fix(deps): update module github.com/cloudflare/cloudflare-go/v6 to v7

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/cloudflare/cloudflare-go/v6	v6.10.0 → v7.13.0

---

Release Notes

cloudflare/cloudflare-go (github.com/cloudflare/cloudflare-go/v6)

v7.13.0

Compare Source

7.13.0 (2026-10-09)

Breaking Changes

See the v7.13.0 Migration Guide for before/after code examples
and actions needed for each change.

• registrar: Registrar.Domains sub-resource removed. Domains.Update(), Domains.List(), and Domains.Get()
  are removed, along with DomainService, its constructor, and the associated response and parameter types.
  These endpoints reached end of life on September 27, 2026. Use Registrar.Registrations instead.
• zero_trust: Access.Users.LastSeenIdentity.Get() return type changed from *Identity to
  *AccessUserLastSeenIdentityGetResponse. Identity and its nested DeviceSession, DevicePosture,
  DevicePostureCheck, Geo, IdP, and MTLSAuth types are renamed with the
  AccessUserLastSeenIdentityGetResponse prefix. The new response type also adds a Passkeys field.

Features

• NEW SERVICE: k2 -- K2 stream management (/accounts/{account_id}/k2/streams)
  • Streams.New(), Update(), List(), Delete(), Get()
  • Streams.Subscriptions.List()
• NEW SERVICE: monetization -- Zone monetization rule management (/zones/{zone_id}/monetization/rules)
  • Rules.Update(), Delete(), DeleteRule(), EditRule(), Get(), GetRule()
• api_gateway: add Discovery.Operations.Edit() method
  (PATCH /zones/{zone_id}/api_gateway/discovery/operations/{discovery_id})
• kv: add NamespaceMode and NamespaceNewParamsMode types
• workers: add Beta.Workers.Versions.Profile() method
  (POST /accounts/{account_id}/workers/workers/{worker_id}/versions/{version_id}/profile)
• zero_trust: add DestinationOverride and DestinationOverrideParam types to Access.Applications

v7.12.0

Compare Source

7.12.0 (2026-10-01)

Full Changelog: v7.11.0...v7.12.0

Breaking Changes

See the v7.12.0 Migration Guide for before/after code examples and actions needed for each change.

• addressing: AddressMaps.Zones.Update() and AddressMaps.Zones.Delete() removed. The Zones sub-resource is still wired on AddressMaps but now exposes no methods. 16 exported types are removed, including AddressMapZoneUpdateResponse, AddressMapZoneDeleteResponse, AddressMapZoneUpdateParams, AddressMapZoneDeleteParams, and their nested Error, ErrorsSource, Message, MessagesSource, ResultInfo, and Success types.
• browser_rendering: Devtools.Browser.Connect() and Devtools.Browser.Launch() removed, along with DevtoolBrowserConnectParams and DevtoolBrowserLaunchParams. Devtools.Browser.Page.Get() is also removed along with DevtoolBrowserPageGetParams; the Page sub-resource now exposes no methods. Devtools.Browser retains New(), Delete(), Protocol(), and Version().
• cloud_connector: RuleUpdateParams.Rules is now required. Requests that previously omitted rules are rejected.
• dns: SettingAccountViewListParams.Page and SettingAccountViewListParams.PerPage changed from param.Field[float64] to param.Field[int64].
• dns: Settings.Zone nameservers changed from a struct to a union. SettingZoneEditResponse.Nameservers and SettingZoneGetResponse.Nameservers are now ...NameserversUnion interfaces, and the SettingZoneEditParams.Nameservers field type changed from param.Field[SettingZoneEditParamsNameservers] to param.Field[SettingZoneEditParamsNameserversUnion]. Callers constructing or reading nameservers must switch on the Cloudflare, CustomExisting, and CustomSet variants.
• email_security: Phishguard.Reports.List() return type changed from *pagination.SinglePage[PhishguardReportListResponse] to *pagination.V4PagePaginationArray[PhishguardReportListResponse].
• email_security: InvestigatePreviewNewParams.PostfixID renamed to ID, and its JSON key changed from postfix_id to id.
• email_security: InvestigateReleaseBulkParams.Body []string replaced by IDs param.Field[[]string]. The request body is now a JSON object {"ids": [...]} instead of a bare array, so this is both a compile-time and a wire-format change.
• email_security: InvestigateMoveBulkParams.IDs is now required.
• email_security: the SKIPPED status value is removed from InvestigateBulkNewResponseStatus, InvestigateBulkGetResponseStatus, InvestigateBulkListResponseStatus, InvestigateBulkListParamsStatus, and InvestigateBulkCancelNewResponseStatus.
• email_security: the DISCOVERING status value is removed from InvestigateBulkMessageListParamsStatus and InvestigateBulkMessageListResponseStatus.
• flagship: AppFlagListParams.Limit and AppFlagChangelogListParams.Limit changed from param.Field[string] to param.Field[int64].
• hyperdrive: the Integration field on every Configs response integration struct is renamed to Provider, and its JSON key changed from integration to provider. The accompanying enum types are renamed ConfigNewResponseIntegrationIntegration -> ConfigNewResponseIntegrationProvider (and the Update, List, Edit, Get, and Restart equivalents), plus ConfigNewParamsBodyHyperdriveHyperdriveConfigCreateWithIntegrationIntegrationIntegration -> ...IntegrationProvider. This is both a compile-time and a wire-format change.
• queues: the MqNotificationConsumer variant is removed from the Consumers request and response unions. Consumers.New() and Consumers.Update() now accept only the MqWorkerConsumerRequest and MqHTTPConsumerRequest body variants. Removed types include ConsumerMqNotificationConsumerResponse (and its Settings, SettingsObject, SettingsObjectEmail, SettingsObjectPagerduty, SettingsObjectWebhook, Type members and Param equivalents), ConsumerNewParamsBodyMqNotificationConsumerRequest, and ConsumerUpdateParamsBodyMqNotificationConsumerRequest — 31 exported types in total.
• resource_tagging: the per-variant ResourceType enums are narrowed to the single resource type each union variant describes. AccountTagUpdateParamsBodyResourceTaggingSetTagsRequestAccountLevelWorkerVersionResourceType drops from 30 values to worker_version only, and ZoneTagUpdateParamsBodyResourceTaggingSetTagsRequestZoneLevelAccessApplicationPolicyResourceType drops from 11 values to access_application_policy only — 39 exported constants removed.
• shared: the permission group Meta struct changed from {Key, Value string} to a descriptive shape with Category, Deprecated, Description, Editable, EolAt time.Time, Label, Scopes, and Visibility. This affects 11 types across four packages: shared.MemberPoliciesPermissionGroupsMeta, shared.TokenPolicyPermissionGroupsMeta and shared.TokenPolicyPermissionGroupsMetaParam, iam.PermissionGroupListResponseMeta, iam.PermissionGroupGetResponseMeta, the four iam.UserGroup{New,Update,List,Get}ResponsePoliciesPermissionGroupsMeta types, and memberships.Membership{Update,Get}ResponsePoliciesPermissionGroupsMeta.
• vectorize: the IndexDimensionConfiguration type is removed; CreateIndex.Config is now CreateIndexConfig. IndexDimensionConfigurationMetric and IndexDimensionConfigurationParam are retained.
• workers_for_platforms: DispatchNamespaceScriptTagDeleteResponse changed from an interface{} alias to a struct backed by DispatchNamespaceScriptTagDeleteResponseUnion. Callers type-asserting the old interface{} return of Dispatch.Namespaces.Scripts.Tags.Delete() must switch on the WorkersTagsKVResponse and WorkersAPIResponseNullResult variants. The two variants correspond to the new api-version header: on api-version dates on or after 2026-10-01, tag identifies a key and the call returns the complete updated tag map; earlier versions keep the legacy string-tag behaviour and return a null result. The six DispatchNamespaceScriptTagDeleteResponseEnvelope* types are removed.
• zero_trust: Gateway.Lists.Items.List() return type changed from *pagination.SinglePage[GatewayItem] to *pagination.V4PagePaginationArray[GatewayItem].
• zero_trust: Gateway.Pacfiles.List() return type changed from *pagination.SinglePage[GatewayPacfileListResponse] to *pagination.V4PagePaginationArray[GatewayPacfileListResponse].
• zero_trust: DevicePolicyCustomEditParamsProfileType type removed.

