Merge branch 'production' into update-api-schemas-ad4a01283ed845ce99a2ee9d1ae67d3adebc3cb8

Author: krishnprakash

package-lock.json

@@ -37,10 +37,10 @@
 		"@astrojs/starlight-tailwind": "3.0.1",
 		"@astrojs/tailwind": "6.0.2",
 		"@cloudflare/vitest-pool-workers": "0.8.14",
-		"@cloudflare/workers-types": "4.20250404.0",
+		"@cloudflare/workers-types": "4.20250414.0",
 		"@codingheads/sticky-header": "1.0.2",
 		"@expressive-code/plugin-collapsible-sections": "0.40.2",
-		"@floating-ui/react": "0.27.6",
+		"@floating-ui/react": "0.27.7",
 		"@iarna/toml": "2.2.5",
 		"@marsidev/react-turnstile": "1.1.0",
 		"@octokit/webhooks-types": "7.6.1",

package.json

@@ -998,6 +998,7 @@
 /rules/transform/manage/ /rules/transform/ 301
 /rules/page-rules/how-to/rewrite-host-headers/ /rules/origin-rules/examples/change-uri-path-and-host-header/ 301
 /rules/page-rules/how-to/override-url-or-ip-address/ /rules/origin-rules/features/ 301
+/rules/origin-rules/examples/change-uri-path-and-host-header/ /rules/origin-rules/tutorials/change-uri-path-and-host-header/ 301
 
 # ruleset engine
 /ruleset-engine/rules-language/fields/standard-fields/ /ruleset-engine/rules-language/fields/reference/ 301

public/__redirects

@@ -0,0 +1,13 @@
+---
+title: Signed URLs and Infrastructure Improvements on Stream Live WebRTC Beta
+description: >
+  Dynamically optimize, clip, and resize video from any origin, no storage
+  migration needed.
+date: 2025-04-11T12:00:00Z
+---
+
+Cloudflare [Stream](/stream/) has completed an infrastructure upgrade for our [Live WebRTC beta](/stream/webrtc-beta/) support which brings increased scalability and improved playback performance to all customers. WebRTC allows broadcasting directly from a browser (or supported WHIP client) with ultra-low latency to tens of thousands of concurrent viewers across the globe.
+
+Additionally, as part of this upgrade, the WebRTC beta now supports Signed URLs to protect playback, just like our standard live stream options (HLS/DASH).
+
+For more information, learn about the [Stream Live WebRTC beta](/stream/webrtc-beta/).

src/content/changelog/stream/2025-04-14-webrtc-beta-signed-urls.mdx

@@ -1,7 +1,7 @@
 ---
 title: WARP client for Windows (version 2025.2.460.1)
 description: WARP client for Windows (version 2025.2.460.1)
-date: 2025-02-03T11:00:00Z
+date: 2025-03-13T11:00:00Z
 ---
 
 A new beta release for the Windows WARP client is now available on the [Downloads page](/cloudflare-one/connections/connect-devices/warp/download-warp/beta-releases/). This release contains significant improvements to our captive portal / public Wi-Fi detection logic. If you have experienced captive portal issues in the past, re-test and give this version a try.

src/content/changelog/zero-trust-warp/2025-03-13-warp-beta-windows.mdx

@@ -0,0 +1,13 @@
+---
+title: Cloudflare One Agent for Android (version 2.4)
+description: Cloudflare One Agent for Android (version 2.4)
+date: 2025-03-17T11:00:00Z
+---
+
+A new GA release for the Android Cloudflare One Agent is now available in the [Google Play Store](https://play.google.com/store/apps/details?id=com.cloudflare.cloudflareoneagent). This release includes a new feature allowing [team name insertion by URL](/cloudflare-one/connections/connect-devices/warp/deployment/manual-deployment/#enroll-using-a-url) during enrollment, as well as fixes and minor improvements.
+
+**Changes and improvements**
+
+- Improved in-app error messages.
+- Improved mobile client login with support for [team name insertion by URL](/cloudflare-one/connections/connect-devices/warp/deployment/manual-deployment/#enroll-using-a-url).
+- Fixed an issue preventing admin split tunnel settings taking priority for traffic from certain applications.

src/content/changelog/zero-trust-warp/2025-03-17-warp-ga-android.mdx

@@ -0,0 +1,13 @@
+---
+title: Cloudflare One Agent for iOS (version 1.10)
+description: Cloudflare One Agent for iOS (version 1.10)
+date: 2025-03-17T11:00:00Z
+---
+
+A new GA release for the Android Cloudflare One Agent is now available in the [iOS App Store](https://apps.apple.com/us/app/cloudflare-one-agent/id6443476492). This release includes a new feature allowing [team name insertion by URL](/cloudflare-one/connections/connect-devices/warp/deployment/manual-deployment/#enroll-using-a-url) during enrollment, as well as fixes and minor improvements.
+
+**Changes and improvements**
+
+- Improved in-app error messages.
+- Improved mobile client login with support for [team name insertion by URL](/cloudflare-one/connections/connect-devices/warp/deployment/manual-deployment/#enroll-using-a-url).
+- Bug fixes and performance improvements.

