cloudflare breaking changes

7.0.0

38 breaking changes, first published July 9, 2026.

• Removed
  The minimum supported Node.js version is now 20 LTS. github.com
• Removed Cloudflare.fileFromPath
  Use native Node.js streams or the toFile() helper instead. github.com
• Removed cloudflare.src
  Replace imports from cloudflare/src/... with cloudflare/... github.com
• Removed DEXTestCreateResponse
  The type was removed. Use SchemaHTTP instead. github.com
• Removed DEXTestGetResponse
  The type was removed. Use SchemaHTTP instead. github.com
• Removed DEXTestListResponse
  The type was removed. Use SchemaHTTPS instead. github.com
• Removed DEXTestUpdateResponse
  The type was removed. Use SchemaHTTP instead. github.com
• Removed fileFromPath
  Use native Node.js streams or the toFile() helper instead. github.com
• Removed httpAgent
  The httpAgent client option was removed. Pass agent-like configuration through fetchOptions instead. github.com
• Renamed APIClient
  Import BaseCloudflare from cloudflare/client instead of APIClient from cloudflare/core. github.com

And 28 more in this version.

6.0.0

1,937 breaking changes, first published April 30, 2026.

• Removed client.intel.ipLists
  The intel ip-list endpoint and client.intel.ipLists were removed, so code calling them must stop or switch to another API. github.com
• Removed Member
  Shared types such as Member were removed from the root namespace and must be imported from their resource module instead. github.com
• Renamed client.originTLSClientAuth.hostnames.certificates
  The hostnames.certificates path moved to zoneCertificates, so update calls to the new path. github.com
• Renamed client.radar.netflows
  The path changed casing to netFlows, so update calls to use the new name. github.com
• Behavior changed
  Query parameters written into endpoint paths are now extracted and merged, which may change manually built URLs. github.com
• Behavior changed
  Retry-After values over 60 seconds are now honored instead of being ignored, so rate-limited requests may wait longer. github.com
• Behavior changed
  Responses with content-length 0 return undefined instead of a parsed body, so code expecting an empty object or null must change. github.com
• Behavior changed client.accounts.delete
  Delete and other methods now return null, so code reading properties from their results will break. github.com
• Behavior changed client.kv.namespaces.keys.list
  The list method now returns KeysCursorLimitPagination instead of KeysCursorPaginationAfter, which changes how results are iterated. github.com
• Configuration changed
  An empty CLOUDFLARE_API_TOKEN is now treated as unset rather than as a valid value. github.com

And 1,927 more in this version.

6.0.0-beta.2

13 breaking changes, first published April 30, 2026.

• Removed acm.totalTLS.create
  Use update or edit instead of create. github.com
• Removed aiSearch.instances.items.list
  The list and get methods on aiSearch instance items are gone. github.com
• Removed cloudforceOne.threatEvents.delete
  The threatEvents delete method is gone. github.com
• Removed intel.ipLists.get
  The intel ipLists get method is gone. github.com
• Removed securityCenter.insights
  The insights resource and its class, severity and type sub-resources are gone. github.com
• Removed waitingRooms.list
  The waitingRooms list method is gone. github.com
• Renamed originTLSClientAuth.hostnames.certificates
  Use originTLSClientAuth.hostnameCertificates instead. github.com
• Renamed radar.netflows
  Use radar.netFlows instead of radar.netflows. github.com
• Behavior changed aiSearch.tokens.update
  update now sends PUT and read now sends GET instead of DELETE. github.com
• Behavior changed kv.namespaces.keys.list
  list now uses CursorLimitPagination instead of CursorPaginationAfter. github.com

And 3 more in this version.

6.0.0-beta.1

26 breaking changes, first published April 30, 2026.

• Removed CloudflaredCreateResponse
  The CloudflaredCreateResponse type is removed along with other cloudflared response types. github.com
• Removed ConfigurationUpdateParams.properties
  Use the normalize parameter instead of properties. github.com
• Removed ConfigurationUpdateResponse
  The ConfigurationUpdateResponse type is gone. github.com
• Removed DeploymentsSinglePage
  The DeploymentsSinglePage type is removed. github.com
• Removed status_message
  The status_message field is gone from all recipient response types. github.com
• Removed WorkersBindingKindTailConsumer
  The WorkersBindingKindTailConsumer type is gone everywhere it was used. github.com
• Renamed AppListResponse.UnionMember0
  Use SpectrumConfigAppConfig in place of AppListResponse.UnionMember0. github.com
• Renamed AppListResponse.UnionMember1
  Use SpectrumConfigPaygoAppConfig in place of AppListResponse.UnionMember1. github.com
• Renamed DeploymentsSinglePage
  Use DeploymentListResponsesV4PagePaginationArray in place of DeploymentsSinglePage. github.com
• Renamed PublicSchema
  Code referring to PublicSchema must use OldPublicSchema, and the name is reused by the consolidated schema type. github.com

And 16 more in this version.

5.0.0

717 breaking changes, first published September 2, 2025.

• Removed DeploymentParam
  DeploymentParam is removed and replaced by DeploymentCreateParams.Annotations for create operations. github.com
• Removed DeviceEnrollmentPermissionsApplication.footer_links
  footer_links, landing_page_design, scim_config and skip_app_launcher_login_page are removed from this application type. github.com
• Removed DNSAPI.DNSAnalyticsNominalMetric
  The DNSAPI.DNSAnalyticsNominalMetric type alias is removed. ByTime data metrics are now arrays of numbers. github.com
• Removed DNSAPI.DNSAnalyticsQuery
  The DNSAPI.DNSAnalyticsQuery interface is removed. Use the ByTime.Query type instead. github.com
• Removed Insights.create
  The Insights create method is gone along with its related types. Code calling it will fail. github.com
• Removed Insights.get
  The Insights get method is gone along with its related types. Code calling it will fail. github.com
• Removed KV.Namespace.beta
  The beta field is removed from the Namespace interface. Stop reading or setting it. github.com
• Removed ObjectListParams.limit
  The limit parameter is removed from object list params. Remove it from calls. github.com
• Removed radar.attacks.layer7.top.TopAttacksParams.magnitude
  The magnitude parameter is removed from TopAttacksParams. Remove it from calls. github.com
• Removed resourceGroups.list
  The page and per_page pagination parameters are removed from resource group list. Remove them from calls. github.com

And 707 more in this version.

Check your code

These are the changes. To see which of them reach your code, scan a public repository, or have your coding agent call check_code with your manifest or lockfile over MCP. The API reads every change in every version, not only the newest. On Team and up, a fix pull request opens for the changes that reach a connected repository. Nothing merges or deploys.