--- collection: application-platforms collection_name: Application Platforms week_start: 2026-10-19 title: Certificate compromise forces a coordinated trust reset release_count: 218 generated: 2026-10-26 canonical: https://releases.sh/collections/application-platforms/digest/2026-10-19 --- # Certificate compromise forces a coordinated trust reset A compromised eMudhra certificate authority pushed Cloudflare's Sandbox SDK and Deno to distrust forged certificates, while Vercel took WebSocket Functions to general availability and Cloudflare turned source maps on by default in Wrangler. ### A compromised CA ripples through the toolchain The defining story of the week was trust infrastructure. Eight eMudhra intermediate certificate authorities had their private keys recovered, meaning anyone could forge a certificate for any hostname chaining to them — and any outbound HTTPS leaving a container could be intercepted. [Cloudflare's Sandbox SDK images now bundle updated system CA bundles](https://developers.cloudflare.com/changelog/post/2026-10-22-emudhra-certificates/) so `mountBucket()`, backups, `gitCheckout()`, tunnels, and in-sandbox code reject the forged chains, with Bun kept current so large uploads are covered too. Deno reached the same conclusion in parallel, [distrusting the compromised eMudhra CAs](https://github.com/denoland/deno/releases/tag/v2.9.8). If you build on either runtime and pin old base images, rotate now. ### Cloudflare's developer surfaces harden and simplify Cloudflare's client agents got a security upgrade: the [Windows Cloudflare One Client beta can now require an admin-generated code to uninstall](https://developers.cloudflare.com/changelog/post/2026-10-22-warp-windows-beta/), and both Windows and the [macOS beta client auto-select Global Acceleration endpoints and reconnect on network changes](https://developers.cloudflare.com/changelog/post/2026-10-22-warp-macos-beta/), with the macOS build dropping 14 as a supported version and warning when tunnel MTU degrades. The [macOS client also hit stable with a certificate chain hotfix](https://developers.cloudflare.com/changelog/post/2026-10-20-warp-macos-ga/). Tunnel operators got a forward-looking change: [Cloudflare Tunnel can normalize URLs before matching ingress rules](https://developers.cloudflare.com/changelog/post/2026-10-22-cloudflared-path-normalization/), improving security where rules require Access validation — off by default, but slated to flip on in early 2027, so test path-based routing soon. Access control tightened too, with a [granular Read and Monitor role for individual Tunnel connectors](https://developers.cloudflare.com/changelog/post/2026-10-22-granular-read-and-monitor-ga/) that grants log streaming without account-wide reach. On the SDK side, the [Agents SDK introduced `createAI`](https://developers.cloudflare.com/changelog/post/2026-10-21-createai/), unifying Workers AI and AI Gateway access while freezing the old providers, and [learned to hibernate while Pi tasks sleep and surface parked operations for retry](https://developers.cloudflare.com/changelog/post/2026-10-22-pi-harness-pi-1-4/). Flagship now accepts [nested objects and arrays in evaluation context](https://developers.cloudflare.com/changelog/post/2026-10-23-structured-evaluation-context/), and the [MCP servers retired their /sse endpoint for /mcp](https://developers.cloudflare.com/changelog/post/2026-10-22-cloudflare-mcp-servers-retire-sse/) — clients signed in the old way must re-authenticate. D1 also [limited undelete to databases removed in the last seven days](https://developers.cloudflare.com/changelog/post/2026-10-23-undelete-seven-day-window/). The biggest ergonomic win: [Wrangler and `cf` now upload source maps by default](https://developers.cloudflare.com/changelog/post/2026-10-20-source-maps-on-by-default/), so stack traces arrive with original file names and line numbers without any config. The [Vite plugin dropped `experimental.newConfig` for Wrangler config files only](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/vite-plugin%401.65.0) and its [v2 beta fails fast instead of hanging under Bun](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/vite-plugin%402.0.0-beta.v.3), while the [Workers runtime tightened Rust JSG constructor semantics](https://github.com/cloudflare/workerd/releases/tag/v1.20261022.1). Application Security kept busy with [default-on WAF rules for the Brotli CVE](https://developers.cloudflare.com/changelog/post/2026-10-25-emergency-waf-release/), [renamed PHP RCE rules](https://developers.cloudflare.com/changelog/post/2026-10-22-emergency-waf-release-cfmr/), and [new anomalous request detections](https://developers.cloudflare.com/changelog/post/2026-10-21-emergency-waf-release-cfmr/) plus matching [Free Ruleset blocks](https://developers.cloudflare.com/changelog/post/2026-10-21-emergency-waf-release-free/). ### Vercel makes realtime and agent plumbing everyday [WebSocket support in Vercel Functions is now generally available](https://vercel.com/changelog#websocket-support-is-now-generally-available), a quiet but consequential change for multiplayer apps, chat streaming, and AI Gateway realtime models. The CLI became a control panel of sorts: [`vercel budgets` brings Spend Management into the terminal](https://vercel.com/changelog#vercel-cli-adds-spend-management), and [`tmp.now` lets you share a live deploy before signing in](https://vercel.com/changelog#deploy-without-an-account-using-vercel-cli). Routing middleware gained a [Python option via the vercel-proxy package](https://vercel.com/changelog#routing-middleware-now-supports-python), Connect began [minting scoped Stripe keys per agent or task](https://vercel.com/changelog#vercel-connect-adds-managed-stripe-api-keys), skipped monorepo deploys [no longer eat deployment rate limits](https://vercel.com/changelog#skipped-monorepo-deployments-no-longer-count-against-limits), and AI Gateway added [Baseten models free through October 27](https://vercel.com/changelog#baseten-s-mammoth-1-and-elephant-1-now-available-on-ai-gatew). ### The AI SDK's model and streaming expansion AI SDK shipped a broad batch, headlined by [experimental `streamSpeech` for streaming speech audio](https://github.com/vercel/ai/releases/tag/ai%407.0.150) and a [gateway speech model that streams over a WebSocket](https://github.com/vercel/ai/releases/tag/%40ai-sdk/provider-utils%405.0.67). A [first-party web fetch tool landed as its own package](https://github.com/vercel/ai/releases/tag/%40ai-sdk/tool-web-fetch%401.0.0). Across providers, the gateway updates [moved Parallel Search to its GA schema and modes](https://github.com/vercel/ai/releases/tag/%40ai-sdk/gateway%404.0.122), [added Voxtral 3 speech models](https://github.com/vercel/ai/releases/tag/%40ai-sdk/gateway%403.0.220) with a [second gateway patch aligning the same schema](https://github.com/vercel/ai/releases/tag/%40ai-sdk/gateway%402.0.172), while Moonshot gained [Kimi K3.1 Pro models and prompt cache options](https://github.com/vercel/ai/releases/tag/%40ai-sdk/moonshotai%402.0.69), [ElevenLabs speech models learned music and sound effects](https://github.com/vercel/ai/releases/tag/%40ai-sdk/elevenlabs%403.0.69), and [MiniMax M3.1 Flash arrived with video input](https://github.com/vercel/ai/releases/tag/%40ai-sdk/minimax%402.0.32). Reliability got attention too: [streams ending without a completion signal now report `interrupted`](https://github.com/vercel/ai/releases/tag/ai%407.0.149), [Hugging Face honors `toolChoice: 'none'`](https://github.com/vercel/ai/releases/tag/%40ai-sdk/huggingface%402.0.76), and [MCP OAuth credentials are bound to their authorization server](https://github.com/vercel/ai/releases/tag/%40ai-sdk/mcp%401.0.98). ## Releases covered ### Cloudflare - [Cloudflare Sandbox SDK 0.12.14 updates trusted certificates after eMudhra CA compromise](https://developers.cloudflare.com/changelog/post/2026-10-22-emudhra-certificates/) - [Cloudflare One Client for Windows beta adds Global Acceleration endpoint selection and uninstall protection](https://developers.cloudflare.com/changelog/post/2026-10-22-warp-windows-beta/) - [Cloudflare One Client for macOS 2026.9.1555 beta drops macOS 14, adds Global Acceleration endpoint selection](https://developers.cloudflare.com/changelog/post/2026-10-22-warp-macos-beta/) - [Cloudflare One Client for macOS 2026.8.2115 reaches GA with certificate chain fix](https://developers.cloudflare.com/changelog/post/2026-10-20-warp-macos-ga/) - [Cloudflare Tunnel 2026.10.0 adds optional URL normalization for ingress matching](https://developers.cloudflare.com/changelog/post/2026-10-22-cloudflared-path-normalization/) - [Cloudflare Tunnel granular Read And Monitor role generally available](https://developers.cloudflare.com/changelog/post/2026-10-22-granular-read-and-monitor-ga/) - [Cloudflare Agents SDK adds createAI, deprecates workers-ai-provider and ai-gateway-provider](https://developers.cloudflare.com/changelog/post/2026-10-21-createai/) - [Cloudflare Agents SDK 0.30.0 runs Pi 1.4 with hibernation and parked tasks](https://developers.cloudflare.com/changelog/post/2026-10-22-pi-harness-pi-1-4/) - [Cloudflare Flagship supports structured evaluation context for feature flag