src/content/changelog/zero-trust-warp/2025-03-17-warp-ga-ios.mdx

@@ -0,0 +1,14 @@
+---
+title: WARP client for Linux (version 2025.2.600.0)
+description: WARP client for Linux (version 2025.2.600.0)
+date: 2025-03-31T11:00:00Z
+---
+
+A new GA release for the Linux WARP client is now available on the [Stable release downloads page](/cloudflare-one/connections/connect-devices/warp/download-warp/).   This release contains support for a new WARP setting, [Global WARP override](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#global-warp-override). It also includes significant improvements to our captive portal / public Wi-Fi detection logic.
+
+**Changes and improvements**
+
+- Improved [captive portal detection](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/captive-portals/) to make more public networks compatible and have faster detection.
+- WARP tunnel protocol details can now be viewed using the `warp-cli tunnel stats` command.
+- Fixed an issue with device revocation and re-registration when switching configurations.
+- Added a new [Global WARP override](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#global-warp-override) setting. This setting puts account administrators in control of disabling and enabling WARP across all devices registered to an account from the dashboard. Global WARP override is disabled by default.

src/content/changelog/zero-trust-warp/2025-03-31-warp-ga-linux.mdx

@@ -0,0 +1,19 @@
+---
+title: WARP client for macOS (version 2025.2.600.0)
+description: WARP client for macOS (version 2025.2.600.0)
+date: 2025-03-31T11:00:00Z
+---
+
+A new GA release for the macOS WARP client is now available on the [Stable release downloads page](/cloudflare-one/connections/connect-devices/warp/download-warp/).   This release contains support for a new WARP setting, [Global WARP override](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#global-warp-override). It also includes significant improvements to our captive portal / public Wi-Fi detection logic.
+
+**Changes and improvements**
+
+- Improved [captive portal detection](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/captive-portals/) to make more public networks compatible and have faster detection.
+- Improved error messages shown in the app.
+- WARP tunnel protocol details can now be viewed using the `warp-cli tunnel stats` command.
+- Fixed an issue with device revocation and re-registration when switching configurations.
+- Added a new [Global WARP override](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#global-warp-override) setting. This setting puts account administrators in control of disabling and enabling WARP across all devices registered to an account from the dashboard. Global WARP override is disabled by default.
+
+**Known issues**
+
+- macOS Sequoia: Due to changes Apple introduced in macOS 15.0.x, the WARP client may not behave as expected. Cloudflare recommends the use of macOS 15.3 or later.

src/content/changelog/zero-trust-warp/2025-03-31-warp-ga-macos.mdx

@@ -0,0 +1,29 @@
+---
+title: WARP client for Windows (version 2025.2.600.0)
+description: WARP client for Windows (version 2025.2.600.0)
+date: 2025-03-31T11:00:00Z
+---
+
+A new GA release for the Windows WARP client is now available on the [Stable release downloads page](/cloudflare-one/connections/connect-devices/warp/download-warp/). This release contains support for a new WARP setting, [Global WARP override](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#global-warp-override). It also includes significant improvements to our captive portal / public Wi-Fi detection logic.
+
+**Changes and improvements**
+
+- Improved [captive portal detection](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/captive-portals/) to make more public networks compatible and have faster detection.
+- Improved error messages shown in the app.
+- Added the ability to control if the WARP interface IPs are [registered with DNS servers](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#warp-interface-ip-dns-registration) or not.
+- Removed DNS logs view from the Windows client GUI. DNS logs can be viewed as part of `warp-diag` or by viewing the log file on the user's local directory.
+- Fixed an issue that would result in a user receiving multiple re-authentication requests when waking their device from sleep.
+- WARP tunnel protocol details can now be viewed using the `warp-cli tunnel stats` command.
+- Improvements to [Windows multi-user](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/windows-multiuser/) including support for fast user switching. If you are interested in testing this feature, reach out to your Cloudflare account team.
+- Fixed an issue with device revocation and re-registration when switching configurations.
+- Fixed an issue where DEX tests would run during certain sleep states where the networking stack was not fully up. This would result in failures that would be ignored.
+- Added a new [Global WARP override](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#global-warp-override) setting. This setting puts account administrators in control of disabling and enabling WARP across all devices registered to an account from the dashboard. Global WARP override is disabled by default.
+
+**Known issues**
+
+- DNS resolution may be broken when the following conditions are all true:
+	- WARP is in Secure Web Gateway without DNS filtering (tunnel-only) mode.
+	- A custom DNS server address is configured on the primary network adapter.
+	- The custom DNS server address on the primary network adapter is changed while WARP is connected.
+
+	To work around this issue, reconnect the WARP client by toggling off and back on.