{"collection":{"slug":"application-platforms","name":"Application Platforms"},"digest":{"id":"cwd_vTFGYWo_nKWKwMoGs2PZw","weekStart":"2026-10-26","title":"Cloudflare rewires its developer primitives while Vercel chases Node 26 and AI routing","intro":"Cloudflare retired the classic DNS records page, made Durable Objects defer code updates so live agents survive deploys, and turned Agent Skills into plain workspace files, while D1 set a hard cap on query result size. Vercel made Node.js 26 LTS the default and shipped virtual models in AI Gateway.","body":"### Durable Objects learn to wait; skills become files\n\nThe week's biggest shift for anyone running stateful Workers code is that Durable Objects no longer swap code the instant you deploy. Active objects can [keep running their current version for up to five minutes](/release/rel_7T_hm065J3B5XEeCFR9J8-cloudflare-durable-objects-now-defer-code-updates-by-default-up-to-5-minutes) while they wait to hibernate, so in-flight work finishes and Hibernation-API WebSockets stay connected; the window is configurable in Wrangler from zero up to a day, or per deployment when you need an immediate cutover. The runtime moved in step, adding [onHibernate dispatch](/release/rel_lCDZyAhkJ82Og9uCCCbPx-cloudflare-workers-workerd-v1-20261028-1-adds-durable-object-onhibernate), [Durable Object facets](/release/rel_DATHMm3ALUIpLbSgtjL6K-cloudflare-workers-runtime-v1-20261101-1-adds-durable-object-facets) in the cluster, and [deferred cross-context actions on idle objects](/release/rel_JjvyaTt9MPaCSWP5I8ss4-workers-workerd-v1-20261031-1-defers-cross-context-actions-on-idle-durable) rather than aborts.\n\nThe Agents SDK pushed hard on the same \"agents should survive and self-modify\" theme. [Agent Skills are now files](/release/rel_VGHK0CEm1QdZFmiHveeLE-cloudflare-agents-sdk-turns-agent-skills-into-workspace-files): drop a `SKILL.md` into the agent's Computer Workspace and it's available on the next turn with no build or deploy — the agent can write its own. That's a breaking change for code importing `agents/skills` directly. Agents also got [internal hostnames](/release/rel_gRdi8KEZ12TOKaV6Gmw6O-cloudflare-agents-sdk-adds-internal-hostnames-for-private-dev-server-browser), letting the persistent browser preview a dev server inside its sandbox via something like `preview.internal` without exposing it publicly.\n\n### Security defaults tighten, and one leak closes\n\nCloudflare's asset pipeline had a bad week that it spent fixing. Autoconfig was comparing a relative output directory to an absolute project path, which meant projects serving from the root uploaded `.env`, `.dev.vars`, `.git` and `node_modules` as public assets. Wrangler now [resolves the real assets directory before writing .assetsignore](/release/rel_q9BpAWf6xAuFcwoKYyf3P-wrangler-4-156-0-stops-uploading-env-and-git-as-public-assets), the standalone autoconfig build got the [same protective ignore file](/release/rel_vBAegaX3D8-oachhsz-VK-workers-autoconfig-0-8-3-stops-leaking-env-and-git-as-public-assets), and a follow-up patch made [Pages deploys respect the directory you asked for](/release/rel_QymKoCaHnlF7VXv_X64Tk-wrangler-4-156-1-fixes-pages-deploy-uploading-files-outside-requested-directory) and stopped repeated slashes from bypassing Pages Functions middleware.\n\nOn the network side, Workers subrequests to BYOIP hostnames now [keep their context and original client bot signals](/release/rel_NRVHgNtDdyIckVeM2p2K2-cloudflare-workers-subrequests-to-byoip-destinations-keep-context-and-client-bot) so security rules evaluate the real end user. Keyless SSL gained [TLS 1.3 for ECDSA certificates](/release/rel_eI19Ow07NdLQMSO95zZMU-cloudflare-keyless-ssl-now-supports-tls-1-3-with-ecdsa-certificates), and China Network zones now serve [Challenge Pages with locally hosted Turnstile](/release/rel_ur-T5hdTd2adxFHwxUBvy-cloudflare-china-network-serves-challenge-pages-with-china-hosted-turnstile) to avoid cross-border round trips. The WAF team pushed rule updates for [Nuxt Image and IPX](/release/rel_60bOeyusjzvLuOB3-w4z3-cloudflare-adds-waf-rule-for-nuxt-image-and-ipx-vulnerability) and refined its [PHP out-of-memory and RCE detections](/release/rel_RaAoyrmscIIuhljY9dx79-cloudflare-updates-waf-rules-for-php-oom-vulnerabilities-cve-2026-109618-and-cve).\n\n### Deadlines and deprecations worth planning around\n\nTwo items deserve a spot on the calendar. D1 will begin [failing any query returning more than 50 MB](/release/rel_IFhiof3L-Omd988iUUllb-cloudflare-d1-to-enforce-50-mb-maximum-query-result-size-on-november-4) on November 4 — imports and exports are exempt, but `SELECT *` habits need pagination before then. Meanwhile the [classic DNS records page is gone](/release/rel_ASXKf8qPU-erQY0znwpmT-cloudflare-retires-classic-dns-records-page-for-all-users) for every plan including Enterprise, and the batch DNS endpoint now lets you change an existing record's type.