Update module github.com/cloudflare/cloudflare-go/v7 to v7.8.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/cloudflare/cloudflare-go/v7	v7.6.0 → v7.8.0

---

Release Notes

cloudflare/cloudflare-go (github.com/cloudflare/cloudflare-go/v7)

v7.8.0

Compare Source

7.8.0 (2026-07-24)

Breaking Changes

See the v7.8.0 Migration Guide for before/after code examples and actions needed for each change.

• acm: CertificateAuthority param and response type removed from the acm package. Callers referencing this type directly must update.
• brand_protection: V2.Queries.Get() return type changed from *[]V2QueryGetResponse to *V2QueryGetResponseUnion. The V2QueryGetResponse type is removed; use the new union type and handle variants via .AsUnion().
• certificate_authorities: HostnameAssociationParam and HostnameAssociation types removed. Use TLSHostnameAssociationParam and the per-method response types instead.
• cloudforce_one: ThreatEvents.IndicatorTypes sub-resource relocated to ThreatEvents.Indicators.Types. The endpoint path changed from /events/indicatorTypes to /events/indicator-types. The type name ThreatEventIndicatorTypeListResponse is unchanged.
• custom_certificates: Status response type removed from the custom_certificates package.
• hyperdrive: Configs.List() pagination type changed from SinglePage[Hyperdrive] to V4PagePaginationArray[Hyperdrive]. The second parameter name changed from query to params.
• moq: Relays.Tokens.Rotate() method removed along with RelayTokenRotateResponse and RelayTokenRotateParams. Replaced by full CRUD: Tokens.New(), Tokens.List(), Tokens.Delete().
• mtls_certificates: shared MTLSCertificate response type removed. List(), Delete(), and Get() now return MTLSCertificateListResponse, MTLSCertificateDeleteResponse, and MTLSCertificateGetResponse respectively.
• ssl: HostParam, Host, Status, and ValidationMethod types removed from the ssl package.
• zero_trust: Casb.Applications.SetupFlows sub-resource renamed to Casb.Applications.AuthMethods. The CasbApplicationSetupFlowListResponse type is replaced by CasbApplicationAuthMethodListResponse. The path parameter on Applications.Get() changed from slug (CasbApplicationGetParamsSlug) to applicationID (CasbApplicationGetParamsApplicationID).

Features

• NEW SERVICE: registrar_sandbox -- test domain registration flows without buying real domains
  • client.RegistrarSandbox.Check, client.RegistrarSandbox.Search
  • Registrations.{New,List,Edit,Get}
  • RegistrationStatus.Get, UpdateStatus.Get
  • Extensions.{List,Get}
• NEW SERVICE: AnalyticsQuery -- analytics query API at the top-level client
  • client.AnalyticsQuery.Summary, client.AnalyticsQuery.Timeseries, client.AnalyticsQuery.TopN
  • DataSecurity.ContentFindings.TopN
  • DataSecurity.Findings.{Summary,Timeseries}
• ai_audit: add Robots.BulkGet and Robots.Get methods
• billing: add Usage.PaygoInfo method (GET /accounts/{account_id}/paygo-usage-info)
• cloudforce_one: major expansion of ThreatEvents sub-resources:
  • Aggregate.List, Graphql.New, Graph.List
  • Queries.{New,List,Delete,Edit,Get}
  • Relationships.List
  • Indicators.{List,Aggregate,ByDataset,ByDataset.Tags}
  • Categories.Catalog.List
  • Datasets.{Delete,Events.Get}
  • Tags.{List,Delete,Edit} + Tags.Categories.{New,Update,List,Delete,Get} + Tags.Indicators, Tags.Indicators.ByDataset
  • TargetIndustries.{ByDataset.List,Catalog.List}
• email_routing: add Update, Edit methods on the root service; add Rules.List and AccountRules.List methods
• email_security: add Settings.Domains.BulkDelete method
• magic_transit: add Connectors.Interrupts sub-resource (New, List)
• moq: add Relays.Tokens.{New,List,Delete} methods (replacing Rotate)
• registrar: add Extensions sub-resource (List, Get)
• zero_trust: add Casb.Posture sub-resource tree (~40 new methods):
  • Findings.{List,Export,Get,Ignore,ResetSeverity,TuneSeverity,Unignore}
  • Findings.Instances.{List,Archive,Export,Get,Unarchive}
  • Exports.{List,Get}
  • FindingTypes.{List,Get} + FindingTypes.RemediationTypes.List
  • Content.{List,Export}
  • Remediations.Jobs.{New,List,Export}
  • Webhooks.{New,Update,List,Delete,Evaluate,EvaluateExisting,Get} + Webhooks.Jobs.New
• accounts: Subscriptions.New and Subscriptions.Get now support both account-level and zone-level paths (/{accounts_or_zones}/{account_or_zone_id}/subscriptions). Params accept both AccountID and ZoneID (mutually exclusive); existing AccountID-only callers are unaffected.
• load_balancers: endpoints now support both account-level and zone-level paths (/{accounts_or_zones}/{account_or_zone_id}/load_balancers). Params accept both AccountID and ZoneID; existing ZoneID-only callers are unaffected.

v7.7.0

Compare Source

7.7.0 (2026-07-08)

Full Changelog: v7.6.0...v7.7.0

Breaking Changes

See the v7.7.0 Migration Guide for before/after code examples and actions needed for each change.

