Skip to content

chore(deps): update npm packages (major)#7

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-npm
Open

chore(deps): update npm packages (major)#7
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-npm

Conversation

@renovate

@renovate renovate Bot commented May 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@antfu/eslint-config ^8.3.0 → ^9.1.0 age confidence
cloudflare ^5.2.0 → ^7.0.0 age confidence
pnpm (source) 10.34.4 → 11.11.0 age confidence
typescript (source) ^6.0.3 → ^7.0.2 age confidence

Release Notes

antfu/eslint-config (@​antfu/eslint-config)

v9.1.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v9.0.0

Compare Source

   🚨 Breaking Changes
    View changes on GitHub
cloudflare/cloudflare-typescript (cloudflare)

v7.0.0

Compare Source

Full Changelog: v6.5.0...v7.0.0

This is a major release with significant breaking changes to the SDK internals and API surface.
The SDK now uses the builtin Web fetch API, has zero runtime dependencies, and adopts a new
parameter convention for methods with multiple path parameters. A migration CLI is included to
help automate code updates.

Please read through the breaking changes below and the Migration Guide before
upgrading. You can also run the automated migration tool:

npx cloudflare migrate ./your/src/folders
Known limitations of the migration tool
  • Not idempotent -- running it a second time on already-migrated code will produce
    incorrect output. Run it once only.
  • Partial migrations -- if you have manually updated some call sites to v7 style
    before running the tool, those call sites may be incorrectly transformed. Review
    the output diff carefully before committing.
General Changes
Zero dependencies

The SDK no longer depends on node-fetch, agentkeepalive, form-data-encoder, formdata-node,
or abort-controller. It uses the builtin Web fetch API on all platforms. The dependencies field
in package.json is now empty.

New client options
  • fetchOptions -- pass additional RequestInit options to every fetch call (e.g. custom
    signal, keepalive, cache). Per-request fetchOptions override the client-level default.
  • logLevel / logger -- configure SDK logging. Defaults to process.env['CLOUDFLARE_LOG']
    or 'warn'. Set logLevel: 'debug' for request/response tracing.
Removed client options
  • httpAgent -- removed. Use fetchOptions to pass agent-like configuration instead.
Type changes
  • defaultHeaders type changed from Core.Headers to HeadersLike
  • fetch type changed from Core.Fetch to Fetch
Internal restructuring

The SDK internals have been reorganized:

  • src/core.ts -> split into src/core/ modules (api-promise.ts, error.ts, pagination.ts,
    resource.ts, uploads.ts)
  • src/_shims/ -> replaced by src/internal/ (builtin-types.ts, detect-platform.ts,
    errors.ts, headers.ts, parse.ts, shims.ts, etc.)
  • src/index.ts now re-exports from src/client.ts

Import paths for internal modules have changed. If you were importing from cloudflare/core or
cloudflare/_shims, update your imports accordingly.

Breaking Changes
Named path parameters

Methods that take multiple path parameters now use named instead of positional arguments for all
but the last path parameter. This prevents a common footgun where arguments could be accidentally
passed in the wrong order.

// Before (v6.x)
client.accounts.members.get(memberId, { account_id: '...' });

// After (v7.0.0)
client.accounts.members.get(memberID, { account_id: '...' });

For methods with 3+ path parameters, intermediate parameters move into the options object:

// Before (v6.x)
client.customHostnames.certificatePack.certificates.update(
  customHostnameId, certificatePackId, certificateId, { ...params }
);

// After (v7.0.0)
client.customHostnames.certificatePack.certificates.update(
  certificateID, { custom_hostname_id: '...', certificate_pack_id: '...', ...params }
);

This affects 232 methods across the SDK. See the Migration Guide for the
complete list.

Parameter name casing (camelCase -> UPPER_ID)

Path parameter argument names have been standardized from camelCase to UPPER_ID format
across 792 methods:

// Before (v6.x)
client.alerting.policies.get(policyId, { ...params });

// After (v7.0.0)
client.alerting.policies.get(policyID, { ...params });

While this is not a runtime breaking change (positional arguments work regardless of name),
it is a TypeScript compilation change if you were using named/destructured parameters.

