5.20.0 (2026-06-12)
Full Changelog: v5.19.1...v5.20.0
New Resources
- cloudflare_ai_search_namespace: Manage AI Search namespaces (faab405)
- cloudflare_custom_csr: Manage custom certificate signing requests (0c37d4f)
- cloudflare_dls_prefix_binding: Manage DLS regional service prefix bindings (faab405)
- cloudflare_flagship_app: Manage Flagship feature flag apps (2b149cf)
- cloudflare_flagship_flag: Manage Flagship feature flags (2b149cf)
- cloudflare_google_tag_gateway: Manage Google Tag Gateway (b4f6126)
- cloudflare_load_balancer_monitor_group: Manage load balancer monitor groups (faab405)
- cloudflare_oauth_client: Manage IAM OAuth clients (8af9cd0)
- cloudflare_origin_cloud_region: Manage origin cloud regions (v2 endpoints) (278c81f)
- cloudflare_secrets_store: Manage Secrets Store instances (7233baf)
- cloudflare_secrets_store_secret: Manage Secrets Store secrets (7233baf)
- cloudflare_share: Manage resource shares (d83b268)
- cloudflare_share_recipient: Manage share recipients (d83b268)
- cloudflare_share_resource: Manage shared resources (d83b268)
- cloudflare_zero_trust_device_deployment_groups: Manage Zero Trust device deployment groups (3de6e62)
- cloudflare_zero_trust_dlp_data_class: Manage DLP data classes (d8803bd)
- cloudflare_zero_trust_dlp_data_tag: Manage DLP data tags (d8803bd)
- cloudflare_zero_trust_dlp_data_tag_category: Manage DLP data tag categories (d8803bd)
- cloudflare_zero_trust_dlp_sensitivity_group: Manage DLP sensitivity groups (d8803bd)
- cloudflare_zero_trust_dlp_sensitivity_level: Manage DLP sensitivity levels (d8803bd)
- cloudflare_zero_trust_dlp_sensitivity_level_order: Manage DLP sensitivity level ordering (d8803bd)
- cloudflare_zero_trust_resource_library_application: Manage Zero Trust resource library applications (8f71612)
- cloudflare_zero_trust_resource_library_category: Manage Zero Trust resource library categories (8f71612)
- cloudflare_zero_trust_tunnel_warp_connector_config: Manage WARP connector tunnel configurations (faab405)
Features
- cache: add create (POST) method for smart_tiered_cache (26568ea)
- cache: update OPCR config to v2 endpoints (278c81f)
- dlp: promote classification Stainless config to main (d8803bd)
- dlp: add custom prompt topics endpoint (7732fd9)
- email_security_block_sender: state upgrader for v4 to v5 migration (bc22174)
- email_security_impersonation_registry: state upgrader for v4 to v5 migration (bc22174)
- email_security_trusted_domains: state upgrader for v4 to v5 migration (8f3ddad)
- snippets: add terraform id_property annotations for snippet and snippet_rules (1781d02)
- bump Go SDK to cloudflare-go v7 (6d752b6)
Bug Fixes
- account_member: missing upgrade path from v5.0-v5.15 (d5c2a93)
- authenticated_origin_pulls_settings: nil pointer panic (cf8099b)
- bot_management: restore content_bots_protection handling in model.go (d559753)
- dns_record: prevent FQDN normalization from swallowing name shortening changes (2131622)
- list: nullify empty nested objects to prevent inconsistent result after apply (7bcee4b)
- load_balancer_pool: accept early-v5 object-shape state at schema_version=0 (23050e1)
- load_balancer_pool: add UseStateForUnknown for load_shedding attribute to prevent drift (3fc31ee)
- r2_custom_domain: restore degraded-response handling in resource.go (b3d01a0)
- regional_hostname: update cloudflare-go imports from v6 to v7 (d4211c4)
- secrets_store: fix model/schema parity and guard acceptance tests (dde9b24)
- spectrum_application: accept early-v5 object-shape state at schema_version=0 (bdcaa79)
- worker: preserve observability.traces.propagation_policy across reads (458854e)
- worker: add propagation_policy to observability Defaults (c815f52)
- worker_version: restore handwritten D1 database_id handling (ed78cd0)
- workers_custom_domain: missing CertId field in state migration (17d852f)
- workers_script: restore annotations Read workaround stripped by codegen (d4f824f)
- zero_trust_access_identity_provider: change read_only from computed to optional (b760efe)
- zero_trust_access_identity_provider: add UseStateForUnknown to SAML-only config fields (451e078)
- zero_trust_access_identity_provider: use UseNonNullStateForUnknown on scim_config fields (55a8860)
- zero_trust_access_policy: populate account_id when migrating zone-scoped v4 state (513a91c)
- zero_trust_access_policy: missing common_names transform in migration (ce95d8c)
- gracefully handle nil pointer dereference when config has attributes_flat during migration (589384d)
- set initial schema version to 500 for all new resources (ef71ba4)
- update go.sum and fix RecipientNewParams field rename (931cb9f)
Refactors
- extract MoveState nil guard into shared helper (737caf9)