--- schema_version: "1" id: d7d4ba9e379e7628192141319a666d870840ce82b2f8cc7226106e916aef3552 title: Salesforce Connector Release Notes collection: mulesoft version: current locale: ja-jp portal_url: https://docs.salesforce.com/mulesoft/current/ja-jp/release-notes/connector/salesforce-connector-release-notes-mule-4.md canonical_url: https://docs.mulesoft.com/jp/release-notes/connector/salesforce-connector-release-notes-mule-4 source_site: docs.mulesoft.com content_type: documentation content_hash: a4e5b0de6e788cc6f3326f31c4741e86ed959140f4e327e160ba34c8aaa2c534 description: MuleSoft Documentation Site latest: true --- # Salesforce Connector Release Notes Support Category: [Select](https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/Agreements/versioning-back-support-policy.pdf) Anypoint Connector for Salesforce (Salesforce Connector) provides access to the Salesforce APIs. Guide: [Salesforce Connector](https://docs.mulesoft.com/salesforce-connector/latest/) Reference: [Salesforce Connector Reference](https://docs.mulesoft.com/salesforce-connector/latest/salesforce-connector-reference) ## [](#12-0-5)12.0.5 **October 13, 2026** ### Compatibility
Application/Service Version

Mule

4.9.0 and later

OpenJDK

17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0, v66.0, v67.0
### Fixed Issues
Issue Resolution ID

When using the OAuth Client Credentials connection type, the Invoke Apex Soap Method operation now renews the session after an INVALID_SESSION_ID or session-timeout fault, instead of continuing to use the expired session.

W-24083612

When using the OAuth Client Credentials connection type, metadata operations and Partner API operations now renew the session after an INVALID_SESSION_ID or session-timeout fault, instead of failing with a connectivity error.

W-23517165

The AllOrNoneHeader and CallOptions values in the Headers field are now applied on the Create Metadata, Update Metadata, Upsert Metadata, Delete Metadata, Read Metadata, List Metadata, Describe Metadata, Retrieve Metadata, Rename Metadata, and Deploy Metadata operations. Previously, these values were ignored.

W-24209547

The connector no longer includes the archived mule-connector-logging library, version 1.0.2, which has no published license metadata. Connector logging behavior is unchanged.

W-24327308

These libraries are upgraded to address reported security vulnerabilities:

  • The xmlschema-core library is upgraded to version 2.3.3.

  • The jackson-databind library is upgraded to version 2.22.3.

  • The commons-lang3 library is upgraded to version 3.20.0.

  • The commons-io library is upgraded to version 2.22.0.

  • The commons-collections4 library is upgraded to version 4.6.0.

  • The commons-text library is upgraded to version 1.15.0.

  • The cxf-rt-wsdl library is upgraded to version 4.2.3.

W-24369627, W-24137088, W-3300013

Apache Commons Collections 3.x is removed to address the sonatype-2024-3350 security vulnerability.

W-24209547
## [](#12-0-4)12.0.4 **September 23, 2026** ### Compatibility
Application/Service Version

Mule

4.9.0 and later

OpenJDK

17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0, v66.0, v67.0
### Fixed Issues
Issue Resolution ID

Streaming sources now reconnect and resume receiving events when a connection failure occurs during an in-progress restart. Previously, these sources stopped receiving events until the application was restarted.

W-24228300

The jackson-core library is upgraded to version 2.22.3 to address reported security vulnerabilities.

W-3300013
## [](#12-0-3)12.0.3 **September 21, 2026** ### What’s New - This release includes general security fixes. ### Compatibility
Application/Service Version

Mule

4.9.0 and later

OpenJDK

17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0, v66.0, v67.0
### Fixed Issues
Issue Resolution ID

The test-only allure-junit4 dependency is no longer included in the shipped connector artifact.

W-24098525

The Invoke Apex REST operation now serializes request bodies using UTF-8 instead of the JVM default character encoding.

W-23682552

When uploading a batch fails, the Create Job Bulk API v2 operation now aborts the job instead of leaving it in the Open state.

W-23422580

These libraries are upgraded to address reported security vulnerabilities:

  • The jackson-core and jackson-databind libraries are upgraded to version 2.22.2.

  • The jackson-annotations library is upgraded to version 2.22.

  • The jetty library is upgraded to version 12.1.13.

  • The commons-codec library is upgraded to version 1.22.1.

  • The cxf-rt-wsdl library is upgraded to version 4.1.8.

W-3300013
## [](#12-0-2)12.0.2 **August 20, 2026** ### Compatibility
Application/Service Version

Mule

4.9.0 and later

OpenJDK

17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0, v66.0, v67.0
### Fixed Issues
Issue Resolution ID

Streaming sources no longer leak background worker threads, which previously accumulated over time and could degrade application performance.

W-23841225

The jakarta.mail library is upgraded to version 1.6.8 to address a reported security vulnerability.

W-23795603
## [](#12-0-1)12.0.1 **August 6, 2026** ### What’s New - This connector version requires Mule runtime 4.6.22 or later if you’re using Mule 4.6.x, or Mule runtime 4.9.9 or later if you’re using Mule 4.9.x. If you prefer not to upgrade your Mule runtime, use the connector version released immediately after this one. ### Compatibility
Application/Service Version

Mule

4.9.0 and later

OpenJDK

17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0, v66.0, v67.0
### Fixed Issues
Issue Resolution ID

The Merge operation no longer returns an error resolving metadata for the Master Record input parameter.

W-17715398

When Cache Events In Memory is set to false (the default), streaming sources now correctly update the replay ID after processing events, preventing duplicate event reprocessing.

W-22893114

These libraries are upgraded to address reported security vulnerabilities:

  • The jetty library is upgraded to version 12.1.12.

  • The cometd library is upgraded to version 8.0.12.

W-3300013
## [](#12-0-0)12.0.0 **July 21, 2026** ### What’s New - This connector is now compatible with Java 17 only. - The **OAuth Username Password** connection type is removed because Salesforce is retiring the OAuth 2.0 Username-Password flow. Applications that use this connection type fail to deploy on 12.0.0. Migrate to another supported connection type, such as [OAuth 2.0](https://docs.mulesoft.com/salesforce-connector/latest/salesforce-connector-reference#sfdc-config_config-with-oauth), [OAuth Client Credentials](https://docs.mulesoft.com/salesforce-connector/latest/salesforce-connector-reference#sfdc-config_oauth-client-credentials), [OAuth JWT](https://docs.mulesoft.com/salesforce-connector/latest/salesforce-connector-reference#sfdc-config_jwt), or [OAuth SAML](https://docs.mulesoft.com/salesforce-connector/latest/salesforce-connector-reference#sfdc-config_saml). - The new **Query Time Buffer (Seconds)** field enables you to configure a polling time buffer (from `0` to `120` seconds) for source listeners to prevent missing records committed between polls for the **On New Object**, **On Modified Object**, and **On Deleted Object** sources. The query buffer time for the **On Modified Object** source now defaults to `0` seconds, instead of the former hardcoded default of `2` seconds. Applications that rely on the previous 2-second buffer must explicitly configure this value in the **Query Time Buffer (Seconds)** field. For more information, see [Salesforce Connector Reference](https://docs.mulesoft.com/salesforce-connector/latest/salesforce-connector-reference). For more information about how to upgrade, see [Upgrading and Migrating Salesforce Connector to 12.x](https://docs.mulesoft.com/salesforce-connector/latest/salesforce-connector-upgrade-migrate). ### Compatibility
Application/Service Version

Mule

4.9.0 and later

OpenJDK

17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0, v66.0, v67.0
### Fixed Issues
Issue Resolution ID

The On Modified Object source now honors the read timeout configured in the connector configuration for internal DescribeSObjects calls. Previously, these calls defaulted to an infinite timeout (readTimeout=0), which caused connections to hang under certain network conditions.

W-20080289

These libraries are upgraded to address reported security vulnerabilities:

  • The Apache CXF library is upgraded to version 4.1.7.

  • The jackson-core and jackson-databind libraries are upgraded to version 2.21.5.

  • The woodstox-core library is upgraded to version 6.7.0.

  • The httpclient library is upgraded to version 4.5.14.

  • The commons-codec library is upgraded to version 1.22.0.

  • The opencsv library is upgraded to version 5.12.0.

  • The jackson-annotations library is upgraded to version 2.21.

  • The gson library is upgraded to version 2.12.0.

  • The jaxws-rt library is upgraded to version 2.3.7.

  • The jetty library is upgraded to version 12.1.10.

  • The cometd-java library is upgraded to version 8.0.7.

W-23198392, W-21363914, W-22929772, W-23192337, W-22894638
## [](#11-5-0)11.5.0 **June 25, 2026** ### What’s New - Salesforce Connector now supports Salesforce API v67.0. ### Compatibility
Application/Service Version

Mule

4.4.0 and later

OpenJDK

8, 11, and 17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0, v66.0, v67.0
## [](#11-4-0)11.4.0 **April 5, 2026** ### What’s New - Salesforce Connector now supports Salesforce API v66.0. ### Compatibility
Application/Service Version

Mule

4.6.6 and later

OpenJDK

8, 11, and 17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0, v66.0
### Fixed Issues
Issue Resolution ID

The variable name for Time unit is changed from objectTTLUnit to objectTTLTimeUnit. The display name (Time unit) remains unchanged.

