* chore: skip failing tests for dns.records and workers.beta.workers

- dns.records.scan_review: mock server returns invalid response data
- dns.records.scan_list: mock server returns invalid response data
- workers.beta.workers.create: HTTP 400 error from prism (missing required body properties)
- workers.beta.workers.update: HTTP 400 error from prism (missing required body properties)

Failures observed in both Python and TypeScript SDK test suites.

…rs.observability.telemetry

* chore: skip failing tests for email_security.settings and workers.observability.telemetry

- email_security.settings.allow_policies.edit: HTTP 422 from prism
- email_security.settings.block_senders.edit: HTTP 422 from prism
- email_security.settings.impersonation_registry.edit: HTTP 422 from prism
- email_security.settings.trusted_domains.edit: HTTP 422 from prism
- workers.observability.telemetry.keys: HTTP 400 from prism
- workers.observability.telemetry.query: HTTP 400 from prism
- workers.observability.telemetry.values: HTTP 400 from prism

Failures observed in CI run 25132870851 on cloudflare-typescript PR #2743.

* chore: skip fraud.update test (HTTP 422 from prism)

Failure observed in CI run 25171503153 on cloudflare-typescript PR #2746.

* feat(python): switch package manager from rye to uv

* feat(api): add zero_trust_device_deployment_groups resource

* feat(api): add zero_trust_device_deployment_groups resource

…s to Security Center API

* feat(SCTR): add audit log, classification, and context endpoints to Security Center API

* feat: add resource library endpoints inside zero trust

* fix: configure resource library endpoints as data sources only in terraform

* feat: add terraform resource names for zero trust resource library endpoints

* feat: restructure resource library endpoints to nest applications under subresources

* fix: standardize account_id parameter naming in resource library endpoints

* feat: add resource library endpoints inside zero trust

…r_group config to main

* feat(load_balancers): promote monitor group Stainless config to main

Add monitor group references endpoint and set terraform resource name
to load_balancer_monitor_group. Cherry-picked from staging.

* feat(cache): Update OPCR config to v2 endpoints (CACHE-13523)

Promote OPCR (origin public cloud region) Stainless config from staging to main:

- v2 endpoints under /origin/cloud_regions (PUT-only, no POST), with
  upsert + ImportState support via id_path_param + id_property.
- Deprecated v1 methods (/cache/origin_cloud_regions/*) retained as
  *_v1 with deprecated annotation; skipped for all SDK/Terraform
  targets so only the docs site consumes them. v1 was never published
  to SDKs/Terraform historically, and v1 endpoints remain functional
  during the deprecation period.
- Resource model points to cache-rules_origin_cloud_region_v2_entry.

Combines staging-branch commits 7e22620f (MR 762) and 1c1ece32 (MR 795).

* feat(cache): add create (POST) method for smart_tiered_cache

Add the missing create method to smart_tiered_cache subresource.
The POST endpoint for tiered_cache_smart_topology_enable was already
in the api-gateway but missing from the Stainless config.

Removes the internal-only endpoints (cache_limit_rate,
cache_reserve_jurisdiction, class_of_service) from the original
APIX-592 MR — these have no api-gateway routes and are not
customer-facing.

Closes CACHE-13445

…endpoints

* feat(radar): add BGP RPKI ROAs timeseries and BGP IPs top ASes endpoints

- Add /radar/bgp/rpki/roas/timeseries
- Add /radar/bgp/ips/top/ases

RADAR-7051