chore(deps): update dependency cloudflare to v5

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
cloudflare	==4.2.0 → ==5.6.0

---

Release Notes

cloudflare/cloudflare-python (cloudflare)

v5.6.0

Compare Source

Full Changelog: v5.5.0...v5.6.0

Breaking Changes

• accounts: The create() and get() methods have been removed from client.accounts.subscriptions. The SubscriptionCreateParams type is no longer available.
• acm: The CertificateAuthority type has been removed from cloudflare.types.acm.
• certificate_authorities: The HostnameAssociation type has been removed from cloudflare.types.certificate_authorities.
• cloudforce_one: The indicator_types sub-resource has been removed from client.cloudforce_one.threat_events. Use the new client.cloudforce_one.threat_events.indicators.types resource instead.
• hyperdrive: The pagination type for client.hyperdrive.configs.list() changed from SyncSinglePage to SyncV4PagePaginationArray. Code that relied on single-page iteration semantics may need adjustment.
• load_balancers: All methods on client.load_balancers now use a polymorphic /{account_or_zone}/{account_or_zone_id}/load_balancers endpoint pattern instead of the previous /zones/{zone_id}/load_balancers. Method signatures now accept either account_id or zone_id.
• moq: The rotate() method and TokenRotateResponse type have been removed from client.moq.relays.tokens. Use the new create(), list(), and delete() methods instead.
• mtls_certificates: The MTLSCertificate type has been replaced with MTLSCertificateGetResponse, MTLSCertificateListResponse, and MTLSCertificateDeleteResponse. The return types of list(), delete(), and get() have changed accordingly.
• custom_certificates: The Status type has been removed from cloudflare.types.custom_certificates.
• ssl: The Host, Status, and ValidationMethod types have been removed from cloudflare.types.ssl. The hosts parameter on client.ssl.certificate_packs.create() changed from SequenceNotStr[Host] to SequenceNotStr[str].
• zero_trust: The setup_flows sub-resource has been removed from client.zero_trust.casb.applications. The get() method endpoint changed from /accounts/{account_id}/one/applications/{slug} to /accounts/{account_id}/one/applications/{application_id}.

Features

• analytics_query: add analytics_query resource with summary(), timeseries(), and top_n() methods, plus data_security.content_findings and data_security.findings sub-resources (7245164)
• ai_audit: add client.ai_audit.robots resource with bulk_get() and get() methods (7245164)
• cloudforce_one: add extensive threat_events sub-resources: aggregate, graphql, graph, queries, relationships, indicators (with aggregate, types, by_dataset), tags (with categories, indicators), target_industries, categories, and datasets (7245164)
• magic_transit: add client.magic_transit.connectors.interrupts resource with create() and list() methods (7245164)
• moq: add create(), list(), and delete() methods to client.moq.relays.tokens (7245164)
• registrar_sandbox: add registrar_sandbox resource with check(), search(), and sub-resources for registrations, registration_status, and update_status (7245164)
• zero_trust: add client.zero_trust.casb.applications.auth_methods resource with list() method (7245164)
• zero_trust: add comprehensive CASB posture management: client.zero_trust.casb.posture with sub-resources for findings (list, export, ignore, unignore, tune/reset severity), finding_types, content, exports, remediations, and webhooks (7245164)

New Resources

AIAudit Robots (client.ai_audit.robots)

• bulk_get(*, zone_id, **params) -> Optional[RobotBulkGetResponse]
• get(*, zone_id, **params) -> Optional[RobotGetResponse]

New types:

from cloudflare.types.ai_audit import RobotBulkGetResponse, RobotGetResponse

MagicTransit Connector Interrupts (client.magic_transit.connectors.interrupts)

• create(connector_id, *, account_id, **params) -> InterruptCreateResponse
• list(connector_id, *, account_id) -> SyncSinglePage[InterruptListResponse]

New types:

from cloudflare.types.magic_transit.connectors import (
    InterruptCreateResponse,
    InterruptListResponse,
)

CASB Application Auth Methods (client.zero_trust.casb.applications.auth_methods)

• list(application_id, *, account_id) -> AuthMethodListResponse

New types:

from cloudflare.types.zero_trust.casb.applications import AuthMethodListResponse

MoQ Relay Tokens (client.moq.relays.tokens)

• create(relay_id, *, account_id, **params) -> Optional[TokenCreateResponse]
• list(relay_id, *, account_id) -> Optional[TokenListResponse]
• delete(jti, *, account_id, relay_id) -> TokenDeleteResponse

