Cloudflare rewires its developer primitives while Vercel chases Node 26 and AI routing

Durable Objects learn to wait; skills become files

The week's biggest shift for anyone running stateful Workers code is that Durable Objects no longer swap code the instant you deploy. Active objects can keep running their current version for up to five minutes while they wait to hibernate, so in-flight work finishes and Hibernation-API WebSockets stay connected; the window is configurable in Wrangler from zero up to a day, or per deployment when you need an immediate cutover. The runtime moved in step, adding onHibernate dispatch, Durable Object facets in the cluster, and deferred cross-context actions on idle objects rather than aborts.

The Agents SDK pushed hard on the same "agents should survive and self-modify" theme. Agent Skills are now files: drop a SKILL.md into the agent's Computer Workspace and it's available on the next turn with no build or deploy — the agent can write its own. That's a breaking change for code importing agents/skills directly. Agents also got internal hostnames, letting the persistent browser preview a dev server inside its sandbox via something like preview.internal without exposing it publicly.

Security defaults tighten, and one leak closes

Cloudflare's asset pipeline had a bad week that it spent fixing. Autoconfig was comparing a relative output directory to an absolute project path, which meant projects serving from the root uploaded .env, .dev.vars, .git and node_modules as public assets. Wrangler now resolves the real assets directory before writing .assetsignore, the standalone autoconfig build got the same protective ignore file, and a follow-up patch made Pages deploys respect the directory you asked for and stopped repeated slashes from bypassing Pages Functions middleware.

On the network side, Workers subrequests to BYOIP hostnames now keep their context and original client bot signals so security rules evaluate the real end user. Keyless SSL gained TLS 1.3 for ECDSA certificates, and China Network zones now serve Challenge Pages with locally hosted Turnstile to avoid cross-border round trips. The WAF team pushed rule updates for Nuxt Image and IPX and refined its PHP out-of-memory and RCE detections.

Deadlines and deprecations worth planning around

Two items deserve a spot on the calendar. D1 will begin failing any query returning more than 50 MB on November 4 — imports and exports are exempt, but SELECT * habits need pagination before then. Meanwhile the classic DNS records page is gone for every plan including Enterprise, and the batch DNS endpoint now lets you change an existing record's type.

Smaller but useful: static assets can serve from a URL path prefix without rearranging directories, VPC bindings can target a specific virtual network so one Worker reaches backends sharing a private IP, Miniflare supports remote Analytics Engine bindings in local dev, and the Vite plugin added remote Hyperdrive bindings. WebCrypto picked up SHA-3, ChaCha20-Poly1305 and MLKEM768-X25519, while the TypeScript stream implementation stopped corrupting binary formData parts. Audit Logs v2 got an analytics dashboard, and Browser Run moved to Chrome 152 by default.

Vercel standardizes the runtime and abstracts the model

Vercel's week reads as consolidation: Node.js 26 LTS is now generally available and the default for new projects' builds and Functions, so the runtime story is no longer something teams have to decide. Vercel CI entered beta, running all Turborepo tasks rather than just builds, and the firewall split its bot blocking into separate managed rulesets for AI crawlers and AI assistants — you can now let one in and keep the other out.

AI Gateway's virtual models let you store routing, fallbacks and compliance choices behind a custom model slug usable by apps and coding agents. On the SDK side, the harness adapter now runs on the host for faster responses, Flags cold-start roughly 7x faster with reporting that no longer extends function duration, and a Vercel plugin for Antigravity teaches that agent your Vercel APIs.

In AI SDK, LanguageModelStreamPart and filterActiveTools graduated to stable (old names remain as deprecated aliases, so migration can be gradual), and the Pi harness dropped its workspace mirror — sessions suspended before that change resume fresh and lose history, so move project context into instructions. Railway, for its part, now patches and redeploys services automatically after credential regeneration, quietly removing a manual step from incident response.