Stale is usually correct cache behavior.

Checklist

  1. View source: is the HTML pointing at the CDN hostname?
  2. curl -I the asset. Read Age / TTL.
  3. Purge the exact URL, including query string if the zone keys on it.
  4. Hard-refresh; disable service workers while debugging.
  5. Confirm you purged the right zone — platforms often have one zone per tenant.

Hub: cache headers and purge.