release: 5.2.0

[stainless-app]

Automated Release PR

5.2.0 (2026-05-21)

Full Changelog: v5.1.0...v5.2.0

Breaking Changes

Cache - Origin Cloud Regions Reworked

The cache.origin_cloud_regions resource has been significantly reworked.
Endpoints changed from /zones/{zone_id}/cache/origin_cloud_regions to
/zones/{zone_id}/origin/cloud_regions, several methods were removed or
renamed, and return types were consolidated.

Removed methods:

• create -- replaced by update (PUT single item)
• edit -- removed (use update instead)
• bulk_edit -- renamed to bulk_update

Changed return types:

• list now returns SyncV4PagePaginationArray[OriginCloudRegion] (was Optional[OriginCloudRegionListResponse])
• get now returns Optional[OriginCloudRegion] (was Optional[OriginCloudRegionGetResponse])

Removed types:

• OriginCloudRegionCreateResponse
• OriginCloudRegionListResponse
• OriginCloudRegionBulkEditResponse
• OriginCloudRegionEditResponse
• OriginCloudRegionGetResponse

New types:

from cloudflare.types.cache import (
    OriginCloudRegion,
    OriginCloudRegionBulkUpdateResponse,
)

API Gateway - Discovery Operation Edit Removed

The api_gateway.discovery.operations.edit method and its associated
OperationEditResponse type have been removed. Use bulk_edit instead.

Features

• ddos_protection: add new DDoS Protection service (87f7e95)
• ai_security: add new AI Security service (29cb585)
• ai_gateway: add billing sub-resource with credit balance, invoices, usage history, topup, and spending limit (4923bbb)
• r2: add bucket objects sub-resource with list, delete, get, and upload (72d2149)
• zero_trust: add access SAML certificates, identity provider SAML certificate, and resource library (aeff7d5)
• load_balancers: add monitor group references sub-resource (bb6815d)
• radar: add BGP IPs top ASes and RPKI ROAs timeseries (fb2f0c4)
• cache: add purge_environment method and smart_tiered_cache.create method (b7ae845)
• workers: add secrets.bulk_update method (0bdb685)
• workers_for_platforms: add secrets.bulk_update method (7bfed3c)
• secrets_store: stores.delete now accepts optional params (636414f)
• ai_gateway: dynamic_routing.list now accepts optional params (4923bbb)

DDoS Protection (NEW SERVICE)

New top-level service at client.ddos_protection for managing Advanced TCP
Protection configurations including allowlists, prefixes, SYN protection
(filters and rules), TCP flow protection (filters and rules), and protection
status.

from cloudflare.types.ddos_protection.advanced_tcp_protection import (
    AllowlistCreateResponse,
    AllowlistListResponse,
    PrefixCreateResponse,
    PrefixListResponse,
    StatusEditResponse,
    StatusGetResponse,
)

Key methods:

• ddos_protection.advanced_tcp_protection.allowlist.create/list/bulk_delete
• ddos_protection.advanced_tcp_protection.prefixes.create/list/bulk_create/bulk_delete
• ddos_protection.advanced_tcp_protection.syn_protection.filters.create/list/bulk_delete
• ddos_protection.advanced_tcp_protection.syn_protection.rules.create/list/bulk_delete
• ddos_protection.advanced_tcp_protection.tcp_flow_protection.filters.create/list/bulk_delete
• ddos_protection.advanced_tcp_protection.tcp_flow_protection.rules.create/list/bulk_delete
• ddos_protection.advanced_tcp_protection.status.edit/get

Each collection also has an .items sub-resource for individual item
delete, edit, and get operations.

AI Security (NEW SERVICE)

New top-level service at client.ai_security for managing zone-level AI
security settings and custom topics.

from cloudflare.types.ai_security import (
    AISecurityUpdateResponse,
    AISecurityGetResponse,
    CustomTopicUpdateResponse,
    CustomTopicGetResponse,
)

Methods:

• ai_security.update/get -- manage AI security settings for a zone
• ai_security.custom_topics.update/get -- manage custom topics

AI Gateway - Billing

New client.ai_gateway.billing sub-resource with credit balance, invoice
history/preview, usage history, topup management, and spending limits.

from cloudflare.types.ai_gateway import (
    BillingCreditBalanceResponse,
    BillingInvoiceHistoryResponse,
    BillingInvoicePreviewResponse,
    BillingUsageHistoryResponse,
)
from cloudflare.types.ai_gateway.billing import (
    TopupCreateResponse,
    TopupStatusResponse,
    SpendingLimitGetResponse,
)
from cloudflare.types.ai_gateway.billing.topup import (
    ConfigCreateResponse,
    ConfigGetResponse,
)

R2 - Bucket Objects

New client.r2.buckets.objects sub-resource for managing objects within R2
buckets.

from cloudflare.types.r2.buckets import (
    ObjectListResponse,
    ObjectDeleteResponse,
    ObjectUploadResponse,
)

Methods:

• r2.buckets.objects.list -- list objects in a bucket (cursor-paginated)
• r2.buckets.objects.delete -- delete an object
• r2.buckets.objects.get -- download an object (returns BinaryAPIResponse)
• r2.buckets.objects.upload -- upload an object

Zero Trust - SAML Certificates and Resource Library

New sub-resources:

Access SAML Certificates (client.zero_trust.access.saml_certificates):

• list, get, get_pem (returns BinaryAPIResponse), rotate

Identity Provider SAML Certificate (client.zero_trust.identity_providers.saml_certificate):

• create

Resource Library (client.zero_trust.resource_library):

• applications.list/get -- browse resource library applications
• categories.list/get -- browse resource library categories

Chores

• acm: update generated types and methods (8b03b3d)
• ai: update generated types and methods (2f6bdf7)
• api_gateway: update generated types and methods (5b79a34)
• cloudforce_one: update generated types and methods (fc72368)
• d1: update generated types and methods (6a05b68)
• email_security: update generated types and methods (c89d1ce)
• intel: update generated types and methods (b097e5d)
• logpush: update generated types and methods (f26713b)
• resource_sharing: update generated types and methods (792bf24)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

[stainless-app]

🤖 Release is at https://github.com/cloudflare/cloudflare-python/releases/tag/v5.2.0 🌻