Vendor changelog tracker. Hourly polling across Anthropic, Cloudflare, Supabase, Astro, Railway, and Codex. Classified into capability adds, breaking changes, deprecations, pricing changes, and security fixes.
Various bug fixes and reliability improvements.
Release 0.146.0-alpha.10
Release 0.146.0-alpha.9
A step-change improvement over Claude Opus 4.8, supporting a 1M token context window, 128k max output tokens, and thinking on by default.
Release 0.146.0-alpha.7
Release 0.146.0-alpha.8
Claude Opus 5 is now the default Opus model, with 1M context and fast mode at $10/$50 per Mtok.
Release 0.146.0-alpha.6
Release 0.146.0-alpha.5
Release 0.146.0-alpha.3.1
Release 0.146.0-alpha.4
Agents SDK packages now support AI SDK v6 and v7.
You can now set an effort level on a Claude Managed Agents agent's model configuration.
Release 0.145.0-alpha.30
Release 0.146.0-alpha.3
Release 0.146.0-alpha.2
Release 0.146.0-alpha.1
Code Mode runtime handle adds execute, search, and describe methods.
Think adds includeMcpTools to control direct MCP tool exposure.
Code review now runs as a background subagent, so review work no longer fills your conversation and keeps stacked slash commands as its review target.
MCP servers and other hosts can now execute code and discover connector methods without adapting the runtime to an AI SDK tool.
This release reduces repeated MCP schema conversion and adds an opt-out for Think's automatic MCP tool exposure.
Supabase Pipelines is now in public alpha with schema change support, a faster initial sync, and a new destination request form for ClickHouse, Snowflake, and DuckLake.
Added emoji shortcode autocomplete in the prompt input: type `:heart:` to insert ❤️, or `:hea` for suggestions — disable with the `emojiCompletionEnabled` setting.
Added emoji shortcode autocomplete in the prompt input.
A new GA release for the Linux Cloudflare One Client is now available on the stable releases downloads page.
This feature allows you to use Durable Objects SQLite with Cloudflare Workers.
The Account Roles API is deprecated and is being replaced by the Permission Groups API. Review the Permission Groups API documentation; the response schema differs from the legacy Roles response.
This release introduces new rules and updates existing threat signatures to provide targeted protections for vulnerabilities in Adobe ColdFusion and WordPress, alongside enhanced generic protections against Server-Side Request Forgery (SSRF), Local File Inclusion (LFI), and Cross-Site Scripting (XSS) obfuscation techniques.
Devin Outposts lets you run Devin agents on Cloudflare. Each Devin session runs in its own isolated sandbox backed by Cloudflare Containers, so agents can execute code and use development tooling in an isolated environment.
This feature allows for more efficient conversation management and improved user experience.
Added `sandbox.filesystem.disabled` setting to skip filesystem isolation while keeping network egress control.
Fixes image optimization during astro build using too many parallel processes in CPU-limited containers.
Updates dependency cookie to v2, no longer percent-encoding cookie values made entirely of URL-safe characters.
Fixes a dev server crash when using Astro Actions with the Cloudflare adapter
Updates dependency cookie to v2, no longer percent-encoding cookie values made entirely of URL-safe characters
Fixes image optimization during astro build using too many parallel processes in CPU-limited containers
Cloudflare Access now uses the standard browser-based login flow for private applications served over plaintext HTTP on port 80.
Added a new setting to skip filesystem isolation while keeping network egress control.
Release 0.145.0-alpha.25
Claude no longer runs the `/verify` and `/code-review` skills on its own; invoke them with `/verify` or `/code-review` when you want them.
Claude no longer runs the `/verify` and `/code-review` skills on its own; invoke them with `/verify` or `/code-review` when you want them.
Added the EndConversation tool: Claude can end sessions with highly abusive users or jailbreak attempts, as on claude.ai since 2025.
Fixed single-segment `dir/**` allow rules like `Edit(src/**)` auto-approving writes to nested `dir/` directories anywhere in the tree instead of only `<cwd>/dir`.