\n\nSmaller but useful: static assets can [serve from a URL path prefix](/release/rel_FHEtOW5X64H0oNLGh4Rcc-cloudflare-workers-static-assets-can-now-be-served-from-a-url-path-prefix) without rearranging directories, VPC bindings can [target a specific virtual network](/release/rel_gB56QCURgf9CQ2DjUtMcN-cloudflare-workers-vpc-lets-each-network-binding-select-its-own-virtual-network) so one Worker reaches backends sharing a private IP, Miniflare supports [remote Analytics Engine bindings](/release/rel_8zereD1DD7s4EqVadiUGN-miniflare-5-20261023-2-beta-adds-remote-analytics-engine-bindings-in-local-dev) in local dev, and the Vite plugin added [remote Hyperdrive bindings](/release/rel_vpNWvkEsPdgN8HN3m0MzG-cloudflare-vite-plugin-1-66-0-adds-remote-hyperdrive-bindings-and-new-dev). WebCrypto picked up [SHA-3, ChaCha20-Poly1305 and MLKEM768-X25519](/release/rel_6Wrt7NTwl0MHXCk4k_fLO-workers-runtime-v1-20261030-1-adds-sha-3-chacha20-poly1305-and-mlkem768-x25519), while the TypeScript stream implementation [stopped corrupting binary formData parts](/release/rel_aXOW7Vgv9X6bsjDEdRNDU-workers-runtime-v1-20261029-1-fixes-formdata-binary-corruption-in-ts-streams). Audit Logs v2 got an [analytics dashboard](/release/rel_MwudCTC4DzOUL4szYw9CF-cloudflare-audit-logs-v2-adds-account-level-analytics-dashboard), and Browser Run moved to [Chrome 152 by default](/release/rel_Ip6eLG4AbcHH2Jw1mo343-cloudflare-browser-run-defaults-to-chrome-152-with-updated-user-agent).\n\n### Vercel standardizes the runtime and abstracts the model\n\nVercel's week reads as consolidation: [Node.js 26 LTS is now generally available and the default](/release/rel_hF5VWZgesVRQAlGpr6B1V-vercel-makes-node-js-26-lts-generally-available-and-default-for-new-projects) for new projects' builds and Functions, so the runtime story is no longer something teams have to decide. [Vercel CI entered beta](/release/rel_JEap8GZZ_MBhTg_avM3fx-vercel-ci-enters-beta-to-run-all-turborepo-tasks-on-vercel), running all Turborepo tasks rather than just builds, and the firewall split its bot blocking into [separate managed rulesets for AI crawlers and AI assistants](/release/rel_uxRZgeorhyW-efhyNLzSK-vercel-firewall-adds-separate-managed-rulesets-for-ai-crawlers-and-ai-assistants) — you can now let one in and keep the other out.\n\nAI Gateway's [virtual models](/release/rel_E5WJn52PQgUHFWqsGNkwY-vercel-ai-gateway-adds-virtual-models-with-routing-and-fallbacks) let you store routing, fallbacks and compliance choices behind a custom model slug usable by apps and coding agents. On the SDK side, the [harness adapter now runs on the host](/release/rel_zsbsQL0kyzKgI08i3aw7X-vercel-fx-adapter-runs-harness-on-host-for-faster-responses) for faster responses, [Flags cold-start roughly 7x faster](/release/rel_w5hZxA3-okEuYUUCCWJEO-vercel-flags-starts-7x-faster-on-cold-starts-and-no-longer-extends-function) with reporting that no longer extends function duration, and a [Vercel plugin for Antigravity](/release/rel_ykXzf34LDIZR3jUGpbA_b-vercel-plugin-brings-vercel-api-guidance-to-antigravity-agents) teaches that agent your Vercel APIs.\n\nIn AI SDK, [LanguageModelStreamPart and filterActiveTools graduated to stable](/release/rel__Y8bLJ2R7SQYakqL5XhOA-ai-sdk-ai-7-0-157-graduates-stream-part-and-filteractivetools-to-stable) (old names remain as deprecated aliases, so migration can be gradual), and the Pi harness [dropped its workspace mirror](/release/rel_8gX4xGzI-ij0B95ZnBbst-ai-sdk-harness-pi-1-0-170-drops-workspace-mirror-and-breaks-suspended-sessions) — sessions suspended before that change resume fresh and lose history, so move project context into instructions. Railway, for its part, now [patches and redeploys services automatically after credential regeneration](/release/rel_agWb015_9I7PWNq4KOWm6-railway-adds-automatic-security-patches-and-redeploys-after-credential), quietly removing a manual step from incident response.","releaseIds":["rel_7T_hm065J3B5XEeCFR9J8","rel_lCDZyAhkJ82Og9uCCCbPx","rel_DATHMm3ALUIpLbSgtjL6K","rel_JjvyaTt9MPaCSWP5I8ss4","rel_VGHK0CEm1QdZFmiHveeLE","rel_gRdi8KEZ12TOKaV6Gmw6O","rel_q9BpAWf6xAuFcwoKYyf3P","rel_vBAegaX3D8-oachhsz-VK","rel_QymKoCaHnlF7VXv_X64Tk","rel_NRVHgNtDdyIckVeM2p2K2","rel_eI19Ow07NdLQMSO95zZMU","rel_ur-T5hdTd2adxFHwxUBvy","rel_60bOeyusjzvLuOB3-w4z3","rel_RaAoyrmscIIuhljY9dx79","rel_IFhiof3L-Omd988iUUllb","rel_ASXKf8qPU-erQY0znwpmT","rel_FHEtOW5X64H0oNLGh4Rcc","rel_gB56QCURgf9CQ2DjUtMcN","rel_8zereD1DD7s4EqVadiUGN","rel_vpNWvkEsPdgN8HN3m0MzG","rel_6Wrt7NTwl0MHXCk4k_fLO","rel_aXOW7Vgv9X6bsjDEdRNDU","rel_MwudCTC4DzOUL4szYw9CF","rel_Ip6eLG4AbcHH2Jw1mo343","rel_hF5VWZgesVRQAlGpr6B1V","rel_JEap8GZZ_MBhTg_avM3fx","rel_uxRZgeorhyW-efhyNLzSK","rel_E5WJn52PQgUHFWqsGNkwY","rel_zsbsQL0kyzKgI08i3aw7X","rel_w5hZxA3-okEuYUUCCWJEO","rel_ykXzf34LDIZR3jUGpbA_b","rel__Y8bLJ2R7SQYakqL5XhOA","rel_8gX4xGzI-ij0B95ZnBbst","rel_agWb015_9I7PWNq4KOWm6"],"releaseCount":238,"generatedAt":"2026-11-02T06:17:26.303Z","releases":[{"id":"rel_7T_hm065J3B5XEeCFR9J8","title":"Cloudflare Durable Objects now defer code updates by default, up to 5 minutes","path":"/release/rel_7T_hm065J3B5XEeCFR9J8-durable-objects-defer-code-updates-by-default","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-durable-objects-deferred-code-updates/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":4,"composition":{"bugs":0,"features":1,"enhancements":1},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_lCDZyAhkJ82Og9uCCCbPx","title":"Cloudflare Workers workerd v1.20261028.1 adds Durable Object onHibernate