Driftwatch

Cloudflare / Cloudflare API /

Breakingdirection flip: their tools call this safe

foundation_dns is no longer accepted

What changed

Usually ignored rather than rejected, so the call succeeds and does something subtly different.

Affects foundation_dns on dns-settings_dns-settings-patch reachable from 2 operations. Grep for it: nothing else will tell you.

Who is affected

Code that sends Cloudflare's dns-settings_dns-settings-patch objects, used by 4 Cloudflare operations.

Before and after

WhereBeforeAfter
dns-settings_dns-settings-patch.foundation_dnspresentabsent
dns-settings_dns-settings-zone-patch.foundation_dnspresentabsent
dns-settings_dns-settings-account-patch.foundation_dnspresentabsent
dns-settings_dns-settings-base.foundation_dnspresentabsent

Code that breaks

await client.post("/…", {
  // foundation_dns is now ignored, not rejected
  foundation_dns: value,
});

Based on Cloudflare’s published API specification. How severity is decided.