Fixed single-segment `dir/**` allow rules like `Edit(src/**)` auto-approving writes to nested `dir/` directories anywhere in the tree instead of only `<cwd>/dir`.
Refreshed bundled instructions for GPT-5.6 Sol, Terra, and Luna, and corrected their context windows to 272,000 tokens.
Release 0.145.0-alpha.24
The EndConversation tool was added to Claude.
SIGTERM during a running Bash tool orphaning the command's process tree in print/SDK mode; the CLI now aborts the turn, kills the tree, and exits 143.
Typing `/background` in the agent view now opens a picker of past sessions — including sessions deleted from the list — and resumes your pick as a background session.
Added `claude auto-mode reset` to restore the default auto-mode configuration, with a confirmation prompt (pass `--yes` to skip).
MCP tool calls running longer than 2 minutes now move to the background automatically so the session stays usable.
Typing `/resume` in the agent view now opens a picker of past sessions — including sessions deleted from the list — and resumes your pick as a background session.
Plan mode auto-running file-modifying Bash commands (e.g. `touch`, `rm`) without a permission prompt or SDK `canUseTool` callback.
Fixed worktree creation following a repository-committed symlink at `.claude/worktrees`, which could create files outside the repository.
SIGTERM during a running Bash tool orphaning the command's process tree in print/SDK mode; the CLI now aborts the turn, kills the tree, and exits 143.
Typing `/background` in the agent view now opens a picker of past sessions — including sessions deleted from the list — and resumes your pick as a background session.
Shell mode (`!`) not executing commands containing file paths while the path autocomplete popup was open.
Shell mode (`!`) not executing commands containing file paths while the path autocomplete popup was open.
Fast mode is deprecated and will be removed in a future version.
Added `/fork` to copy your conversation into a new background session (its own row in `claude agents`) while you keep working.
Added a session-wide limit on WebSearch tool calls (default 200, tunable via `CLAUDE_CODE_MAX_WEB_SEARCHES_PER_SESSION`) to stop runaway search loops.
MCP tool calls running longer than 2 minutes now move to the background automatically so the session stays usable.
Typing `/resume` in the agent view now opens a picker of past sessions — including sessions deleted from the list — and resumes your pick as a background session.
Plan mode auto-running file-modifying Bash commands (e.g. `touch`, `rm`) without a permission prompt or SDK `canUseTool` callback.
Fixed worktree creation following a repository-committed symlink at `.claude/worktrees`, which could create files outside the repository.
Fixes encoded request paths being routed incorrectly when using domain-based i18n.
Added a new feature to copy conversation into a new background session.
Fixed a permission-check bypass affecting commands run in Windows PowerShell 5.1 sessions.
The experimental prompt tools APIs for generating, improving, and templatizing prompts are being retired along with the Workbench on August 17, 2026.
The legacy Workbench in the Claude Console is being sunset with access ending on August 17, 2026.
You can now preview the content of sent emails directly from the Email Service Activity log.
This emergency release adds a new managed rule to block active exploitation of a critical remote code execution (RCE) and SQL injection (SQLi) vulnerability found in popular web frameworks.
Release 0.145.0-alpha.23
Allow stable Python SDK releases
Release 0.145.0-alpha.22
Release 0.145.0-alpha.21
Release 0.145.0-alpha.20
You can now preview the content of sent emails directly from the Email Service Activity log.
This emergency release adds a new managed rule to block active exploitation of a critical remote code execution (RCE) and SQL injection (SQLi) vulnerability found in popular web frameworks.
Fixes encoded request paths being routed incorrectly when using domain-based i18n. This change is backward-incompatible and may require updates to your project configuration.
Claude Code SDK pricing change: Added a live elapsed-time counter to the collapsed tool summary line.
Claude Code SDK security fix: Fixed a hook callback timeout being misreported to the model as a user rejection.
Claude Code SDK deprecation: Deprecated the Task tool's mode parameter (now ignored); subagents inherit the parent session's permission mode by default.
Claude Code SDK breaking change: /fork now copies your conversation into a new background session.
One searchable view for logs across every Supabase service, with live tail, filtering, and a timeline.
Adds a new deferRender option to the glob() content loader.
Wrangler now includes wrangler flagship, a command suite for managing Flagship apps and feature flags from your terminal.
Users in browser-based RDP sessions can now print multiple PDF files as a single print job.
Release 0.145.0-alpha.16
Improved dangerous-command detection, including more forced rm forms, and provides clearer rejection reasons when commands are denied.
Release 0.145.0-alpha.19
Release 0.145.0-alpha.18
Release 0.145.0-alpha.17
Users in browser-based RDP sessions can now print multiple PDF files as a single print job.
Adds a new `deferRender` option to the `glob()` content loader. This change adds a new feature and may be useful for projects that use the `glob()` loader.
Wrangler now includes wrangler flagship, a command suite for managing Flagship apps and feature flags from your terminal.
Users in browser-based RDP sessions can now print multiple PDF files as a single print job.
Allow the built-in `amazon-bedrock` provider to override `base_url`, `auth`, and `http_headers` in addition to its AWS profile and region.
Improved dangerous-command detection, including more forced `rm` forms, and provides clearer rejection reasons when commands are denied.
Release 0.145.0-alpha.15
Release 0.145.0-alpha.16
Allow the built-in `amazon-bedrock` provider to override `base_url`, `auth`, and `http_headers` in addition to its AWS profile and region.
Adds an experimental option to control how the content layer persists its data store. This change is a new feature and does not affect existing behavior.
Adds a new flag to the astro dev command to ignore the lock file. This change is a new feature and does not affect existing behavior.
Adds the ability to pass a URL entrypoint to the logger. This change is a new feature and does not affect existing behavior.
Adds a new option to the paginate utility to format URLs. This change is a new feature and does not affect existing behavior.
Adds a new option to the CSP directives to scope sources and hashes. This change is a new feature and does not affect existing behavior.
You can now subscribe to Email Sending events through Queues event subscriptions and receive outbound transactional email lifecycle events on a queue.
Internal DNS is now generally available. Internal DNS provides authoritative and recursive DNS for private networks on the same global network and control plane you already use for public DNS, Zero Trust, and application services.
Fixed permission previews relayed to chat channels not neutralizing bidirectional-override, zero-width, and look-alike quote characters.
Internal DNS is now generally available. Internal DNS provides authoritative and recursive DNS for private networks on the same global network and control plane you already use for public DNS, Zero Trust, and application services.
The legacy Workers KV API routes under /accounts/{account_id}/workers/namespaces/* are deprecated as of July 15, 2026, and will stop working on October 15, 2026.
Internal DNS is now generally available.
Release 0.145.0-alpha.14
Release 0.145.0-alpha.13
Release 0.145.0-alpha.13
Release 0.145.0-alpha.14
Release 0.145.0-alpha.15
You can now subscribe to Email Sending events through Queues event subscriptions and receive outbound transactional email lifecycle events on a queue.
The legacy Workers KV API routes under /accounts/{account_id}/workers/namespaces/* are deprecated as of July 15, 2026, and will stop working on October 15, 2026.
Release 0.145.0-alpha.12
Adds support for more specific CSP directives through a new kind option
Added a live elapsed-time counter to the collapsed tool summary line.
You can now manage the people in your Claude Enterprise organization with the Admin API.
No user-facing changes in this patch release.
Release 0.145.0-alpha.11
Release 0.145.0-alpha.10
Release 0.145.0-alpha.9
Platforms can now create temporary preview accounts through the Cloudflare REST API.
This release introduces new rules targeting critical infrastructure vulnerabilities.
Scheduled changes for 2026-07-20
Fixed a regression that blocked dialogs in background sessions.
Added screen reader mode for screen reader users.
Release 0.145.0-alpha.8
Adds a new format() option to the paginate utility, allowing for custom URL formatting
Agents connected to Model Context Protocol (MCP) servers with addMcpServer can now handle elicitation requests.
Reverted the update auto review prompting.