dispatch","path":"/release/rel_lCDZyAhkJ82Og9uCCCbPx-durable-object-onhibernate-dispatch-optional-container-internet","url":"https://github.com/cloudflare/workerd/releases/tag/v1.20261028.1","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":0,"features":4,"enhancements":3},"publishedAt":"2026-10-28T00:54:15.000Z"},{"id":"rel_DATHMm3ALUIpLbSgtjL6K","title":"Cloudflare Workers runtime v1.20261101.1 adds Durable Object facets","path":"/release/rel_DATHMm3ALUIpLbSgtjL6K-durable-object-facets-land-sendtraces-reports-completion","url":"https://github.com/cloudflare/workerd/releases/tag/v1.20261101.1","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":0,"features":4,"enhancements":0},"publishedAt":"2026-11-01T00:52:20.000Z"},{"id":"rel_JjvyaTt9MPaCSWP5I8ss4","title":"Workers workerd v1.20261031.1 defers cross-context actions on idle Durable Objects","path":"/release/rel_JjvyaTt9MPaCSWP5I8ss4-idle-durable-objects-defer-cross-context-actions-wrangler-json-exports","url":"https://github.com/cloudflare/workerd/releases/tag/v1.20261031.1","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":1,"features":4,"enhancements":3},"publishedAt":"2026-10-31T00:44:52.000Z"},{"id":"rel_VGHK0CEm1QdZFmiHveeLE","title":"Cloudflare Agents SDK turns Agent Skills into workspace files","path":"/release/rel_VGHK0CEm1QdZFmiHveeLE-agent-skills-are-now-files-in-the-workspace-agents-skills-apis-removed","url":"https://developers.cloudflare.com/changelog/post/2026-10-29-agent-skills-from-files/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":4,"composition":{"bugs":0,"features":5,"enhancements":0},"publishedAt":"2026-10-29T00:00:00.000Z"},{"id":"rel_gRdi8KEZ12TOKaV6Gmw6O","title":"Cloudflare Agents SDK adds internal hostnames for private dev-server browser previews","path":"/release/rel_gRdi8KEZ12TOKaV6Gmw6O-agents-sdk-browser-previews-dev-servers-without-public-urls","url":"https://developers.cloudflare.com/changelog/post/2026-10-28-browser-internal-hostnames/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-28T00:00:00.000Z"},{"id":"rel_q9BpAWf6xAuFcwoKYyf3P","title":"Wrangler 4.156.0 stops uploading .env and .git as public assets","path":"/release/rel_q9BpAWf6xAuFcwoKYyf3P-assetsignore-now-written-for-root-asset-dirs-env-no-longer-uploaded","url":"https://github.com/cloudflare/workers-sdk/releases/tag/wrangler%404.156.0","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":4,"features":1,"enhancements":1},"publishedAt":"2026-10-29T18:50:30.000Z"},{"id":"rel_vBAegaX3D8-oachhsz-VK","title":"Workers autoconfig 0.8.3 stops leaking .env and .git as public assets","path":"/release/rel_vBAegaX3D8-oachhsz-VK-autoconfig-stops-uploading-env-and-git-as-public-assets","url":"https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/autoconfig%400.8.3","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":2,"features":0,"enhancements":0},"publishedAt":"2026-10-29T18:50:33.000Z"},{"id":"rel_QymKoCaHnlF7VXv_X64Tk","title":"Wrangler 4.156.1 fixes Pages deploy uploading files outside requested directory","path":"/release/rel_QymKoCaHnlF7VXv_X64Tk-pages-deploy-confines-asset-lookup-crlf-types-check-fixed","url":"https://github.com/cloudflare/workers-sdk/releases/tag/wrangler%404.156.1","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":6,"features":0,"enhancements":1},"publishedAt":"2026-11-01T23:24:54.000Z"},{"id":"rel_NRVHgNtDdyIckVeM2p2K2","title":"Cloudflare Workers subrequests to BYOIP destinations keep context and client bot signals","path":"/release/rel_NRVHgNtDdyIckVeM2p2K2-byoip-subrequests-keep-workers-context-bot-scores-use-real-client","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-byoip-workers-subrequest-context/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"application-security","name":"Application Security"},"importance":3,"composition":{"bugs":2,"features":0,"enhancements":2},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_eI19Ow07NdLQMSO95zZMU","title":"Cloudflare Keyless SSL now supports TLS 1.3 with ECDSA certificates","path":"/release/rel_eI19Ow07NdLQMSO95zZMU-keyless-ssl-with-ecdsa-certs-now-negotiates-tls-1-3","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-keyless-ssl-tls13-ecdsa/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"application-performance","name":"Application Performance"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_ur-T5hdTd2adxFHwxUBvy","title":"Cloudflare China Network serves Challenge Pages with China-hosted Turnstile","path":"/release/rel_ur-T5hdTd2adxFHwxUBvy-china-network-challenges-now-served-locally-no-cross-border-requests","url":"https://developers.cloudflare.com/changelog/post/2026-10-28-china-native-challenge-pages/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"application-performance","name":"Application Performance"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":1},"publishedAt":"2026-10-28T00:00:00.000Z"},{"id":"rel_60bOeyusjzvLuOB3-w4z3","title":"Cloudflare adds WAF rule for Nuxt Image and IPX vulnerability","path":"/release/rel_60bOeyusjzvLuOB3-w4z3-new-waf-rule-targets-nuxt-image-and-ipx-bug","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-emergency-waf-release/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"application-security","name":"Application