chore(deps): Update module github.com/cloudflare/cloudflare-go/v6 to v7

[wall-e-one]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/cloudflare/cloudflare-go/v6	v6.10.0 → v7.3.0

---

Release Notes

cloudflare/cloudflare-go (github.com/cloudflare/cloudflare-go/v6)

v7.3.0

Compare Source

7.3.0 (2026-05-20)

Full Changelog: v7.2.0...v7.3.0

This release adds several new services and sub-resources across DDoS Protection, AI Security, R2
bucket objects, Workers observability queries, Zero Trust SAML certificates, and more. All changes
are additive -- there are no breaking changes in this release.

---

Features

DDoS Protection (client.DDoSProtection)

• NEW SERVICE: Advanced TCP Protection management for Magic Transit accounts
  • AdvancedTCPProtection.Allowlist -- manage allowlist entries
    • New(), List(), BulkNew(), BulkDelete()
    • Items.Delete(), Items.Edit(), Items.Get()
  • AdvancedTCPProtection.Prefixes -- manage IP prefix configurations
    • New(), List(), BulkNew(), BulkDelete()
    • Items.Delete(), Items.Edit(), Items.Get()
  • AdvancedTCPProtection.SynProtection.Filters -- SYN flood protection filters
    • New(), List(), BulkDelete()
    • Items.Delete(), Items.Edit(), Items.Get()
  • AdvancedTCPProtection.SynProtection.Rules -- SYN flood protection rules
    • New(), List(), BulkDelete()
    • Items.Delete(), Items.Edit(), Items.Get()
  • AdvancedTCPProtection.TCPFlowProtection.Filters -- TCP flow protection filters
    • New(), List(), BulkDelete()
    • Items.Delete(), Items.Edit(), Items.Get()
  • AdvancedTCPProtection.TCPFlowProtection.Rules -- TCP flow protection rules
    • New(), List(), BulkDelete()
    • Items.Delete(), Items.Edit(), Items.Get()
  • AdvancedTCPProtection.Status -- TCP protection status
    • Edit(), Get()

AI Security (client.AISecurity)

• NEW SERVICE: Zone-level AI security settings management
  • Update() -- update AI security settings for a zone
  • Get() -- get current AI security settings
  • CustomTopics.Update() -- update custom topic definitions
  • CustomTopics.Get() -- get custom topic definitions

R2 Bucket Objects (client.R2.Buckets.Objects)

• NEW SUB-RESOURCE: Manage objects within R2 buckets via the control plane API
  • List() -- list objects in a bucket (cursor-paginated)
  • Delete() -- delete a specific object
  • Get() -- download an object (returns *http.Response)
  • Upload() -- upload an object from an io.Reader

Workers Observability Queries (client.Workers.Observability.Queries)

• NEW SUB-RESOURCE: Saved observability queries for Workers telemetry
  • New() -- create a saved query
  • List() -- list saved queries

Workers Secrets Bulk Update (client.Workers.Scripts.Secrets)

• Added BulkUpdate() method -- bulk update secrets for a Worker script via
  PATCH /accounts/{account_id}/workers/scripts/{script_name}/secrets-bulk

Zero Trust - SAML Certificate Management

• Identity Providers (client.ZeroTrust.IdentityProviders.SAMLCertificate)

  • New() -- create a SAML certificate for an identity provider

• Access SAML Certificates (client.ZeroTrust.Access.SAMLCertificates)

  • List() -- list all SAML certificate sets
  • Get() -- get a specific SAML certificate set
  • GetPem() -- download certificate in PEM format (returns *http.Response)
  • Rotate() -- rotate a SAML certificate set

Zero Trust - Resource Library (client.ZeroTrust.ResourceLibrary)

• NEW SUB-RESOURCE: Browse the Zero Trust resource library
  • Applications.List() -- list available applications
  • Applications.Get() -- get application details
  • Categories.List() -- list application categories
  • Categories.Get() -- get category details

Secrets Store (client.SecretsStore.Stores)

• Added Get() method -- retrieve a specific secrets store by ID

AI Search Namespaces (client.AISearch.Namespaces)

• Added namespace-level convenience methods (previously only available at the instance level):
  • Delete() -- delete a namespace
  • ChatCompletions() -- run chat completions against a namespace
  • Read() -- get namespace details
  • Search() -- search within a namespace

---

Other Updates

• Updated generated types and methods across many packages including ai_gateway,
  api_gateway, cache, email_security, intel, load_balancers, logpush,
  radar, secrets_store, workers, workers_for_platforms, workflows, and
  zones

v7.2.0

Compare Source

7.2.0 (2026-05-06)

Full Changelog: v7.1.0...v7.2.0

This release adds new sub-resources for AI Gateway billing, Cache Origin Cloud Regions v2, Radar BGP analytics, and Load Balancer monitor group references.

Features

Cache - Origin Cloud Regions v2 (client.Cache.OriginCloudRegions)

• NEW SUB-RESOURCE: Origin Cloud Regions service using the v2 /origin/cloud_regions endpoints
  • Update() -- create or update a cloud region mapping for an origin IP
  • List() -- list all cloud region mappings (paginated)
  • Delete() -- remove a cloud region mapping
  • BulkDelete() -- remove multiple cloud region mappings
  • BulkUpdate() -- create or update multiple cloud region mappings
  • Get() -- get a specific cloud region mapping
  • SupportedRegions() -- list supported cloud regions and vendors

AI Gateway - Billing (client.AIGateway.Billing)

• NEW SUB-RESOURCE: Billing service for AI Gateway accounts
  • CreditBalance() -- get current credit balance
  • UsageHistory() -- get historical usage data
  • InvoiceHistory() -- get past invoices
  • InvoicePreview() -- preview upcoming invoice

AI Gateway - Billing Spending Limit (client.AIGateway.Billing.SpendingLimit)

• NEW SUB-RESOURCE: Manage spending limits for AI Gateway billing
  • New() -- create a spending limit
  • Delete() -- remove a spending limit
  • Get() -- get the current spending limit

AI Gateway - Billing Topup (client.AIGateway.Billing.Topup)

• NEW SUB-RESOURCE: Manage billing top-ups for AI Gateway
  • New() -- create a top-up
  • Status() -- check top-up payment status

AI Gateway - Billing Topup Config (client.AIGateway.Billing.Topup.Config)

• NEW SUB-RESOURCE: Configure automatic top-ups
  • New() -- create a top-up config
  • Delete() -- remove a top-up config
  • Get() -- get the current top-up config

Cache - Smart Tiered Cache (client.Cache.SmartTieredCache)

• Added New() method (POST) to enable smart tiered cache topology

Radar - BGP IP Top (client.Radar.BGP.IPs.Top)

• NEW SUB-RESOURCE: Top ASes by BGP IP announcements
  • Ases() -- get top ASes for BGP IP data

Radar - BGP RPKI ROAs (client.Radar.BGP.RPKI.Roas)

• NEW SUB-RESOURCE: RPKI Route Origin Authorization timeseries
  • Timeseries() -- get ROA timeseries data

Load Balancers - Monitor Group References (client.LoadBalancers.MonitorGroups.References)

• NEW SUB-RESOURCE: Retrieve resources referencing a monitor group
  • Get() -- list references for a monitor group

Bug Fixes

• Codegen: Updated generated types and methods for ai_search, cloudforce_one, resource_sharing, url_scanner, and user packages

v7.1.0

Compare Source

7.1.0 (2026-05-04)

Full Changelog: v7.0.0...v7.1.0

---

Features

Security Center - New Insights Sub-Resources (client.SecurityCenter.Insights)

Three new sub-services added under client.SecurityCenter.Insights:

AuditLogs (client.SecurityCenter.Insights.AuditLogs)

• List(ctx, params) -> *pagination.CursorPagination[InsightAuditLogListResponse]
• ListByInsight(ctx, issueID, params) -> *pagination.CursorPagination[InsightAuditLogListByInsightResponse]

New response types: InsightAuditLogListResponse, InsightAuditLogListByInsightResponse

Classification (client.SecurityCenter.Insights.Classification)

• Update(ctx, issueID, params) -> *InsightClassificationUpdateResponse

New response types: InsightClassificationUpdateResponse

Context (client.SecurityCenter.Insights.Context)

• Get(ctx, issueID, query) -> *InsightContextGetResponse

New response types: InsightContextGetResponse

Zero Trust - Device Deployment Groups (client.ZeroTrust.Devices.DeploymentGroups)

New service client.ZeroTrust.Devices.DeploymentGroups:

• New(ctx, params) -> *DeploymentGroup
• List(ctx, params) -> *pagination.V4PagePaginationArray[DeploymentGroup]
• Delete(ctx, groupID, body) -> *DeviceDeploymentGroupDeleteResponse
• Edit(ctx, groupID, params) -> *DeploymentGroup
• Get(ctx, groupID, query) -> *DeploymentGroup

New response types: DeploymentGroup, DeviceDeploymentGroupDeleteResponse

Queues - Metrics Endpoint (client.Queues)

New method on client.Queues:

• GetMetrics(ctx, queueID, query) -> *QueueGetMetricsResponse

New response types: QueueGetMetricsResponse

Organizations - Audit Logs (client.Organizations.Logs.Audit)

New service client.Organizations.Logs.Audit:

• List(ctx, organizationID, query) -> *pagination.CursorPaginationAfter[LogAuditListResponse]

New response types: LogAuditListResponse

v7.0.0

Compare Source

7.0.0 (2026-04-30)

Full Changelog: v6.10.0...v7.0.0

This is a major version release that includes breaking changes to three packages: ai_search, email_security, and workers. These changes reflect upstream API specification updates that improve type correctness and consistency. Non-breaking features and updates are also included across several other packages.