Web types for withResponse, asResponse, and APIError.headers

The SDK now uses the builtin Web fetch API on all platforms. If you accessed node-fetch-specific
properties on response objects, you need to switch to standardized alternatives:

// Before (v6.x)
const res = await client.example.retrieve('id').asResponse();
res.body.pipe(process.stdout);

// After (v7.0.0)
import { Readable } from 'node:stream';
const res = await client.example.retrieve('id').asResponse();
Readable.fromWeb(res.body).pipe(process.stdout);

The headers property on APIError objects is now an instance of the Web Headers class
(previously Record<string, string | null | undefined>).

Return type changes
Resource Method Old Return Type New Return Type
zeroTrust.devices.dexTests create() DEXTestCreateResponse SchemaHTTP
zeroTrust.devices.dexTests update() DEXTestUpdateResponse SchemaHTTP
zeroTrust.devices.dexTests list() DEXTestListResponsesV4PagePaginationArray SchemaHTTPSV4PagePaginationArray
zeroTrust.devices.dexTests get() DEXTestGetResponse SchemaHTTP
Removed types
  • DEXTestCreateResponse (use SchemaHTTP)
  • DEXTestUpdateResponse (use SchemaHTTP)
  • DEXTestListResponse (use SchemaHTTPS)
  • DEXTestGetResponse (use SchemaHTTP)
Method renames (Id -> ID)

Several methods were renamed to use consistent ID casing:

Resource Old Method New Method
vectorize.indexes deleteByIds() deleteByIDs()
vectorize.indexes getByIds() getByIDs()
realtimeKit.meetings getMeetingById() getMeetingByID()
realtimeKit.meetings replaceMeetingById() replaceMeetingByID()
realtimeKit.meetings updateMeetingById() updateMeetingByID()
realtimeKit.presets getPresetById() getPresetByID()
realtimeKit.sessions getParticipantDataFromPeerId() getParticipantDataFromPeerID()
realtimeKit.webhooks getWebhookById() getWebhookByID()
realtimeKit.livestreams getActiveLivestreamsForLivestreamId() getActiveLivestreamsForLivestreamID()
realtimeKit.livestreams getLivestreamSessionDetailsForSessionId() getLivestreamSessionDetailsForSessionID()
realtimeKit.livestreams getLivestreamSessionForLivestreamId() getLivestreamSessionForLivestreamID()
Removed fileFromPath helper

The Cloudflare.fileFromPath static method and the named fileFromPath export have been removed.
Use native Node.js streams or the toFile() helper instead:

// Before (v6.x)
import Cloudflare, { fileFromPath } from 'cloudflare';
const file = await fileFromPath('path/to/file');

// After (v7.0.0)
import fs from 'node:fs';
const file = fs.createReadStream('path/to/file');
APIClient replaced by BaseCloudflare

The APIClient base class has been replaced:

// Before (v6.x)
import { APIClient } from 'cloudflare/core';

// After (v7.0.0)
import { BaseCloudflare } from 'cloudflare/client';
Page classes converted to type aliases

Per-method pagination classes (e.g. AccountsV4PagePaginationArray) are now type aliases instead
of classes. Runtime instanceof checks against them will break. Import the base pagination class
instead, or use them only at the type level.

cloudflare/src directory removed

The cloudflare/src/* import paths are no longer available. If your IDE auto-completed imports
from cloudflare/src/..., replace them with cloudflare/....