Security"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_RaAoyrmscIIuhljY9dx79","title":"Cloudflare updates WAF rules for PHP OOM vulnerabilities CVE-2026-109618 and CVE-2026-109619","path":"/release/rel_RaAoyrmscIIuhljY9dx79-waf-rules-retuned-for-php-oom-cves","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-waf-release/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"application-security","name":"Application Security"},"importance":3,"composition":{"bugs":5,"features":0,"enhancements":0},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_IFhiof3L-Omd988iUUllb","title":"Cloudflare D1 to enforce 50 MB maximum query result size on November 4","path":"/release/rel_IFhiof3L-Omd988iUUllb-d1-caps-query-results-at-50-mb-starting-nov-4","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-query-result-size-limit/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":4,"composition":{"bugs":0,"features":0,"enhancements":1},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_ASXKf8qPU-erQY0znwpmT","title":"Cloudflare retires classic DNS records page for all users","path":"/release/rel_ASXKf8qPU-erQY0znwpmT-classic-dns-records-page-retired-record-type-changes-return","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-classic-dns-records-page-retired/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"application-performance","name":"Application Performance"},"importance":4,"composition":{"bugs":0,"features":0,"enhancements":2},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_FHEtOW5X64H0oNLGh4Rcc","title":"Cloudflare Workers Static Assets can now be served from a URL path prefix","path":"/release/rel_FHEtOW5X64H0oNLGh4Rcc-static-assets-can-serve-from-a-url-path-prefix","url":"https://developers.cloudflare.com/changelog/post/2026-10-28-static-assets-base-path/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-28T00:00:00.000Z"},{"id":"rel_gB56QCURgf9CQ2DjUtMcN","title":"Cloudflare Workers VPC lets each Network binding select its own virtual network","path":"/release/rel_gB56QCURgf9CQ2DjUtMcN-vpc-bindings-target-specific-virtual-networks-via-network-id","url":"https://developers.cloudflare.com/changelog/post/2026-10-28-virtual-network-bindings/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-28T00:00:00.000Z"},{"id":"rel_8zereD1DD7s4EqVadiUGN","title":"Miniflare 5.20261023.2-beta adds remote Analytics Engine bindings in local dev","path":"/release/rel_8zereD1DD7s4EqVadiUGN-remote-analytics-engine-bindings-in-local-dev-flagship-explorer-api","url":"https://github.com/cloudflare/workers-sdk/releases/tag/miniflare%405.20261023.2-beta","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":2,"features":2,"enhancements":0},"publishedAt":"2026-10-28T20:35:48.000Z"},{"id":"rel_vpNWvkEsPdgN8HN3m0MzG","title":"Cloudflare Vite plugin 1.66.0 adds remote Hyperdrive bindings and new dev registry path","path":"/release/rel_vpNWvkEsPdgN8HN3m0MzG-remote-hyperdrive-bindings-dev-registry-path-moved-to-v5","url":"https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/vite-plugin%401.66.0","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":7,"features":2,"enhancements":2},"publishedAt":"2026-10-28T17:19:38.000Z"},{"id":"rel_6Wrt7NTwl0MHXCk4k_fLO","title":"Workers runtime v1.20261030.1 adds SHA-3, ChaCha20-Poly1305, and MLKEM768-X25519 to WebCrypto","path":"/release/rel_6Wrt7NTwl0MHXCk4k_fLO-webcrypto-gains-sha-3-chacha20-poly1305-mlkem768-x25519","url":"https://github.com/cloudflare/workerd/releases/tag/v1.20261030.1","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":4,"features":5,"enhancements":7},"publishedAt":"2026-10-30T00:54:28.000Z"},{"id":"rel_aXOW7Vgv9X6bsjDEdRNDU","title":"Workers runtime v1.20261029.1 fixes formData binary corruption in TS streams","path":"/release/rel_aXOW7Vgv9X6bsjDEdRNDU-formdata-no-longer-corrupts-binary-parts-wrangler-json-accepted","url":"https://github.com/cloudflare/workerd/releases/tag/v1.20261029.1","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":6,"features":6,"enhancements":3},"publishedAt":"2026-10-29T00:53:29.000Z"},{"id":"rel_MwudCTC4DzOUL4szYw9CF","title":"Cloudflare Audit Logs v2 adds account-level analytics dashboard","path":"/release/rel_MwudCTC4DzOUL4szYw9CF-audit-logs-v2-gains-account-analytics","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-audit-logs-v2-account-analytics/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"core-platform","name":"Core Platform"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_Ip6eLG4AbcHH2Jw1mo343","title":"Cloudflare Browser Run defaults to Chrome 152 with updated User-Agent","path":"/release/rel_Ip6eLG4AbcHH2Jw1mo343-chrome-152-default-user-agent-now-reports-152","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-chrome-152/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":3,"composition":{"bugs":1,"features":5,"enhancements":1},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_hF5VWZgesVRQAlGpr6B1V","title":"Vercel makes Node.js 26 LTS generally available and default for new projects","path":"/release/rel_hF5VWZgesVRQAlGpr6B1V-node-js-26-lts-now-default-for-new-vercel-projects","url":"https://vercel.com/changelog#node-js-26-lts-is-now-generally-available-on-vercel","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":1},"publishedAt":"2026-10-29T00:00:00.000Z"},{"id":"rel_JEap8GZZ_MBhTg_avM3fx","title":"Vercel