New types:

from cloudflare.types.moq.relays import (
    TokenCreateResponse,
    TokenListResponse,
    TokenDeleteResponse,
)

CloudforceOne ThreatEvents Sub-Resources (client.cloudforce_one.threat_events)

The following sub-resources were added under client.cloudforce_one.threat_events:

• aggregate
• graphql
• graph
• queries
• relationships
• indicators (with aggregate, types, by_dataset sub-resources)
• tags (with categories, indicators sub-resources)
• target_industries
• categories
• datasets

AnalyticsQuery (client.analytics_query)

Query analytics data across datasets with summary, timeseries, and top-N aggregations.

• summary(dataset, *, account_id, **params) -> AnalyticsQuerySummaryResponse
• timeseries(dataset, *, account_id, **params) -> AnalyticsQueryTimeseriesResponse
• top_n(dataset, *, account_id, **params) -> SyncSinglePage[AnalyticsQueryTopNResponse]

New types:

from cloudflare.types import (
    AnalyticsQuerySummaryResponse,
    AnalyticsQueryTimeseriesResponse,
    AnalyticsQueryTopNResponse,
)

DataSecurity ContentFindings (client.analytics_query.data_security.content_findings)

• top_n(*, account_id, **params) -> SyncSinglePage[ContentFindingTopNResponse]

DataSecurity Findings (client.analytics_query.data_security.findings)

• summary(*, account_id, **params) -> FindingSummaryResponse
• timeseries(*, account_id, **params) -> FindingTimeseriesResponse

RegistrarSandbox (client.registrar_sandbox)

Sandbox environment for domain registration operations.

• check(*, account_id, **params) -> RegistrarSandboxCheckResponse
• search(*, account_id, **params) -> RegistrarSandboxSearchResponse

Registrations (client.registrar_sandbox.registrations)

• create(*, account_id, **params) -> RegistrationCreateResponse
• list(*, account_id, **params) -> SyncCursorPagination[RegistrationListResponse]
• edit(domain_id, *, account_id, **params) -> RegistrationEditResponse
• get(domain_id, *, account_id) -> RegistrationGetResponse

RegistrationStatus (client.registrar_sandbox.registration_status)

• get(domain_name, *, account_id) -> RegistrationStatusGetResponse

New types:

from cloudflare.types.registrar_sandbox import RegistrationStatusGetResponse

UpdateStatus (client.registrar_sandbox.update_status)

• get(domain_name, *, account_id) -> UpdateStatusGetResponse

New types:

from cloudflare.types.registrar_sandbox import UpdateStatusGetResponse

CASB Posture (client.zero_trust.casb.posture)

Full CASB posture management with findings, remediation, and webhook support.

• posture.findings.list(*, account_id, **params) -> SyncV4PagePaginationArray[FindingListResponse]
• posture.findings.export(*, account_id, **params) -> Optional[FindingExportResponse]
• posture.findings.get(finding_id, *, account_id) -> Optional[FindingGetResponse]
• posture.findings.ignore(*, account_id, **params) -> Optional[FindingIgnoreResponse]
• posture.findings.unignore(*, account_id, **params) -> Optional[FindingUnignoreResponse]
• posture.findings.tune_severity(finding_id, *, account_id, **params) -> Optional[FindingTuneSeverityResponse]
• posture.findings.reset_severity(finding_id, *, account_id) -> Optional[FindingResetSeverityResponse]
• posture.findings.instances.list(*, account_id, **params) -> SyncV4PagePaginationArray[InstanceListResponse]
• posture.webhooks.create(*, account_id, **params) -> WebhookCreateResponse
• posture.webhooks.list(*, account_id) -> SyncSinglePage[WebhookListResponse]
• posture.remediations.jobs.create(*, account_id, **params) -> JobCreateResponse
• posture.remediations.jobs.list(*, account_id, **params) -> SyncV4PagePaginationArray[JobListResponse]

New types:

from cloudflare.types.zero_trust.casb.posture import (
    FindingListResponse,
    FindingExportResponse,
    FindingGetResponse,
    FindingIgnoreResponse,
    FindingUnignoreResponse,
    FindingTuneSeverityResponse,
    FindingResetSeverityResponse,
)

FindingTypes (client.zero_trust.casb.posture.finding_types)

• list(*, account_id, **params) -> SyncV4PagePaginationArray[FindingTypeListResponse]
• get(finding_type_id, *, account_id) -> Optional[FindingTypeGetResponse]

New types:

from cloudflare.types.zero_trust.casb.posture import (
    FindingTypeListResponse,
    FindingTypeGetResponse,
)

Content (client.zero_trust.casb.posture.content)

• list(*, account_id, **params) -> SyncV4PagePaginationArray[ContentListResponse]
• export(*, account_id, **params) -> Optional[ContentExportResponse]

New types:

from cloudflare.types.zero_trust.casb.posture import (
    ContentListResponse,
    ContentExportResponse,
)

Exports (client.zero_trust.casb.posture.exports)

• list(*, account_id, **params) -> SyncV4PagePaginationArray[ExportListResponse]
• get(id, *, account_id) -> Optional[ExportGetResponse]

New types:

from cloudflare.types.zero_trust.casb.posture import (
    ExportListResponse,
    ExportGetResponse,
)

v5.5.0

Compare Source

Full Changelog: v5.4.0...v5.5.0

Breaking Changes

• ssl: The recommendations sub-resource has been removed. client.ssl.recommendations.get() and the RecommendationGetResponse type are no longer available.
• email_routing: The list method has been removed from client.email_routing.rules. Only create, update, delete, and get remain. The RuleListParams type has been removed.
• zero_trust: The UserPolicyCheckGeo type has been removed from cloudflare.types.zero_trust.access.applications. The geo information is now inlined as UserIdentityGeo within UserPolicyCheckListResponse.
• zero_trust: The pagination type for client.zero_trust.devices.ip_profiles.list() changed from SyncSinglePage to SyncV4PagePaginationArray. Code that relied on single-page iteration semantics may need adjustment.
• aisearch: The SourceParamsWebCrawlerStoreOptions type and the store_options field on SourceParamsWebCrawler have been removed from instance create/update params and responses. The parse_type enum value "feed-rss" has been removed (only "sitemap" and "crawl" remain). The search_query field on InstanceSearchResponse and NamespaceSearchResponse changed from required str to Optional[str]. A new required query_kind field (Literal["text", "image", "multimodal"]) has been added to search responses.
• zero_trust: In Organization and related params, MfaSSHPivKeyRequirements has been renamed to MfaPivKeyRequirements, the mfa_ssh_piv_key_requirements field has been renamed to mfa_piv_key_requirements, and the allowed_authenticators enum value "ssh_piv_key" has been changed to "piv_key".

Features

• email_auth: add email_auth resource (43fb66a)
• moq: add moq resource (c409a18)
• logs: add log_explorer sub-resource with query, datasets, and available datasets (b8896ca)
• email_security: add bulk message operations to investigate (e96350d)
• aisearch: add multimodal support with image_url content parts and new @cf/qwen/qwen3-vl-embedding-2b embedding model (de12426)
• zero_trust: add Worker destination types (WorkerDestination, PreviewWorkerDestination, AllWorkersDestination, AllPreviewWorkersDestination) to Access applications and eager_redirect_cookie_setting field to self-hosted applications (de12426)
• magic_transit: add primary and site_id fields to connector create/edit params (de12426)
• rulesets: add Vary cache settings with ActionParametersVary, ActionParametersVaryDefault, and ActionParametersVaryHeaders types (de12426)
• cloudforce_one: threat_events.datasets.list() now accepts optional params (de12426)
• email_security: add expected_disposition param to investigate.move.create() and investigate.move.bulk() (de12426)
• email_routing: add support_subaddress field to Settings response type (de12426)
• zero_trust: add max_ttl_secs field to GatewayConfigurationSettings and new MaxTTL type to gateway Location for DNS TTL cap control (de12426)
• zero_trust: add GlobalAcceleration type to default and custom device policy settings (de12426)
• accounts: add category field to PermissionGroupGetResponse and PermissionGroupListResponse for account and user tokens (de12426)

New Resources

EmailAuth (client.email_auth)

DMARC report management and SPF inspection for email authentication.

DMARCReports (client.email_auth.dmarc_reports)

• edit(*, zone_id, **params) -> Optional[DMARCReportEditResponse]
• get(*, zone_id) -> Optional[DMARCReportGetResponse]

New types:

from cloudflare.types.email_auth import DMARCReportEditResponse, DMARCReportGetResponse

SPF Inspect (client.email_auth.spf.inspect)

• get(*, zone_id, **params) -> Optional[InspectGetResponse]

New types:

from cloudflare.types.email_auth.spf import InspectGetResponse

MoQ (client.moq)

Media over QUIC relay management.

Relays (client.moq.relays)

• create(*, account_id, **params) -> Optional[RelayCreateResponse]
• update(relay_id, *, account_id, **params) -> Optional[RelayUpdateResponse]
• list(*, account_id, **params) -> SyncSinglePage[RelayListResponse]
• delete(relay_id, *, account_id) -> object
• get(relay_id, *, account_id) -> Optional[RelayGetResponse]

New types:

from cloudflare.types.moq import (
    RelayCreateResponse,
    RelayUpdateResponse,
    RelayListResponse,
    RelayGetResponse,
)

Tokens (client.moq.relays.tokens)

• rotate(relay_id, *, account_id, **params) -> Optional[TokenRotateResponse]

New types:

from cloudflare.types.moq.relays import TokenRotateResponse

Log Explorer (client.logs.log_explorer)

SQL-based log querying and dataset management.

Query (client.logs.log_explorer.query)

• sql(body, *, account_id, zone_id, **params) -> SyncSinglePage[QuerySqlResponse]

New types:

from cloudflare.types.logs.log_explorer import QuerySqlResponse

Datasets (client.logs.log_explorer.datasets)

• create(*, account_id, zone_id, **params) -> Optional[Dataset]
• update(dataset_id, *, account_id, zone_id, **params) -> Optional[Dataset]
• list(*, account_id, zone_id, **params) -> SyncSinglePage[DatasetSummary]
• get(dataset_id, *, account_id, zone_id) -> Optional[Dataset]

Available (client.logs.log_explorer.datasets.available)

• list(*, account_id, zone_id) -> SyncSinglePage[AvailableDataset]

New types:

from cloudflare.types.logs.log_explorer import (
    Dataset,
    DatasetSummary,
    CreateRequest,
    UpdateRequest,
)
from cloudflare.types.logs.log_explorer.datasets import AvailableDataset, AvailableList

Email Security Investigate Bulk (client.email_security.investigate.bulk)

Bulk message movement and quarantine release operations.

• create(*, account_id, **params) -> BulkCreateResponse
• list(*, account_id, **params) -> SyncV4PagePaginationArray[BulkListResponse]
• delete(job_id, *, account_id) -> BulkDeleteResponse
• get(job_id, *, account_id) -> BulkGetResponse

Cancel (client.email_security.investigate.bulk.cancel)

• create(job_id, *, account_id) -> CancelCreateResponse

Messages (client.email_security.investigate.bulk.messages)

• list(job_id, *, account_id, **params) -> SyncV4PagePaginationArray[MessageListResponse]

New types:

from cloudflare.types.email_security.investigate import (
    BulkCreateResponse,
    BulkListResponse,
    BulkDeleteResponse,
    BulkGetResponse,
)
from cloudflare.types.email_security.investigate.bulk import (
    CancelCreateResponse,
    MessageListResponse,
)

Chores

• billing: update generated types and methods (de12426)
• pipelines: update generated types and methods (de12426)
• workers: update generated types and methods (de12426)

v5.4.0

Compare Source

Full Changelog: v5.3.0...v5.4.0

Features

• feat(ai_gateway): add custom_providers resource (b982ff3)
• feat(api): map ipsec_tunnels/psk, sites/app_policies and cf1_sites for magic-on-ramps (5d8e422)
• feat(ct_alerter): add CT alerting subscription endpoint mappings (5bb529c)
• feat(tenants): add tenants resource SDK mapping [PT-2567] (7677b4c)

Chores

• api: update composite API spec (2b0e738)
• api: update composite API spec (c7202c9)
• api: update composite API spec (f94e4de)
• api: update composite API spec (656f973)
• api: update composite API spec (05e802d)
• api: update composite API spec (3817b57)
• api: update composite API spec (3e26c73)
• api: update composite API spec (0ff89f9)
• api: update composite API spec (eeec39a)
• api: update composite API spec (45260b9)
• api: update composite API spec (72eb205)
• internal: codegen related update (86bdf98)

v5.3.0

Compare Source

Full Changelog: v5.3.0...v5.4.0

Features

• feat(ai_gateway): add custom_providers resource (b982ff3)
• feat(api): map ipsec_tunnels/psk, sites/app_policies and cf1_sites for magic-on-ramps (5d8e422)
• feat(ct_alerter): add CT alerting subscription endpoint mappings (5bb529c)
• feat(tenants): add tenants resource SDK mapping [PT-2567] (7677b4c)

Chores

• api: update composite API spec (2b0e738)
• api: update composite API spec (c7202c9)
• api: update composite API spec (f94e4de)
• api: update composite API spec (656f973)
• api: update composite API spec (05e802d)
• api: update composite API spec (3817b57)
• api: update composite API spec (3e26c73)
• api: update composite API spec (0ff89f9)
• api: update composite API spec (eeec39a)
• api: update composite API spec (45260b9)
• api: update composite API spec (72eb205)
• internal: codegen related update (86bdf98)

v5.2.0

Compare Source

Full Changelog: v5.2.0...v5.3.0

Features

• ai_audit: add ai_audit resource (d0efa14)
• billing: update codegen output (7e3d4f7)
• chore: skip failing Go SDK tests for workers bulk secret update (c705bbb)
• custom_csrs: add custom_csrs resource (1a65a8d)
• dls: add dls resource (a7fcbad)
• email_security: update codegen output (872b610)
• feat: add custom_csrs Stainless config (zone + account) (235ed9b)
• feat(access): add idp_federation_grants resource (4b724b0)
• feat(ai_audit): add robots route mappings for APIX-785 (5ea6509)
• feat(api): add csam_scanner Stainless resource (TMD-1300, LRSP-1810) (2cf53e2)
• feat(api): add tenant custom nameservers resource mapping (1260f11)
• feat(api): sync workflows API endpoints (2 new) (ab25412)
• feat(dex): add device ISPs endpoint mapping (fb51578)
• feat(dlp): add custom prompt topics endpoint [production] (116abcb)
• feat(email_security): add url_ignore_patterns and sending_domain_restrictions endpoints (a038d94)
• feat(oauth): Add SDK support for oauth clients and scopes (82cc646)
• feat(resource_sharing): add Terraform resource definitions for shares (b9d7b79)
• feat(resource_tagging): add summary endpoint mapping (65beeea)
• feat(snippets): add terraform id_property annotations for snippet and snippet_rules (ce2f012)
• feat(workers): adds Workers > Observability > Live Tail resources (6a13d99)
• feat(workers): adds Workers > Observability > Shared Queries resources (42f37a3)
• fix(dns): Exclude dns_records From combineCloudflareResources in Prod Config (APIX-981) (7e5da92)
• organizations: update codegen output (bbaf331)
• realtime_kit: update codegen output (e9b1086)
• secrets_store: update codegen output (c1c6173)
• workers: update codegen output (5925d38)
• zero_trust: update codegen output (fc596ad)

Bug Fixes

• addressing: restore regional_hostnames sub-resource (4d04810)

Chores

• acm: update codegen output (eda74c9)
• addressing: update codegen output (1d760ad)
• aisearch: update codegen output (d4fd61d)
• ai: update codegen output (b2b40bb)
• api_gateway: update codegen output (1ed70ec)
• api: update composite API spec (df4bf20)
• api: update composite API spec (f88efed)
• api: update composite API spec (615120d)
• api: update composite API spec (ea8bb23)
• api: update composite API spec (6bdc0f8)
• api: update composite API spec (c4f868e)
• api: update composite API spec (09ece76)
• api: update composite API spec (c0d2ad2)
• api: update composite API spec (586a864)
• api: update composite API spec (fae1b3c)
• api: update composite API spec (6cd86a9)
• api: update composite API spec (b89e415)
• api: update composite API spec (5fe06d2)
• api: update composite API spec (248ef29)
• api: update composite API spec (1014d23)
• api: update composite API spec (2efef30)
• api: update composite API spec (ec06854)
• api: update composite API spec (dbdd926)
• api: update composite API spec (58e1844)
• api: update composite API spec (f314578)
• api: update composite API spec (0ee1c04)
• api: update composite API spec (a95f2b1)
• api: update composite API spec (983a618)
• api: update composite API spec (f82cfe9)
• api: update composite API spec (e572e2e)
• browser_rendering: update codegen output (7c891e8)
• certificate_authorities: update codegen output (f5629c2)
• client_certificates: update codegen output (c014ae3)
• cloudforce_one: update codegen output (a461a15)
• custom_certificates: update codegen output (820bf1f)
• dns_firewall: update codegen output (ee98647)
• email_sending: update codegen output (2775ec1)
• hostnames: update codegen output (a295ea7)
• images: update codegen output (dcd6c23)
• intel: update codegen output (9e20f98)
• keyless_certificates: update codegen output (2e22a13)
• kv: update codegen output (1c61523)
• magic_transit: update codegen output (e6f19df)
• origin_ca_certificates: update codegen output (2db4fd8)
• pages: update codegen output (18e69ef)
• pipelines: update codegen output (54d77a0)
• radar: update codegen output (4ecdcba)
• remove files deleted on staging-next (923e0c4)
• resource_sharing: update codegen output (fb10919)
• snippets: update codegen output (2fda51f)
• spectrum: update codegen output (2482db5)
• ssl: update codegen output (112e002)
• sync shared codegen files from staging-next (82ca15e)
• workers_for_platforms: update codegen output (27f97c7)
• workflows: update codegen output (8fdc5dd)
• zones: update codegen output (6add91d)

v5.1.0

Compare Source

Full Changelog: v5.1.0...v5.2.0

Features

• ai_gateway: update generated types and methods (4923bbb)
• ai_security: add ai_security resource (29cb585)
• cache: update generated types and methods (b7ae845)
• ddos_protection: add ddos_protection resource (87f7e95)
• load_balancers: update generated types and methods (bb6815d)
• r2: update generated types and methods (72d2149)
• radar: update generated types and methods (fb2f0c4)
• secrets_store: update generated types and methods (636414f)
• workers_for_platforms: update generated types and methods (7bfed3c)
• workers: update generated types and methods (0bdb685)
• zero_trust: update generated types and methods (aeff7d5)

Chores

• acm: update generated types and methods (8b03b3d)
• ai: update generated types and methods (2f6bdf7)
• api_gateway: update generated types and methods (5b79a34)
• cloudforce_one: update generated types and methods (fc72368)
• d1: update generated types and methods (6a05b68)
• email_security: update generated types and methods (c89d1ce)
• intel: update generated types and methods (b097e5d)
• logpush: update generated types and methods (f26713b)
• resource_sharing: update generated types and methods (792bf24)
• restore version (9f99d4b)
• sync shared codegen files from staging-next (fbb556c)

v5.0.0

Compare Source

Full Changelog: v5.0.0...v5.1.0

Features

• security_center: add audit_logs, classification, and context sub-resources to insights (ed7d261)
• zero_trust: add deployment_groups sub-resource to devices (7121a55)
• aisearch: update generated types and methods (54b87759)
• email_security: update generated types and methods (23a979df)
• radar: update generated types and methods (b48274ef)
• zones: update generated types and methods (f0a54099)

Security Center - New Insights Sub-Resources

AuditLogs (client.security_center.insights.audit_logs)

• list(*, account_id, zone_id, **params) -> SyncCursorPagination[AuditLogListResponse]
• list_by_insight(issue_id, *, account_id, zone_id, **params) -> SyncCursorPagination[AuditLogListByInsightResponse]

New types:

from cloudflare.types.security_center.insights import (
    AuditLogListResponse,
    AuditLogListByInsightResponse,
)

Classification (client.security_center.insights.classification)

• update(issue_id, *, account_id, zone_id, **params) -> ClassificationUpdateResponse

New types:

from cloudflare.types.security_center.insights import ClassificationUpdateResponse

Context (client.security_center.insights.context)

• get(issue_id, *, account_id) -> Optional[ContextGetResponse]

New types:

from cloudflare.types.security_center.insights import ContextGetResponse

Zero Trust - Device Deployment Groups

New sub-resource client.zero_trust.devices.deployment_groups:

• create(*, account_id, **params) -> DeploymentGroup
• list(*, account_id, **params) -> SyncV4PagePaginationArray[DeploymentGroup]
• delete(group_id, *, account_id) -> DeploymentGroupDeleteResponse
• edit(group_id, *, account_id, **params) -> DeploymentGroup
• get(group_id, *, account_id) -> DeploymentGroup

New types:

from cloudflare.types.zero_trust.devices import DeploymentGroup, DeploymentGroupDeleteResponse

v4.3.1

Compare Source

Full Changelog: v4.3.1...v5.0.0

This is a major release of the Cloudflare Python SDK. It drops support for
Python 3.8, adds 11 new API services, introduces optional aiohttp backend
support for improved async concurrency, and includes hundreds of type and
method updates across the entire API surface.

Please review the breaking changes below before upgrading. A migration guide
is available at docs/migration-guides/v5.0.0-migration-guide.md.

---

Breaking Changes

• Python 3.8 is no longer supported. The minimum required version is now Python 3.9. (pyproject.toml)
• typing-extensions minimum version bumped from >=4.10 to >=4.14.

Additionally, the following resources have breaking changes:

• abusereports
• acm.totaltls
• apigateway.configurations
• cloudforceone.threatevents
• d1.database
• intel.indicatorfeeds
• logpush.edge
• origintlsclientauth.hostnames
• queues.consumers
• radar.bgp
• rulesets.rules
• schemavalidation.schemas
• snippets
• zerotrust.dlp
• zerotrust.networks

See the v5.0.0 Migration Guide for upgrade instructions and resource-specific guidance.

---

Features

• aiohttp backend support: The async client now supports an optional aiohttp HTTP backend for improved concurrency performance. Install with pip install cloudflare[aiohttp] and use DefaultAioHttpClient() as the http_client parameter.
• Python 3.13 and 3.14 support added as tested classifiers.

New Services

The following top-level resources are new in this release:

• AISearch (aisearch): AI-powered search capabilities
• Connectivity (connectivity): Connectivity testing and diagnostics
• EmailSending (email_sending): Email send and send_raw endpoints
• Fraud (fraud): Fraud detection and prevention
• GoogleTagGateway (google_tag_gateway): Google Tag Gateway management
• Organizations (organizations): Organization audit logs and management
• R2DataCatalog (r2_data_catalog): R2 Data Catalog operations
• RealtimeKit (realtime_kit): Realtime communication (Calls/TURN)
• ResourceTagging (resource_tagging): Resource tagging and labeling
• TokenValidation (token_validation): Token validation configuration and rules
• VulnerabilityScanner (vulnerability_scanner): Vulnerability scanning, credential sets, and target environments

New Endpoints on Existing Services

• accounts: update generated types and methods
• api_gateway: add labels endpoints (WAM-1196)
• billing: add billable usage PayGo endpoint
• brand_protection: add v2 endpoints
• browser_rendering: add devtools methods (BRAPI-1051)
• cache: add origin cloud regions resource
• custom_origin_trust_store: enable custom origin trust store
• dns: add dns_records/usage endpoints (DNS-12466)
• email_security: add phishguard reports endpoint
• iam: add user_groups and user_group_members resources
• radar: add Botnet Threat Feed and Post-Quantum endpoints
• workers: add Observability Destinations resources (WO-989)
• zero_trust: add Access Users endpoint (AUTH-7071), DEX rules, Device IP Profile, Device Subnet, WARP Connector connections and failover endpoints, WARP Subnet endpoints, Gateway PAC files (GIN-1439)
• zones: add zone environments endpoints

Updated Services

Nearly every existing service received type and method updates through
composite API spec refreshes. Notable updates include:

• email_security: remove deprecated type definitions
• radar: restructured to use per-resource api.md sub-files (no client path changes)
• workers_for_platforms: update generated types
• r2: update generated types
• fraud: update generated types and methods

Bug Fixes

• _models: add polymorphic_serialization parameter to model_dump overrides (342b5a8)
• pipelines: add BaseModel base to response SchemaFieldStruct/SchemaFieldList stubs (d33af8b)
• dlp: add missing model_rebuild/update_forward_refs for SharedEntryCustomEntry classes (25ec10c)
• workers: make RunQueryParametersNeedleValue a BaseModel with arbitrary_types_allowed (6b7efbc)
• stream: remove duplicate notification_url field in webhook response types (fc9fb2f)
• resolve pre-existing codegen type errors (fed88d6)
• radar: fix type: ignore[call-arg] placement for mypy compatibility (fac9404)
• fix broken reference for the queues consumer model (3f5cf39)

Chores

• build: migrate from rye to uv for project management (2f283c2)
• ci: pin single Python version and pydantic v2 for test runs (86676bc)
• typing: add mypy configuration with strict mode (pyproject.toml)
• api: 80+ composite API spec updates across the release cycle

Documentation

• add Authentication section to README (70d934a)
• add aiohttp backend usage instructions to README
• add MCP server integration badges (Cursor, VS Code)

v4.3.0

Compare Source

Full Changelog: v4.3.0...v4.3.1

Bug Fixes

• api: Update zone subscription paths (8917497)

Chores

• internal: update conftest.py (c8ae1c4)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.