• ssl: Recommendations.Get method and RecommendationGetResponse / RecommendationGetParams types removed.

• ai_gateway, workflows, zero_trust/dlpemailaccountmapping: merged-union parent fields with same-name-different-type collisions changed from a variant-struct type to interface{}. Affected fields:

  • ai_gateway.AIGateway{New,Update,List,Delete,Get}ResponseSpendLimitsRulesMetadata.Mode (5 structs)
  • workflows.VersionGraphResponseGraphWorkflowPayload.Type
  • zero_trust.DLPEmailAccountMapping{New,Get}ResponseAuthRequirements.Type (2 structs)

  These fields were unreadable in the previous type (marshaling panicked with reflect: call of reflect.Value.SetString on struct Value). The new interface{} type matches the codegen pattern used by sibling merged fields on the same structs (e.g. Values, Fields, AllowedMicrosoftOrganizations); callers should switch on the parent union via AsUnion() for a strongly-typed variant.

• zero_trust: Devices.DEXTests.{New,Update,List,Get} response type renamed from DeviceDEXTest{New,Update,List,Get}Response to the shared SchemaHTTP; field structure unchanged. Nested types renamed accordingly (e.g. DeviceDEXTestNewResponseData → SchemaData, DeviceDEXTestNewResponseTargetPolicy → SchemaHTTPTargetPolicy). Callers using := inference and field access continue to compile; callers referencing the removed type names must update to SchemaHTTP.

• zero_trust: Devices.IPProfiles.List pagination changed from pagination.SinglePage[IPProfile] to pagination.V4PagePaginationArray[IPProfile]. .Result field access and ListAutoPaging() iteration continue to work; callers referencing the pagination type by name must update.

Features

• NEW SERVICE: email_auth — DMARC reports edit/get and SPF inspect
  • client.EmailAuth.DMARCReports.Edit
  • client.EmailAuth.DMARCReports.Get
  • client.EmailAuth.SPF.Inspect.Get
• NEW SERVICE: moq — Media over QUIC relay management
  • client.MoQ.Relays.{New,Update,List,Delete,Get}
  • client.MoQ.Relays.Tokens.Rotate
• zero_trust: publish CASB APIs (client.ZeroTrust.Casb.*)
  • Applications.{List,Get} + Applications.SetupFlows.List
  • Integrations.{New,Update,List,Delete,Get,Pause,Resume}
• logs: add LogExplorer sub-resource
  • LogExplorer.Query.Sql
  • LogExplorer.Datasets.{New,Update,List,Get}
  • LogExplorer.Datasets.Available.List
• browser_rendering: add AccessibilityTree.New method
• email_routing: add EmailRouting.Unlock and EmailRouting.Addresses.Edit methods
• email_routing: add AccountRules.List method (GET /accounts/{account_id}/email/routing/rules) returning AccountRule with new Zone field; Rules.List gains optional AccountID param (mutually exclusive with ZoneID) so callers can list rules by account or zone
• email_security: add bulk investigation APIs
  • Investigate.Bulk.{New,List,Delete,Get}
  • Investigate.Bulk.Cancel.New
  • Investigate.Bulk.Messages.List
• accounts: add Logs.Audit.History and Logs.Audit.ProductCategories methods
• organizations: add Logs.Audit.History method

Bug Fixes

• ai_gateway, workflows, zero_trust/dlpemailaccountmapping: fix panics on union-merged parent field decoding by switching same-name-different-type merged fields from a variant-struct type to interface{} (3de4191)
• browser_rendering: AccessibilityTreeNewParamsBodyObject now uses URL (matching the generated test fixture) instead of HTML (0f44441)
• dns: restore Shadow* query params on RecordListParams and IncludeShadowMetadata on Record{New,Update,List,Batch,Edit,Get}Params after a codegen regression dropped them (f9b3f27)

Chores

• api: update composite API spec (20+ codegen sync commits)
• ci: bump CI job timeouts to 30 minutes (6cad6cb)
• ci: unblock test job by installing nodejs/npm for prism mock server (3de4191)
• apply accumulated custom code (CI jobs, GitLab config) (eb2bf2b)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud