cloudflare/cloudflare-typescript v6.2.0

v6.2.0

Repository: cloudflare/cloudflare-typescript

Tag: v6.2.0

Published: 2026-05-14T23:11:08Z

Prerelease: no

Release notes:

6.2.0 (2026-05-14)

Full Changelog: v6.1.0...v6.2.0

Features

New Resources

• api: add DDoS Protection resource with Advanced TCP Protection endpoints -- allowlist (CRUD + bulk delete), prefixes (CRUD + bulk create/delete), syn-protection filters/rules (CRUD + bulk delete), tcp-flow-protection filters/rules (CRUD + bulk delete), status (edit/get) (0cd6242)
• api: add AI Security resource with settings (update/get) and custom topics (update/get) endpoints (4959946)

New Sub-Resources

• ai-gateway: add billing sub-resource -- credit balance, invoice history, invoice preview, usage history, spending limit (create/delete/get), topup config (create/delete/get), topup (create/status) (6f4c052)
• ai-gateway: add guardrails configuration to all AI Gateway response and param types with prompt/response safety classification (P1, S1-S13 categories, FLAG/BLOCK actions) (6f4c052)
• ai-gateway: add is_valid field to dynamic routing response types (6f4c052)
• load-balancers: add monitor group references sub-resource (get) (00f63c7)
• radar: add BGP IPs top ASes sub-resource (9af4cde)
• radar: add BGP RPKI ROAs timeseries sub-resource (9af4cde)
• zero-trust: add resource library sub-resource -- applications (create/update/list/delete/get) and categories (list) (5e7609f)

New Fields and Parameters

• cloudforce-one: add taxii format option for threat event exports (1ff832a)
• d1: add read_replication configuration param to DatabaseCreateParams with mode: 'auto' | 'disabled' (450e0f0)
• email-security: add smtp_helo_server_ip, smtp_previous_hop_ip, x_originating_ip response fields; add delivery_status filter param (083fe7f)
• intel: add latest_upload_error field to indicator feed responses (a612880)
• radar: add apiTraffic filter param (API | NON_API) to HTTP summary, timeseries groups, and top endpoints (c3a2fb0)
• resource-sharing: add idp-federation-grant sharing type; add tag query param for filtering shares by key/value pairs (fd7d870)
• secrets-store: add force query param to store delete for cascade-deleting secrets (e046da9)
• url-scanner: add mpp (Malicious Payment Page) detection to commerce scan results with evidence, findings, request/response details (19ab611)
• workflows: add sensitive: 'output' option to step configuration for redacting step output from logs (069930b)
• zero-trust: add custom_prompt_topic DLP entry type with upload_status, profiles fields across DLP entry and profile types (5e7609f)
• zero-trust: add deprecated deviceRegistration field to fleet status responses (use registrationId instead) (5e7609f)
• zones: add total_pages field to zone listing pagination metadata (1c444a3)

Chores

• acm: update custom origin trust store documentation (root CA only, no intermediate/leaf) (cf1329e)
• ai-gateway: add page and per_page params to dynamic routing list (6f4c052)
• ci: restore breaking change detection and semgrep timeout (02f41cb)
• d1: update read replication mode documentation (450e0f0)
• intel: add documentation for rejected category IDs (169, 177) in indicator feed update params (a612880)
• aisearch: improve content selection and custom headers documentation for crawl instance config (f282d9b)
• radar: update post-quantum TLS support response documentation (c3a2fb0)

Breaking Changes

• load-balancers: id field removed from MonitorGroupCreateParams, MonitorGroupUpdateParams, and MonitorGroupEditParams. Code passing id in these params will fail type-check.
• radar: IQITimeseriesGroupsResponse.Serie0 replaced named fields p25, p50, p75 with an index signature [k: string]: Array | undefined. Code accessing result.serie_0.p25 will now receive string[] | undefined instead of string[], and field names are no longer auto-completed by TypeScript.
• radar: TLSSupportResponse added new required field bugs: TLSSupportResponse.Bugs with hrrFailure, splitClientHello, and unknownKeyshare booleans. Code constructing this response type without bugs will fail type-check.
• user: UserEditResponse.id and UserGetResponse.id changed from optional…