons enters public beta for queue consumers and CI runners","path":"/release/rel_WBkW7csedCMSDYD6-s0S6-vercel-daemons-beta-runs-queue-consumers-and-workers","url":"https://vercel.com/changelog#vercel-daemons-is-now-in-public-beta","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":4,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_5gpx7kGYqHb6Yphfx6U6h","title":"Vercel Drives now generally available for persistent sandbox storage","path":"/release/rel_5gpx7kGYqHb6Yphfx6U6h-vercel-drives-reach-ga","url":"https://vercel.com/changelog#vercel-drives-is-now-generally-available","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":4,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_oFO-PqYDw6FZwsNq_NZCw","title":"Vercel Bring Your Own Cloud on AWS reaches general availability","path":"/release/rel_oFO-PqYDw6FZwsNq_NZCw-bring-your-own-cloud-on-aws-now-ga","url":"https://vercel.com/changelog#bring-your-own-cloud-on-aws-is-now-generally-available","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":4,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_HnSCW3HVcx0fQXHck0UvU","title":"Vercel Connect adds Enterprise-Managed Authorization via identity provider","path":"/release/rel_HnSCW3HVcx0fQXHck0UvU-vercel-connect-adds-enterprise-managed-auth","url":"https://vercel.com/changelog#vercel-connect-adds-enterprise-managed-authorization","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_1Z970N-tWv0fv9DsXZXZm","title":"Vercel brings MCP Events support to Vercel Connect in public beta","path":"/release/rel_1Z970N-tWv0fv9DsXZXZm-mcp-events-support-lands-in-vercel-connect-beta","url":"https://vercel.com/changelog#mcp-events-support-in-vercel-connect-is-now-in-public-beta","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_9xUPGoqmgWSYTZXdbf8xJ","title":"Vercel AI Gateway adds Meta Muse Spark Open model","path":"/release/rel_9xUPGoqmgWSYTZXdbf8xJ-muse-spark-open-now-on-ai-gateway","url":"https://vercel.com/changelog#muse-spark-open-now-available-on-ai-gateway","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_fOsCPu84X3pSWgv9Ay9YN","title":"Vercel AI Gateway adds Cat Jam stealth model for free","path":"/release/rel_fOsCPu84X3pSWgv9Ay9YN-cat-jam-stealth-model-free-on-ai-gateway","url":"https://vercel.com/changelog#cat-jam-is-now-available-in-stealth-for-free-on-ai-gateway","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_PR7t2SvVOSAjiDiRXfbw-","title":"Vercel launches Token Pass with $80 monthly credit for open-weight models","path":"/release/rel_PR7t2SvVOSAjiDiRXfbw--token-pass-80-model-credit-for-30","url":"https://vercel.com/changelog#introducing-token-pass","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"}]},{"heading":"Cloudflare's network and Gateway grow sharper","anchor":"cloudflares-network-and-gateway-grow-sharper","lede":"Cloudflare Tunnel got dramatically more room to scale: the default route limit jumped from 1,000 to 50,000 per account, and Tunnels for Platforms lets accounts buy past the included 1,000 tunnels.","releaseIds":["rel_5TUAGas1gCi8cS3j7RXwJ","rel_DupR0Bjy60SsuJJsnx8xH","rel_RPmGzSjJ7mI7HjD22t0H4","rel_FZ92PL0SRoBXWSV2nd3zm","rel_PWyQt8nf3bK9dWXbwoihR","rel_gxT7cK-nKJZNYbXZ7oevM","rel_FwiGIh4Lie2M-fT4ufdRJ","rel_nix4aE6B6mDC43r2XGvXR","rel_orURPl36MSy_2WuvlX1QM","rel_APcO3GEluXnnr-aegCgTi","rel_MccF6ZgLSaEsSzVnBf99K","rel_rll_etEgwzI5hlB2QQ-p7","rel_iBNZp-gblVHI93CM16k5x","rel_Qj3sRzZhL0HyJeyoFEp81"],"releases":[{"id":"rel_5TUAGas1gCi8cS3j7RXwJ","title":"Cloudflare