targeting](https://developers.cloudflare.com/changelog/post/2026-10-23-structured-evaluation-context/) - [Cloudflare MCP servers retire /sse endpoint, return 410 Gone](https://developers.cloudflare.com/changelog/post/2026-10-22-cloudflare-mcp-servers-retire-sse/) - [Cloudflare D1 undelete API now limited to databases deleted in last 7 days](https://developers.cloudflare.com/changelog/post/2026-10-23-undelete-seven-day-window/) - [Cloudflare Wrangler and cf now upload source maps by default](https://developers.cloudflare.com/changelog/post/2026-10-20-source-maps-on-by-default/) - [Cloudflare Vite plugin 1.65.0 drops experimental.newConfig from v1](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/vite-plugin%401.65.0) - [Workers Vite plugin 2.0.0 beta fails fast on Bun and legacy Wrangler configs](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/vite-plugin%402.0.0-beta.v.3) - [Cloudflare Workers runtime v1.20261022.1 makes Rust JSG constructors require new](https://github.com/cloudflare/workerd/releases/tag/v1.20261022.1) - [Cloudflare adds default-on WAF rules for Brotli CVE-2026-111497](https://developers.cloudflare.com/changelog/post/2026-10-25-emergency-waf-release/) - [Cloudflare emergency WAF release renames seven PHP RCE rules for CVE-2026-109618/109619](https://developers.cloudflare.com/changelog/post/2026-10-22-emergency-waf-release-cfmr/) - [Cloudflare adds four anomalous request rules to Managed Ruleset](https://developers.cloudflare.com/changelog/post/2026-10-21-emergency-waf-release-cfmr/) - [Cloudflare Free Ruleset adds two WAF rules blocking anomalous execution patterns](https://developers.cloudflare.com/changelog/post/2026-10-21-emergency-waf-release-free/) ### Deno - [Deno v2.9.8 distrusts compromised eMudhra CAs and fixes npm package link validation](https://github.com/denoland/deno/releases/tag/v2.9.8) ### Vercel - [Vercel WebSocket support in Functions is now generally available](https://vercel.com/changelog#websocket-support-is-now-generally-available) - [Vercel CLI adds Spend Management with vercel budgets command](https://vercel.com/changelog#vercel-cli-adds-spend-management) - [Vercel CLI lets you deploy without an account via tmp.now URLs](https://vercel.com/changelog#deploy-without-an-account-using-vercel-cli) - [Vercel Routing Middleware now supports Python](https://vercel.com/changelog#routing-middleware-now-supports-python) - [Vercel Connect adds managed Stripe API keys for agents and tasks](https://vercel.com/changelog#vercel-connect-adds-managed-stripe-api-keys) - [Vercel stops counting skipped monorepo deployments against rate limits](https://vercel.com/changelog#skipped-monorepo-deployments-no-longer-count-against-limits) - [Vercel AI Gateway adds Baseten Mammoth-1 and Elephant-1 free until October 27](https://vercel.com/changelog#baseten-s-mammoth-1-and-elephant-1-now-available-on-ai-gatew) - [AI SDK 7.0.150 adds experimental_streamSpeech for streaming speech audio](https://github.com/vercel/ai/releases/tag/ai%407.0.150) - [AI SDK provider-utils 5.0.67 adds experimental streaming speech for gateway](https://github.com/vercel/ai/releases/tag/%40ai-sdk/provider-utils%405.0.67) - [AI SDK ships first-party web fetch tool in @ai-sdk/tool-web-fetch 1.0.0](https://github.com/vercel/ai/releases/tag/%40ai-sdk/tool-web-fetch%401.0.0) - [AI SDK gateway 4.0.122 adds Voxtral 3 speech models and updates Parallel Search](https://github.com/vercel/ai/releases/tag/%40ai-sdk/gateway%404.0.122) - [AI SDK gateway 3.0.220 adds Voxtral 3 speech models and Parallel Search GA modes](https://github.com/vercel/ai/releases/tag/%40ai-sdk/gateway%403.0.220) - [AI SDK Gateway 2.0.172 updates Parallel Search API and adds Kimi K3.1 Pro models](https://github.com/vercel/ai/releases/tag/%40ai-sdk/gateway%402.0.172) - [AI SDK Moonshot AI 2.0.69 adds kimi-k3.1-pro models and prompt cache options](https://github.com/vercel/ai/releases/tag/%40ai-sdk/moonshotai%402.0.69) - [AI SDK @ai-sdk/elevenlabs 3.0.69 adds music, sound effects, and dialogue to speech model](https://github.com/vercel/ai/releases/tag/%40ai-sdk/elevenlabs%403.0.69) - [AI SDK minimax 2.0.32 adds MiniMax M3.1 Flash support](https://github.com/vercel/ai/releases/tag/%40ai-sdk/minimax%402.0.32) - [AI SDK 7.0.149 adds interrupted finish reason and tool approval fixes](https://github.com/vercel/ai/releases/tag/ai%407.0.149) - [AI SDK Hugging Face 2.0.76 fixes toolChoice none and adds interrupted finish reason](https://github.com/vercel/ai/releases/tag/%40ai-sdk/huggingface%402.0.76) - [AI SDK MCP 1.0.98 binds OAuth client credentials to authorization server](https://github.com/vercel/ai/releases/tag/%40ai-sdk/mcp%401.0.98)