Features
New Resources
  • registrar.registrations -- create(), list(), edit(), get() for domain registrations
New Methods
  • accounts.logs.audit.history() -- GET /accounts/{account_id}/logs/audit/{id}/history
  • accounts.logs.audit.productCategories() -- GET /accounts/{account_id}/logs/audit/product_categories
  • organizations.logs.audit.history() -- GET /organizations/{organization_id}/logs/audit/{id}/history
  • emailRouting.unlock() -- POST /zones/{zone_id}/email/routing/unlock
  • emailRouting.addresses.edit() -- PATCH /accounts/{account_id}/email/routing/addresses/{destination_address_identifier}
  • browserRendering.accessibilityTree.create() -- POST /accounts/{account_id}/browser-rendering/accessibilityTree
New Types
  • AuditHistoryResponse (on accounts.logs.audit and organizations.logs.audit)
  • AuditProductCategoriesResponse (on accounts.logs.audit)
Tree-shaking support

New createClient function and PartialCloudflare type exported from cloudflare/tree-shakable.
Every resource class now exports a Base* variant (e.g. BaseAccounts, BaseZones) for selective
imports, allowing bundlers to tree-shake unused resources and reduce bundle size.

import { createClient } from 'cloudflare/tree-shakable';
import { Zones } from 'cloudflare/resources/zones/zones';

const client = createClient({ resources: [Zones] });
Migration CLI

Automated codemod for v6 -> v7 migration. Handles path parameter reordering, casing changes,
and import path updates:

npx cloudflare migrate ./your/src/folders
Bug Fixes
  • workflows: move Workflow payload types into Payload namespace to avoid TS2717 duplicate
    identifier errors
Chores
  • Zero runtime dependencies (removed node-fetch, agentkeepalive, form-data-encoder,
    formdata-node, abort-controller)
  • TypeScript upgraded to 5.8.3 (from ^4.8.2)
  • ESLint upgraded to ^9.39.1 (from ^8.49.0)
  • Node.js minimum version: 20 LTS
  • Internal module restructuring (src/core.ts -> src/core/, src/_shims/ -> src/internal/)

v6.5.0

Compare Source

Full Changelog: v6.3.0...v6.5.0

Features
  • ai-gateway: add CustomProviders, 1 sub-resource (456be6f)
  • email-auth: add EmailAuth resource (f424bee)
  • email-security: add bulk investigation (827bf4c)
  • logs: add log-explorer sub-resource (5125978)
  • magic-transit: add cf1-sites sub-resource (148612a)
  • moq: add MoQ resource (2712713)
  • tenants: add Tenants resource (035563c)
  • user: add user tenants sub-resource (803425f)
  • zones: add CT alerting sub-resource (9a3dead)
Chores
  • accounts: update codegen output (9f670fd)
  • aisearch: update codegen output (4d687e0)
  • billing: update codegen output (db0b645)
  • browser-rendering: update codegen output (548a32f)
  • cloudforce-one: update codegen output (e2aa54a)
  • custom-hostnames: update codegen output (cc890d6)
  • email-routing: update codegen output (90eea55)
  • iam: update codegen output (ed876e6)
  • intel: update codegen output (271795f)
  • origin-tls-compliance-modes: update codegen output (704cd50)
  • radar: update codegen output (8c02e68)
  • rulesets: update codegen output (edf0d01)
  • ssl: update codegen output (667b5b3)
  • sync shared codegen files from staging-next (6098a42)
  • workers-for-platforms: update codegen output (ef238e6)
  • workers: update codegen output (51222e9)
  • zero-trust: update codegen output (aa2cbc3)