Features

• NEW SERVICE: containers -- Containers application, image, and registry management
  • Applications.New(), List(), Delete(), Edit(), Get()
  • Applications.Instances.List(), Get(), ListV1()
  • Applications.Rollouts.New()
  • Applications.Versions.List()
  • Images.Prepare()
  • Registries.New(), List(), Delete()
  • Registries.Credentials.Generate()
• NEW SERVICE: basin_catalog -- Basin catalog bucket, namespace, and table management
  • List(), Delete(), Disable(), Enable(), Get()
  • MaintenanceConfigs.Update(), Get()
  • Credentials.New()
  • Namespaces.List()
  • Namespaces.Tables.List()
  • Namespaces.Tables.MaintenanceConfigs.Update(), Get()
• cloudforce_one: add ThreatSignals sub-resource tree (/accounts/{account_id}/cloudforce-one/v2/threat-signals)
  • ThreatSignals.Search.Search()
  • ThreatSignals.Categories.List()
  • ThreatSignals.Feeds.New(), List(), Delete(), Edit(), Poll()
  • ThreatSignals.Feeds.Raw.Get()
  • ThreatSignals.Feeds.Skills.Update(), Get()
  • ThreatSignals.Articles.List(), BulkEdit(), Edit(), Get()
  • ThreatSignals.Articles.Content.Get()
  • ThreatSignals.Articles.Tags.New(), Delete(), Generate()
  • ThreatSignals.Articles.SkillOutputs.Get()
  • ThreatSignals.Indicators.List()
  • ThreatSignals.Skills.New(), List(), Delete(), Edit(), Get()
  • ThreatSignals.Skills.TagCategories.Update(), Get()
• cache: add Invalidate() method (POST /zones/{zone_id}/invalidate_cache)
• cache: add InvalidateEnvironment() method (POST /zones/{zone_id}/environments/{environment_id}/invalidate_cache)
• dns: add Settings.Account.NameserverSets sub-resource with New(), List(), Delete(), Get() methods
• registrar: add TransferCheck() method (POST /accounts/{account_id}/registrar/domain-transfer-check)
• pagination: add PageTokenPagination and ContainersInstancesV1Pagination page types (with their AutoPager variants) to packages/pagination
• email_security: field-level documentation added across Settings.Domains, Settings.ContentPolicies, Settings.TrustedDomains, Settings.ImpersonationRegistry, Settings.BlockSenders, Settings.AllowPolicies, Investigate, and Submissions

v7.11.0

Compare Source

Full Changelog: v7.11.0...v7.12.0

Breaking Changes

See the v7.12.0 Migration Guide for before/after code examples and actions needed for each change.

