[Docs Site] Migrate CF1 release notes to changelog

src/components/ProductChangelog.astro

@@ -0,0 +1,52 @@
+---
+import { getChangelogs, type GetChangelogsOptions } from "~/util/changelog";
+import { reference } from "astro:content";
+import { z } from "astro:schema";
+import { getCollection, render } from "astro:content";
+import { slug } from "github-slugger";
+import { LinkButton } from "@astrojs/starlight/components";
+
+const props = z
+	.object({
+		product: reference("products"),
+	})
+	.or(
+		z.object({
+			area: z.string(),
+		}),
+	);
+
+const input = await props.parseAsync(Astro.props);
+
+let filter: GetChangelogsOptions["filter"];
+let rss: string;
+
+if ("product" in input) {
+	rss = `/changelog/rss/${input.product}.xml`;
+
+	filter = (e) => {
+		return e.data.products.some(({ id }) => id === input.product.id);
+	};
+} else {
+	rss = `/changelog/rss/${slug(input.area)}.xml`;
+
+	const products = await getCollection("products", (e) => {
+		return e.data.product.group === input.area;
+	});
+
+	filter = (e) => {
+		return e.data.products.some((x) => products.some((y) => x.id === y.id));
+	};
+}
+
+const changelogs = await getChangelogs({ filter });
+---
+
+<LinkButton href={rss} target="_blank">Subscribe to RSS</LinkButton>
+
+{
+	changelogs.map(async (entry) => {
+		const { Content } = await render(entry);
+		return <Content />;
+	})
+}

src/components/index.ts

@@ -38,8 +38,9 @@ export { default as PagesBuildPresetsTable } from "./PagesBuildPresetsTable.astr
 export { default as PagesLanguageSupport } from "./PagesLanguageSupport.astro";
 export { default as Plan } from "./Plan.astro";
 export { default as PlanInfo } from "./PlanInfo.astro";
-export { default as ProductReleaseNotes } from "./ProductReleaseNotes.astro";
+export { default as ProductChangelog } from "./ProductChangelog.astro";
 export { default as ProductFeatures } from "./ProductFeatures.astro";
+export { default as ProductReleaseNotes } from "./ProductReleaseNotes.astro";
 export { default as ProductsByTag } from "./ProductsByTag.astro";
 export { default as PublicStats } from "./PublicStats.astro";
 export { default as RelatedProduct } from "./RelatedProduct.astro";

src/content/changelog/access/2023-06-23-access-q2-roundup.mdx

@@ -0,0 +1,11 @@
+---
+title: Access - Q2/2023 roundup
+description: Q2/2023 roundup for Access changelogs.
+date: 2023-06-23T00:00:00.000Z
+products:
+- access
+---
+
+### 2023-06-23 - Custom block pages for Access applications
+
+Allow Access admins to customize the block pages presented by Access to end users.

src/content/changelog/access/2023-09-15-access-q3-roundup.mdx

@@ -0,0 +1,27 @@
+---
+title: Access - Q3/2023 roundup
+description: Q3/2023 roundup for Access changelogs.
+date: 2023-09-15T00:00:00.000Z
+products:
+- access
+---
+
+### 2023-09-15 - App launcher supports tags and filters
+
+Access admins can now tag applications and allow users to filter by those tags in the App Launcher.
+
+### 2023-09-15 - App launcher customization
+
+Allow Access admins to configure the App Launcher page within Zero Trust.
+
+### 2023-09-15 - View active Access user identities in the dashboard and API
+
+Access admins can now view the full contents of a user's identity and device information for all active application sessions.
+
+### 2023-09-08 - Custom OIDC claims for named IdPs
+
+Access admins can now add custom claims to the existing named IdP providers. Previously this was locked to the generic OIDC provider.
+
+### 2023-08-02 - Azure AD authentication contexts
+
+Support Azure AD authentication contexts directly in Access policies.

src/content/changelog/access/2023-12-20-access-q4-roundup.mdx

@@ -0,0 +1,15 @@
+---
+title: Access - Q4/2023 roundup
+description: Q4/2023 roundup for Access changelogs.
+date: 2023-12-20T00:00:00.000Z
+products:
+- access
+---
+
+### 2023-12-20 - Unique Entity IDs in Access for SaaS
+
+All new Access for SaaS applications have unique Entity IDs. This allows for multiple integrations with the same SaaS provider if required. The unique Entity ID has the application audience tag appended. Existing apps are unchanged.
+
+### 2023-12-15 - Default relay state support in Access for SaaS
+
+Allows Access admins to set a default relay state on Access for SaaS apps.