v6.4.0

Compare Source

Full Changelog: v6.3.0...v6.4.0

Features
  • chore: skip failing Go SDK tests for workers bulk secret update (96c2097)
  • feat: add custom_csrs Stainless config (zone + account) (32f6840)
  • feat(access): add idp_federation_grants resource (352ba72)
  • feat(ai_audit): add robots route mappings for APIX-785 (088cad2)
  • feat(api): add csam_scanner Stainless resource (TMD-1300, LRSP-1810) (f4981e6)
  • feat(api): add tenant custom nameservers resource mapping (8dd0dd0)
  • feat(api): sync workflows API endpoints (2 new) (52cfa48)
  • feat(dex): add device ISPs endpoint mapping (6eb1f19)
  • feat(dlp): add custom prompt topics endpoint [production] (d16d1eb)
  • feat(dlp): promote classification Stainless config to main (9192235)
  • feat(email_security): add url_ignore_patterns and sending_domain_restrictions endpoints (699b3b9)
  • feat(flagship): add Flagship feature flag API resource mappings (3519f68)
  • feat(oauth): Add SDK support for oauth clients and scopes (2a2a3bd)
  • feat(resource_sharing): add Terraform resource definitions for shares (01e9cef)
  • feat(resource_tagging): add summary endpoint mapping (46d7a75)
  • feat(snippets): add terraform id_property annotations for snippet and snippet_rules (6ccfdc4)
  • feat(ssl): promote auto_origin_tls_kex and origin_tls_compliance_modes to main (8f29378)
  • feat(stainless): document mesh configurations endpoints (ae39454)
  • feat(workers): adds Workers > Observability > Live Tail resources (45408aa)
  • feat(workers): adds Workers > Observability > Shared Queries resources (8839b5b)
  • fix(dns): Exclude dns_records From combineCloudflareResources in Prod Config (APIX-981) (a296788)
  • fix(iam): remove standalone_api from oauth_scopes subresource (cf55d94)
Bug Fixes
  • workflows: resolve type collision in VersionGraphResponse (30604e9)
Chores
  • api: update composite API spec (0715022)
  • api: update composite API spec (7c6de69)
  • api: update composite API spec (588f2c7)
  • api: update composite API spec (5a3cf7a)
  • api: update composite API spec (ccbc30f)
  • api: update composite API spec (b95626a)
  • api: update composite API spec (9e6192f)
  • api: update composite API spec (ed68ecf)
  • api: update composite API spec (4db4b64)
  • api: update composite API spec (5db2bed)
  • api: update composite API spec (06ac7af)
  • api: update composite API spec (31b970a)
  • api: update composite API spec (f7bd242)
  • api: update composite API spec (a52bf52)
  • api: update composite API spec (eb68021)
  • api: update composite API spec (0a636f8)
  • api: update composite API spec (5a240a7)
  • api: update composite API spec (098449f)
  • api: update composite API spec (56b6294)
  • api: update composite API spec (e98a6f0)
  • api: update composite API spec (34e116a)
  • api: update composite API spec (cb91dea)
  • api: update composite API spec (02979e3)
  • api: update composite API spec (ba14029)
  • api: update composite API spec (6641f5d)
  • api: update composite API spec (5aba969)
  • api: update composite API spec (189f9ef)
  • api: update composite API spec (4b13771)
  • api: update composite API spec (0283f29)
  • api: update composite API spec (a433795)
  • internal: codegen related update (bb8e4a0)

