[Docs Site] Migrate WAF to changelogs (#23872)

* [Docs Site] Migrate WAF to changelogs

* Title and RSS tweaks

* redirects

* File rename + update redirects

* tweak

* scheduled

* Update src/content/changelog/waf/2025-07-21-scheduled-waf-release.mdx

* Two tweaks

* scheduled prop

* re-add

* final redirect

* remove previous rss line

* finally

* remove unused property

* fix?

* fix

* review lint

* Remove test

* style guide page & fix filter logic

* remove debug

* Update codeowners

* one more update

* codeowner update

---------

Co-authored-by: kodster28 <[email protected]>

Author: KianNH

.github/CODEOWNERS

@@ -49,8 +49,9 @@
 
 # Changelogs
 
-/src/content/changelog/ @cloudflare/pm-changelogs @cloudflare/pcx-cloudflare-one
-/src/assets/images/changelog/ @cloudflare/pm-changelogs @cloudflare/pcx-cloudflare-one
+/src/content/changelog/ @cloudflare/pm-changelogs @cloudflare/pcx-technical-writing
+/src/content/changelog/waf/ @cloudflare/firewall @vs-mg @cloudflare/pm-changelogs @cloudflare/pcx-technical-writing
+/src/assets/images/changelog/ @cloudflare/pm-changelogs @cloudflare/pcx-technical-writing
 /src/assets/images/ @cloudflare/pm-changelogs @cloudflare/pcx-technical-writing
 
 # Cloudflare One

public/__redirects

@@ -35,6 +35,8 @@
 /network-interconnect/changelog/index.xml /changelog/rss/network-interconnect.xml 301
 /rules/changelog/index.xml /changelog/rss/rules.xml 301
 /ssl/changelog/index.xml /changelog/rss/ssl.xml 301
+/waf/change-log/index.xml /changelog/rss/waf.xml 301
+/waf/change-log/general-updates/index.xml /changelog/rss/waf.xml 301
 
 ## legacy
 /release-notes/index.xml /changelog/rss/index.xml 301
@@ -1553,7 +1555,34 @@
 /support/firewall/tools/ /waf/ 301
 /support/firewall/tools/configuring-cloudflare-rate-limiting/ /waf/reference/legacy/old-rate-limiting/ 301
 /support/firewall/tools/troubleshooting-cloudflare-rate-limiting/ /waf/reference/legacy/old-rate-limiting/troubleshooting/ 301
+/waf/change-log/2025-01-06/ /changelog/2025-01-06-waf-release/ 301
+/waf/change-log/2025-01-13/ /changelog/2025-01-13-waf-release/ 301
+/waf/change-log/2025-01-21/ /changelog/2025-01-21-waf-release/ 301
+/waf/change-log/2025-02-11/ /changelog/2025-02-11-waf-release/ 301
+/waf/change-log/2025-02-18/ /changelog/2025-02-18-waf-release/ 301
+/waf/change-log/2025-02-24/ /changelog/2025-02-24-waf-release/ 301
+/waf/change-log/2025-03-03/ /changelog/2025-03-03-waf-release/ 301
+/waf/change-log/2025-03-10/ /changelog/2025-03-10-waf-release/ 301
+/waf/change-log/2025-03-11-emergency/ /changelog/2025-03-11-emergency-waf-release/ 301
+/waf/change-log/2025-03-17/ /changelog/2025-03-17-waf-release/ 301
+/waf/change-log/2025-03-19-emergency/ /changelog/2025-03-19-emergency-waf-release/ 301
+/waf/change-log/2025-03-22-emergency/ /changelog/2025-03-22-emergency-waf-release/ 301
+/waf/change-log/2025-04-02/ /changelog/2025-04-02-waf-release/ 301
+/waf/change-log/2025-04-14/ /changelog/2025-04-14-waf-release/ 301
+/waf/change-log/2025-04-22/ /changelog/2025-04-22-waf-release/ 301
+/waf/change-log/2025-04-26-emergency/ /changelog/2025-04-26-emergency-waf-release/ 301
+/waf/change-log/2025-05-05/ /changelog/2025-05-05-waf-release/ 301
+/waf/change-log/2025-05-19/ /changelog/2025-05-19-waf-release/ 301
+/waf/change-log/2025-05-27/ /changelog/2025-05-27-waf-release/ 301
+/waf/change-log/2025-06-02/ /changelog/2025-06-02-waf-release/ 301
+/waf/change-log/2025-06-09/ /changelog/2025-06-09-waf-release/ 301
+/waf/change-log/2025-06-16/ /changelog/2025-06-16-waf-release/ 301
+/waf/change-log/2025-07-07/ /changelog/2025-07-07-waf-release/ 301
+/waf/change-log/2025-07-14/ /changelog/2025-07-14-waf-release/ 301
+/waf/change-log/2025-07-21/ /changelog/2025-07-21-waf-release/ 301
+/waf/change-log/2025-07-21-emergency/ /changelog/2025-07-21-emergency/ 301
 /waf/change-log/historical/ /waf/change-log/historical-2019/ 301
+/waf/change-log/managed-rulesets/ /waf/change-log/ 301
 /waf/custom-rules/manage-dashboard/ /waf/custom-rules/create-dashboard/ 301
 /waf/security-analytics/ /waf/analytics/security-analytics/ 301
 /waf/custom-rules/use-cases/require-valid-hmac-token/ /waf/custom-rules/use-cases/configure-token-authentication/ 301

