Changelog: 2026

This changelog provides information on changes across the Fastly platform, including to the VCL language, our public API, CLI, the Terraform provider, Terraform provider (beta), Compute Rust SDK, Compute JavaScript SDK, Compute Go SDK, and the Next-Gen WAF.

• September 7, 2026
  JavaScript SDKFixes

  JavaScript SDK 3.45.1

• September 3, 2026
  Next-Gen WAF announcementsAdditions

  Added virtual patch for CVE-2026-82329 (Artifactory Authentication Bypass)

• September 3, 2026
  JavaScript SDKFixesAdditions

  JavaScript SDK 3.45.0

• September 1, 2026
  APIAdditions

  Add status 499 metric to Historical Stats, Real-Time Analytics, and Domain Inspector APIs

• September 1, 2026
  APIFixes

  Correct documented filter values for Next-Gen WAF account rules

• August 25, 2026
  Next-Gen WAF announcementsAdditions

  Added virtual patch for CVE-2026-75604 (Next.js Windows Cache Traversal RCE)

• August 24, 2026
  APIAdditions

  Add headless bot metric to Historical Stats and Real-Time Analytics APIs

• August 18, 2026
  Next-Gen WAF agentChanges

  Next-Gen WAF agent 4.81.0

• August 11, 2026
  APIAdditions

  Add Private Access Token (PAT) challenge metrics to Historical Stats and Real-Time Analytics APIs

• August 4, 2026
  APIChanges

  Next-Gen WAF: Error responses now documented for all endpoints