Please ensure you read through the list of changes below before moving to this version - this will help you understand any down or upstream issues it may cause to your environments.

---

Breaking Changes

See the v7.0.0 Migration Guide for before/after code examples and actions needed for each change.

AI Search - SearchForAgents Metadata Removed

The SearchForAgents nested type has been removed from all instance metadata structs. This field is no longer part of the API specification.

Removed Types:

• InstanceNewResponseMetadataSearchForAgents
• InstanceUpdateResponseMetadataSearchForAgents
• InstanceListResponseMetadataSearchForAgents
• InstanceDeleteResponseMetadataSearchForAgents
• InstanceReadResponseMetadataSearchForAgents
• InstanceNewParamsMetadataSearchForAgents
• InstanceUpdateParamsMetadataSearchForAgents
• NamespaceInstanceNewResponseMetadataSearchForAgents
• NamespaceInstanceUpdateResponseMetadataSearchForAgents
• NamespaceInstanceListResponseMetadataSearchForAgents
• NamespaceInstanceDeleteResponseMetadataSearchForAgents
• NamespaceInstanceReadResponseMetadataSearchForAgents
• NamespaceInstanceNewParamsMetadataSearchForAgents
• NamespaceInstanceUpdateParamsMetadataSearchForAgents

Email Security - Path Parameter Type Changes (int64 to string)

Multiple Email Security settings sub-resources have changed their path parameter types from int64 to string. This affects Delete, Edit, and Get methods across the following services:

• AllowPolicies (policyID int64 -> policyID string)
• BlockSenders (patternID int64 -> patternID string)
• Domains (domainID int64 -> domainID string)
• ImpersonationRegistry (displayNameID int64 -> impersonationRegistryID string)
• TrustedDomains (trustedDomainID int64 -> trustedDomainID string)

Email Security - Investigate Parameter Rename

The Investigate.Get, Investigate.Move.New, and Investigate.Reclassify.New methods now use investigateID instead of postfixID as the path parameter name.

Email Security - Domains BulkDelete Method Removed

The SettingDomainService.BulkDelete method and its associated types have been removed:

• SettingDomainBulkDeleteResponse
• SettingDomainBulkDeleteParams

Email Security - TrustedDomains Return Type Change

SettingTrustedDomainService.New now returns *SettingTrustedDomainNewResponse instead of *SettingTrustedDomainNewResponseUnion.

Email Security - Investigate.Move Return Type Change

InvestigateMoveService.New now returns *pagination.SinglePage[InvestigateMoveNewResponse] instead of *[]InvestigateMoveNewResponse.

Workers - Observability Telemetry Filter Restructuring

The observability telemetry filter parameter types have been restructured to support nested filter groups. New discriminated union types replace the previous flat filter arrays:

• ObservabilityTelemetryKeysParams.Filters now accepts FiltersObjectFilterUnion (was []interface{})
• ObservabilityTelemetryQueryParams.Parameters.Filters now accepts FiltersObjectFilterUnion
• ObservabilityTelemetryValuesParams.Filters now accepts FiltersObjectFilterUnion

New types include FiltersObjectFiltersObject (for group filters with FilterCombination) and FiltersWorkersObservabilityFilterLeaf (for leaf filters with typed Operation, Type, and Value fields).

---

Features

Organizations (client.Organizations)

• NEW SERVICE: client.Organizations.Logs.Audit -- query organization audit logs
  • List() - Retrieve audit logs with cursor-based pagination

Browser Rendering (client.BrowserRendering)

• client.BrowserRendering.Devtools.Browser.Targets.Close() -- close a specific browser target (tab, page) by ID

Queues (client.Queues)

• client.Queues.GetMetrics() -- retrieve queue metrics for a specific queue

AI Search (client.AISearch)

• Added WaitForCompletion parameter to NamespaceInstanceItemNewOrUpdateParams and NamespaceInstanceItemSyncParams for synchronous indexing confirmation

---

Bug Fixes

• Magic Transit: ConnectorService.List parameter name corrected from query to params (non-functional, affects generated documentation only)

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[jacaudi]

Closing — this PR can't be auto-merged.

Renovate's diff (-v6 v6.10.0 / +v7 v7.3.0) is a go.mod-only substitution, but every internal/cloudflare/*.go still imports cloudflare-go/v6. Removing v6 would break the build. A real v6→v7 migration requires touching all 11 files under internal/cloudflare/ (and likely updating mocks / option calls — the v7 API surface differs from v6).

The orphan cloudflare-go/v7 v7.3.0 entry that lived in go.mod (added by 5551e67 without any code migration) has been removed in #141 via go mod tidy, so the trap that produced a duplicate require line here is gone.

Reopen — or, more likely, a fresh Renovate PR will pick it up — once someone has migrated the source to v7.