v6.3.0

Compare Source

Full Changelog: v6.3.0...v6.4.0

Features
  • chore: skip failing Go SDK tests for workers bulk secret update (96c2097)
  • feat: add custom_csrs Stainless config (zone + account) (32f6840)
  • feat(access): add idp_federation_grants resource (352ba72)
  • feat(ai_audit): add robots route mappings for APIX-785 (088cad2)
  • feat(api): add csam_scanner Stainless resource (TMD-1300, LRSP-1810) (f4981e6)
  • feat(api): add tenant custom nameservers resource mapping (8dd0dd0)
  • feat(api): sync workflows API endpoints (2 new) (52cfa48)
  • feat(dex): add device ISPs endpoint mapping (6eb1f19)
  • feat(dlp): add custom prompt topics endpoint [production] (d16d1eb)
  • feat(dlp): promote classification Stainless config to main (9192235)
  • feat(email_security): add url_ignore_patterns and sending_domain_restrictions endpoints (699b3b9)
  • feat(flagship): add Flagship feature flag API resource mappings (3519f68)
  • feat(oauth): Add SDK support for oauth clients and scopes (2a2a3bd)
  • feat(resource_sharing): add Terraform resource definitions for shares (01e9cef)
  • feat(resource_tagging): add summary endpoint mapping (46d7a75)
  • feat(snippets): add terraform id_property annotations for snippet and snippet_rules (6ccfdc4)
  • feat(ssl): promote auto_origin_tls_kex and origin_tls_compliance_modes to main (8f29378)
  • feat(stainless): document mesh configurations endpoints (ae39454)
  • feat(workers): adds Workers > Observability > Live Tail resources (45408aa)
  • feat(workers): adds Workers > Observability > Shared Queries resources (8839b5b)
  • fix(dns): Exclude dns_records From combineCloudflareResources in Prod Config (APIX-981) (a296788)
  • fix(iam): remove standalone_api from oauth_scopes subresource (cf55d94)
Bug Fixes
  • workflows: resolve type collision in VersionGraphResponse (30604e9)
Chores
  • api: update composite API spec (0715022)
  • api: update composite API spec (7c6de69)
  • api: update composite API spec (588f2c7)
  • api: update composite API spec (5a3cf7a)
  • api: update composite API spec (ccbc30f)
  • api: update composite API spec (b95626a)
  • api: update composite API spec (9e6192f)
  • api: update composite API spec (ed68ecf)
  • api: update composite API spec (4db4b64)
  • api: update composite API spec (5db2bed)
  • api: update composite API spec (06ac7af)
  • api: update composite API spec (31b970a)
  • api: update composite API spec (f7bd242)
  • api: update composite API spec (a52bf52)
  • api: update composite API spec (eb68021)
  • api: update composite API spec (0a636f8)
  • api: update composite API spec (5a240a7)
  • api: update composite API spec (098449f)
  • api: update composite API spec (56b6294)
  • api: update composite API spec (e98a6f0)
  • api: update composite API spec (34e116a)
  • api: update composite API spec (cb91dea)
  • api: update composite API spec (02979e3)
  • api: update composite API spec (ba14029)
  • api: update composite API spec (6641f5d)
  • api: update composite API spec (5aba969)
  • api: update composite API spec (189f9ef)
  • api: update composite API spec (4b13771)
  • api: update composite API spec (0283f29)
  • api: update composite API spec (a433795)
  • internal: codegen related update (bb8e4a0)