CI enters beta to run all Turborepo tasks on Vercel","path":"/release/rel_JEap8GZZ_MBhTg_avM3fx-vercel-ci-beta-runs-all-turborepo-tasks","url":"https://vercel.com/changelog#vercel-ci-is-now-in-beta","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-28T00:00:00.000Z"},{"id":"rel_uxRZgeorhyW-efhyNLzSK","title":"Vercel Firewall adds separate managed rulesets for AI crawlers and AI assistants","path":"/release/rel_uxRZgeorhyW-efhyNLzSK-ai-crawlers-and-assistants-blocked-independently-in-firewall","url":"https://vercel.com/changelog#control-ai-crawlers-and-assistants-separately-in-vercel-fire","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-29T00:00:00.000Z"},{"id":"rel_E5WJn52PQgUHFWqsGNkwY","title":"Vercel AI Gateway adds virtual models with routing and fallbacks","path":"/release/rel_E5WJn52PQgUHFWqsGNkwY-virtual-models-bundle-routing-and-fallbacks-into-one-slug","url":"https://vercel.com/changelog#virtual-models-now-available-on-ai-gateway","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-28T00:00:00.000Z"},{"id":"rel_zsbsQL0kyzKgI08i3aw7X","title":"Vercel fx adapter runs harness on host for faster responses","path":"/release/rel_zsbsQL0kyzKgI08i3aw7X-fx-adapter-runs-harness-on-host-filesystem-stays-sandboxed","url":"https://vercel.com/changelog#the-fx-adapter-now-runs-the-harness-on-the-host","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-29T00:00:00.000Z"},{"id":"rel_w5hZxA3-okEuYUUCCWJEO","title":"Vercel Flags starts 7x faster on cold starts and no longer extends function duration","path":"/release/rel_w5hZxA3-okEuYUUCCWJEO-vercel-flags-starts-7x-faster-no-longer-extends-function-duration","url":"https://vercel.com/changelog#vercel-flags-starts-7x-faster-and-no-longer-extends-function","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":1,"features":0,"enhancements":1},"publishedAt":"2026-10-29T00:00:00.000Z"},{"id":"rel_ykXzf34LDIZR3jUGpbA_b","title":"Vercel plugin brings Vercel API guidance to Antigravity agents","path":"/release/rel_ykXzf34LDIZR3jUGpbA_b-vercel-plugin-now-available-in-antigravity","url":"https://vercel.com/changelog#vercel-plugin-is-now-available-in-antigravity","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-29T00:00:00.000Z"},{"id":"rel__Y8bLJ2R7SQYakqL5XhOA","title":"AI SDK ai@7.0.157 graduates stream part and filterActiveTools to stable","path":"/release/rel__Y8bLJ2R7SQYakqL5XhOA-stream-part-and-filteractivetools-graduate-to-stable","url":"https://github.com/vercel/ai/releases/tag/ai%407.0.157","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":1,"features":0,"enhancements":2},"publishedAt":"2026-10-29T17:10:34.000Z"},{"id":"rel_8gX4xGzI-ij0B95ZnBbst","title":"AI SDK harness-pi 1.0.170 drops workspace mirror and breaks suspended sessions","path":"/release/rel_8gX4xGzI-ij0B95ZnBbst-workspace-mirror-dropped-suspended-sessions-lose-history","url":"https://github.com/vercel/ai/releases/tag/%40ai-sdk/harness-pi%401.0.170","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":4,"composition":{"bugs":0,"features":3,"enhancements":1},"publishedAt":"2026-10-28T18:35:30.000Z"},{"id":"rel_agWb015_9I7PWNq4KOWm6","title":"Railway adds automatic security patches and redeploys after credential regeneration","path":"/release/rel_agWb015_9I7PWNq4KOWm6-automatic-security-patches-redeploys-after-credential-regeneration","url":"https://railway.com/changelog#automatic-security-patches-redeploys-after-credential-regene","org":{"slug":"railway","name":"Railway","avatarUrl":"https://media.releases.sh/orgs/railway.png","githubHandle":"railwayapp"},"product":null,"importance":3,"composition":{"bugs":0,"features":2,"enhancements":0},"publishedAt":"2026-10-30T00:00:00.000Z"}],"sections":[{"heading":"Durable Objects learn to wait; skills become files","anchor":"durable-objects-learn-to-wait-skills-become-files","lede":"The week's biggest shift for anyone running stateful Workers code is that Durable Objects no longer swap code the instant you deploy.","releaseIds":["rel_7T_hm065J3B5XEeCFR9J8","rel_lCDZyAhkJ82Og9uCCCbPx","rel_DATHMm3ALUIpLbSgtjL6K","rel_JjvyaTt9MPaCSWP5I8ss4","rel_VGHK0CEm1QdZFmiHveeLE","rel_gRdi8KEZ12TOKaV6Gmw6O"],"releases":[{"id":"rel_7T_hm065J3B5XEeCFR9J8","title":"Cloudflare Durable Objects now defer code updates by default, up to 5 minutes","path":"/release/rel_7T_hm065J3B5XEeCFR9J8-durable-objects-defer-code-updates-by-default","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-durable-objects-deferred-code-updates/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":4,"composition":{"bugs":0,"features":1,"enhancements":1},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_lCDZyAhkJ82Og9uCCCbPx","title":"Cloudflare Workers workerd v1.20261028.1 adds Durable Object onHibernate dispatch","path":"/release/rel_lCDZyAhkJ82Og9uCCCbPx-durable-object-onhibernate-dispatch-optional-container-internet","url":"https://github.com/cloudflare/workerd/releases/tag/v1.20261028.1","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":0,"features":4,"enhancements":3},"publishedAt":"2026-10-28T00:54:15.000Z"},{"id":"rel_DATHMm3ALUIpLbSgtjL6K","title":"Cloudflare Workers runtime v1.20261101.1 adds Durable Object