# Changelog ## Version 3.1.9 * CVE-23918: Bumped org.eclipse.jetty:jetty-util from 12.0.33 to 12.0.35. * CVE-23444: Removed duplicate jackson.core.version and netty.version property declarations. * CVE-23917: Bumped io.netty:netty-codec from 4.1.135.Final to 4.1.136.Final. * CVE-23441: Bumped com.fasterxml.jackson.core:jackson-core from 2.21.1 to 2.21.5. * INIT-17254: Added OAuth 2.0 Client Credentials and JWT Bearer flows to the self-managed Salesforce connectors. ## Version 3.1.8 * CVE-20737: Upgrade jackson-databind from 2.21.4 to 2.21.5 (fix CVE-2026-54515) ## Version 3.1.7 * CC-41246, CC-41247, CC-41256, CC-41257, CVE-19395, CVE-18874: Bumped `netty` to 4.1.135.Final. * CC-42313: Bumped `jackson-databind` to 2.21.4. * CC-42456: Added `kafka.topic` configuration validation to prevent FreeMarker server-side template injection (SSTI). ## Version 3.1.6 * CVE-16314: Bumped `jetty` to 12.0.33 to fix CVE-2026-2332. * CC-40222: Added support to read external ID value from a custom field for SObject Sink Connector. * CVE-15079: Bumped `jackson-core` to 2.21.1 to fix GHSA-72hv-8253-57qq. ## Version 3.1.5 * fix: upgrade jackson-core to 2.21.1 and jetty to 12.0.32 for CVE fixes ## Version 3.1.4 * fix: upgrade jetty to 12.0.31 and jackson-core to 2.17.3 for CVE fixes ## Version 3.1.3 * CC-39760: GRPC Classloader conflict with cp 8.2.0 fix * CC-32417: Added delay in Bulk API Query Logic ## Version 3.1.2 * CC-38602: added CVE fix for org.bitbucket.b_c:jose4j:0.9.5 * Changed kafka-avro-serializer scope to test * Changes to support schema-id in header * CC-38394: added log4j library with version 2.25.3 ## Version 3.1.1 * Added debug logs around CometD client * Updated semaphore.yml * CC-37538: minor import fixes * CC-37358: Support for relationship fields for sObject * Added error handling for 500 code ## Version 3.1.0 * Adding the support for Salesforce API version 65.0