Merge branch 'production' into reorder-nav

Author: ToriLindsay

.github/CODEOWNERS

@@ -66,7 +66,7 @@
 /src/content/docs/cloudflare-one/access-controls/ @kennyj42 @ranbel @cloudflare/pcx-technical-writing
 /src/content/docs/cloudflare-one/team-and-resources/devices/ @ranbel @cloudflare/pcx-technical-writing
 /src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/ @nikitacano @ranbel @cloudflare/pcx-technical-writing
-/src/content/docs/cloudflare-one/applications/casb/ @maxvp @cloudflare/pcx-technical-writing
+/src/content/docs/cloudflare-one/cloud-and-saas-findings/ @maxvp @cloudflare/pcx-technical-writing
 /src/content/docs/cloudflare-one/traffic-policies/ @maxvp @cloudflare/pcx-technical-writing
 /src/content/docs/cloudflare-one/remote-browser-isolation/ @deadlypants1973 @cloudflare/pcx-technical-writing
 /src/content/docs/cloudflare-one/data-loss-prevention/ @maxvp @cloudflare/pcx-technical-writing
@@ -140,7 +140,7 @@
 /src/content/docs/analytics/analytics-engine/ @irvinebroque @elithrar @cloudflare/pcx-technical-writing
 /src/content/docs/cloudflare-for-platforms/ @irvinebroque @dinasaur404 @cloudflare/pcx-technical-writing
 /src/content/docs/cloudflare-for-platforms/workers-for-platforms/ @irvinebroque @dinasaur404 @cloudflare/deploy-config @cloudflare/pcx-technical-writing
-/src/content/docs/workers/observability/ @irvinebroque @mikenomitch @rohinlohe @kodster28 @cloudflare/pcx-technical-writing
+/src/content/docs/workers/observability/ @irvinebroque @mikenomitch @nevikashah @kodster28 @cloudflare/pcx-technical-writing
 /src/content/docs/workers/static-assets @irvinebroque @GregBrimble @WalshyDev @kodster28 @cloudflare/deploy-config @cloudflare/pcx-technical-writing
 /src/content/docs/workflows/ @elithrar @celso @cloudflare/pcx-technical-writing
 /src/content/docs/sandbox/ @whoiskatrin @ghostwriternr @cloudflare/pcx-technical-writing @cloudflare/ai-agents

.github/workflows/anchor-link-audit.yml

@@ -39,7 +39,6 @@ jobs:
       - run: npm run build
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NODE_OPTIONS: "--max-old-space-size=4192"
 
       - name: Install dependencies
         run: curl https://htmltest.wjdp.uk | bash

.github/workflows/ci.yml

@@ -65,7 +65,6 @@ jobs:
       - run: npm run build
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NODE_OPTIONS: "--max-old-space-size=4192"
           RUN_LINK_CHECK: true
 
       - run: npm run check:worker

.github/workflows/close-stale-issues-prs.yml

@@ -0,0 +1,26 @@
+# Close stale issues and pull requests (uses actions/stale@v4 with GITHUB_TOKEN)
+on:
+  schedule:
+    - cron: "0 0 * * 1" # weekly run: every Monday at 00:00 UTC
+  workflow_dispatch:
+
+permissions:
+  issues: write
+  pull-requests: write
+
+name: Close stale issues and PRs
+
+jobs:
+  stale:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Run stale action
+        uses: actions/stale@v4
+        with:
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          stale-issue-message: "Hey there, we've marked this pull request as stale because there's no recent activity on it. This label helps us identify long-standing issues in our repo (and not used to auto-close issues)."
+          stale-pr-message: "Hey there, we've marked this pull request as stale because there's no recent activity on it. This label is helps us identify PRs that might need updates (or to be closed out by our team if no longer relevant)."
+          days-before-stale: 35
+          # setting to a negative number means they'll never be autoclosed
+          days-before-close: -1
+          operations-per-run: 100

.github/workflows/publish-preview.yml

@@ -33,7 +33,6 @@ jobs:
         name: Build
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NODE_OPTIONS: --max-old-space-size=6144
       - name: Deploy to Cloudflare Workers
         env:
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}

.github/workflows/publish-production.yml

@@ -28,7 +28,6 @@ jobs:
         name: Build
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NODE_OPTIONS: --max-old-space-size=6144
       - run: npx wrangler deploy
         name: Deploy to Cloudflare Workers
         env:

assets/images/security-center/2025-10-24RFITokens.png

@@ -11,6 +11,8 @@ import react from "@astrojs/react";
 
 import { readdir } from "fs/promises";
 import { fileURLToPath } from "url";
+import { execSync } from "child_process";
+import { existsSync } from "fs";
 
 import remarkValidateImages from "./src/plugins/remark/validate-images";
 
