Driftwatch

Cloudflare / Cloudflare API /

Breakingdirection flip: their tools call this safe

network is no longer accepted

What changed

Usually ignored rather than rejected, so the call succeeds and does something subtly different.

Affects network on PATCH /accounts/{account_id}/zerotrust/subnets/warp/{subnet_id}. Grep for it: nothing else will tell you.

Who is affected

Code that sends PATCH /accounts/{account_id}/zerotrust/subnets/warp/{subnet_id} (network).

Before and after

WhereBeforeAfter
PATCH /accounts/{account_id}/zerotrust/subnets/warp/{subnet_id} · networkpresentabsent

Code that breaks

await client.post("/accounts/{account_id}/zerotrust/subnets/warp/{subnet_id}", {
  // network is now ignored, not rejected
  network: value,
});

Based on Cloudflare’s published API specification. How severity is decided.