Release 0.145.0-alpha.7
Release rust-v0.145.0-alpha.6
Release 0.145.0-alpha.5
Published a version-only release with no merged pull request changes since rust-v0.144.2.
Fixes custom pre components not applying to syntax-highlighted code blocks when using the Sätteri Markdown processor with MDX
Fixes custom pre components not applying to syntax-highlighted code blocks when using the Sätteri Markdown processor with MDX
Fixes an opaque Cannot read properties of undefined (reading 'fileExists') crash when astro check runs against the TypeScript 7 native compiler
Fixes the first browser visit after astro dev starts triggering an immediate full page reload
Precursor is rolling out to all customers starting today, enabling session-based bot detection.
Markdown for Agents now preserves security headers such as Strict-Transport-Security (HSTS), Content-Security-Policy (CSP), and CORS headers on the converted response.
R2 Data Catalog now automatically optimizes manifest files as part of compaction, consolidating fragmented manifests and reducing metadata I/O overhead.
Agents connected to Model Context Protocol (MCP) servers can now handle elicitation requests, which let an MCP server request user input while it handles a tool call.
Exposes the AstroRuntimeLogger interface to allow users to properly type the logger functions at runtime
Auto mode is now available without `CLAUDE_CODE_ENABLE_AUTO_MODE` opt-in on Bedrock, Vertex AI, and Foundry.
Release 0.145.0-alpha.4
`${user_config.*}` in shell-form plugin hooks/monitors/MCP headersHelper commands is now rejected to prevent shell injection. Users must migrate to exec form (`args` array) or read values inside the script.
Auto mode configuration is no longer read from `.claude/settings.local.json` (repo-resident); it must now be set in `~/.claude/settings.json`. Teams storing auto-mode config in the repo will lose it silently.
Bedrock, Vertex AI, and Claude Platform on AWS now default to Claude Opus 4.8. Teams with pinned model IDs are unaffected, but those relying on the provider default will now use Opus 4.8.
`pluginConfigs` values in project-level `.claude/settings.json` are no longer honored; only user, `--settings`, and managed settings are used. Projects relying on project-scoped plugin options will silently lose those values.
Dreams (research preview) now supports Claude Fable 5 and Claude Sonnet 5.
Release 0.145.0-alpha.3
Release 0.145.0-alpha.2
Data Loss Prevention (DLP) source code detection now focuses on identifying whole source code file uploads and downloads.
CMEK content preservation documentation expanded with two new preservation reason codes (policy_violation_investigation, csae_report) and clarification that preservation events are written for both human-reviewer and automated safety pipeline initiations.
DLP source code detection now evaluates only whole file uploads/downloads (minimum 500 characters) rather than partial scans, significantly reducing false positives from code embedded in chat messages or documentation. Confidence-level tuning is available to further control sensitivity.
Add field-level encryption to your Supabase project with CipherStash. Searchable ciphertext, zero-knowledge key management, and no schema changes required.
Release 0.145.0-alpha.1
On October 5, 2026, two changes take effect across the Zero Trust Networks API and Cloudflare Tunnel API.
R2 Data Catalog now accepts read-only API tokens, so query engines and clients that only read data no longer need a read-write token.
Usage-limit reset credits now show their type and expiration
Backported installer and code-mode reliability fixes
The CIDR-encoded route endpoints are deprecated in favor of the standard, route_id-based endpoints. The tunnel list and get responses no longer include the connections field.
New Durable Object namespaces must use the SQLite storage backend. Accounts that are not already using the key-value storage backend can no longer create new key-value backed namespaces.
The DNS Firewall page in the Cloudflare dashboard has been refreshed, bringing several settings that were previously API-only into the UI and modernizing how you view and manage your DNS Firewall clusters.
`/login` in the Gateway now supports Anthropic-operated public gateway endpoints, broadening authentication options for enterprise deployments.
Accounts without an existing KV-backed Durable Object namespace can no longer create new ones; all new namespaces must use the SQLite backend via `new_sqlite_classes` migration. Deploying a `new_classes` migration on an affected account now fails with an explicit error.