One raises default Tunnel route limit to 50,000 and adds paid tunnels beyond 1,000","path":"/release/rel_5TUAGas1gCi8cS3j7RXwJ-tunnel-routes-jump-to-50-000-per-account-extra-tunnels-4-50-mo","url":"https://developers.cloudflare.com/changelog/post/2026-10-16-tunnels-for-platforms-and-50k-routes/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"cloudflare-one","name":"Cloudflare One"},"importance":4,"composition":{"bugs":0,"features":2,"enhancements":0},"publishedAt":"2026-10-16T00:00:00.000Z"},{"id":"rel_DupR0Bjy60SsuJJsnx8xH","title":"Cloudflare Tunnel raises default routes to 50,000 and adds Tunnels for Platforms","path":"/release/rel_DupR0Bjy60SsuJJsnx8xH-default-routes-jump-to-50k-tunnels-per-account-now-purchasable","url":"https://developers.cloudflare.com/changelog/post/2026-10-16-tunnels-for-platforms-and-50k-routes/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"core-platform","name":"Core Platform"},"importance":3,"composition":{"bugs":0,"features":2,"enhancements":0},"publishedAt":"2026-10-16T00:00:00.000Z"},{"id":"rel_RPmGzSjJ7mI7HjD22t0H4","title":"Cloudflare One Client for Linux 2026.8.2110 hits GA, fixes split-tunnel reconnect loop","path":"/release/rel_RPmGzSjJ7mI7HjD22t0H4-linux-client-hits-ga-split-tunnel-reconnect-loop-fixed","url":"https://developers.cloudflare.com/changelog/post/2026-10-12-warp-linux-ga/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"cloudflare-one","name":"Cloudflare One"},"importance":4,"composition":{"bugs":1,"features":1,"enhancements":0},"publishedAt":"2026-10-12T19:16:09.000Z"},{"id":"rel_FZ92PL0SRoBXWSV2nd3zm","title":"Cloudflare One Gateway Application Library now supports custom applications","path":"/release/rel_FZ92PL0SRoBXWSV2nd3zm-gateway-application-library-supports-custom-applications","url":"https://developers.cloudflare.com/changelog/post/2026-10-15-app-library-custom-applications/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"cloudflare-one","name":"Cloudflare One"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":3},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_PWyQt8nf3bK9dWXbwoihR","title":"Cloudflare One adds BGP route filtering for IPsec and GRE tunnels","path":"/release/rel_PWyQt8nf3bK9dWXbwoihR-bgp-import-export-filtering-for-ipsec-and-gre-tunnels","url":"https://developers.cloudflare.com/changelog/post/2026-10-15-bgp-filter-profiles/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"cloudflare-one","name":"Cloudflare One"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_gxT7cK-nKJZNYbXZ7oevM","title":"Cloudflare One lets Workers validate DLP custom pattern matches","path":"/release/rel_gxT7cK-nKJZNYbXZ7oevM-workers-now-validate-dlp-custom-pattern-matches","url":"https://developers.cloudflare.com/changelog/post/2026-10-15-dlp-custom-validation-workers/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"cloudflare-one","name":"Cloudflare One"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_FwiGIh4Lie2M-fT4ufdRJ","title":"Cloudflare One Gateway workers integration enters public beta","path":"/release/rel_FwiGIh4Lie2M-fT4ufdRJ-gateway-forward-action-runs-workers-on-permitted-traffic","url":"https://developers.cloudflare.com/changelog/post/2026-10-15-gateway-workers-public-beta/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"cloudflare-one","name":"Cloudflare One"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_nix4aE6B6mDC43r2XGvXR","title":"Cloudflare Stream WebRTC live streaming is generally available","path":"/release/rel_nix4aE6B6mDC43r2XGvXR-stream-webrtc-live-streaming-reaches-ga","url":"https://developers.cloudflare.com/changelog/post/2026-10-15-stream-live-webrtc-ga/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":4,"composition":{"bugs":0,"features":1,"enhancements":1},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_orURPl36MSy_2WuvlX1QM","title":"Cloudflare Agents SDK adds persistent browser tool with lasting tabs and logins","path":"/release/rel_orURPl36MSy_2WuvlX1QM-persistent-browser-tool-keeps-tabs-and-logins-between-turns","url":"https://developers.cloudflare.com/changelog/post/2026-10-13-persistent-browser/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":4,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-13T00:00:00.000Z"},{"id":"rel_APcO3GEluXnnr-aegCgTi","title":"Cloudflare Developer Platform Local Explorer can invoke Cron Triggers","path":"/release/rel_APcO3GEluXnnr-aegCgTi-cron-triggers-invocable-from-local-explorer","url":"https://developers.cloudflare.com/changelog/post/2026-10-17-local-explorer-cron-triggers/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":3,"composition":{"bugs":0,"features":2,"enhancements":0},"publishedAt":"2026-10-17T00:00:00.000Z"},{"id":"rel_MccF6ZgLSaEsSzVnBf99K","title":"Cloudflare AI Search keyword search now matches Japanese, Chinese, and Korean queries","path":"/release/rel_MccF6ZgLSaEsSzVnBf99K-cjk-keyword-search-now-works-with-trigram-tokenizer","url":"https://developers.cloudflare.com/changelog/post/2026-10-16-cjk-keyword-search/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-16T00:00:00.000Z"},{"id":"rel_rll_etEgwzI5hlB2QQ-p7","title":"Cloudflare CLI 1.0.0-beta.16 adds `cf docs search` with kebab-case command rename","path":"/release/rel_rll_etEgwzI5hlB2QQ-p7-cf-docs-search-ships-command-names-move-to-kebab-case","url":"https://developers.cloudflare.com/changelog/post/2026-10-16-docs-search/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":1},"publishedAt":"2026-10-16T00:00:00.000Z"},{"id":"rel_iBNZp-gblVHI93CM16k5x","title":"Cloudflare Workers AI adds Pipecat PhoneLLM Mini for realtime voice agents","path":"/release/rel_iBNZp-gblVHI93CM16k5x-phonellm-mini-lands-on-workers-ai-for-voice-agents","url":"https://developers.cloudflare.com/changelog/post/2026-10-15-phonellm-mini-workers-ai/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-15T00:00:00.000Z"},{"id":"rel_Qj3sRzZhL0HyJeyoFEp81","title":"Cloudflare Workers SDK config 0.26.0 adds Access local dev configuration","path":"/release/rel_Qj3sRzZhL0HyJeyoFEp81-access-dev-config-moves-to-config-access-dev","url":"https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/config%400.26.0","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-14T05:57:31.000Z"}]},{"heading":"Tooling churn: Turborepo, Railpack, and the AI SDK","anchor":"tooling-churn-turborepo-railpack-and-the-ai-sdk","lede":"Build tooling saw steady refinement rather than headline changes.","releaseIds":["rel_6GPSaGz_B4DyDdcA7Eb7X","rel_G90sqwjZT0yPs1l5Oo7Em","rel_d6pWOtUq66Zm2m5FQ4pzN","rel_SJKi8AkWEL4DcaNxisfHz","rel_6WX1WycBnfHlXCxbL5Jkq","rel_KFGLmwffwOvSzgqzG7z44","rel_vdyrur1DWvugu2Fho63QC"],"releases":[{"id":"rel_6GPSaGz_B4DyDdcA7Eb7X","title":"Turborepo