facets","path":"/release/rel_DATHMm3ALUIpLbSgtjL6K-durable-object-facets-land-sendtraces-reports-completion","url":"https://github.com/cloudflare/workerd/releases/tag/v1.20261101.1","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":0,"features":4,"enhancements":0},"publishedAt":"2026-11-01T00:52:20.000Z"},{"id":"rel_JjvyaTt9MPaCSWP5I8ss4","title":"Workers workerd v1.20261031.1 defers cross-context actions on idle Durable Objects","path":"/release/rel_JjvyaTt9MPaCSWP5I8ss4-idle-durable-objects-defer-cross-context-actions-wrangler-json-exports","url":"https://github.com/cloudflare/workerd/releases/tag/v1.20261031.1","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":1,"features":4,"enhancements":3},"publishedAt":"2026-10-31T00:44:52.000Z"},{"id":"rel_VGHK0CEm1QdZFmiHveeLE","title":"Cloudflare Agents SDK turns Agent Skills into workspace files","path":"/release/rel_VGHK0CEm1QdZFmiHveeLE-agent-skills-are-now-files-in-the-workspace-agents-skills-apis-removed","url":"https://developers.cloudflare.com/changelog/post/2026-10-29-agent-skills-from-files/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":4,"composition":{"bugs":0,"features":5,"enhancements":0},"publishedAt":"2026-10-29T00:00:00.000Z"},{"id":"rel_gRdi8KEZ12TOKaV6Gmw6O","title":"Cloudflare Agents SDK adds internal hostnames for private dev-server browser previews","path":"/release/rel_gRdi8KEZ12TOKaV6Gmw6O-agents-sdk-browser-previews-dev-servers-without-public-urls","url":"https://developers.cloudflare.com/changelog/post/2026-10-28-browser-internal-hostnames/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-28T00:00:00.000Z"}]},{"heading":"Security defaults tighten, and one leak closes","anchor":"security-defaults-tighten-and-one-leak-closes","lede":"Cloudflare's asset pipeline had a bad week that it spent fixing.","releaseIds":["rel_q9BpAWf6xAuFcwoKYyf3P","rel_vBAegaX3D8-oachhsz-VK","rel_QymKoCaHnlF7VXv_X64Tk","rel_NRVHgNtDdyIckVeM2p2K2","rel_eI19Ow07NdLQMSO95zZMU","rel_ur-T5hdTd2adxFHwxUBvy","rel_60bOeyusjzvLuOB3-w4z3","rel_RaAoyrmscIIuhljY9dx79"],"releases":[{"id":"rel_q9BpAWf6xAuFcwoKYyf3P","title":"Wrangler 4.156.0 stops uploading .env and .git as public assets","path":"/release/rel_q9BpAWf6xAuFcwoKYyf3P-assetsignore-now-written-for-root-asset-dirs-env-no-longer-uploaded","url":"https://github.com/cloudflare/workers-sdk/releases/tag/wrangler%404.156.0","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":4,"features":1,"enhancements":1},"publishedAt":"2026-10-29T18:50:30.000Z"},{"id":"rel_vBAegaX3D8-oachhsz-VK","title":"Workers autoconfig 0.8.3 stops leaking .env and .git as public assets","path":"/release/rel_vBAegaX3D8-oachhsz-VK-autoconfig-stops-uploading-env-and-git-as-public-assets","url":"https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/autoconfig%400.8.3","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":2,"features":0,"enhancements":0},"publishedAt":"2026-10-29T18:50:33.000Z"},{"id":"rel_QymKoCaHnlF7VXv_X64Tk","title":"Wrangler 4.156.1 fixes Pages deploy uploading files outside requested directory","path":"/release/rel_QymKoCaHnlF7VXv_X64Tk-pages-deploy-confines-asset-lookup-crlf-types-check-fixed","url":"https://github.com/cloudflare/workers-sdk/releases/tag/wrangler%404.156.1","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":6,"features":0,"enhancements":1},"publishedAt":"2026-11-01T23:24:54.000Z"},{"id":"rel_NRVHgNtDdyIckVeM2p2K2","title":"Cloudflare Workers subrequests to BYOIP destinations keep context and client bot signals","path":"/release/rel_NRVHgNtDdyIckVeM2p2K2-byoip-subrequests-keep-workers-context-bot-scores-use-real-client","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-byoip-workers-subrequest-context/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"application-security","name":"Application Security"},"importance":3,"composition":{"bugs":2,"features":0,"enhancements":2},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_eI19Ow07NdLQMSO95zZMU","title":"Cloudflare Keyless SSL now supports TLS 1.3 with ECDSA certificates","path":"/release/rel_eI19Ow07NdLQMSO95zZMU-keyless-ssl-with-ecdsa-certs-now-negotiates-tls-1-3","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-keyless-ssl-tls13-ecdsa/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"application-performance","name":"Application Performance"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_ur-T5hdTd2adxFHwxUBvy","title":"Cloudflare China Network serves Challenge Pages with China-hosted Turnstile","path":"/release/rel_ur-T5hdTd2adxFHwxUBvy-china-network-challenges-now-served-locally-no-cross-border-requests","url":"https://developers.cloudflare.com/changelog/post/2026-10-28-china-native-challenge-pages/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"application-performance","name":"Application Performance"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":1},"publishedAt":"2026-10-28T00:00:00.000Z"},{"id":"rel_60bOeyusjzvLuOB3-w4z3","title":"Cloudflare adds WAF rule for Nuxt Image and IPX vulnerability","path":"/release/rel_60bOeyusjzvLuOB3-w4z3-new-waf-rule-targets-nuxt-image-and-ipx-bug","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-emergency-waf-release/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"application-security","name":"Application