Cloudflare API breaking changes (2025–2026): complete tracker and fixes
cloudflare 11 breaking / deprecation entries 2025–2026
Cloudflare ships API and SDK changes continuously. Most are additive — but the ones that are not can silently break integrations that worked yesterday. This page is the complete, continuously regenerated record of every Cloudflare breaking change and deprecation in the mendapi change database: 11 entries (9 breaking, 2 deprecation), each linked to its upstream source and, where possible, to a concrete fix.
How to read this page
Every entry carries a fixability verdict from the mendapi adjudication pipeline: code-fixable means a mechanical code change repairs the break (5 entries); not code-fixable means the change requires a business decision, credential provisioning, or upstream action that no codemod can produce (6 entries). Entries marked auto-fix pack have a deterministic, gold-tested migration pack that mendapi fix can apply locally.
Am I affected?
Reading a changelog tells you what changed — not whether your code uses the affected surface. The mendapi scanner answers that locally, in about 30 seconds, without any code leaving your machine:
npx mendapi scan # -> N findings: file, line, provider, confidence mendapi deps --match # -> which of the changes below actually hit your endpoints
See Getting Started for the full workflow and the security model for why zero code upload is the default and only mode.
Complete Cloudflare breaking change timeline
| Date | Change | Ref |
|---|---|---|
| 2026-07-21 | Cloudflare Fundamentals - Account Role API deprecated deprecation code-fixable auto-fix pack |
source |
| 2026-07-20 | Billing, Workers - Budget alerts now on by default for Pay-as-you-go accounts breaking not code-fixable |
source |
| 2026-07-20 | Access - Browser-based login for plaintext HTTP private applications breaking not code-fixable |
source |
| 2026-07-15 | KV - Deprecate legacy Workers KV namespace API routes deprecation code-fixable auto-fix pack |
source |
| 2026-07-13 | R2 - R2 Data Catalog now supports read-only API tokens breaking not code-fixable |
source |
| 2026-07-08 | v7.0.0 breaking code-fixable auto-fix pack |
source |
| 2026-06-23 | v6.5.0 breaking not code-fixable |
source |
| 2026-04-30 | v6.0.0 breaking code-fixable |
source |
| 2026-04-15 | v6.0.0-beta.2 breaking not code-fixable |
source |
| 2026-01-20 | v6.0.0-beta.1 breaking not code-fixable |
source |
| 2025-10-02 | v5.2.0 breaking code-fixable |
source |
Automated migration packs for Cloudflare
mendapi ships 4 deterministic migration packs for Cloudflare — verified, idempotent codemods you can apply locally with mendapi fix. Full details in the pack catalog.
cloudflare-kv-legacy-routes— Cloudflare Workers KV legacy namespace routes -> storage/kv routes (upstream reference)cloudflare-typescript-v7-deterministic-renames— cloudflare-typescript v7.0.0: Id->ID method renames, DEXTest type renames, import-path moves, fileFromPath removal (upstream reference)cloudflare-typescript-v7-named-path-params— cloudflare-typescript v7.0.0: intermediate path parameters move into the options object (named path parameters) (upstream reference)cloudflare-account-roles-to-permission-groups— Cloudflare Account Roles API -> Permission Groups API (URL move + meta.label read remap) (upstream reference)
Monitoring Cloudflare going forward
This page is regenerated from the change database, which is fed by release feeds, changelog capture and OpenAPI spec diffing — so it does not depend on Cloudflare writing a perfect changelog. mendapi monitors 53543 change records across 20 providers; hosted plans watch your repos continuously and open fix PRs when a change lands. See pricing.
Related
- All breaking-change reports — per-change deep dives with migration guides.
- All monitored providers — live change counts.
- Migration pack catalog — every deterministic fix mendapi ships.