<a id="salesforce-relnotes"></a>

# Changelog

## Version 2.0.41

* CVE-23917: Bumped io.netty:netty-codec from 4.1.135.Final to 4.1.136.Final.
* CVE-23441: Bumped com.fasterxml.jackson.core:jackson-core from 2.21.1 to 2.21.5.

## Version 2.0.40

* CVE-20737: Upgrade jackson-databind from 2.21.4 to 2.21.5 (fix CVE-2026-54515)

## Version 2.0.39

* CVE-18874, CVE-19395: Bumped `io.netty` to `4.1.135.Final` to fix Netty CVEs.
* CC-42313: Bumped `com.fasterxml.jackson.core:jackson-databind` to `2.21.4`.
* CC-42456: Added `kafka.topic` configuration validation to prevent FreeMarker server-side template injection (SSTI).

## Version 2.0.38

* CC-41246: Bumped `io.netty:netty-transport-native-epoll` to `4.1.133.Final` to fix Netty CVEs.
* CC-41247: Bumped `io.netty:netty-codec` to `4.1.133.Final` to fix Netty CVEs.
* CC-41256: Bumped `io.netty:netty-transport-native-epoll` to `4.1.133.Final` to fix Netty CVEs.
* CC-41257: Bumped `io.netty:netty-codec` to `4.1.133.Final` to fix Netty CVEs.

## Version 2.0.37

* fix: upgrade jackson-core to 2.21.1 for CVE fix
* fix: upgrade netty to 4.1.125.Final for CVE fix
* CC-32417: Added delay in Bulk API Query Logic

## Version 2.0.36

* CC-38602: added CVE fix for org.bitbucket.b_c:jose4j:0.9.5
* Changes to support schema-id in header
* CC-38394: added log4j library with version 2.25.3

## Version 2.0.35

* CC-36698: Retry for 5xx error and error parsing fixes
* CC-35360: upgraded connector utils repo to version 1.1.1

## Version 2.0.34

* INC-5303: Enforce salesforce.version config value correctly in the connectors and use API version 64.0 in Bulk API source connector

## Version 2.0.33

No changes

## Version 2.0.32

No changes

## Version 2.0.31

* CC-35447 | CVE Fix
* C3ATM: replace-time code changes.

## Version 2.0.30

* CC-26975: Add Retry mechanism for Salesforce Rest Authentication phase

## Version 2.0.29

* CC-32395: Fixing ReDOS vulnerability using timeouts
* CC-33763: Removed usage of non public and deprecated APIs
* INC-3149: Handle Authentication error in DisconnectClientListener correctly

## Version 2.0.28

* CVE-6096, CVE-6102, CC-34188: Commons-beanutils CVE fix

## Version 2.0.27

* INC-2531: Fix handling for server disconnect errors in Streaming API based connectors

## Version 2.0.26

* Minor: Remove usage of SystemTime and use singleton

## Version 2.0.25

* CC-32256: Upgraded connect-plugins-common to v0.9.35 to fix netty CVE

## Version 2.0.24

* Fix CVE

## Version 2.0.23

* CC-29806: Fix cleanup issue in Salesforce CDC and platform events source connector

## Version 2.0.22

* CC-29058: Fixed Salesforce Bulk API V1 Source Connector’s Query builder to avoid data loss.

## Version 2.0.21

* CC-29195: Bumped `protobuf-java` to 3.21.7 to fix CVE
* CC-28603: Fail connector on non-retriable error only when `behavior.on.error` is `FAIL`
* CC-20253: Fixed Salesforce Platform Event Sink Connector retrying on non-retriable exception

## Version 2.0.20

* RCCA-19208: Introduced delay in polling of Batch Job Status to reduce API call usage in Bulk API Source Connector
* CC-27038: Fixed offset handling in Salesforce Bulk API Source Connector

## Version 2.0.19

* RCCA-19208: Improved retry logic for transient error in Salesforce Bulk API Connectors
* Bumped connect-plugins-common version to v0.9.28
* RCCA-18607: Fix data loss issue in Salesforce Bulk API Source Connector

## Version 2.0.18

* CC-26236: Fixed Salesforce Bulk API Source Validation to use same API version for Salesforce APIs used in connector

## Version 2.0.17

* CC-25323: Bumped connect-plugins-common to v0.9.24 to fix CVEs
* CC-25350: Bumped common-io to 2.15.1 to resolve CVE

## Version 2.0.16

* Bumped org.json to v20231013 to fix CVEs

## Version 2.0.15

* Bumped connect-plugins-common to v0.9.22 to fix CVEs
* Bumped jetty version to 9.4.53.v20231009 to fix CVEs

## Version 2.0.14

* CC-22973: Improved retry logic for transient error cases
* CC-21632: Improved validation error for Auth failures
* CC-20586: Fixed Salesforce CDC Connector JWT Auth Mode
* RCCA-14880: Updated salesforce dependency version to v59.0.0

## Version 2.0.13

* Updated guava, jackson and json dependency versions to fix CVEs
* RCCA-13538: Fixed Converter logic for Date field in Salesforce Sink Connectors

## Version 2.0.12

* Upgraded connect-plugins-common version to 0.9.5 to fix CVEs

## Version 2.0.11

* RCCA-12253: Fixed data loss issue in Salesforce Bulk API Source connector
* RCCA-11975: Encoded Rest API URL parameter values before making rest call
* RCCA-10681: Fixed issue with null field updates in Salesforce SObject Sink connector

## Version 2.0.10

* RCCA-11506: Fixed Salesforce Bulk API connector by using latest API version at all places

## Version 2.0.9

* CC-19445 Added encryptedstring as supported type to BulkApiSource schema generator

## Version 2.0.8

* RCCA-10917: Used proxy configured HTTP client in AbstractSalesforceValidation
* Fixed bug where messages are being skipped when `CreatedDateTime` is not present in Salesforce object
* Updated connect-plugins-common version to fix CVE
* CCLOG-1925: Remove logged username
* Added Salesforce grant type
* Added functionality to catch `ConnectException` and record appropriate errors in SObject Sink connector

## Version 2.0.7

* RCCA-9320: Handled response correctly when double field is represented as quoted string

## Version 2.0.6

* RCCA-8834: Fixed NPE by adding null check for `getReplayId()` function

## Version 2.0.5

* CCLOG-1820: Fixed duplication of records during restarts in Salesforce Platform Events Source connector
* Updated connect-plugins-common to 0.8.17 to resolve Gson and `jackson-databind` CVEs
* CCLOG-1685: Added support for Salesforce CDC API message format
* RCCA-6242: Fixed Salesforce Platform Events Source connector to respect configured API version configured

## Version 2.0.4

* CCLOG-1591: Prevent NPE in PlatformEventSink when DLQ disabled

## Version 2.0.3

* RCCA-5143: Write empty events DLQ instead of skipping.

## Version 2.0.2

* RCCA-6002 Fixing CVE-2021-22569 by updating parent, and pulling in the CVE fix. Fixing CVE-2021-28165.
* Wrap AsyncApiException in ConnectException instead of RetryCounterException in the SalesforceBulkApiSourceTask
* Including fields of type combobox in SObject schemas

## Version 2.0.1

* CCLOG-1354 Fix Bulk API connector swallowing ConnectionException while describing object

## Version 2.0.0

* CCDB-4359: Vulnerable dependency io.netty_netty-codec:4.1.61.Final for kafka-connect-salesforce:master-latest
* CCLOG-1164: Add custom channel support to Salesforce CDC Source connector