Security"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_RaAoyrmscIIuhljY9dx79","title":"Cloudflare updates WAF rules for PHP OOM vulnerabilities CVE-2026-109618 and CVE-2026-109619","path":"/release/rel_RaAoyrmscIIuhljY9dx79-waf-rules-retuned-for-php-oom-cves","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-waf-release/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"application-security","name":"Application Security"},"importance":3,"composition":{"bugs":5,"features":0,"enhancements":0},"publishedAt":"2026-10-30T00:00:00.000Z"}]},{"heading":"Deadlines and deprecations worth planning around","anchor":"deadlines-and-deprecations-worth-planning-around","lede":"Two items deserve a spot on the calendar.","releaseIds":["rel_IFhiof3L-Omd988iUUllb","rel_ASXKf8qPU-erQY0znwpmT","rel_FHEtOW5X64H0oNLGh4Rcc","rel_gB56QCURgf9CQ2DjUtMcN","rel_8zereD1DD7s4EqVadiUGN","rel_vpNWvkEsPdgN8HN3m0MzG","rel_6Wrt7NTwl0MHXCk4k_fLO","rel_aXOW7Vgv9X6bsjDEdRNDU","rel_MwudCTC4DzOUL4szYw9CF","rel_Ip6eLG4AbcHH2Jw1mo343"],"releases":[{"id":"rel_IFhiof3L-Omd988iUUllb","title":"Cloudflare D1 to enforce 50 MB maximum query result size on November 4","path":"/release/rel_IFhiof3L-Omd988iUUllb-d1-caps-query-results-at-50-mb-starting-nov-4","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-query-result-size-limit/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":4,"composition":{"bugs":0,"features":0,"enhancements":1},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_ASXKf8qPU-erQY0znwpmT","title":"Cloudflare retires classic DNS records page for all users","path":"/release/rel_ASXKf8qPU-erQY0znwpmT-classic-dns-records-page-retired-record-type-changes-return","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-classic-dns-records-page-retired/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"application-performance","name":"Application Performance"},"importance":4,"composition":{"bugs":0,"features":0,"enhancements":2},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_FHEtOW5X64H0oNLGh4Rcc","title":"Cloudflare Workers Static Assets can now be served from a URL path prefix","path":"/release/rel_FHEtOW5X64H0oNLGh4Rcc-static-assets-can-serve-from-a-url-path-prefix","url":"https://developers.cloudflare.com/changelog/post/2026-10-28-static-assets-base-path/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-28T00:00:00.000Z"},{"id":"rel_gB56QCURgf9CQ2DjUtMcN","title":"Cloudflare Workers VPC lets each Network binding select its own virtual network","path":"/release/rel_gB56QCURgf9CQ2DjUtMcN-vpc-bindings-target-specific-virtual-networks-via-network-id","url":"https://developers.cloudflare.com/changelog/post/2026-10-28-virtual-network-bindings/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-28T00:00:00.000Z"},{"id":"rel_8zereD1DD7s4EqVadiUGN","title":"Miniflare 5.20261023.2-beta adds remote Analytics Engine bindings in local dev","path":"/release/rel_8zereD1DD7s4EqVadiUGN-remote-analytics-engine-bindings-in-local-dev-flagship-explorer-api","url":"https://github.com/cloudflare/workers-sdk/releases/tag/miniflare%405.20261023.2-beta","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":2,"features":2,"enhancements":0},"publishedAt":"2026-10-28T20:35:48.000Z"},{"id":"rel_vpNWvkEsPdgN8HN3m0MzG","title":"Cloudflare Vite plugin 1.66.0 adds remote Hyperdrive bindings and new dev registry path","path":"/release/rel_vpNWvkEsPdgN8HN3m0MzG-remote-hyperdrive-bindings-dev-registry-path-moved-to-v5","url":"https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/vite-plugin%401.66.0","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":7,"features":2,"enhancements":2},"publishedAt":"2026-10-28T17:19:38.000Z"},{"id":"rel_6Wrt7NTwl0MHXCk4k_fLO","title":"Workers runtime v1.20261030.1 adds SHA-3, ChaCha20-Poly1305, and MLKEM768-X25519 to WebCrypto","path":"/release/rel_6Wrt7NTwl0MHXCk4k_fLO-webcrypto-gains-sha-3-chacha20-poly1305-mlkem768-x25519","url":"https://github.com/cloudflare/workerd/releases/tag/v1.20261030.1","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":4,"features":5,"enhancements":7},"publishedAt":"2026-10-30T00:54:28.000Z"},{"id":"rel_aXOW7Vgv9X6bsjDEdRNDU","title":"Workers runtime v1.20261029.1 fixes formData binary corruption in TS streams","path":"/release/rel_aXOW7Vgv9X6bsjDEdRNDU-formdata-no-longer-corrupts-binary-parts-wrangler-json-accepted","url":"https://github.com/cloudflare/workerd/releases/tag/v1.20261029.1","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"workers","name":"Workers"},"importance":3,"composition":{"bugs":6,"features":6,"enhancements":3},"publishedAt":"2026-10-29T00:53:29.000Z"},{"id":"rel_MwudCTC4DzOUL4szYw9CF","title":"Cloudflare Audit Logs v2 adds account-level analytics dashboard","path":"/release/rel_MwudCTC4DzOUL4szYw9CF-audit-logs-v2-gains-account-analytics","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-audit-logs-v2-account-analytics/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"core-platform","name":"Core Platform"},"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_Ip6eLG4AbcHH2Jw1mo343","title":"Cloudflare Browser Run defaults to Chrome 152 with updated