v2.11.9 ships dozens of performance optimizations and `turbo setup`","path":"/release/rel_6GPSaGz_B4DyDdcA7Eb7X-dozens-of-perf-optimizations-turbo-setup-gains-policy","url":"https://github.com/vercel/turborepo/releases/tag/v2.11.9","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":{"slug":"turborepo","name":"Turborepo"},"importance":3,"composition":{"bugs":3,"features":16,"enhancements":40},"publishedAt":"2026-10-16T19:07:18.000Z"},{"id":"rel_G90sqwjZT0yPs1l5Oo7Em","title":"Railpack v0.42.0 adds Zig builds and Turborepo cache reuse","path":"/release/rel_G90sqwjZT0yPs1l5Oo7Em-zig-builds-supported-turborepo-cache-reused-across-builds","url":"https://github.com/railwayapp/railpack/releases/tag/v0.42.0","org":{"slug":"railway","name":"Railway","avatarUrl":"https://media.releases.sh/orgs/railway.png","githubHandle":"railwayapp"},"product":null,"importance":3,"composition":{"bugs":2,"features":2,"enhancements":0},"publishedAt":"2026-10-15T23:33:57.000Z"},{"id":"rel_d6pWOtUq66Zm2m5FQ4pzN","title":"AI SDK @ai-sdk/mcp 2.0.76 changes managed event subscriptions to ttlMs","path":"/release/rel_d6pWOtUq66Zm2m5FQ4pzN-managed-event-subscriptions-now-take-ttlms-not-expiresat","url":"https://github.com/vercel/ai/releases/tag/%40ai-sdk/mcp%402.0.76","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":0,"enhancements":1},"publishedAt":"2026-10-15T03:21:11.000Z"},{"id":"rel_SJKi8AkWEL4DcaNxisfHz","title":"AI SDK typesafe-ai 3.0.19 adds image input support and 262k-token context option","path":"/release/rel_SJKi8AkWEL4DcaNxisfHz-decision-models-accept-png-and-jpeg-inputs-262k-context-opt-in","url":"https://github.com/vercel/ai/releases/tag/%40ai-sdk/typesafe-ai%403.0.19","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":2,"enhancements":1},"publishedAt":"2026-10-15T02:26:50.000Z"},{"id":"rel_6WX1WycBnfHlXCxbL5Jkq","title":"AI SDK provider-utils 5.0.60 fixes case-sensitive URL path handling","path":"/release/rel_6WX1WycBnfHlXCxbL5Jkq-url-paths-and-query-values-keep-their-casing","url":"https://github.com/vercel/ai/releases/tag/%40ai-sdk/provider-utils%405.0.60","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":1,"features":0,"enhancements":0},"publishedAt":"2026-10-15T02:26:14.000Z"},{"id":"rel_KFGLmwffwOvSzgqzG7z44","title":"AI SDK harness-pi 1.0.154 deprecates mcpSettings and swaps MCP adapter for native Pi","path":"/release/rel_KFGLmwffwOvSzgqzG7z44-native-pi-mcp-replaces-adapter-toolprefix-and-outputguard-deprecated","url":"https://github.com/vercel/ai/releases/tag/%40ai-sdk/harness-pi%401.0.154","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":2,"features":3,"enhancements":0},"publishedAt":"2026-10-15T02:25:17.000Z"},{"id":"rel_vdyrur1DWvugu2Fho63QC","title":"Railway adds activity feed filters, guided IaC migration, and CLI cron jobs","path":"/release/rel_vdyrur1DWvugu2Fho63QC-activity-feed-filters-guided-iac-migration-cli-cron-jobs","url":"https://railway.com/changelog#activity-feed-filters-guided-iac-migration-cron-jobs-in-the-","org":{"slug":"railway","name":"Railway","avatarUrl":"https://media.releases.sh/orgs/railway.png","githubHandle":"railwayapp"},"product":null,"importance":3,"composition":{"bugs":0,"features":3,"enhancements":0},"publishedAt":"2026-10-16T00:00:00.000Z"}]}]}}