Certificate compromise forces a coordinated trust reset

A compromised CA ripples through the toolchain

The defining story of the week was trust infrastructure. Eight eMudhra intermediate certificate authorities had their private keys recovered, meaning anyone could forge a certificate for any hostname chaining to them — and any outbound HTTPS leaving a container could be intercepted. Cloudflare's Sandbox SDK images now bundle updated system CA bundles so mountBucket(), backups, gitCheckout(), tunnels, and in-sandbox code reject the forged chains, with Bun kept current so large uploads are covered too. Deno reached the same conclusion in parallel, distrusting the compromised eMudhra CAs. If you build on either runtime and pin old base images, rotate now.

Cloudflare's developer surfaces harden and simplify

Cloudflare's client agents got a security upgrade: the Windows Cloudflare One Client beta can now require an admin-generated code to uninstall, and both Windows and the macOS beta client auto-select Global Acceleration endpoints and reconnect on network changes, with the macOS build dropping 14 as a supported version and warning when tunnel MTU degrades. The macOS client also hit stable with a certificate chain hotfix.

Tunnel operators got a forward-looking change: Cloudflare Tunnel can normalize URLs before matching ingress rules, improving security where rules require Access validation — off by default, but slated to flip on in early 2027, so test path-based routing soon. Access control tightened too, with a granular Read and Monitor role for individual Tunnel connectors that grants log streaming without account-wide reach.

On the SDK side, the Agents SDK introduced createAI, unifying Workers AI and AI Gateway access while freezing the old providers, and learned to hibernate while Pi tasks sleep and surface parked operations for retry. Flagship now accepts nested objects and arrays in evaluation context, and the MCP servers retired their /sse endpoint for /mcp — clients signed in the old way must re-authenticate. D1 also limited undelete to databases removed in the last seven days.

The biggest ergonomic win: Wrangler and cf now upload source maps by default, so stack traces arrive with original file names and line numbers without any config. The Vite plugin dropped experimental.newConfig for Wrangler config files only and its v2 beta fails fast instead of hanging under Bun, while the Workers runtime tightened Rust JSG constructor semantics. Application Security kept busy with default-on WAF rules for the Brotli CVE, renamed PHP RCE rules, and new anomalous request detections plus matching Free Ruleset blocks.

Vercel makes realtime and agent plumbing everyday

WebSocket support in Vercel Functions is now generally available, a quiet but consequential change for multiplayer apps, chat streaming, and AI Gateway realtime models. The CLI became a control panel of sorts: vercel budgets brings Spend Management into the terminal, and tmp.now lets you share a live deploy before signing in. Routing middleware gained a Python option via the vercel-proxy package, Connect began minting scoped Stripe keys per agent or task, skipped monorepo deploys no longer eat deployment rate limits, and AI Gateway added Baseten models free through October 27.

The AI SDK's model and streaming expansion

AI SDK shipped a broad batch, headlined by experimental streamSpeech for streaming speech audio and a gateway speech model that streams over a WebSocket. A first-party web fetch tool landed as its own package. Across providers, the gateway updates moved Parallel Search to its GA schema and modes, added Voxtral 3 speech models with a second gateway patch aligning the same schema, while Moonshot gained Kimi K3.1 Pro models and prompt cache options, ElevenLabs speech models learned music and sound effects, and MiniMax M3.1 Flash arrived with video input. Reliability got attention too: streams ending without a completion signal now report interrupted, Hugging Face honors toolChoice: 'none', and MCP OAuth credentials are bound to their authorization server.