v6.2.0

Compare Source

Full Changelog: v6.2.0...v6.3.0

Features
New Resources
  • dls: add DLS (Data Localization Suite) resource with regions (list/get) and regionalServices.prefixBindings (create/list/delete/edit/get) sub-resources (4dcf0db)
New Sub-Resources
  • organizations: add billing.usage sub-resource — FOCUS v1.3 cost-and-usage dataset (get) at /organizations/{organization_id}/billable/usage (2c93faf)
  • r2: add buckets.objects sub-resource — list, delete, get, upload (PUT) for direct R2 object operations (94a26fc)
  • workers: add observability.queries sub-resource — create and list saved telemetry queries (d1f8d27)
  • zero-trust: add access.samlCertificates sub-resource — list, get, getPem, rotate SAML signing certificate sets at the account level (4d75785)
  • zero-trust: add identityProviders.samlCertificate sub-resource — create a SAML encryption certificate set bound to an Identity Provider (4d75785)
New Methods
  • billing: add usage.get method — FOCUS v1.3 cost-and-usage dataset at /accounts/{account_id}/billable/usage (returns UsageGetResponse with BillingAccountId, ChargeCategory, ConsumedQuantity, BilledCost, EffectiveCost, etc.) (665f6ea)
  • secrets-store: add stores.get method — fetch a single store by ID (GET /accounts/{account_id}/secrets_store/stores/{store_id}) returning StoreGetResponse (542f312)
  • workers: add scripts.secrets.bulkUpdate method — PATCH /accounts/{account_id}/workers/scripts/{script_name}/secrets-bulk for bulk secret updates (840cea9)
  • workers-for-platforms: add dispatch.namespaces.scripts.secrets.bulkUpdate method — same bulk-update endpoint for dispatch-namespace scripts (840cea9)
New Fields and Parameters
  • ai: add format?: 'openrouter' query param to models.list for returning models in the OpenRouter marketplace format (a3ba7fc)
  • aisearch: add degraded?: boolean response field to InstanceStatsResponse and namespaces.instances.InstanceStatsResponse — set when status counts are unavailable (e.g. legacy stats query exceeded D1 statement-size limit) (49c2987)
  • cloudforce-one: add alpha2: string field to threatEvents.countries.list response items (CountryListResponseItem.Result) alongside the existing alpha3/name fields (0aa9ae0)
  • custom-certificates: private_key on CustomCertificateCreateParams is now optional when custom_csr_id is provided (previously always required) (6e90245)
  • logpush: add mnm_flow_logs to the dataset enum on datasets.fields.get, datasets.jobs.get, LogpushJob.dataset, and JobCreateParams.dataset (5bc2413)
  • organizations: Organizations API moved from Closed Beta to Public Beta — affects organizations.create, update, list, delete, get, and organizationProfile.update/get docstrings (54b7f07)
  • radar: add CONTENT_TYPE dimension and contentType?: Array<'HTML' | 'IMAGES' | 'JSON' | 'JAVASCRIPT' | 'CSS' | 'PLAIN_TEXT' | 'FONTS' | 'XML' | 'YAML' | 'VIDEO' | 'AUDIO' | 'MARKDOWN' | 'DOCUMENTS' | 'BINARY' | 'SERIALIZATION' | 'OTHER'> filter param to radar.http.summaryV2, timeseriesGroups, and related HTTP analytics methods (d5bc24a)
  • spectrum: add virtual_network_id?: string field to OriginDNS config on AppCreateResponse, AppUpdateResponse, AppListResponse, AppGetResponse, AppCreateParams, and AppUpdateParams — routes origin traffic through tunnel virtual networks (1afad1f)
  • workers: add 'opentelemetry-metrics' enum value to logpushDataset field on observability.destinations (DestinationCreateResponse.Configuration, DestinationUpdateResponse.Configuration, DestinationListResponse.Configuration) (d1f8d27)
  • workers: add observability.traces.propagation_policy?: 'authenticated' | 'accept' field on Worker, WorkerCreateParams, WorkerUpdateParams, ScriptSetting, SettingEditParams, and script-and-version-settings — controls how inbound traceparent/tracestate headers are honored (d1f8d27)
  • workers: add ends_with filter operation and ENDS_WITH comparison enum value to observability.telemetry.query filters (d1f8d27)