• addressing: AddressMaps.Zones.Update() and AddressMaps.Zones.Delete() removed. The Zones sub-resource is still wired on AddressMaps but now exposes no methods. 16 exported types are removed, including AddressMapZoneUpdateResponse, AddressMapZoneDeleteResponse, AddressMapZoneUpdateParams, AddressMapZoneDeleteParams, and their nested Error, ErrorsSource, Message, MessagesSource, ResultInfo, and Success types.
• browser_rendering: Devtools.Browser.Connect() and Devtools.Browser.Launch() removed, along with DevtoolBrowserConnectParams and DevtoolBrowserLaunchParams. Devtools.Browser.Page.Get() is also removed along with DevtoolBrowserPageGetParams; the Page sub-resource now exposes no methods. Devtools.Browser retains New(), Delete(), Protocol(), and Version().
• cloud_connector: RuleUpdateParams.Rules is now required. Requests that previously omitted rules are rejected.
• dns: SettingAccountViewListParams.Page and SettingAccountViewListParams.PerPage changed from param.Field[float64] to param.Field[int64].
• dns: Settings.Zone nameservers changed from a struct to a union. SettingZoneEditResponse.Nameservers and SettingZoneGetResponse.Nameservers are now ...NameserversUnion interfaces, and the SettingZoneEditParams.Nameservers field type changed from param.Field[SettingZoneEditParamsNameservers] to param.Field[SettingZoneEditParamsNameserversUnion]. Callers constructing or reading nameservers must switch on the Cloudflare, CustomExisting, and CustomSet variants.
• email_security: Phishguard.Reports.List() return type changed from *pagination.SinglePage[PhishguardReportListResponse] to *pagination.V4PagePaginationArray[PhishguardReportListResponse].
• email_security: InvestigatePreviewNewParams.PostfixID renamed to ID, and its JSON key changed from postfix_id to id.
• email_security: InvestigateReleaseBulkParams.Body []string replaced by IDs param.Field[[]string]. The request body is now a JSON object {"ids": [...]} instead of a bare array, so this is both a compile-time and a wire-format change.
• email_security: InvestigateMoveBulkParams.IDs is now required.
• email_security: the SKIPPED status value is removed from InvestigateBulkNewResponseStatus, InvestigateBulkGetResponseStatus, InvestigateBulkListResponseStatus, InvestigateBulkListParamsStatus, and InvestigateBulkCancelNewResponseStatus.
• email_security: the DISCOVERING status value is removed from InvestigateBulkMessageListParamsStatus and InvestigateBulkMessageListResponseStatus.
• flagship: AppFlagListParams.Limit and AppFlagChangelogListParams.Limit changed from param.Field[string] to param.Field[int64].
• hyperdrive: the Integration field on every Configs response integration struct is renamed to Provider, and its JSON key changed from integration to provider. The accompanying enum types are renamed ConfigNewResponseIntegrationIntegration -> ConfigNewResponseIntegrationProvider (and the Update, List, Edit, Get, and Restart equivalents), plus ConfigNewParamsBodyHyperdriveHyperdriveConfigCreateWithIntegrationIntegrationIntegration -> ...IntegrationProvider. This is both a compile-time and a wire-format change.
• queues: the MqNotificationConsumer variant is removed from the Consumers request and response unions. Consumers.New() and Consumers.Update() now accept only the MqWorkerConsumerRequest and MqHTTPConsumerRequest body variants. Removed types include ConsumerMqNotificationConsumerResponse (and its Settings, SettingsObject, SettingsObjectEmail, SettingsObjectPagerduty, SettingsObjectWebhook, Type members and Param equivalents), ConsumerNewParamsBodyMqNotificationConsumerRequest, and ConsumerUpdateParamsBodyMqNotificationConsumerRequest — 31 exported types in total.
• resource_tagging: the per-variant ResourceType enums are narrowed to the single resource type each union variant describes. AccountTagUpdateParamsBodyResourceTaggingSetTagsRequestAccountLevelWorkerVersionResourceType drops from 30 values to worker_version only, and ZoneTagUpdateParamsBodyResourceTaggingSetTagsRequestZoneLevelAccessApplicationPolicyResourceType drops from 11 values to access_application_policy only — 39 exported constants removed.
• shared: the permission group Meta struct changed from {Key, Value string} to a descriptive shape with Category, Deprecated, Description, Editable, EolAt time.Time, Label, Scopes, and Visibility. This affects 11 types across four packages: shared.MemberPoliciesPermissionGroupsMeta, shared.TokenPolicyPermissionGroupsMeta and shared.TokenPolicyPermissionGroupsMetaParam, iam.PermissionGroupListResponseMeta, iam.PermissionGroupGetResponseMeta, the four iam.UserGroup{New,Update,List,Get}ResponsePoliciesPermissionGroupsMeta types, and memberships.Membership{Update,Get}ResponsePoliciesPermissionGroupsMeta.
• vectorize: the IndexDimensionConfiguration type is removed; CreateIndex.Config is now CreateIndexConfig. IndexDimensionConfigurationMetric and IndexDimensionConfigurationParam are retained.
• workers_for_platforms: DispatchNamespaceScriptTagDeleteResponse changed from an interface{} alias to a struct backed by DispatchNamespaceScriptTagDeleteResponseUnion. Callers type-asserting the old interface{} return of Dispatch.Namespaces.Scripts.Tags.Delete() must switch on the WorkersTagsKVResponse and WorkersAPIResponseNullResult variants. The two variants correspond to the new api-version header: on api-version dates on or after 2026-10-01, tag identifies a key and the call returns the complete updated tag map; earlier versions keep the legacy string-tag behaviour and return a null result. The six DispatchNamespaceScriptTagDeleteResponseEnvelope* types are removed.
• zero_trust: Gateway.Lists.Items.List() return type changed from *pagination.SinglePage[GatewayItem] to *pagination.V4PagePaginationArray[GatewayItem].
• zero_trust: Gateway.Pacfiles.List() return type changed from *pagination.SinglePage[GatewayPacfileListResponse] to *pagination.V4PagePaginationArray[GatewayPacfileListResponse].
• zero_trust: DevicePolicyCustomEditParamsProfileType type removed.

Features

• NEW SERVICE: containers -- Containers application, image, and registry management
  • Applications.New(), List(), Delete(), Edit(), Get()
  • Applications.Instances.List(), Get(), ListV1()
  • Applications.Rollouts.New()
  • Applications.Versions.List()
  • Images.Prepare()
  • Registries.New(), List(), Delete()
  • Registries.Credentials.Generate()
• NEW SERVICE: basin_catalog -- Basin catalog bucket, namespace, and table management
  • List(), Delete(), Disable(), Enable(), Get()
  • MaintenanceConfigs.Update(), Get()
  • Credentials.New()
  • Namespaces.List()
  • Namespaces.Tables.List()
  • Namespaces.Tables.MaintenanceConfigs.Update(), Get()
• cloudforce_one: add ThreatSignals sub-resource tree (/accounts/{account_id}/cloudforce-one/v2/threat-signals)
  • ThreatSignals.Search.Search()
  • ThreatSignals.Categories.List()
  • ThreatSignals.Feeds.New(), List(), Delete(), Edit(), Poll()
  • ThreatSignals.Feeds.Raw.Get()
  • ThreatSignals.Feeds.Skills.Update(), Get()
  • ThreatSignals.Articles.List(), BulkEdit(), Edit(), Get()
  • ThreatSignals.Articles.Content.Get()
  • ThreatSignals.Articles.Tags.New(), Delete(), Generate()
  • ThreatSignals.Articles.SkillOutputs.Get()
  • ThreatSignals.Indicators.List()
  • ThreatSignals.Skills.New(), List(), Delete(), Edit(), Get()
  • ThreatSignals.Skills.TagCategories.Update(), Get()
• cache: add Invalidate() method (POST /zones/{zone_id}/invalidate_cache)
• cache: add InvalidateEnvironment() method (POST /zones/{zone_id}/environments/{environment_id}/invalidate_cache)
• dns: add Settings.Account.NameserverSets sub-resource with New(), List(), Delete(), Get() methods
• registrar: add TransferCheck() method (POST /accounts/{account_id}/registrar/domain-transfer-check)
• pagination: add PageTokenPagination and ContainersInstancesV1Pagination page types (with their AutoPager variants) to packages/pagination
• email_security: field-level documentation added across Settings.Domains, Settings.ContentPolicies, Settings.TrustedDomains, Settings.ImpersonationRegistry, Settings.BlockSenders, Settings.AllowPolicies, Investigate, and Submissions

v7.10.0

Compare Source

Full Changelog: v7.9.0...v7.10.0

Breaking Changes

• email_routing: DNS.Get() return type changed from *DNSGetResponse to *[]DNSRecord. The DNSGetResponse type is removed.
• email_routing: DNS.Delete() return type changed from *pagination.SinglePage[DNSRecord] to *Settings.
• magic_transit: HealthCheckParam and HealthCheck types removed from the magic_transit package.
• page_shield: PageShield.Get() return type changed from *Setting to *PageShieldGetResponse. The Setting type is removed.
• page_shield: PolicyParam type removed from the page_shield package.
• page_shield: Connection type removed and split into ConnectionListResponse and ConnectionGetResponse. Connections.List() now returns *pagination.SinglePage[ConnectionListResponse] and Connections.Get() now returns *ConnectionGetResponse.
• page_shield: Script type removed and replaced by ScriptListResponse. Scripts.List() now returns *pagination.SinglePage[ScriptListResponse].
• realtime_kit: Livestreams.NewIndependentLivestream() method removed along with the LivestreamNewIndependentLivestreamResponse type.