src/content/changelog/access/2024-02-22-access-q1-roundup.mdx

@@ -0,0 +1,15 @@
+---
+title: Access - Q1/2024 roundup
+description: Q1/2024 roundup for Access changelogs.
+date: 2024-02-22T00:00:00.000Z
+products:
+- access
+---
+
+### 2024-02-22 - Access for SaaS OIDC Support
+
+Access for SaaS applications can be setup with OIDC as an authentication method. OIDC and SAML 2.0 are now both fully supported.
+
+### 2024-02-22 - WARP as an identity source for Access
+
+Allow users to log in to Access applications with their WARP session identity. Users need to reauthenticate based on default session durations. WARP authentication identity must be turned on in your device enrollment permissions and can be enabled on a per application basis.

src/content/changelog/access/2024-06-06-access-q2-roundup.mdx

@@ -0,0 +1,19 @@
+---
+title: Access - Q2/2024 roundup
+description: Q2/2024 roundup for Access changelogs.
+date: 2024-06-06T00:00:00.000Z
+products:
+- access
+---
+
+### 2024-06-06 - Scalability improvements to the App Launcher
+
+Applications now load more quickly for customers with a large number of applications or complex policies.
+
+### 2024-04-28 - Add option to bypass CORS to origin server
+
+Access admins can [defer all CORS enforcement to their origin server](/cloudflare-one/identity/authorization-cookie/cors/#bypass-options-requests-to-origin) for specific Access applications.
+
+### 2024-04-15 - Zero Trust User identity audit logs
+
+All user identity changes via SCIM or Authentication events are logged against a user's registry identity.

src/content/changelog/access/2024-08-26-access-q3-roundup.mdx

@@ -0,0 +1,11 @@
+---
+title: Access - Q3/2024 roundup
+description: Q3/2024 roundup for Access changelogs.
+date: 2024-08-26T00:00:00.000Z
+products:
+- access
+---
+
+### 2024-08-26 - Reduce automatic seat deprovisioning minimum to 1 month, down from 2 months.
+
+Admins can now configure Zero Trust seats to [automatically expire](/cloudflare-one/identity/users/seat-management/#enable-seat-expiration) after 1 month of user inactivity. The previous minimum was 2 months.

src/content/changelog/access/2024-12-04-access-q4-roundup.mdx

@@ -0,0 +1,15 @@
+---
+title: Access - Q4/2024 roundup
+description: Q4/2024 roundup for Access changelogs.
+date: 2024-12-04T00:00:00.000Z
+products:
+- access
+---
+
+### 2024-12-04 - SCIM GA for Okta and Microsoft Entra ID
+
+Cloudflare's SCIM integrations with [Okta](/cloudflare-one/identity/idp-integration/okta/#synchronize-users-and-groups) and [Microsoft Entra ID](/cloudflare-one/identity/idp-integration/entra-id/#synchronize-users-and-groups) (formerly AzureAD) are now out of beta and generally available (GA) for all customers. These integrations can be used for Access and Gateway policies and Zero Trust user management. Note: This GA release does not include [Dashboard SSO SCIM](/fundamentals/setup/account/account-security/scim-setup/) support.
+
+### 2024-10-23 - SSH with Access for Infrastructure
+
+Admins can now use [Access for Infrastructure](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/) to manage privileged access to SSH servers. Access for Infrastructure provides improved control and visibility over who accessed what service and what they did during their SSH session. Access for Infrastructure also eliminates the risk and overhead associated with managing SSH keys by using short-lived SSH certificates to access SSH servers.

src/content/changelog/access/2025-02-12-access-q1-roundup.mdx

@@ -0,0 +1,23 @@
+---
+title: Access - Q1/2025 roundup
+description: Q1/2025 roundup for Access changelogs.
+date: 2025-02-12T00:00:00.000Z
+products:
+- access
+---
+
+### 2025-02-12 - Access policies support filtering
+
+You can now filter Access policies by their action, selectors, rule groups, and assigned applications.
+
+### 2025-02-11 - Private self-hosted applications and reusable policies GA
+
+[Private self-hosted applications](/cloudflare-one/applications/non-http/self-hosted-private-app/) and [reusable Access policies](/cloudflare-one/policies/access/policy-management/) are now generally available (GA) for all customers.
+
+### 2025-01-21 - Access Applications support private hostnames/IPs and reusable Access policies.
+
+Cloudflare Access self-hosted applications can now be defined by [private IPs](/cloudflare-one/applications/non-http/self-hosted-private-app/), [private hostnames](/cloudflare-one/applications/non-http/self-hosted-private-app/) (on port 443) and [public hostnames](/cloudflare-one/applications/configure-apps/self-hosted-public-app/). Additionally, we made Access policies into their own object which can be reused across multiple applications. These updates involved significant updates to the overall Access dashboard experience. The updates will be slowly rolled out to different customer cohorts. If you are an Enterprise customer and would like early access, reach out to your account team.
+
+### 2025-01-15 - Logpush for SSH command logs
+
+Enterprise customers can now use Logpush to export SSH command logs for Access for Infrastructure targets.