src/components/AvailableChangelogFeeds.astro

@@ -64,11 +64,10 @@ const productsByGroup = Object.entries(
 				</ul>
 			</Details>
 			{group === "Application security" && (
-				<Aside type="note" title="DDoS and WAF ruleset feeds">
+				<Aside type="note" title="DDoS ruleset feeds">
 					<p>
-						For <a href="/ddos-protection/">DDoS Protection</a> or{" "}
-						<a href="/waf/">WAF</a> updates to managed rulesets, please refer to
-						their independent feeds:
+						For <a href="/ddos-protection/">DDoS Protection</a> updates to
+						managed rulesets, please refer to their independent feeds:
 						<ul>
 							<li>
 								<p>
@@ -86,12 +85,6 @@ const productsByGroup = Object.entries(
 								</p>
 								<RSSButton href="/ddos-protection/change-log/http/index.xml" />
 							</li>
-							<li>
-								<p>
-									<a href="/waf/change-log/">WAF managed ruleset</a>
-								</p>
-								<RSSButton href="/waf/change-log/index.xml" />
-							</li>
 						</ul>
 					</p>
 				</Aside>

src/components/ProductChangelog.astro

@@ -22,6 +22,7 @@ const props = z
 	.and(
 		z.object({
 			hideEntry: z.string().optional(),
+			scheduled: z.boolean().default(false),
 		}),
 	);
 
@@ -37,7 +38,8 @@ if ("product" in input) {
 		return (
 			!e.data.hidden &&
 			e.data.products.some(({ id }) => id === input.product.id) &&
-			input.hideEntry !== e.id
+			input.hideEntry !== e.id &&
+			input.scheduled == e.data.scheduled
 		);
 	};
 } else {
@@ -57,6 +59,8 @@ const changelogs = await getChangelogs({ filter });
 
 <RSSButton href={rss} />
 
+{changelogs.length === 0 && <p>There are no scheduled entries at this time.</p>}
+
 {
 	changelogs.map(async (entry) => {
 		const { Content } = await render(entry);

src/content/changelog/waf/2024-05-23-improved-detection-capabilities.mdx

@@ -0,0 +1,7 @@
+---
+title: Improved detection capabilities
+description: WAF attack score now detects Base64 and Unicode escapes.
+date: 2024-05-23
+---
+
+[WAF attack score](/waf/detections/attack-score/) now automatically detects and decodes Base64 and JavaScript (Unicode escape sequences) in HTTP requests. This update is available for all customers with access to WAF attack score (Business customers with access to a single field and Enterprise customers).

src/content/changelog/waf/2024-08-29-fixed-occasional-attack-score-mismatches.mdx

@@ -0,0 +1,7 @@
+---
+title: Fixed occasional attack score mismatches
+description: Fixed mismatches between WAF attack score and subscores.
+date: 2024-08-29
+---
+
+Fixed an issue causing score mismatches between the global [WAF attack score](/waf/detections/attack-score/) and subscores. In certain cases, subscores were higher (not an attack) than expected while the global attack score was lower than expected (attack), leading to false positives.

src/content/changelog/waf/2024-11-04-new-table-in-security-analytics-and-security-events.mdx

@@ -0,0 +1,7 @@
+---
+title: New table in Security Analytics and Security Events
+description: New responsive table in Security Analytics and Events.
+date: 2024-11-04
+---
+
+Switched to a new, more responsive table in Security Analytics and Security Events.

src/content/changelog/waf/2024-11-14-security-events-pagination.mdx

@@ -0,0 +1,7 @@
+---
+title: Security Events pagination
+description: Fixed pagination and log count issues in Security Events.
+date: 2024-11-14
+---
+
+Fixed an issue with pagination in Security Events' sampled logs where some pages were missing data. Also removed the total count from the events log as these are only sampled logs.

src/content/changelog/waf/2024-12-10-change-order-of-list-items-in-ip-lists.mdx

@@ -0,0 +1,7 @@
+---
+title: Change the order of list items in IP Lists (for API and Terraform users)
+description: API and Terraform users may see changes in IP list item order.
+date: 2024-12-10
+---
+
+Due to changes in the API implementation, the order of list items in an IP list obtained via API or Terraform may change, which may cause Terraform to detect a change in Terraform state. To fix this issue, resync the Terraform state or upgrade the version of your Terraform Cloudflare provider to [version 4.44.0](https://github.com/cloudflare/terraform-provider-cloudflare/releases/tag/v4.44.0) or later.

src/content/changelog/waf/2024-12-18-improved-vpn-managed-list.mdx

@@ -0,0 +1,7 @@
+---
+title: Improved VPN Managed List
+description: Improved management of VPN IP traffic.
+date: 2024-12-18
+---
+
+Customers can now effectively manage incoming traffic identified as originating from VPN IPs. Customers with compliance restrictions can now ensure compliance with local laws and regulations. Customers with CDN restrictions can use the improved VPN Managed List to prevent unauthorized access from users attempting to bypass geographical restrictions. With the new VPN Managed List enhancements, customers can improve their overall security posture to reduce exposure to unwanted or malicious traffic.