Features

• accounts: add Subscriptions.CancelDowngrade() method (POST /accounts/{account_id}/subscriptions/cancel-downgrade)
• accounts: add Subscriptions.GetByIdentifier() method (GET /accounts/{account_id}/subscriptions/{subscription_identifier})
• accounts: add Subscriptions.CancelReason sub-resource with New() and Get() methods
• accounts: add Subscriptions.Actions sub-resource with Append() method
• accounts: add Subscriptions.Bulk sub-resource with New() method (POST /accounts/{account_id}/bulk/subscriptions)
• accounts: add PaymentMethods sub-resource with New(), Update(), List(), Delete(), Get(), and SetAsDefault() methods
• accounts: add PayInvoice sub-resource with New() method (POST /accounts/{account_id}/pay-invoice)
• accounts: add PayBadDebt sub-resource with New() method (POST /accounts/{account_id}/pay-bad-debt)
• accounts: add Receipts sub-resource with PDF() method (GET /accounts/{account_id}/receipts/{receipt_id}/pdf)
• accounts: add Invoices sub-resource with Edit() method (PATCH /accounts/{account_id}/invoices)
• accounts: add ClientSecret sub-resource with New() method (POST /accounts/{account_id}/client-secret)
• addressing: add Prefixes.BGPPrefixes.Delete() method (DELETE /accounts/{account_id}/addressing/prefixes/{prefix_id}/bgp/prefixes/{bgp_prefix_id})
• billing: add Billing.AddressValidation() method (POST /billing/address-validation)
• billing: add Profiles.New(), Update(), Delete(), and UpdateBillingEmail() methods
• billing: add Profiles.PaymentMethod sub-resource with New() method
• billing: add Credits sub-resource with Get() method (GET /accounts/{account_id}/billing/credits)
• billing: add History sub-resource with List() method (GET /accounts/{account_id}/billing/history)
• billing: add BadDebt sub-resource with Get() method (GET /accounts/{account_id}/billing/bad-debt)
• billing: add UnpaidInvoice sub-resource with Get() method (GET /accounts/{account_id}/billing/unpaid-invoice)
• billing: add RatePlans sub-resource with Get() method (GET /billing/rate_plans/{public_key})
• browser_rendering: add Devtools.Browser.LiveView.New() method (POST /accounts/{account_id}/browser-rendering/devtools/browser/{session_id}/live_view)
• content_scanning: add Payloads.Update() method (PATCH /zones/{zone_id}/content-upload-scan/payloads/{expression_id})
• email_security: add Settings.AllowPolicies.Batch() method (POST /accounts/{account_id}/email-security/settings/allow_policies/batch)
• email_security: add Settings.BlockSenders.Batch() method (POST /accounts/{account_id}/email-security/settings/block_senders/batch)
• email_security: add Settings.ContentPolicies sub-resource with New(), List(), Delete(), Batch(), Edit(), and Get() methods
• email_security: add Settings.Domains.New(), Update(), and Batch() methods
• email_security: add Settings.TrustedDomains.Batch() method (POST /accounts/{account_id}/email-security/settings/trusted_domains/batch)
• email_sending: add Suppressions sub-resource with New(), List(), Delete(), Edit(), Get(), and Import() methods
• email_sending: add Subdomains.Edit() method (PATCH /zones/{zone_id}/email/sending/subdomains/{subdomain_id})
• logpush: add Transformers sub-resource with New(), Update(), List(), Delete(), Get(), and Preview() methods
• logpush: add Transformers.Content sub-resource with Get() method (GET /accounts/{account_id}/logpush/transformers/{transformer_id}/content)
• logpush: add Transformers.Versions sub-resource with List() method (GET /accounts/{account_id}/logpush/transformers/{transformer_id}/versions)
• realtime_kit: add Presets.ReplacePresetByID() method (PUT /accounts/{account_id}/realtime/kit/{app_id}/presets/{preset_id})
• spectrum: add Protocols sub-resource with List() method (GET /zones/{zone_id}/spectrum/protocols)
• ssl: add Recommendations sub-resource with Get() method (GET /zones/{zone_id}/ssl/recommendation)
• token_validation: add Configuration.Credentials.Edit() method (PATCH /zones/{zone_id}/token_validation/config/{config_id}/credentials)
• user: add SpectrumAnalytics.Zones.Reports sub-resource with Get() method (GET /user/spectrum_analytics/zones/report)
• zero_trust: add ResourceLibrary.Applications.New() method (POST /accounts/{account_id}/resource-library/applications)
• zero_trust: add ResourceLibrary.Applications.Update() method (PATCH /accounts/{account_id}/resource-library/applications/{id})
• zero_trust: add ResourceLibrary.Applications.Delete() method (DELETE /accounts/{account_id}/resource-library/applications/{id})
• zones: add NEL sub-resource with Edit() and Get() methods (PATCH/GET /zones/{zone_id}/settings/nel)

v7.9.0

Compare Source

Changelog

7.9.0 (2026-08-19)

Breaking Changes

See the [v7.9.0 Migration Guide](./docs/migration-guides/v7.9.0-migration-guide.md) for before/after code examples and actions needed for each change.

• billing: Usage.Paygo() and Usage.PaygoInfo() endpoints changed from /accounts/{account_id}/paygo-usage and /accounts/{account_id}/paygo-usage-info to /accounts/{account_id}/billable-usage and /accounts/{account_id}/billable-usage/info respectively. The method signatures and return types are unchanged.
• hostnames: Settings.TLS.Get() method signature changed -- now requires a hostname path parameter and returns *Setting instead of *pagination.SinglePage[SettingTLSGetResponse]. The SettingTLSGetResponse type and GetAutoPaging() method are removed. A new List() method replaces the old paginated listing behavior.
• intel: AttackSurfaceReport.Issues.Dismiss() method removed along with AttackSurfaceReportIssueDismissResponse and AttackSurfaceReportIssueDismissParams types.
• rulesets: return types changed for several mutating methods. Rulesets.New() now returns *RulesetNewResponseEnvelopeResult instead of *RulesetNewResponse. Rulesets.Update() now returns *RulesetUpdateResponseEnvelopeResult instead of *RulesetUpdateResponse. Rulesets.Phases.Update() now returns *PhaseUpdateResponseEnvelopeResult instead of *PhaseUpdateResponse. Rulesets.Rules.New() now returns *RuleNewResponseEnvelopeResult instead of *RuleNewResponse. Rulesets.Rules.Delete() now returns *RuleDeleteResponseEnvelopeResult instead of *RuleDeleteResponse. Rulesets.Rules.Edit() now returns *RuleEditResponseEnvelopeResult instead of *RuleEditResponse. The old response types (RulesetNewResponse, RulesetUpdateResponse, PhaseUpdateResponse, RuleNewResponse, RuleDeleteResponse, RuleEditResponse) are removed.
• zero_trust: ResourceLibrary.Applications.Get() and ResourceLibrary.Categories.Get() id parameter type changed from string to int64. The ID field on ResourceLibraryApplicationGetResponse and ResourceLibraryCategoryGetResponse also changed from string to int64.
• zero_trust: Casb.Applications.List() return type changed from *[]CasbApplicationListResponse to *pagination.SinglePage[CasbApplicationListResponse]. Casb.Applications.AuthMethods.List() return type changed from *[]CasbApplicationAuthMethodListResponse to *pagination.SinglePage[CasbApplicationAuthMethodListResponse]. Casb.Integrations.List() return type changed from *CasbIntegrationListResponse to *pagination.SinglePage[CasbIntegrationListResponse]. These methods now support auto-paging via ListAutoPaging().
• zones: CT.Alerting.Edit() and CT.Alerting.Get() return types changed from *CTAlertingEditResponse / *CTAlertingGetResponse to the shared *CTAlertingSubscription type. The old per-method response types are removed.