src/content/changelog/browser-isolation/2024-03-21-browser-isolation-q1-roundup.mdx

@@ -0,0 +1,11 @@
+---
+title: Browser Isolation - Q1/2024 roundup
+description: Q1/2024 roundup for Browser Isolation changelogs.
+date: 2024-03-21T00:00:00.000Z
+products:
+- browser-isolation
+---
+
+### 2024-03-21 - Removed third-party cookie dependencies
+
+Removed dependency on third-party cookies in the isolated browser, fixing an issue that previously caused intermittent disruptions for users maintaining multi-site, cross-tab sessions in the isolated browser.

src/content/changelog/casb/2024-06-03-casb-q2-roundup.mdx

@@ -0,0 +1,19 @@
+---
+title: CASB - Q2/2024 roundup
+description: Q2/2024 roundup for CASB changelogs.
+date: 2024-06-03T00:00:00.000Z
+products:
+- casb
+---
+
+### 2024-06-03 - Atlassian Bitbucket integration
+
+You can now scan your Bitbucket Cloud workspaces for a variety of contextualized security issues such as source code exposure, admin misconfigurations, and more.
+
+### 2024-05-23 - Data-at-rest DLP for Box and Dropbox
+
+You can now scan your [Box](/cloudflare-one/applications/casb/casb-integrations/box/#data-loss-prevention-optional) and [Dropbox](/cloudflare-one/applications/casb/casb-integrations/dropbox/#data-loss-prevention-optional) files for DLP matches.
+
+### 2024-04-16 - Export CASB findings to CSV
+
+You can now export all top-level CASB findings or every instance of your findings to CSV.

src/content/changelog/casb/2024-11-22-casb-q4-roundup.mdx

@@ -0,0 +1,11 @@
+---
+title: CASB - Q4/2024 roundup
+description: Q4/2024 roundup for CASB changelogs.
+date: 2024-11-22T00:00:00.000Z
+products:
+- casb
+---
+
+### 2024-11-22 - CASB and DLP with Cloud Data Extraction for AWS cloud environments
+
+You can now use CASB to find security misconfigurations in your AWS cloud environment. You can also [connect your AWS compute account](/cloudflare-one/applications/casb/casb-integrations/aws-s3/#compute-account) to extract and scan your S3 buckets for sensitive data while avoiding egress fees.

src/content/changelog/dex/2024-05-20-dex-q2-roundup.mdx

@@ -0,0 +1,18 @@
+---
+title: Digital Experience Monitoring - Q2/2024 roundup
+description: Q2/2024 roundup for Digital Experience Monitoring changelogs.
+date: 2024-05-20T00:00:00.000Z
+products:
+- dex
+---
+
+### 2024-05-20 - Last seen ISP
+
+Admins can view the last ISP seen for a device by going to **My Team** > **Devices**. Requires setting up a [traceroute test](/cloudflare-one/insights/dex/tests/traceroute/).
+
+### 2024-05-13 - DEX alerts
+
+Admins can now set [DEX alerts](/cloudflare-one/insights/dex/notifications/) using [Cloudflare Notifications](/notifications/). Three new DEX alert types:
+- Device connectivity anomaly
+- Test latency
+- Test low availability

src/content/changelog/dex/2024-12-19-dex-q4-roundup.mdx

@@ -0,0 +1,11 @@
+---
+title: Digital Experience Monitoring - Q4/2024 roundup
+description: Q4/2024 roundup for Digital Experience Monitoring changelogs.
+date: 2024-12-19T00:00:00.000Z
+products:
+- dex
+---
+
+### 2024-12-19 - Remote captures
+
+Admins can now collect packet captures (PCAPs) and WARP diagnostic logs from end-user devices. For more information, refer to [Remote captures](/cloudflare-one/insights/dex/remote-captures/).

src/content/changelog/dex/2025-01-24-dex-q1-roundup.mdx

@@ -0,0 +1,11 @@
+---
+title: Digital Experience Monitoring - Q1/2025 roundup
+description: Q1/2025 roundup for Digital Experience Monitoring changelogs.
+date: 2025-01-24T00:00:00.000Z
+products:
+- dex
+---
+
+### 2025-01-24 - IP visibility
+
+[IP visibility](/cloudflare-one/insights/dex/ip-visibility/) enables admins to inspect the different IP addresses associated with an end-user device. IP types available for review on the Cloudflare dashboard include: the device's private IP, the public IP assigned to the device by the ISP, and the router's (that the device is connected to) private IP.

