Changelog

To get the latest product updates delivered to you in an RSS feed, add the URL of this page to your feed reader or add the feed's URL directly
https://docs.confluent.io/kafka-connectors/salesforce/2.0/changelog.xml

Version 2.0.44

  • CC-45367: Preserved safe diagnostic detail in Salesforce connector error messages while still removing record values from logs.

  • CC-42057: Bumped connect-utils to 0.3.8 and 0.4.4.

  • CC-45389: Bumped jackson-core to 2.21.7.

  • CC-45389: Bumped jackson-databind to 2.21.7.

Version 2.0.43

  • CC-45172: Bumped freemarker to 2.3.35 to address CVE-2026-84939.

  • CC-43085: Stopped leaking Salesforce record data, source offsets, SOQL queries, and connected-app consumer keys through logs and exceptions.

Version 2.0.42

  • CC-44611: Bumped io.netty:netty-handler from 4.1.136.Final to 4.1.137.Final.

Version 2.0.41

  • CVE-23917: Bumped io.netty:netty-codec from 4.1.135.Final to 4.1.136.Final.

  • CVE-23441: Bumped com.fasterxml.jackson.core:jackson-core from 2.21.1 to 2.21.5.

Version 2.0.40

  • CVE-20737: Upgrade jackson-databind from 2.21.4 to 2.21.5 (fix CVE-2026-54515)

Version 2.0.39

  • CVE-18874, CVE-19395: Bumped io.netty to 4.1.135.Final to fix Netty CVEs.

  • CC-42313: Bumped com.fasterxml.jackson.core:jackson-databind to 2.21.4.

  • CC-42456: Added kafka.topic configuration validation to prevent FreeMarker server-side template injection (SSTI).

Version 2.0.38

  • CC-41246: Bumped io.netty:netty-transport-native-epoll to 4.1.133.Final to fix Netty CVEs.

  • CC-41247: Bumped io.netty:netty-codec to 4.1.133.Final to fix Netty CVEs.

  • CC-41256: Bumped io.netty:netty-transport-native-epoll to 4.1.133.Final to fix Netty CVEs.

  • CC-41257: Bumped io.netty:netty-codec to 4.1.133.Final to fix Netty CVEs.

Version 2.0.37

  • fix: upgrade jackson-core to 2.21.1 for CVE fix

  • fix: upgrade netty to 4.1.125.Final for CVE fix

  • CC-32417: Added delay in Bulk API Query Logic

Version 2.0.36

  • CC-38602: added CVE fix for org.bitbucket.b_c:jose4j:0.9.5

  • Changes to support schema-id in header

  • CC-38394: added log4j library with version 2.25.3

Version 2.0.35

  • CC-36698: Retry for 5xx error and error parsing fixes

  • CC-35360: upgraded connector utils repo to version 1.1.1

Version 2.0.34

  • INC-5303: Enforce salesforce.version config value correctly in the connectors and use API version 64.0 in Bulk API source connector

Version 2.0.33

No changes

Version 2.0.32

No changes

Version 2.0.31

  • CC-35447 | CVE Fix

  • C3ATM: replace-time code changes.

Version 2.0.30

  • CC-26975: Add Retry mechanism for Salesforce Rest Authentication phase

Version 2.0.29

  • CC-32395: Fixing ReDOS vulnerability using timeouts

  • CC-33763: Removed usage of non public and deprecated APIs

  • INC-3149: Handle Authentication error in DisconnectClientListener correctly

Version 2.0.28

  • CVE-6096, CVE-6102, CC-34188: Commons-beanutils CVE fix

Version 2.0.27

  • INC-2531: Fix handling for server disconnect errors in Streaming API based connectors

Version 2.0.26

  • Minor: Remove usage of SystemTime and use singleton

Version 2.0.25

  • CC-32256: Upgraded connect-plugins-common to v0.9.35 to fix netty CVE

Version 2.0.24

  • Fix CVE

Version 2.0.23

  • CC-29806: Fix cleanup issue in Salesforce CDC and platform events source connector

Version 2.0.22

  • CC-29058: Fixed Salesforce Bulk API V1 Source Connector’s Query builder to avoid data loss.