Features

• NEW SERVICE: precursor -- Precursor configuration management
  • Update() - PUT /zones/{zone_id}/precursor
  • Get() - GET /zones/{zone_id}/precursor
• accounts: add SpeedSettings.Transformations.Get() method (GET /accounts/{account_id}/settings/transformations)
• addressing: add Prefixes.Validate() method (POST /accounts/{account_id}/addressing/prefixes/{prefix_id}/validate)
• billing: add Usage.GetAccountUsageInfoV1(), Usage.GetAccountUsageV1(), and Usage.GetAccountUsageV2() methods for billable usage data
• custom_hostnames: add Quota.Get() method (GET /zones/{zone_id}/custom_hostnames/quota)
• dns: add DNSSEC.Zsk.List() method (GET /zones/{zone_id}/dnssec/zsk)
• hostnames: add Settings.TLS.List() method (GET /zones/{zone_id}/hostnames/settings/{setting_id}) returning paginated SettingTLSListResponse
• intel: add URLs.Get() method (GET /accounts/{account_id}/intel/url)
• intel: add Sinkholes.New(), Update(), Delete(), Get() methods (list already existed). Add Sinkholes.Ingresses sub-resource with New(), Update(), Delete(), Get() methods.
• logs: add LogExplorer.Datasets.Delete() method (DELETE /{accounts_or_zones}/{account_or_zone_id}/logs/explorer/datasets/{dataset_id})
• pages: add Projects.GetUploadToken() method (GET /accounts/{account_id}/pages/projects/{project_name}/upload-token)
• pages: add Projects.Deployments.Tails sub-resource with New() and Delete() methods
• pages: add Assets sub-resource with CheckMissing(), Upload(), and UpsertHashes() methods
• queues: add Messages.Peek() and Messages.Purge() methods
• r2_data_catalog: add Delete() method (POST /accounts/{account_id}/r2-catalog/{bucket_name}/delete)
• radar: add BGP.Routes.Upstreams.Timeseries() method (GET /radar/bgp/routes/upstreams/{asn}/timeseries)
• radar: add BGP.Routes.Paths.List() method (GET /radar/bgp/routes/paths/{asn})
• resource_tagging: add Summary.Get() method (GET /accounts/{account_id}/tags/summary)
• zero_trust: add Networks.Subnets.InitialResolvedIP sub-resource with Update() and Get() methods
• zones: add TransformationsAllowedOrigins sub-resource with Edit() and Get() methods
• zones: add TransformationsC2pa sub-resource with Edit() and Get() methods
• magic_transit: add ConnectorEventGetResponseEKRekeyRestart enum constant for connector events

Bug Fixes

• apijson: replace O(n^2) array encoding with O(n) bytes.Buffer implementation, significantly improving performance for large arrays

v7.8.0

Compare Source

7.8.0 (2026-07-24)

Breaking Changes

See the v7.8.0 Migration Guide for before/after code examples and actions needed for each change.

• acm: CertificateAuthority param and response type removed from the acm package. Callers referencing this type directly must update.
• brand_protection: V2.Queries.Get() return type changed from *[]V2QueryGetResponse to *V2QueryGetResponseUnion. The V2QueryGetResponse type is removed; use the new union type and handle variants via .AsUnion().
• certificate_authorities: HostnameAssociationParam and HostnameAssociation types removed. Use TLSHostnameAssociationParam and the per-method response types instead.
• cloudforce_one: ThreatEvents.IndicatorTypes sub-resource relocated to ThreatEvents.Indicators.Types. The endpoint path changed from /events/indicatorTypes to /events/indicator-types. The type name ThreatEventIndicatorTypeListResponse is unchanged.
• custom_certificates: Status response type removed from the custom_certificates package.
• hyperdrive: Configs.List() pagination type changed from SinglePage[Hyperdrive] to V4PagePaginationArray[Hyperdrive]. The second parameter name changed from query to params.
• moq: Relays.Tokens.Rotate() method removed along with RelayTokenRotateResponse and RelayTokenRotateParams. Replaced by full CRUD: Tokens.New(), Tokens.List(), Tokens.Delete().
• mtls_certificates: shared MTLSCertificate response type removed. List(), Delete(), and Get() now return MTLSCertificateListResponse, MTLSCertificateDeleteResponse, and MTLSCertificateGetResponse respectively.
• ssl: HostParam, Host, Status, and ValidationMethod types removed from the ssl package.
• zero_trust: Casb.Applications.SetupFlows sub-resource renamed to Casb.Applications.AuthMethods. The CasbApplicationSetupFlowListResponse type is replaced by CasbApplicationAuthMethodListResponse. The path parameter on Applications.Get() changed from slug (CasbApplicationGetParamsSlug) to applicationID (CasbApplicationGetParamsApplicationID).