  • workers: add preview?: { id?: string; name?: string; slug?: string } field to TelemetryQueryResponse.UnionMember0 and UnionMember1 event items — surfaces preview deployment metadata on telemetry results (d1f8d27)
  • workers: narrow observability.telemetry source field type from string | unknown to string | { [key: string]: unknown } — non-breaking type refinement that gives consumers better inference (d1f8d27)
  • zero-trust: add Cloudflare-as-Identity-Provider — new 'cloudflare' value in IdentityProviderType and IdentityProviderTypeParam unions, plus a new AccessCloudflare interface variant added to IdentityProvider, IdentityProviderParam, IdentityProviderListResponse, IdentityProviderCreateParams, and IdentityProviderUpdateParams unions (4d75785)
  • zero-trust: add AccessCloudflareAccountMemberRule policy rule type to AccessRule union (and AccessRuleParam) — matches users who are members of a specific Cloudflare account; pairs with the new Cloudflare IdP type (4d75785)
  • zero-trust: add saml_certificate_set? and saml_certificate_set_id? fields across all 16 Identity Provider variants (AzureAD, AccessCentrify, AccessCloudflare, AccessFacebook, AccessGitHub, AccessGoogle, AccessGoogleApps, AccessLinkedin, AccessOIDC, AccessOkta, AccessOnelogin, AccessOnetimepin, AccessPingone, AccessSAML, AccessYandex, and the new AccessCloudflare) — references the bound SAML encryption certificate set (4d75785)
  • zero-trust: add error_details? (with cause, is_upstream, mcp_code, retryable, status_code fields) and is_shared_oauth_callback_enabled?: boolean to access.aiControls.mcp.portals and mcp.servers response types — surfaces MCP gateway error details and shared-OAuth-callback rollout state (dc1c78c)
  • zero-trust: add portal_description? and server_description? fields to access.aiControls.mcp.portals Server.UpdatedPrompt (Create/Update/List/Get response variants); the older description? field is now @deprecated in favor of these — portal-level wins when present, otherwise falls back to server-level (dc1c78c)
  • zero-trust: refine access.aiControls.mcp.servers.ServerSyncResponse from unknown to { error?: string; error_details?: ServerSyncResponse.ErrorDetails; status?: string } — gives consumers a typed shape with MCP error details (dc1c78c)
  • zero-trust: add auth_state?: Array<'Good' | 'Notified' | 'Will Block' | 'Blocked'> field to KolideInput and KolideInputParam device-posture types — restricts the posture check to specific Kolide auth states (dc1c78c)
Deprecations
  • zero-trust: access.aiControls.mcp.portals Server.UpdatedPrompt.description? is now @deprecated. Use the new portal_description? or server_description? fields instead. The deprecated field is still populated for backward compatibility (portal-level wins when present, otherwise falls back to server-level) and will be removed after a deprecation window. (dc1c78c)
Breaking Changes
  • billing: the underlying API endpoint for client.billing.usage.paygo() changed from GET /accounts/{account_id}/billing/usage/paygo to GET /accounts/{account_id}/paygo-usage. The SDK call site, method signature, params, and return type are unchanged — existing code does not need to be modified. This is recorded as a breaking change because the underlying API contract moved; users on older SDK versions may see 404s if the old URL is retired by the Cloudflare API server. (665f6ea)
Chores
  • ai: documentation tightening across model list responses (a3ba7fc)
  • cloudforce-one: documentation refresh on threat-events country fields (0aa9ae0)
  • email-sending: internal client-name string update (1199217)
  • intel: rephrase sinkhole field descriptions for clarity (b471160)
  • radar: trailing chore from previous sync round (6446c29)
  • workers-for-platforms: documentation updates on existing dispatch endpoints alongside the bulkUpdate addition (074b214)
  • zero-trust: generated-output churn alongside the SAML certificate work (dc1c78c), (40ea4d5)
  • sync codegen shared files (api.md, .stats.yml, scripts/detect-breaking-changes, src/index.ts, src/resources/index.ts) across multiple sync rounds (4d7dd4d), (fdef412), (22e2a09), (7e4b075)

v6.1.0

Compare Source

Full Changelog: v6.1.0...v6.2.0

Features
New Resources
  • api: add DDoS Protection resource with Advanced TCP Protection endpoints -- allowlist (CRUD + bulk delete), prefixes (CRUD + bulk create/delete), syn-protection filters/rules (CRUD + bulk delete), tcp-flow-protection filters/rules (CRUD + bulk delete), status (edit/get) (0cd6242)
  • api: add AI Security resource with settings (update/get) and custom topics (update/get) endpoints (4959946)
New Sub-Resources
  • ai-gateway: add billing sub-resource -- credit balance, invoice history, invoice preview, usage history, spending limit (create/delete/get), topup config (create/delete/get), topup (create/status) (6f4c052)
  • ai-gateway: add guardrails configuration to all AI Gateway response and param types with prompt/response safety classification (P1, S1-S13 categories, FLAG/BLOCK actions) (6f4c052)
  • ai-gateway: add is_valid field to dynamic routing response types (6f4c052)
  • load-balancers: add monitor group references sub-resource (get) (00f63c7)
  • radar: add BGP IPs top ASes sub-resource (9af4cde)
  • radar: add BGP RPKI ROAs timeseries sub-resource (9af4cde)
  • zero-trust: add resource library sub-resource -- applications (create/update/list/delete/get) and categories (list) (5e7609f)
New Fields and Parameters
  • cloudforce-one: add taxii format option for threat event exports (1ff832a)
  • d1: add read_replication configuration param to DatabaseCreateParams with mode: 'auto' | 'disabled' (450e0f0)
  • email-security: add smtp_helo_server_ip, smtp_previous_hop_ip, x_originating_ip response fields; add delivery_status filter param (083fe7f)
  • intel: add latest_upload_error field to indicator feed responses (a612880)
  • radar: add apiTraffic filter param (API | NON_API) to HTTP summary, timeseries groups, and top endpoints (c3a2fb0)
  • resource-sharing: add idp-federation-grant sharing type; add tag query param for filtering shares by key/value pairs (fd7d870)
  • secrets-store: add force query param to store delete for cascade-deleting secrets (e046da9)
  • url-scanner: add mpp (Malicious Payment Page) detection to commerce scan results with evidence, findings, request/response details (19ab611)
  • workflows: add sensitive: 'output' option to step configuration for redacting step output from logs (069930b)
  • zero-trust: add custom_prompt_topic DLP entry type with upload_status, profiles fields across DLP entry and profile types (5e7609f)
  • zero-trust: add deprecated deviceRegistration field to fleet status responses (use registrationId instead) (5e7609f)
  • zones: add total_pages field to zone listing pagination metadata (1c444a3)
Chores
  • acm: update custom origin trust store documentation (root CA only, no intermediate/leaf) (cf1329e)
  • ai-gateway: add page and per_page params to dynamic routing list (6f4c052)
  • ci: restore breaking change detection and semgrep timeout (02f41cb)
  • d1: update read replication mode documentation (450e0f0)
  • intel: add documentation for rejected category IDs (169, 177) in indicator feed update params (a612880)
  • aisearch: improve content selection and custom headers documentation for crawl instance config (f282d9b)
  • radar: update post-quantum TLS support response documentation (c3a2fb0)
Breaking Changes
  • load-balancers: id field removed from MonitorGroupCreateParams, MonitorGroupUpdateParams, and MonitorGroupEditParams. Code passing id in these params will fail type-check.
  • radar: IQITimeseriesGroupsResponse.Serie0 replaced named fields p25, p50, p75 with an index signature [k: string]: Array<string> | undefined. Code accessing result.serie_0.p25 will now receive string[] | undefined instead of string[], and field names are no longer auto-completed by TypeScript.
  • radar: TLSSupportResponse added new required field `bugs: T

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented May 25, 2026 •
edited
Loading

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
❌ Deployment failed
View logs		 redeploy-soubiran-dev 59c7d60 Jul 17 2026, 02:07 AM

@renovate
renovate Bot force-pushed the renovate/major-npm branch 2 times, most recently from 00ab4b2 to 17e4f21 Compare May 28, 2026 11:15
@renovate renovate Bot changed the title chore(deps): update dependency cloudflare to v6 chore(deps): update npm packages (major) May 28, 2026
@renovate
renovate Bot force-pushed the renovate/major-npm branch 4 times, most recently from 4dbcd10 to e7ee977 Compare June 3, 2026 14:37
@renovate
renovate Bot force-pushed the renovate/major-npm branch 4 times, most recently from 520deff to 72e5598 Compare June 12, 2026 09:01
@renovate
renovate Bot force-pushed the renovate/major-npm branch 4 times, most recently from 229aeb4 to 4277793 Compare June 23, 2026 17:12
@renovate
renovate Bot force-pushed the renovate/major-npm branch 5 times, most recently from 05c1d46 to f9aca82 Compare July 1, 2026 23:30
@renovate
renovate Bot force-pushed the renovate/major-npm branch 3 times, most recently from 3d3cf2f to 95a2860 Compare July 12, 2026 12:13
@renovate
renovate Bot force-pushed the renovate/major-npm branch 2 times, most recently from 1465b48 to 48719c3 Compare July 15, 2026 18:09
@renovate
renovate Bot force-pushed the renovate/major-npm branch from 48719c3 to eb07265 Compare July 16, 2026 16:06
@renovate
renovate Bot force-pushed the renovate/major-npm branch from eb07265 to 59c7d60 Compare July 17, 2026 02:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

chore dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants