7.5.0 (2026-06-10)

Full Changelog: v7.4.0...v7.5.0

This release adds six new top-level services, extensive DLP classification and data tagging APIs, OAuth client management, and regional hostname support. It includes two breaking return-type changes in realtime_kit. Please ensure you read through the list of changes below before upgrading.

---

Breaking Changes

Realtime Kit - GenerateSummaryOfTranscripts Return Type Changed

SessionService.GenerateSummaryOfTranscripts() now returns (*SessionGenerateSummaryOfTranscriptsResponse, error) instead of just error. Callers must capture the new response value.

Realtime Kit - StartTrackRecording Return Type Changed

RecordingService.StartTrackRecording() now returns (*RecordingStartTrackRecordingResponse, error) instead of just error. Callers must capture the new response value.

---

Features

Flagship (client.Flagship)

• NEW SERVICE: Feature flag management
  • client.Flagship.Apps.New() - Create a Flagship app
  • client.Flagship.Apps.Update() - Update a Flagship app
  • client.Flagship.Apps.List() - List Flagship apps
  • client.Flagship.Apps.Delete() - Delete a Flagship app
  • client.Flagship.Apps.Get() - Get a Flagship app
  • client.Flagship.Apps.Flags.New() - Create a feature flag
  • client.Flagship.Apps.Flags.Update() - Update a feature flag
  • client.Flagship.Apps.Flags.List() - List feature flags
  • client.Flagship.Apps.Flags.Delete() - Delete a feature flag
  • client.Flagship.Apps.Flags.Get() - Get a feature flag
  • client.Flagship.Apps.Flags.Changelog.List() - List flag changelog entries
  • client.Flagship.Apps.Evaluate.Get() - Evaluate flags for an app

TenantCustomNameservers (client.TenantCustomNameservers)

• NEW SERVICE: Tenant-scoped custom nameserver management
  • client.TenantCustomNameservers.New() - Create a tenant custom nameserver
  • client.TenantCustomNameservers.Delete() - Delete a tenant custom nameserver
  • client.TenantCustomNameservers.Get() - List tenant custom nameservers

CsamScanner (client.CsamScanner)

• NEW SERVICE: CSAM scanner third-party settings
  • client.CsamScanner.Edit() - Update CSAM scanner settings for a zone
  • client.CsamScanner.Get() - Get CSAM scanner settings for a zone

OriginTLSComplianceModes (client.OriginTLSComplianceModes)

• NEW SERVICE: Origin TLS compliance mode configuration (service stub)

SSL (client.SSL)

• New AutoOriginTLSKex sub-resource (service stub)

IAM (client.IAM)

• OAuthClients - Full OAuth client lifecycle management
  • client.IAM.OAuthClients.New() - Create an OAuth client
  • client.IAM.OAuthClients.Update() - Update an OAuth client
  • client.IAM.OAuthClients.List() - List OAuth clients
  • client.IAM.OAuthClients.Delete() - Delete an OAuth client
  • client.IAM.OAuthClients.Get() - Get an OAuth client
  • client.IAM.OAuthClients.RotateSecret() - Rotate OAuth client secret
  • client.IAM.OAuthClients.DeleteRotatedSecret() - Delete rotated secret
• OAuthScopes - OAuth scope discovery
  • client.IAM.OAuthScopes.List() - List available OAuth scopes

Zero Trust - DLP (client.ZeroTrust.DLP)

• CustomPromptTopics - Custom prompt topic management (CRUD)
  • client.ZeroTrust.DLP.CustomPromptTopics.New(), Update(), List(), Delete(), Get()
• SensitivityGroups - Sensitivity group management (CRUD)
  • client.ZeroTrust.DLP.SensitivityGroups.New(), Update(), List(), Delete(), Get()
  • Levels - Sensitivity level management within groups (CRUD)
    • client.ZeroTrust.DLP.SensitivityGroups.Levels.New(), Update(), List(), Delete(), Get()
    • Order - Level ordering
      • client.ZeroTrust.DLP.SensitivityGroups.Levels.Order.Update(), Get()
• DataTagCategories - Data tag category management (CRUD)
  • client.ZeroTrust.DLP.DataTagCategories.New(), Update(), List(), Delete(), Get()
  • DataTags - Data tags within categories (CRUD)
    • client.ZeroTrust.DLP.DataTagCategories.DataTags.New(), Update(), List(), Delete(), Get()
• DataClasses - Data class management (CRUD)
  • client.ZeroTrust.DLP.DataClasses.New(), Update(), List(), Delete(), Get()

Zero Trust - Access (client.ZeroTrust.Access)

• IdPFederationGrants - Identity provider federation grant management
  • client.ZeroTrust.Access.IdPFederationGrants.New() - Create a federation grant
  • client.ZeroTrust.Access.IdPFederationGrants.Update() - Update a federation grant
  • client.ZeroTrust.Access.IdPFederationGrants.List() - List federation grants
  • client.ZeroTrust.Access.IdPFederationGrants.Delete() - Delete a federation grant
  • client.ZeroTrust.Access.IdPFederationGrants.Get() - Get a federation grant

Zero Trust - DEX (client.ZeroTrust.DEX)

• Devices.ISPs - Device ISP lookup
  • client.ZeroTrust.DEX.Devices.ISPs.List() - List ISPs for a device

Zero Trust - Tunnels (client.ZeroTrust.Tunnels)

• WARPConnector.Configurations - WARP connector tunnel configuration
  • client.ZeroTrust.Tunnels.WARPConnector.Configurations.Update() - Update tunnel configuration
  • client.ZeroTrust.Tunnels.WARPConnector.Configurations.Get() - Get tunnel configuration

Addressing (client.Addressing)

• RegionalHostnames - Regional hostname management for Data Localization
  • client.Addressing.RegionalHostnames.New() - Create a regional hostname
  • client.Addressing.RegionalHostnames.List() - List regional hostnames
  • client.Addressing.RegionalHostnames.Delete() - Delete a regional hostname
  • client.Addressing.RegionalHostnames.Edit() - Update a regional hostname's region
  • client.Addressing.RegionalHostnames.Get() - Get a regional hostname
  • client.Addressing.RegionalHostnames.Regions.List() - List available DLS regions

DNS (client.DNS)

• Usage.Zone - Zone-level DNS record usage
  • client.DNS.Usage.Zone.Get() - Get DNS record usage for a zone
• Usage.Account - Account-level DNS record usage
  • client.DNS.Usage.Account.Get() - Get DNS record usage for an account

Resource Sharing (client.ResourceSharing)

• client.ResourceSharing.Resources.Update() - Update a shared resource
• client.ResourceSharing.Resources.Delete() - Delete a shared resource
• client.ResourceSharing.Resources.Get() - Get a shared resource

Workflows (client.Workflows)

• client.Workflows.Instances.Step() - Get step details for a workflow instance
• client.Workflows.Versions.Graph() - Get the version graph for a workflow

ResourceTagging (client.ResourceTagging)

• New Summary sub-resource added (service stub)

Realtime Kit (client.RealtimeKit)

• GenerateSummaryOfTranscripts() now returns a typed SessionGenerateSummaryOfTranscriptsResponse
• StartTrackRecording() now returns a typed RecordingStartTrackRecordingResponse

Codegen Updates

Type and field updates across: ai_gateway, billing, browser_rendering, d1, dns_firewall, intel, magic_transit, organizations, r2, realtime_kit, zero_trust

---

Deprecations

None in this release.

Bug Fixes

• Zero Trust: Fixed codegen test referencing response-only field IsSharedOAuthCallbackEnabled in MCP portal params