Features

• NEW SERVICE: registrar_sandbox -- test domain registration flows without buying real domains
  • client.RegistrarSandbox.Check, client.RegistrarSandbox.Search
  • Registrations.{New,List,Edit,Get}
  • RegistrationStatus.Get, UpdateStatus.Get
  • Extensions.{List,Get}
• NEW SERVICE: AnalyticsQuery -- analytics query API at the top-level client
  • client.AnalyticsQuery.Summary, client.AnalyticsQuery.Timeseries, client.AnalyticsQuery.TopN
  • DataSecurity.ContentFindings.TopN
  • DataSecurity.Findings.{Summary,Timeseries}
• ai_audit: add Robots.BulkGet and Robots.Get methods
• billing: add Usage.PaygoInfo method (GET /accounts/{account_id}/paygo-usage-info)
• cloudforce_one: major expansion of ThreatEvents sub-resources:
  • Aggregate.List, Graphql.New, Graph.List
  • Queries.{New,List,Delete,Edit,Get}
  • Relationships.List
  • Indicators.{List,Aggregate,ByDataset,ByDataset.Tags}
  • Categories.Catalog.List
  • Datasets.{Delete,Events.Get}
  • Tags.{List,Delete,Edit} + Tags.Categories.{New,Update,List,Delete,Get} + Tags.Indicators, Tags.Indicators.ByDataset
  • TargetIndustries.{ByDataset.List,Catalog.List}
• email_routing: add Update, Edit methods on the root service; add Rules.List and AccountRules.List methods
• email_security: add Settings.Domains.BulkDelete method
• magic_transit: add Connectors.Interrupts sub-resource (New, List)
• moq: add Relays.Tokens.{New,List,Delete} methods (replacing Rotate)
• registrar: add Extensions sub-resource (List, Get)
• zero_trust: add Casb.Posture sub-resource tree (~40 new methods):
  • Findings.{List,Export,Get,Ignore,ResetSeverity,TuneSeverity,Unignore}
  • Findings.Instances.{List,Archive,Export,Get,Unarchive}
  • Exports.{List,Get}
  • FindingTypes.{List,Get} + FindingTypes.RemediationTypes.List
  • Content.{List,Export}
  • Remediations.Jobs.{New,List,Export}
  • Webhooks.{New,Update,List,Delete,Evaluate,EvaluateExisting,Get} + Webhooks.Jobs.New
• accounts: Subscriptions.New and Subscriptions.Get now support both account-level and zone-level paths (/{accounts_or_zones}/{account_or_zone_id}/subscriptions). Params accept both AccountID and ZoneID (mutually exclusive); existing AccountID-only callers are unaffected.
• load_balancers: endpoints now support both account-level and zone-level paths (/{accounts_or_zones}/{account_or_zone_id}/load_balancers). Params accept both AccountID and ZoneID; existing ZoneID-only callers are unaffected.

v7.7.0

Compare Source

7.7.0 (2026-07-08)

Full Changelog: v7.6.0...v7.7.0

Breaking Changes

See the v7.7.0 Migration Guide for before/after code examples and actions needed for each change.

• ssl: Recommendations.Get method and RecommendationGetResponse / RecommendationGetParams types removed.

• ai_gateway, workflows, zero_trust/dlpemailaccountmapping: merged-union parent fields with same-name-different-type collisions changed from a variant-struct type to interface{}. Affected fields:

  • ai_gateway.AIGateway{New,Update,List,Delete,Get}ResponseSpendLimitsRulesMetadata.Mode (5 structs)
  • workflows.VersionGraphResponseGraphWorkflowPayload.Type
  • zero_trust.DLPEmailAccountMapping{New,Get}ResponseAuthRequirements.Type (2 structs)

  These fields were unreadable in the previous type (marshaling panicked with reflect: call of reflect.Value.SetString on struct Value). The new interface{} type matches the codegen pattern used by sibling merged fields on the same structs (e.g. Values, Fields, AllowedMicrosoftOrganizations); callers should switch on the parent union via AsUnion() for a strongly-typed variant.

• zero_trust: Devices.DEXTests.{New,Update,List,Get} response type renamed from DeviceDEXTest{New,Update,List,Get}Response to the shared SchemaHTTP; field structure unchanged. Nested types renamed accordingly (e.g. DeviceDEXTestNewResponseData → SchemaData, DeviceDEXTestNewResponseTargetPolicy → SchemaHTTPTargetPolicy). Callers using := inference and field access continue to compile; callers referencing the removed type names must update to SchemaHTTP.

• zero_trust: Devices.IPProfiles.List pagination changed from pagination.SinglePage[IPProfile] to pagination.V4PagePaginationArray[IPProfile]. .Result field access and ListAutoPaging() iteration continue to work; callers referencing the pagination type by name must update.

Features

• NEW SERVICE: email_auth — DMARC reports edit/get and SPF inspect
  • client.EmailAuth.DMARCReports.Edit
  • client.EmailAuth.DMARCReports.Get
  • client.EmailAuth.SPF.Inspect.Get
• NEW SERVICE: moq — Media over QUIC relay management
  • client.MoQ.Relays.{New,Update,List,Delete,Get}
  • client.MoQ.Relays.Tokens.Rotate
• zero_trust: publish CASB APIs (client.ZeroTrust.Casb.*)
  • Applications.{List,Get} + Applications.SetupFlows.List
  • Integrations.{New,Update,List,Delete,Get,Pause,Resume}
• logs: add LogExplorer sub-resource
  • LogExplorer.Query.Sql
  • LogExplorer.Datasets.{New,Update,List,Get}
  • LogExplorer.Datasets.Available.List
• browser_rendering: add AccessibilityTree.New method
• email_routing: add EmailRouting.Unlock and EmailRouting.Addresses.Edit methods
• email_routing: add AccountRules.List method (GET /accounts/{account_id}/email/routing/rules) returning AccountRule with new Zone field; Rules.List gains optional AccountID param (mutually exclusive with ZoneID) so callers can list rules by account or zone
• email_security: add bulk investigation APIs
  • Investigate.Bulk.{New,List,Delete,Get}
  • Investigate.Bulk.Cancel.New
  • Investigate.Bulk.Messages.List
• accounts: add Logs.Audit.History and Logs.Audit.ProductCategories methods
• organizations: add Logs.Audit.History method

Bug Fixes

• ai_gateway, workflows, zero_trust/dlpemailaccountmapping: fix panics on union-merged parent field decoding by switching same-name-different-type merged fields from a variant-struct type to interface{} (3de4191)
• browser_rendering: AccessibilityTreeNewParamsBodyObject now uses URL (matching the generated test fixture) instead of HTML (0f44441)
• dns: restore Shadow* query params on RecordListParams and IncludeShadowMetadata on Record{New,Update,List,Batch,Edit,Get}Params after a codegen regression dropped them (f9b3f27)

Chores

• api: update composite API spec (20+ codegen sync commits)
• ci: bump CI job timeouts to 30 minutes (6cad6cb)
• ci: unblock test job by installing nodejs/npm for prism mock server (3de4191)
• apply accumulated custom code (CI jobs, GitLab config) (eb2bf2b)

v7.6.0

Compare Source

7.6.0 (2026-06-16)

Full Changelog: v7.5.0...v7.6.0

This release includes breaking changes in Realtime Kit and Email Security alongside a large number of new services and features. Please ensure you read through the list of changes below before upgrading.

See the v7.6.0 Migration Guide for before/after code examples and actions needed for each breaking change.