src/content/changelog/dlp/2024-05-23-dlp-q2-roundup.mdx

@@ -0,0 +1,15 @@
+---
+title: DLP - Q2/2024 roundup
+description: Q2/2024 roundup for DLP changelogs.
+date: 2024-05-23T00:00:00.000Z
+products:
+- dlp
+---
+
+### 2024-05-23 - Data-at-rest DLP for Box and Dropbox
+
+You can now scan your [Box](/cloudflare-one/applications/casb/casb-integrations/box/#data-loss-prevention-optional) and [Dropbox](/cloudflare-one/applications/casb/casb-integrations/dropbox/#data-loss-prevention-optional) files for DLP matches.
+
+### 2024-04-16 - Optical character recognition
+
+DLP can now [detect sensitive data](/cloudflare-one/policies/data-loss-prevention/dlp-profiles/advanced-settings/#optical-character-recognition-ocr) in jpeg, jpg, and png files. This helps companies prevent the leak of sensitive data in images, such as screenshots.

src/content/changelog/dlp/2024-09-03-dlp-q3-roundup.mdx

@@ -0,0 +1,11 @@
+---
+title: DLP - Q3/2024 roundup
+description: Q3/2024 roundup for DLP changelogs.
+date: 2024-09-03T00:00:00.000Z
+products:
+- dlp
+---
+
+### 2024-09-03 - Exact Data Match multi-entry upload support
+
+You can now upload files with [multiple columns of data](/cloudflare-one/policies/data-loss-prevention/datasets/#upload-a-new-dataset) as Exact Data Match datasets. DLP can use each column as a separate existing detection entry.

src/content/changelog/dlp/2024-11-25-dlp-q4-roundup.mdx

@@ -0,0 +1,15 @@
+---
+title: DLP - Q4/2024 roundup
+description: Q4/2024 roundup for DLP changelogs.
+date: 2024-11-25T00:00:00.000Z
+products:
+- dlp
+---
+
+### 2024-11-25 - Profile confidence levels
+
+DLP profiles now support setting a [confidence level](/cloudflare-one/policies/data-loss-prevention/dlp-profiles/advanced-settings/#confidence-levels) to choose how tolerant its detections are to false positives based on the context of the detection. The higher a profile's confidence level is, the less false positives will be allowed. Confidence levels include Low, Medium, or High. DLP profile confidence levels supersede [context analysis](/cloudflare-one/policies/data-loss-prevention/dlp-profiles/advanced-settings/#context-analysis).
+
+### 2024-11-01 - Send entire HTTP requests to a Logpush destination
+
+In addition to [logging the payload](/cloudflare-one/policies/data-loss-prevention/dlp-policies/logging-options/#log-the-payload-of-matched-rules) from HTTP requests that matched a DLP policy in Cloudflare Logs, Enterprise users can now configure a [Logpush job](/cloudflare-one/policies/data-loss-prevention/dlp-policies/logging-options/#send-http-requests-to-logpush-destination) to send the entire HTTP request that triggered a DLP match to a storage destination. This allows long-term storage of full requests for use in forensic investigation.

src/content/changelog/dlp/2025-01-23-dlp-q1-roundup.mdx

@@ -0,0 +1,15 @@
+---
+title: DLP - Q1/2025 roundup
+description: Q1/2025 roundup for DLP changelogs.
+date: 2025-01-23T00:00:00.000Z
+products:
+- dlp
+---
+
+### 2025-01-23 - Source code confidence levels
+
+DLP now supports setting a confidence level for [source code profiles](/cloudflare-one/policies/data-loss-prevention/dlp-profiles/predefined-profiles/#source-code).
+
+### 2025-01-15 - Payload log match visibility
+
+When viewing decrypted payload log matches, DLP now provides more context by listing multiple DLP matches and the matching DLP profile.

src/content/changelog/email-security/2024-08-06-email-security-q3-roundup.mdx

@@ -0,0 +1,15 @@
+---
+title: Email Security - Q3/2024 roundup
+description: Q3/2024 roundup for Email Security changelogs.
+date: 2024-08-06T00:00:00.000Z
+products:
+- email-security
+---
+
+### 2024-08-06 - Email Security is live
+
+Email Security is now live under Zero Trust.
+
+### 2024-08-06 - Microsoft Graph API deployment.
+
+Customers using Microsoft Office 365 can set up Email Security via Microsoft Graph API.