User-Agent","path":"/release/rel_Ip6eLG4AbcHH2Jw1mo343-chrome-152-default-user-agent-now-reports-152","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-chrome-152/","org":{"slug":"cloudflare","name":"Cloudflare","avatarUrl":"https://media.releases.sh/orgs/cloudflare.jpg","githubHandle":"cloudflare"},"product":{"slug":"developer-platform","name":"Developer Platform"},"importance":3,"composition":{"bugs":1,"features":5,"enhancements":1},"publishedAt":"2026-10-30T00:00:00.000Z"}]},{"heading":"Vercel standardizes the runtime and abstracts the model","anchor":"vercel-standardizes-the-runtime-and-abstracts-the-model","lede":"Vercel's week reads as consolidation: Node.js 26 LTS is now generally available and the default for new projects' builds and Functions, so the runtime story is no longer something teams have to decide.","releaseIds":["rel_hF5VWZgesVRQAlGpr6B1V","rel_JEap8GZZ_MBhTg_avM3fx","rel_uxRZgeorhyW-efhyNLzSK","rel_E5WJn52PQgUHFWqsGNkwY","rel_zsbsQL0kyzKgI08i3aw7X","rel_w5hZxA3-okEuYUUCCWJEO","rel_ykXzf34LDIZR3jUGpbA_b","rel__Y8bLJ2R7SQYakqL5XhOA","rel_8gX4xGzI-ij0B95ZnBbst","rel_agWb015_9I7PWNq4KOWm6"],"releases":[{"id":"rel_hF5VWZgesVRQAlGpr6B1V","title":"Vercel makes Node.js 26 LTS generally available and default for new projects","path":"/release/rel_hF5VWZgesVRQAlGpr6B1V-node-js-26-lts-now-default-for-new-vercel-projects","url":"https://vercel.com/changelog#node-js-26-lts-is-now-generally-available-on-vercel","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":1},"publishedAt":"2026-10-29T00:00:00.000Z"},{"id":"rel_JEap8GZZ_MBhTg_avM3fx","title":"Vercel CI enters beta to run all Turborepo tasks on Vercel","path":"/release/rel_JEap8GZZ_MBhTg_avM3fx-vercel-ci-beta-runs-all-turborepo-tasks","url":"https://vercel.com/changelog#vercel-ci-is-now-in-beta","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-28T00:00:00.000Z"},{"id":"rel_uxRZgeorhyW-efhyNLzSK","title":"Vercel Firewall adds separate managed rulesets for AI crawlers and AI assistants","path":"/release/rel_uxRZgeorhyW-efhyNLzSK-ai-crawlers-and-assistants-blocked-independently-in-firewall","url":"https://vercel.com/changelog#control-ai-crawlers-and-assistants-separately-in-vercel-fire","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-29T00:00:00.000Z"},{"id":"rel_E5WJn52PQgUHFWqsGNkwY","title":"Vercel AI Gateway adds virtual models with routing and fallbacks","path":"/release/rel_E5WJn52PQgUHFWqsGNkwY-virtual-models-bundle-routing-and-fallbacks-into-one-slug","url":"https://vercel.com/changelog#virtual-models-now-available-on-ai-gateway","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-28T00:00:00.000Z"},{"id":"rel_zsbsQL0kyzKgI08i3aw7X","title":"Vercel fx adapter runs harness on host for faster responses","path":"/release/rel_zsbsQL0kyzKgI08i3aw7X-fx-adapter-runs-harness-on-host-filesystem-stays-sandboxed","url":"https://vercel.com/changelog#the-fx-adapter-now-runs-the-harness-on-the-host","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-29T00:00:00.000Z"},{"id":"rel_w5hZxA3-okEuYUUCCWJEO","title":"Vercel Flags starts 7x faster on cold starts and no longer extends function duration","path":"/release/rel_w5hZxA3-okEuYUUCCWJEO-vercel-flags-starts-7x-faster-no-longer-extends-function-duration","url":"https://vercel.com/changelog#vercel-flags-starts-7x-faster-and-no-longer-extends-function","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":1,"features":0,"enhancements":1},"publishedAt":"2026-10-29T00:00:00.000Z"},{"id":"rel_ykXzf34LDIZR3jUGpbA_b","title":"Vercel plugin brings Vercel API guidance to Antigravity agents","path":"/release/rel_ykXzf34LDIZR3jUGpbA_b-vercel-plugin-now-available-in-antigravity","url":"https://vercel.com/changelog#vercel-plugin-is-now-available-in-antigravity","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-29T00:00:00.000Z"},{"id":"rel__Y8bLJ2R7SQYakqL5XhOA","title":"AI SDK ai@7.0.157 graduates stream part and filterActiveTools to stable","path":"/release/rel__Y8bLJ2R7SQYakqL5XhOA-stream-part-and-filteractivetools-graduate-to-stable","url":"https://github.com/vercel/ai/releases/tag/ai%407.0.157","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":3,"composition":{"bugs":1,"features":0,"enhancements":2},"publishedAt":"2026-10-29T17:10:34.000Z"},{"id":"rel_8gX4xGzI-ij0B95ZnBbst","title":"AI SDK harness-pi 1.0.170 drops workspace mirror and breaks suspended sessions","path":"/release/rel_8gX4xGzI-ij0B95ZnBbst-workspace-mirror-dropped-suspended-sessions-lose-history","url":"https://github.com/vercel/ai/releases/tag/%40ai-sdk/harness-pi%401.0.170","org":{"slug":"vercel","name":"Vercel","avatarUrl":"https://media.releases.sh/orgs/vercel.png","githubHandle":"vercel"},"product":null,"importance":4,"composition":{"bugs":0,"features":3,"enhancements":1},"publishedAt":"2026-10-28T18:35:30.000Z"},{"id":"rel_agWb015_9I7PWNq4KOWm6","title":"Railway adds automatic security patches and redeploys after credential regeneration","path":"/release/rel_agWb015_9I7PWNq4KOWm6-automatic-security-patches-redeploys-after-credential-regeneration","url":"https://railway.com/changelog#automatic-security-patches-redeploys-after-credential-regene","org":{"slug":"railway","name":"Railway","avatarUrl":"https://media.releases.sh/orgs/railway.png","githubHandle":"railwayapp"},"product":null,"importance":3,"composition":{"bugs":0,"features":2,"enhancements":0},"publishedAt":"2026-10-30T00:00:00.000Z"}]}]}}