Version 2.0.21

  • CC-29195: Bumped protobuf-java to 3.21.7 to fix CVE

  • CC-28603: Fail connector on non-retriable error only when behavior.on.error is FAIL

  • CC-20253: Fixed Salesforce Platform Event Sink Connector retrying on non-retriable exception

Version 2.0.20

  • RCCA-19208: Introduced delay in polling of Batch Job Status to reduce API call usage in Bulk API Source Connector

  • CC-27038: Fixed offset handling in Salesforce Bulk API Source Connector

Version 2.0.19

  • RCCA-19208: Improved retry logic for transient error in Salesforce Bulk API Connectors

  • Bumped connect-plugins-common version to v0.9.28

  • RCCA-18607: Fix data loss issue in Salesforce Bulk API Source Connector

Version 2.0.18

  • CC-26236: Fixed Salesforce Bulk API Source Validation to use same API version for Salesforce APIs used in connector

Version 2.0.17

  • CC-25323: Bumped connect-plugins-common to v0.9.24 to fix CVEs

  • CC-25350: Bumped common-io to 2.15.1 to resolve CVE

Version 2.0.16

  • Bumped org.json to v20231013 to fix CVEs

Version 2.0.15

  • Bumped connect-plugins-common to v0.9.22 to fix CVEs

  • Bumped jetty version to 9.4.53.v20231009 to fix CVEs

Version 2.0.14

  • CC-22973: Improved retry logic for transient error cases

  • CC-21632: Improved validation error for Auth failures

  • CC-20586: Fixed Salesforce CDC Connector JWT Auth Mode

  • RCCA-14880: Updated salesforce dependency version to v59.0.0

Version 2.0.13

  • Updated guava, jackson and json dependency versions to fix CVEs

  • RCCA-13538: Fixed Converter logic for Date field in Salesforce Sink Connectors

Version 2.0.12

  • Upgraded connect-plugins-common version to 0.9.5 to fix CVEs

Version 2.0.11

  • RCCA-12253: Fixed data loss issue in Salesforce Bulk API Source connector

  • RCCA-11975: Encoded Rest API URL parameter values before making rest call

  • RCCA-10681: Fixed issue with null field updates in Salesforce SObject Sink connector

Version 2.0.10

  • RCCA-11506: Fixed Salesforce Bulk API connector by using latest API version at all places

Version 2.0.9

  • CC-19445 Added encryptedstring as supported type to BulkApiSource schema generator

Version 2.0.8

  • RCCA-10917: Used proxy configured HTTP client in AbstractSalesforceValidation

  • Fixed bug where messages are being skipped when CreatedDateTime is not present in Salesforce object

  • Updated connect-plugins-common version to fix CVE

  • CCLOG-1925: Remove logged username

  • Added Salesforce grant type

  • Added functionality to catch ConnectException and record appropriate errors in SObject Sink connector

Version 2.0.7

  • RCCA-9320: Handled response correctly when double field is represented as quoted string

Version 2.0.6

  • RCCA-8834: Fixed NPE by adding null check for getReplayId() function

Version 2.0.5

  • CCLOG-1820: Fixed duplication of records during restarts in Salesforce Platform Events Source connector

  • Updated connect-plugins-common to 0.8.17 to resolve Gson and jackson-databind CVEs

  • CCLOG-1685: Added support for Salesforce CDC API message format

  • RCCA-6242: Fixed Salesforce Platform Events Source connector to respect configured API version configured

Version 2.0.4

  • CCLOG-1591: Prevent NPE in PlatformEventSink when DLQ disabled

Version 2.0.3

  • RCCA-5143: Write empty events DLQ instead of skipping.

Version 2.0.2

  • RCCA-6002 Fixing CVE-2021-22569 by updating parent, and pulling in the CVE fix. Fixing CVE-2021-28165.

  • Wrap AsyncApiException in ConnectException instead of RetryCounterException in the SalesforceBulkApiSourceTask

  • Including fields of type combobox in SObject schemas

Version 2.0.1

  • CCLOG-1354 Fix Bulk API connector swallowing ConnectionException while describing object

Version 2.0.0

  • CCDB-4359: Vulnerable dependency io.netty_netty-codec:4.1.61.Final for kafka-connect-salesforce:master-latest

  • CCLOG-1164: Add custom channel support to Salesforce CDC Source connector