What Cloudflare shipped in 2025

Configure your framework for Cloudflare automatically

Cloudflare has introduced an autoconfig feature in Wrangler 4.55, which automatically configures and deploys popular web frameworks to Cloudflare Workers with a single command. Previously, developers …

Cloudflare increases WAF payload limit to 1 MB to address React RCE vulnerability

Cloudflare raised its WAF payload inspection limit to 1 MB across all plans to detect React RCE exploits (CVE-2025-55182). Previously, Enterprise plans inspected up to 128 KB, with lower limits elsewh…

Cloudflare reinstates WAF payload inspection limits to 128 KB for Enterprise zones

Cloudflare is reverting its WAF maximum payload inspection limit to 128 KB for Enterprise zones after a failed attempt to increase it to 1 MB led to a surge in false positives. Paid plan customers can…

Model Context Protocol adds elicitation feature for user input in 2025-11-25 spec

The Model Context Protocol (MCP) introduced a new elicitation feature in its 2025-11-25 specification, enabling servers to request structured user input via clients. The feature supports two modes: fo…

New CPU Pricing for Containers and Sandboxes

Cloudflare has updated its pricing model for CPU usage in Containers and Sandboxes, shifting from a provisioned-resource model to an active-usage basis. Previously, customers were billed for the full …

Cloudflare acquires Replicate to enhance AI cloud for developers

Cloudflare agreed to acquire Replicate, an AI platform simplifying AI model deployment for developers, to integrate its 50,000+ model catalog into Cloudflare Workers AI. The deal aims to make AI devel…

The CRN Sustainability in Tech Awards 2026 Shortlist is out TODAY!

ArrayBuffer

The ArrayBuffer JavaScript feature, available across browsers since July 2015, now supports resizing and transferring memory more efficiently. Resizable buffers can be adjusted with the `resize()` met…

Code Mode: the better way to use MCP

Cloudflare has introduced a new approach to using the Model Context Protocol (MCP), which involves converting MCP tools into a TypeScript API and then asking an LLM to write code that calls this API. …

Cloudflare WARP packages

Cloudflare has announced that users of its WARP client-side software on Linux will need to update their public key by September 12, 2025, to ensure the repository remains functional beyond December 4,…

Cloudflare Sandbox SDK Major Update Adds Streaming, Code Interpreter, Git Support, and Process Control

Cloudflare has released a major update to its Sandbox SDK, transforming it into a full-featured, container-based execution platform that runs securely on Cloudflare Workers. The update introduces live…

July 8, 2025—KB5062553 (OS Build 26100.4652)

The July 8, 2025, update for Windows 11, version 24H2 (KB5062553), addresses several security issues and includes improvements from a previous update (KB5060829). Key fixes include resolving a graphic…

Change logs for security intelligence update version1.429.19.0

Microsoft has released a new security intelligence update for Microsoft Defender Antivirus and other Microsoft antimalware products. This update includes newly added and updated threat detections. The…

WebSocket: close event

The WebSocket close event is a long-standing feature, available across browsers since July 2015 and in Web Workers, signaling when a WebSocket connection is terminated. The event, a CloseEvent, provid…

Server-sent events

The article explains server-sent events, a feature that allows servers to push messages to web pages without the page having to request data. This feature is available in Web Workers and enables real-…

Cloudflare adds EU visitor exclusion to Web Analytics RUM

Cloudflare introduced a feature allowing users to exclude EU visitors from Real User Monitoring (RUM) in Web Analytics to comply with GDPR and CCPA. The exclusion is enabled via a single-click option …