Cloudflare breaking change: v7.0.0
What changed
Major release: named path parameters (232 methods), Id->ID renames, web fetch types, removed helpers and import paths
From the upstream announcement:
7.0.0 (2026-07-09) Full Changelog: v6.5.0...v7.0.0 This is a major release with significant breaking changes to the SDK internals and API surface. The SDK now uses the builtin Web fetch API, has zero runtime dependencies, and adopts a new parameter convention for methods with multiple path parameters. A migration CLI is included to help automate code updates. Please read through the breaking changes below and the Migration Guide before upgrading. You can also run the automated migration tool: npx cloudflare migrate ./your/src/folders Known limitations of the migration tool Not idempotent -- running it a second time on already-migrated code will produce incorrect output. Run it once only. Partial migrations -- if you have manually updated some call sites to v7 style before running the tool, those call sites may be incorrectly transformed. Review the output diff carefully before committing […]
Who is affected
Split the mend into two grades.
To find out whether your repo is hit — file and line number, no code leaving your machine:
npx mendapi scan --repo .
How to fix it
mendapi ships a deterministic migration pack for this change (cloudflare-typescript-v7-deterministic-renames). Preview the patch locally (dry-run is the default; nothing is modified without --apply):
npx mendapi fix --repo . --migration cloudflare-typescript-v7-deterministic-renames
The pack is idempotent, gold-regression tested, and safe on partially migrated code.
What the migration does:
Split the mend into two grades. Deterministic grade (regex-pack candidate): the 11 Id->ID method renames on vectorize/realtimeKit member chains, the 4 DEXTest type renames to SchemaHTTP/SchemaHTTPS, import rewrites from cloudflare/core (APIClient -> BaseCloudflare from cloudflare/client) and from cloudflare/src/ to cloudflare/*, and fileFromPath call sites to fs.createReadStream. Signature grade (AST track): the 232 multi-path-parameter methods where every path parameter except the last moves into the options object as a snake_case key, plus asResponse()/withResponse() body consumers switching from node-fetch streams to Readable.fromWeb. Our packs must stay idempotent and safe on partially migrated code — exactly the two documented failure modes of the upstream migration CLI, which is the differentiation evidence recorded here.
Before:
import { APIClient } from 'cloudflare/core';
await client.vectorize.indexes.getByIds(indexName, { ids, account_id });
After:
import { BaseCloudflare } from 'cloudflare/client';
await client.vectorize.indexes.getByIDs(indexName, { ids, account_id });
Detected and tracked by mendapi — Dependabot for every API you depend on. Scans run locally; your code never leaves your machine.
Related
- All monitored providers — live change counts for cloudflare and 19 others.
- Migration pack catalog — every deterministic fix mendapi ships.
- Getting started — scan your repo in 30 seconds, no code leaves your machine.