# What changed in @astrojs/cloudflare

> 11 changes in @astrojs/cloudflare 13 to 14 from its official release notes, upgrade guides and advisories: 1 breaking, 1 security. Each one cited. Sources checked 2026-10-28. HTML: https://unstale.sh/npm/@astrojs/cloudflare/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## @astrojs/cloudflare 14

### Breaking changes

- This release requires astro@^7.4.0. (14.4.0) — [release notes](https://github.com/withastro/astro/releases/tag/%40astrojs/cloudflare%4014.4.0)

### Behavior and default changes

- Image processing on prerendered pages now uses Astro's built-in image pipeline, so images behave the same as on other adapters. (14.4.0) — [release notes](https://github.com/withastro/astro/releases/tag/%40astrojs/cloudflare%4014.4.0)

### Fixes and other changes

- astro sync, astro check, and astro build no longer overwrite the dependency cache of a running astro dev server and cause it to fail. (14.4.2) — [release notes](https://github.com/withastro/astro/releases/tag/%40astrojs/cloudflare%4014.4.2)
- The endpoint now responds with a 404 or 400 when href points to a missing file or a file that isn't an image, instead of returning a 500 error. (14.4.2) — [release notes](https://github.com/withastro/astro/releases/tag/%40astrojs/cloudflare%4014.4.2)
- Options passed to sharpImageService() are now respected when generating images at build time with imageService: 'compile'. (14.4.2) — [release notes](https://github.com/withastro/astro/releases/tag/%40astrojs/cloudflare%4014.4.2)
- Fixes custom src/fetch.ts rendering truncated pages without islands or hoisted scripts in astro dev when prerenderEnvironment: 'node' is set. (14.4.2) — [release notes](https://github.com/withastro/astro/releases/tag/%40astrojs/cloudflare%4014.4.2)
- Fixes Cannot find package errors when prismjs is not hoisted, including with pnpm's global virtual store or hoist=false. (14.4.1) — [release notes](https://github.com/withastro/astro/releases/tag/%40astrojs/cloudflare%4014.4.1)
- The assetQueryParams option is now applied to images on prerendered pages the same way as everywhere else. (14.4.0) — [release notes](https://github.com/withastro/astro/releases/tag/%40astrojs/cloudflare%4014.4.0)
- The build.assetsPrefix option is now applied to images on prerendered pages the same way as everywhere else. (14.4.0) — [release notes](https://github.com/withastro/astro/releases/tag/%40astrojs/cloudflare%4014.4.0)
- Images optimized with the Cloudflare Images binding are now properly cached between builds. (14.4.0) — [release notes](https://github.com/withastro/astro/releases/tag/%40astrojs/cloudflare%4014.4.0)

## @astrojs/cloudflare 13

### Security

- Cloudflare has SSRF via redirect following through its image-binding-transform endpoint (incomplete fix for GHSA-qpr4) (13.1.10) — [security advisory](https://github.com/advisories/GHSA-88GM-J2WX-58H6)