chore(deps): update dependency cloudflare to v5

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
cloudflare	==4.3.1 → ==5.0.0

---

Release Notes

cloudflare/cloudflare-python (cloudflare)

v5.0.0

Compare Source

Full Changelog: v4.3.1...v5.0.0

This is a major release of the Cloudflare Python SDK. It drops support for
Python 3.8, adds 11 new API services, introduces optional aiohttp backend
support for improved async concurrency, and includes hundreds of type and
method updates across the entire API surface.

Please review the breaking changes below before upgrading. A migration guide
is available at docs/migration-guides/v5.0.0-migration-guide.md.

---

Breaking Changes

• Python 3.8 is no longer supported. The minimum required version is now Python 3.9. (pyproject.toml)
• typing-extensions minimum version bumped from >=4.10 to >=4.14.

Additionally, the following resources have breaking changes:

• abusereports
• acm.totaltls
• apigateway.configurations
• cloudforceone.threatevents
• d1.database
• intel.indicatorfeeds
• logpush.edge
• origintlsclientauth.hostnames
• queues.consumers
• radar.bgp
• rulesets.rules
• schemavalidation.schemas
• snippets
• zerotrust.dlp
• zerotrust.networks

See the v5.0.0 Migration Guide for upgrade instructions and resource-specific guidance.

---

Features

• aiohttp backend support: The async client now supports an optional aiohttp HTTP backend for improved concurrency performance. Install with pip install cloudflare[aiohttp] and use DefaultAioHttpClient() as the http_client parameter.
• Python 3.13 and 3.14 support added as tested classifiers.

New Services

The following top-level resources are new in this release:

• AISearch (aisearch): AI-powered search capabilities
• Connectivity (connectivity): Connectivity testing and diagnostics
• EmailSending (email_sending): Email send and send_raw endpoints
• Fraud (fraud): Fraud detection and prevention
• GoogleTagGateway (google_tag_gateway): Google Tag Gateway management
• Organizations (organizations): Organization audit logs and management
• R2DataCatalog (r2_data_catalog): R2 Data Catalog operations
• RealtimeKit (realtime_kit): Realtime communication (Calls/TURN)
• ResourceTagging (resource_tagging): Resource tagging and labeling
• TokenValidation (token_validation): Token validation configuration and rules
• VulnerabilityScanner (vulnerability_scanner): Vulnerability scanning, credential sets, and target environments

New Endpoints on Existing Services

• accounts: update generated types and methods
• api_gateway: add labels endpoints (WAM-1196)
• billing: add billable usage PayGo endpoint
• brand_protection: add v2 endpoints
• browser_rendering: add devtools methods (BRAPI-1051)
• cache: add origin cloud regions resource
• custom_origin_trust_store: enable custom origin trust store
• dns: add dns_records/usage endpoints (DNS-12466)
• email_security: add phishguard reports endpoint
• iam: add user_groups and user_group_members resources
• radar: add Botnet Threat Feed and Post-Quantum endpoints
• workers: add Observability Destinations resources (WO-989)
• zero_trust: add Access Users endpoint (AUTH-7071), DEX rules, Device IP Profile, Device Subnet, WARP Connector connections and failover endpoints, WARP Subnet endpoints, Gateway PAC files (GIN-1439)
• zones: add zone environments endpoints

Updated Services

Nearly every existing service received type and method updates through
composite API spec refreshes. Notable updates include:

• email_security: remove deprecated type definitions
• radar: restructured to use per-resource api.md sub-files (no client path changes)
• workers_for_platforms: update generated types
• r2: update generated types
• fraud: update generated types and methods

Bug Fixes

• _models: add polymorphic_serialization parameter to model_dump overrides (342b5a8)
• pipelines: add BaseModel base to response SchemaFieldStruct/SchemaFieldList stubs (d33af8b)
• dlp: add missing model_rebuild/update_forward_refs for SharedEntryCustomEntry classes (25ec10c)
• workers: make RunQueryParametersNeedleValue a BaseModel with arbitrary_types_allowed (6b7efbc)
• stream: remove duplicate notification_url field in webhook response types (fc9fb2f)
• resolve pre-existing codegen type errors (fed88d6)
• radar: fix type: ignore[call-arg] placement for mypy compatibility (fac9404)
• fix broken reference for the queues consumer model (3f5cf39)

Chores

• build: migrate from rye to uv for project management (2f283c2)
• ci: pin single Python version and pydantic v2 for test runs (86676bc)
• typing: add mypy configuration with strict mode (pyproject.toml)
• api: 80+ composite API spec updates across the release cycle

Documentation

• add Authentication section to README (70d934a)
• add aiohttp backend usage instructions to README
• add MCP server integration badges (Cursor, VS Code)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.