Cloud intelligence

Cloudflare said customers bringing their own IP addresses temporarily could not change BGP prefixes, including starting or withdrawing advertisements. Its September 24 resolution notice also acknowledged possible delays to address-map changes. The company opened the investigation at 10:22 UTC and marked it resolved at 10:25 UTC, without giving a separate start time for customer impact.

Vercel has combined its private and open-source bug bounty programs into one public program on HackerOne. The company says the unified route covers its platform and open-source projects, with exact testing scope and rules listed on HackerOne. Existing submissions to the former open-source program remain under review and do not need to be filed again.

A Vercel customer case study says Klaviyo employees deployed 356 internal apps during a two-week citizen-developer program. Its K:Forge pipeline creates repositories, deploys applications and applies shared access controls, including Okta sign-in and private connections to company databases. The account describes platform engineers completing and reviewing more complex builds, so the reported adoption figures do not imply every application was delivered without engineering involvement.

You can now declare the Workflows a Worker defines in the exports field of your Wrangler configuration file. Previously, a Worker could only define a Workflow through a workflows binding, even when the Worker never called the Workflow itself. Key each entry by the name of the class that extends WorkflowEntrypoint: { "exports": { "MyWorkflow": { "type": "workflow", "name": "my-workflow", "limits": { "steps": 25000, }, "schedules": ["0 * * * *"], }, }, } [exports.MyWorkflow] type = "workflow" name = "my-workflow" schedules = [ "0 * * * *" ] [exports.MyWorkflow.limits] steps = 25_000 A workflow export accepts the same settings as a workflows binding: limits, schedules, and default_retention. When you run wrangler deploy, Wrangler creates or updates the Workflow with these settings. You can declare a Workflow as both a binding and an export.

A small proportion of requests to Cloudflare's API and R2 encountered authentication errors in an incident identified on September 22. The company said it reduced the main impact by 19:00 UTC that day while continuing to address remaining effects. A further fix entered monitoring on September 23, and Cloudflare marked the incident resolved at 20:59 UTC that evening.

Cloudflare resolved an API configuration problem on September 23 involving the any and all expressions in http_response_cache_settings. Creating or changing configurations with those expressions could produce unexpected errors, while existing active configurations and live traffic were unaffected. The company identified the issue at 15:54 UTC, said it was deploying a fix and recorded resolution at 18:08 UTC.

Vercel has removed plan-specific limits on the number of Blob stores, allowing separate stores for environments, customers or temporary workloads. Creating a store now counts as a Blob Advanced Operation, while deleting one is free. Storage, other operations and data transfer remain metered, so the change expands how teams organize data and credentials without making the underlying service usage unlimited.

Cloudflare marked a September 23 Durable Objects error incident resolved at 10:00 UTC. The company had begun investigating at 08:09 UTC after reporting increased errors that could affect a subset of customers. It identified the issue at 08:35 UTC and monitored a fix from 09:20 UTC.

Cloudflare resolved a September 23 problem affecting DNS-over-HTTPS requests to its 1.1.1.1 for Families service, including the 1.1.1.2 and 1.1.1.3 endpoints. Its authoritative DNS service was unaffected. The company reported the issue at 00:42 UTC, identified it at 00:55 UTC and began monitoring a fix at 01:21 UTC before marking the incident resolved at 01:26 UTC.

Vercel Sandbox Drives are in public beta across Hobby, Pro and Enterprise, adding persistent directories that survive individual sandbox runs. A drive accepts one read-write mount at a time; other sandboxes can use read-only snapshots that do not pick up later changes. Drives and their sandboxes must remain in the same region, and storage, reads and writes are metered.

Cloudflare reported a network-performance disruption affecting traffic through its Taipei facility on September 22, 2026. The provider placed the affected period at approximately 19:30–19:35 UTC. The incident notice appeared at 21:41 UTC that day and marked the event resolved, after the reported five-minute disruption had ended.

Cloudflare reported that Bot Management configuration updates were failing to reach its edge network on September 22, 2026. The company said existing bot settings at the edge were unaffected. An investigation notice appeared at 15:31 UTC; at 16:35, Cloudflare reported applying an effective fix and closed the incident.

Live broadcasts with LL-HLS enabled returned playback errors for some Cloudflare Stream customers on September 22, 2026. The provider opened an investigation at 14:37 UTC and reported that a fix had been implemented seven minutes later. It monitored the results before marking the incident resolved at 15:38 UTC.

Cloudflare attributed intermittent packet loss at its Los Angeles facility to traffic congestion on September 22, 2026. Its incident notice places the disruption between 13:37 and 14:49 UTC and identifies a capacity constraint. The provider said it had addressed that constraint, restored normal traffic flow and resolved the connectivity issue at the LAX location.

Cloudflare restored Workers and Durable Objects analytics visibility for FedRAMP High customers in an incident closed on September 22, 2026. The provider said affected datasets had not been returned correctly by its analytics dashboard and GraphQL API since June 11, although the underlying data remained intact. A fix was being monitored at 10:08 UTC, and the incident was marked resolved at 12:51.

Sep 22, 08:20 UTC Resolved - Cloudflare verified and resolved performance issues in our San Jose (SJC-A) data center. Users in the region may have experienced increased latency or connectivity issues between 07:20 and 08:20 UTC today.

Workers Builds now supports repositories hosted in Cursor Origin. Connect a Cursor Origin repository to automatically build and deploy production changes, preview non-production branches, and see build status in pull requests. Pushes to your production branch automatically build and deploy your Worker. When you enable non-production branch builds, each branch receives a version-specific preview URL and a stable preview URL that follows the latest build. Cloudflare posts build status and preview links to the Cursor Origin pull request and creates a check run for each triggered build. To get started, install the Cloudflare app in Cursor ↗︎, choose the Cursor Origin repositories Cloudflare can access, and follow the prompts to configure your Worker build. For details, refer to the Cursor Origin integration.

You can now test every change you make in an isolated, production-like environment with Worker Previews ↗︎. Each Preview runs under the same Worker with its own code, configuration, URL, and observability, isolated from production and every other Preview. Configure each Preview Define the variables, bindings, and settings that new Previews start with in the previews block of your Wrangler configuration file. Set secrets with Wrangler commands. You can override one Preview without changing production or other Previews. For Durable Objects and Containers, Cloudflare automatically provisions separate namespaces, storage, apps, and instances for every Preview. State changes, sessions, memory, migrations, and concurrent tests remain scoped to that Preview. To isolate KV, D1, R2, or another account-level resource, bind the Preview to a separate resource.

Sep 21, 18:15 UTC Resolved - Cloudflare investigated an elevated rate of PUT request failures to R2 within the WNAM and ENAM regions. As a result, storing assets in Cache Reserve failed for some requests.

Vercel Connect now offers a managed Microsoft Teams connector, allowing applications and agents to respond through a bot to direct messages or channel mentions. Vercel provisions the Entra app and Azure Bot resource, but setup requires a tenant administrator with an Azure subscription. Tokens are requested with specific scopes and refreshed automatically; connector access remains limited to attached environments and can be revoked.

Vercel now shows billable build duration and CPU minutes for individual deployments in the dashboard, CLI and REST API. Duration combines build and post-build time, rounded up to a whole minute; multiplying it by the machine's vCPU count gives CPU minutes. The breakdown helps teams understand each build's contribution to usage, with CLI support requiring version 59.23.1 or later.

Cloudflare reported problems starting containers in the Asia-Pacific region on September 21, 2026. The incident was announced at 12:42 UTC; the provider said it had identified the issue by 13:15 and was monitoring a fix by 13:21. Its final update marked the incident resolved at 13:23 UTC.

Cloudflare reported a domain-registration problem affecting selected extensions on September 21, 2026, including .xyz, .security, .hosting and .storage. Its 09:37 UTC notice also named extensions such as .audio, .game and .fm among those whose registrations were affected. The provider marked the incident resolved in an update posted at 09:49 UTC.

Supabase has renamed the Dashboard's database replication destination area to Pipelines, separating it from read replicas managed under infrastructure settings. Existing replication-page bookmarks and destination links redirect to their corresponding Pipelines pages. The announcement says pipeline configuration and behavior, management and database APIs, and replication logs are unchanged, so this is a navigation update rather than a migration of stored data.