---

Breaking Changes

Realtime Kit - GenerateSummaryOfTranscripts Return Type Changed

SessionService.GenerateSummaryOfTranscripts() previously returned only error. It now returns (*SessionGenerateSummaryOfTranscriptsResponse, error). Code that discards the first return value will no longer compile.

Realtime Kit - StartTrackRecording Return Type Changed

RecordingService.StartTrackRecording() previously returned only error. It now returns (*RecordingStartTrackRecordingResponse, error). Code that discards the first return value will no longer compile.

Realtime Kit - Session Participant Response Types Restructured

SessionGetParticipantDataFromPeerIDResponseData gained a new .Participant nested struct. Sub-types were renamed from ...DataPeerReport to ...DataParticipantPeerReport (and similar). Code referencing the old type names will no longer compile.

Email Security - ActionLog Parameter Removed

The ActionLog field has been removed from InvestigateListParams. The upstream API no longer accepts this query parameter. Remove the field from your list calls.

---

Features

Tenants (client.Tenants)

• NEW SERVICE: Multi-tenant account management
  • client.Tenants.New() - Create a tenant
  • client.Tenants.Update() - Update a tenant
  • client.Tenants.List() - List tenants
  • client.Tenants.Delete() - Delete a tenant
  • client.Tenants.Get() - Get a tenant
  • client.Tenants.Accounts.New() - Create a tenant account
  • client.Tenants.Accounts.List() - List tenant accounts
  • client.Tenants.Accounts.Delete() - Delete a tenant account
  • client.Tenants.Accounts.Get() - Get a tenant account
  • client.Tenants.AccountTypes.List() - List tenant account types
  • client.Tenants.Entitlements.List() - List tenant entitlements
  • client.Tenants.Memberships.New() - Create a tenant membership
  • client.Tenants.Memberships.List() - List tenant memberships
  • client.Tenants.Memberships.Delete() - Delete a tenant membership
  • client.Tenants.Memberships.Get() - Get a tenant membership

Flagship (client.Flagship)

• NEW SERVICE: Feature flag management
  • client.Flagship.Apps.New() - Create a Flagship app
  • client.Flagship.Apps.Update() - Update a Flagship app
  • client.Flagship.Apps.List() - List Flagship apps
  • client.Flagship.Apps.Delete() - Delete a Flagship app
  • client.Flagship.Apps.Get() - Get a Flagship app
  • client.Flagship.Apps.Flags.New() - Create a feature flag
  • client.Flagship.Apps.Flags.Update() - Update a feature flag
  • client.Flagship.Apps.Flags.List() - List feature flags
  • client.Flagship.Apps.Flags.Delete() - Delete a feature flag
  • client.Flagship.Apps.Flags.Get() - Get a feature flag
  • client.Flagship.Apps.Flags.Changelog.List() - List flag changelog
  • client.Flagship.Apps.Evaluate.Get() - Evaluate flags for an app

OriginTLSComplianceModes (client.OriginTLSComplianceModes)

• NEW SERVICE: Origin TLS compliance mode settings
  • client.OriginTLSComplianceModes.Edit() - Edit compliance mode
  • client.OriginTLSComplianceModes.Get() - Get compliance mode

CsamScanner (client.CsamScanner)

• NEW SERVICE: CSAM scanner third-party settings
  • client.CsamScanner.Edit() - Edit CSAM scanner settings
  • client.CsamScanner.Get() - Get CSAM scanner settings

TenantCustomNameservers (client.TenantCustomNameservers)

• NEW SERVICE: Tenant-scoped custom nameservers
  • client.TenantCustomNameservers.New() - Create a tenant custom nameserver
  • client.TenantCustomNameservers.Delete() - Delete a tenant custom nameserver
  • client.TenantCustomNameservers.Get() - Get tenant custom nameservers

AI Gateway (client.AIGateway)

• client.AIGateway.CustomProviders.New() - Create a custom AI provider
• client.AIGateway.CustomProviders.List() - List custom AI providers
• client.AIGateway.CustomProviders.Delete() - Delete a custom AI provider
• client.AIGateway.CustomProviders.Get() - Get a custom AI provider

IAM (client.IAM)

• client.IAM.OAuthClients.New() - Create an OAuth client
• client.IAM.OAuthClients.Update() - Update an OAuth client
• client.IAM.OAuthClients.List() - List OAuth clients
• client.IAM.OAuthClients.Delete() - Delete an OAuth client
• client.IAM.OAuthClients.DeleteRotatedSecret() - Delete a rotated client secret
• client.IAM.OAuthClients.Get() - Get an OAuth client
• client.IAM.OAuthClients.RotateSecret() - Rotate an OAuth client secret
• client.IAM.OAuthScopes.List() - List available OAuth scopes

Magic Transit (client.MagicTransit)

• client.MagicTransit.IPSECTunnels.PSKSet() - Set a pre-shared key for IPSEC tunnels
• client.MagicTransit.Cf1Sites.New() - Create a CF1 site
• client.MagicTransit.Cf1Sites.Update() - Update a CF1 site
• client.MagicTransit.Cf1Sites.List() - List CF1 sites
• client.MagicTransit.Cf1Sites.Delete() - Delete a CF1 site
• client.MagicTransit.Cf1Sites.Get() - Get a CF1 site
• client.MagicTransit.Cf1Sites.Ramps.New() - Create a CF1 site ramp
• client.MagicTransit.Cf1Sites.Ramps.Update() - Update a CF1 site ramp
• client.MagicTransit.Cf1Sites.Ramps.List() - List CF1 site ramps
• client.MagicTransit.Cf1Sites.Ramps.Delete() - Delete a CF1 site ramp
• client.MagicTransit.Cf1Sites.Ramps.Get() - Get a CF1 site ramp

SSL (client.SSL)

• client.SSL.AutoOriginTLSKex.Edit() - Edit auto origin TLS key exchange settings
• client.SSL.AutoOriginTLSKex.Get() - Get auto origin TLS key exchange settings

DNS (client.DNS)

• client.DNS.Usage.Zone.Get() - Get zone-level DNS usage
• client.DNS.Usage.Account.Get() - Get account-level DNS usage

Zero Trust (client.ZeroTrust)

• client.ZeroTrust.Access.IdentityProviders.FederationGrants.New() - Create an IDP federation grant
• client.ZeroTrust.Access.IdentityProviders.FederationGrants.Update() - Update an IDP federation grant
• client.ZeroTrust.Access.IdentityProviders.FederationGrants.List() - List IDP federation grants
• client.ZeroTrust.Access.IdentityProviders.FederationGrants.Delete() - Delete an IDP federation grant
• client.ZeroTrust.Access.IdentityProviders.FederationGrants.Get() - Get an IDP federation grant
• client.ZeroTrust.Access.AIControl.McpServers.New() - Create an MCP server
• client.ZeroTrust.Access.AIControl.McpServers.Update() - Update an MCP server
• client.ZeroTrust.Access.AIControl.McpServers.List() - List MCP servers
• client.ZeroTrust.Access.AIControl.McpServers.Delete() - Delete an MCP server
• client.ZeroTrust.Access.AIControl.McpServers.Get() - Get an MCP server
• client.ZeroTrust.Access.AIControl.McpServers.Sync() - Sync MCP servers
• client.ZeroTrust.Access.AIControl.McpPortals.New() - Create an MCP portal
• client.ZeroTrust.Access.AIControl.McpPortals.Update() - Update an MCP portal
• client.ZeroTrust.Access.AIControl.McpPortals.List() - List MCP portals
• client.ZeroTrust.Access.AIControl.McpPortals.Delete() - Delete an MCP portal
• client.ZeroTrust.Access.AIControl.McpPortals.Get() - Get an MCP portal
• client.ZeroTrust.DEX.Devices.ISPs.List() - List device ISPs
• client.ZeroTrust.DEX.FleetStatus.Devices.List() - List fleet status devices
• client.ZeroTrust.DEX.Rules.New() - Create a DEX rule
• client.ZeroTrust.DEX.Rules.Update() - Update a DEX rule
• client.ZeroTrust.DEX.Rules.List() - List DEX rules
• client.ZeroTrust.DEX.Rules.Delete() - Delete a DEX rule
• client.ZeroTrust.DEX.Rules.Get() - Get a DEX rule
• client.ZeroTrust.DEX.Commands.New() - Create a DEX command
• client.ZeroTrust.DEX.Commands.List() - List DEX commands
• client.ZeroTrust.DEX.Commands.Devices.List() - List DEX command devices
• client.ZeroTrust.DEX.Commands.Downloads.Get() - Download DEX command results
• client.ZeroTrust.DEX.Commands.Quota.Get() - Get DEX command quota
• client.ZeroTrust.DEX.WARPChangeEvents.List() - List WARP change events
• client.ZeroTrust.DLP.CustomPromptTopics.New() - Create a DLP custom prompt topic
• client.ZeroTrust.DLP.CustomPromptTopics.Update() - Update a DLP custom prompt topic
• client.ZeroTrust.DLP.CustomPromptTopics.List() - List DLP custom prompt topics
• client.ZeroTrust.DLP.CustomPromptTopics.Delete() - Delete a DLP custom prompt topic
• client.ZeroTrust.DLP.CustomPromptTopics.Get() - Get a DLP custom prompt topic
• client.ZeroTrust.DLP.SensitivityGroups.New() - Create a DLP sensitivity group
• client.ZeroTrust.DLP.SensitivityGroups.Update() - Update a DLP sensitivity group
• client.ZeroTrust.DLP.SensitivityGroups.List() - List DLP sensitivity groups
• client.ZeroTrust.DLP.SensitivityGroups.Delete() - Delete a DLP sensitivity group
• client.ZeroTrust.DLP.SensitivityGroups.Get() - Get a DLP sensitivity group
• client.ZeroTrust.DLP.SensitivityGroups.Levels.New() - Create a sensitivity level
• client.ZeroTrust.DLP.SensitivityGroups.Levels.Update() - Update a sensitivity level
• client.ZeroTrust.DLP.SensitivityGroups.Levels.List() - List sensitivity levels
• client.ZeroTrust.DLP.SensitivityGroups.Levels.Delete() - Delete a sensitivity level
• client.ZeroTrust.DLP.SensitivityGroups.Levels.Get() - Get a sensitivity level
• client.ZeroTrust.DLP.SensitivityGroups.Levels.Order.Update() - Update sensitivity level order
• client.ZeroTrust.DLP.SensitivityGroups.Levels.Order.Get() - Get sensitivity level order
• client.ZeroTrust.DLP.DataTagCategories.New() - Create a DLP data tag category
• client.ZeroTrust.DLP.DataTagCategories.Update() - Update a DLP data tag category
• client.ZeroTrust.DLP.DataTagCategories.List() - List DLP data tag categories
• client.ZeroTrust.DLP.DataTagCategories.Delete() - Delete a DLP data tag category
• client.ZeroTrust.DLP.DataTagCategories.Get() - Get a DLP data tag category
• client.ZeroTrust.DLP.DataTagCategories.DataTags.New() - Create a data tag
• client.ZeroTrust.DLP.DataTagCategories.DataTags.Update() - Update a data tag
• client.ZeroTrust.DLP.DataTagCategories.DataTags.List() - List data tags
• client.ZeroTrust.DLP.DataTagCategories.DataTags.Delete() - Delete a data tag
• client.ZeroTrust.DLP.DataTagCategories.DataTags.Get() - Get a data tag
• client.ZeroTrust.DLP.DataClasses.New() - Create a DLP data class
• client.ZeroTrust.DLP.DataClasses.Update() - Update a DLP data class
• client.ZeroTrust.DLP.DataClasses.List() - List DLP data classes
• client.ZeroTrust.DLP.DataClasses.Delete() - Delete a DLP data class
• client.ZeroTrust.DLP.DataClasses.Get() - Get a DLP data class
• client.ZeroTrust.Tunnels.WARPConnector.Configurations.Update() - Update WARP connector configuration
• client.ZeroTrust.Tunnels.WARPConnector.Configurations.Get() - Get WARP connector configuration

Resource Sharing (client.ResourceSharing)

• client.ResourceSharing.Resources.Update() - Update a shared resource
• client.ResourceSharing.Resources.Delete() - Delete a shared resource
• client.ResourceSharing.Resources.Get() - Get a shared resource

Zones (client.Zones)

• client.Zones.CT.Alerting.Edit() - Edit CT alerting subscription
• client.Zones.CT.Alerting.Get() - Get CT alerting subscription

Organizations (client.Organizations)

• client.Organizations.Accounts.New() - Create an organization account
• client.Organizations.Accounts.List() - List organization accounts

User (client.User)

• client.User.Tenants.List() - List user tenants

Workflows (client.Workflows)

• client.Workflows.Versions.Graph() - Get workflow version graph
• New rollback enum value on InstanceGetResponseStepsObjectType

---

Chores

• ai_gateway: update generated types and methods
• csam_scanner: update generated types and methods
• d1: update generated types and methods
• dns: update generated types and methods
• email_sending: update generated types and methods
• flagship: update generated types and methods
• iam: update generated types and methods
• magic_transit: update generated types and methods
• organizations: update generated types and methods
• origin_tls_compliance_modes: update generated types and methods
• radar: update generated types and methods
• realtime_kit: update generated types and methods
• resource_sharing: update generated types and methods
• ssl: update generated types and methods
• tenant_custom_nameservers: update generated types and methods
• tenants: update generated types and methods
• user: update generated types and methods
• workflows: update generated types and methods
• zero_trust: update generated types and methods
• zones: update generated types and methods

Deprecations

None.

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.