@@ -59,6 +61,52 @@ const customCss = await autogenStyles();
 
 const runLinkCheck = process.env.RUN_LINK_CHECK || false;
 
+/**
+ * Get the last Git modification date for a file
+ * @param filePath - Absolute path to the file
+ * @returns ISO date string or null if not available
+ */
+function getGitLastModified(filePath: string): string | null {
+	try {
+		const result = execSync(`git log -1 --format=%cI -- "${filePath}"`, {
+			encoding: "utf-8",
+		}).trim();
+		return result || null;
+	} catch (_error) {
+		return null;
+	}
+}
+
+/**
+ * Convert a sitemap URL to the corresponding source file path
+ * @param url - The full URL from the sitemap
+ * @returns Absolute file path or null if not found
+ */
+function urlToFilePath(url: string): string | null {
+	try {
+		const urlObj = new URL(url);
+		const pathname = urlObj.pathname.replace(/\/$/, ""); // Remove trailing slash
+
+		// Try different file extensions and paths
+		const possiblePaths = [
+			`./src/content/docs${pathname}.md`,
+			`./src/content/docs${pathname}.mdx`,
+			`./src/content/docs${pathname}/index.md`,
+			`./src/content/docs${pathname}/index.mdx`,
+		];
+
+		for (const path of possiblePaths) {
+			if (existsSync(path)) {
+				return path;
+			}
+		}
+
+		return null;
+	} catch (_error) {
+		return null;
+	}
+}
+
 // https://astro.build/config
 export default defineConfig({
 	site: "https://developers.cloudflare.com",
@@ -194,7 +242,18 @@ export default defineConfig({
 				return true;
 			},
 			serialize(item) {
-				item.lastmod = new Date().toISOString();
+				const filePath = urlToFilePath(item.url);
+				if (filePath) {
+					const gitDate = getGitLastModified(filePath);
+					if (gitDate) {
+						item.lastmod = gitDate;
+					}
+				} else {
+					console.warn(
+						`[sitemap] Could not find last modified for ${item.url} - setting to now`,
+					);
+					item.lastmod = new Date().toISOString();
+				}
 				return item;
 			},
 		}),

astro.config.ts

@@ -14,15 +14,19 @@ fs.writeFileSync(
 	"utf-8",
 );
 
+const linuxDistributions = ["Ubuntu", "Debian", "CentOS", "Fedora"];
+
 const linesToRemove = [
 	"For related Cloudflare for Teams documentation please see: https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp",
 	"For Zero Trust documentation please see: <https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp>",
 	"For related Consumer documentation please see: https://developers.cloudflare.com/warp-client/",
 	"For Consumer documentation please see: <https://developers.cloudflare.com/warp-client/>",
 ];
 
-for (const { platform } of platforms) {
-	const isLinux = platform !== "windows" && platform !== "macos";
+for (const { platform, display_name } of platforms) {
+	const isLinux = linuxDistributions.some((dist) =>
+		display_name.includes(dist),
+	);
 
 	for (const track of ["ga", "beta"]) {
 		fetch(`${BASE_URL}/update/json/${platform}/${track}`)
@@ -63,9 +67,17 @@ for (const { platform } of platforms) {
 								);
 
 								existingFile.linuxPlatforms[platform] = item.packageSize;
+							} else {
+								console.log(
+									`${platform} already exists in Linux ${track} ${item.version}.`,
+								);
 							}
 
-							fs.writeFileSync(path, YAML.stringify(existingFile), "utf-8");
+							fs.writeFileSync(
+								path,
+								YAML.stringify(existingFile, { blockQuote: "literal" }),
+								"utf-8",
+							);
 						} else {
 							console.log(
 								`${platform} ${track} ${item.version} already exists.`,
@@ -75,7 +87,7 @@ for (const { platform } of platforms) {
 						return;
 					}
 
-					console.log(`Saving ${track} ${item.version}.`);
+					console.log(`Saving ${platform} ${track} ${item.version}.`);
 
 					let markdown = item.releaseNotes;
 
@@ -103,14 +115,17 @@ for (const { platform } of platforms) {
 
 					fs.writeFileSync(
 						path,
-						YAML.stringify({
-							...item,
-							releaseNotes,
-							platformName,
-							linuxPlatforms: isLinux
-								? { [platform]: item.packageSize }
-								: undefined,
-						}),
+						YAML.stringify(
+							{
+								...item,
+								releaseNotes,
+								platformName,
+								linuxPlatforms: isLinux
+									? { [platform]: item.packageSize }
+									: undefined,
+							},
+							{ blockQuote: "literal" },
+						),
 						"utf-8",
 					);
 				});