Pasted terminal control sequences can no longer corrupt TUI rendering or resumed conversation history. This closes a potential injection vector where malicious terminal escape codes could affect session state.
MCP tools can now request interactive authentication without an experimental feature flag. This stabilises the MCP auth flow for any integrations relying on Model Context Protocol tooling.
Resumed ChatGPT threads that reference a retired model during compaction now automatically retry with the currently selected model instead of failing. Relevant for any workflow that persists conversation history across model retirements.
Accounts without an existing KV-backed Durable Object namespace can no longer create new ones; all new namespaces must use the SQLite storage backend via `new_sqlite_classes` migrations. Deployments attempting a `new_classes` migration on affected accounts will fail with an explicit error.
/login now supports Anthropic-operated public gateway endpoints, simplifying authentication for users connecting through the gateway.
Fixed MCP servers configured via --mcp-config or .mcp.json ignoring per-server request_timeout_ms, which caused long-running MCP tool calls to time out at the 60s default in fresh sessions. Fleet MCP integrations with long-running tools now work correctly.
Resumed ChatGPT threads that reference a retired model during compaction now automatically retry with the currently selected model instead of failing. This is relevant for any Codex users with long-running or archived sessions.
Fixes standalone installs failing when GitHub returns compact or reordered release metadata, and ensures code-mode host binary is correctly exposed on macOS package installs with embedded-runtime fallback.
MCP tools can now request authentication interactively without requiring an experimental opt-in flag, making MCP OAuth flows generally available. This unblocks MCP integrations that require user auth at runtime.
Resumed ChatGPT threads that hit a retired model during compaction now automatically retry with the currently selected model instead of failing. Relevant to any fleet code that pins model IDs and resumes long-running sessions.
App-server hosts can now provide Codex authentication at runtime and redirect successful logins to a hosted page, enabling richer hosted-app integrations. Long-running sessions also now refresh expired tokens automatically.
Alpha pre-release of Codex v0.145.0 is now available for early testing. No detailed changelog is published yet; follow for breaking changes before stable release.
App-server hosts can now provide Codex authentication at runtime and redirect successful logins to a hosted page, enabling richer embedded Codex integrations. Long-running sessions also now auto-refresh expired auth for the codex_apps connector.
MCP tools can now request authentication interactively without requiring an experimental opt-in flag. This removes a friction point for MCP-based integrations in production use.
Device-code login flow now displays explicit warnings explaining how to recognize and stop phishing attempts. Reduces risk of users being socially engineered via fake login prompts.
Pasted terminal control sequences can no longer corrupt TUI rendering or inject content into resumed conversation history. This closes a potential input-injection vector in interactive sessions.
Device-code login prompts now include explicit warnings explaining how to recognize and stop phishing attempts. Improves user security posture during OAuth device-code flows.
A new 'writes' approval mode allows declared read-only actions automatically while prompting the user only for write operations. MCP tools can now request authentication interactively without an experimental opt-in flag.
Cloudflare Workflows now supports passing a function to `retries.delay`, enabling error-aware and attempt-aware retry delays (e.g. longer waits after rate-limit errors). This eliminates the need for separate queue or scheduling logic to handle adaptive retry behavior.
CIDR-encoded route endpoints (POST/PATCH/DELETE .../teamnet/routes/network/{ip_network_encoded}) and the `connections` field on tunnel list/get responses are both being removed on October 5, 2026. Users must migrate to route_id-based endpoints and the dedicated connections sub-endpoint before then.
The DNS Firewall dashboard page now exposes settings (attack mitigation, rate limiting, negative TTL, resolver subnet) that were previously only configurable via API, alongside a modernized cluster table and create/edit UX. No action required; existing subscriptions automatically gain access.
CipherStash integration adds field-level encryption to Supabase projects with searchable ciphertext, zero-knowledge key management, and no schema changes required. Matters for teams handling sensitive PII or regulated data.
Upgrades Astro to use Vue 7.
Fixes build-time image optimization ignoring a custom image service registered by an integration
Refactors internal WSL detection by removing the is-wsl dependency
Fixes build-time image optimization ignoring a custom image service registered by an integration