W-21082898

These libraries are upgraded to address reported security vulnerabilities:

  • The jackson-core library is upgraded to version 2.18.6.

  • The commons-text library is upgraded to version 1.14.0.

  • The guava library is upgraded to version 32.1.3-jre.

  • The mule-connector-logging library is upgraded to version 1.0.2.

W-21713141
## [](#11-3-4)11.3.4 **March 20, 2026** ### Compatibility
Application/Service Version

Mule

4.6.6 and later

OpenJDK

8, 11, and 17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0
### Fixed Issues
Issue Resolution ID

The variable names for Object TTL and Time unit are changed from objectTTLTimeout and objectTTLTimeoutUnit to objectTTL and objectTTLUnit to resolve a backward compatibility break introduced in version 11.3.0. Previously, this change caused existing applications to fail during build with an error stating that the objectTTL attribute was not allowed. The display names (Object TTL and Time unit) remain unchanged.

W-21082898

The jetty.version library is upgraded to version 9.4.58.v20250814 to address reported security vulnerabilities.

W-21577093
## [](#11-3-3)11.3.3 **January 21, 2026** ### Compatibility
Application/Service Version

Mule

4.6.6 and later

OpenJDK

8, 11, and 17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0
### Fixed Issues
Issue Resolution ID

The Token field is renamed to Security Token for the Basic Authentication connection type.

W-19987844

The connector now handles Apex class failure responses correctly and no longer throws the java.lang.ClassCastException error when propagating errors from Salesforce. Previously, when an Apex class returned a failure response code, the connector failed to cast SalesforceException to ModuleException, preventing proper error propagation.

W-20089710

The connector now correctly closes the streaming connection for the Replay Channel Listener source before attempting a source restart during 403 or 401 error scenarios. By stopping the streaming client before raising a connection exception, the connector prevents a leak where multiple client IDs remain active and receive the same platform events.

W-20604291
## [](#11-3-2)11.3.2 **December 7, 2025** ### Compatibility
Application/Service Version

Mule

4.6.6 and later

OpenJDK

8, 11, and 17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0
### Fixed Issues
Issue Resolution ID

The connector with the OAuth Client Credentials connection type now renews the token when an INVALID_SESSION_ID error occurs in the Create Job and Create Job Bulk Api V2 operations.

W-19714693
## [](#11-3-1)11.3.1 **November 19, 2025** ### Compatibility
Application/Service Version

Mule

4.6.6 and later

OpenJDK

8, 11, and 17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0
### Fixed Issues
Issue Resolution ID

The Spring Framework dependency now excludes the spring-context and spring-aop libraries to address the CVE-2024-38820 security vulnerability.

W-19805552
## [](#11-3-0)11.3.0 **October 3, 2025** ### What’s New - Salesforce Connector now supports Salesforce API v65.0. - The connector no longer supports the **Basic Authentication** connection type for the Salesforce API v65.0. - The variable names for **Object TTL** and **Time unit** are changed from `objectTTL` and `objectTTLTimeUnit` to `objectTTLTimeout` and `objectTTLTimeoutUnit`. The display names (**Object TTL** and **Time unit**) remain unchanged. ### Compatibility
Application/Service Version

Mule

4.6.6 and later

OpenJDK

8, 11, and 17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0
## [](#11-2-3)11.2.3 **September 12, 2025** ### Compatibility
Application/Service Version

Mule

4.6.6 and later

OpenJDK

8, 11, and 17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0
### Fixed Issues
Issue Resolution ID

For the OAuth JWT connection type, the connector now uses the SHA256WithRSA algorithm to sign certificates by default.

W-19075988
## [](#11-2-2)11.2.2 **September 4, 2025** ### Compatibility
Application/Service Version

Mule

4.6.6 and later

OpenJDK

8, 11, and 17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0
### Fixed Issues
Issue Resolution ID

The Query xml stream operation now correctly throws the SALESFORCE:INVALID_INPUT error instead of the MULE:UNKNOWN error when invalid input is provided.

W-18779869

The connector with the OAuth Client Credentials connection type now renews the token when an INVALID_SESSION_ID error occurs in the Invoke apex rest method operation.

W-19003555
## [](#see-also)See Also - [Salesforce Help](https://help.salesforce.com) - [MuleSoft Services](https://www.mulesoft.com/support-and-services) - [Known Issues](https://help.salesforce.com/s/issues)