Contact Us 1-800-596-4880
  1. Homepage
  2. Release Notes

  3. Salesforce Connector Release Notes

Salesforce Connector Release Notes

Support Category: Select

Anypoint Connector for Salesforce (Salesforce Connector) provides access to the Salesforce APIs.

Guide: Salesforce Connector
Reference: Salesforce Connector Reference

12.1.0

November 4, 2026

What’s New

  • Salesforce Connector now supports Salesforce API v68.0. The ConversationGuidanceSettings, DealInsightsSettings, and UnifiedSalesIntelligenceEngagementInsightsSettings types are no longer available, because Salesforce API v68.0 removed them.

Compatibility

Application/Service Version

Mule

4.9.0 and later

OpenJDK

17

Salesforce, Salesforce Government Cloud

37.0, 38.0, 39.0, 40.0, 41.0, 42.0, 43.0, 44.0, 45.0, 46.0, 47.0, 48.0, 49.0, 50.0, 51.0, 52.0, 53.0, 54.0, 55.0, 56.0, 57.0, 58.0, 59.0, 60.0, 61.0, 62.0, 63.0, 64.0, 65.0, 66.0, 67.0, 68.0

Fixed Issues

Issue Resolution ID

The Create Batch operation for a Bulk API v1 JSON job now writes a DataWeave date value as an ISO date (yyyy-MM-dd). Previously, that value was written as a structured object, or the operation failed on Java 17.

W-18725227

Apex SOAP calls now use Jakarta XML Web Services (jaxws-rt version 4.0.5, with jakarta.xml.ws-api version 4.0.3, jakarta.xml.soap-api version 3.0.2, and jakarta.xml.bind-api version 4.0.5) instead of the Java EE Metro implementation (jaxws-rt version 2.3.7). The connector no longer includes jakarta.mail version 1.6.8. Mule runtime provides Jakarta Mail version 2.1.5, which keeps the vulnerable 1.6.x library off the connector classpath and continues to address CVE-2025-7962.

W-24624675

These libraries are upgraded to address reported security vulnerabilities:

  • The cxf-rt-wsdl library is upgraded to version 4.2.4.

  • The jaxb-impl library is upgraded to version 4.0.9, which addresses CVE-2026-92877.

  • The jackson-core and jackson-databind libraries are upgraded to version 2.22.4.

  • The guava library is upgraded to version 33.7.2-jre.

  • The asm, asm-commons, asm-tree, asm-util, and asm-analysis libraries are upgraded to version 9.11.1.

  • The gson library is upgraded to version 2.15.0.

  • The commons-lang3 library is upgraded to version 3.21.0.

  • The commons-codec library is upgraded to version 1.23.0.

  • The jetty library is upgraded to version 12.1.14.

W-24406484, W-24624675, W-3300013

12.0.5

October 13, 2026

Compatibility

Application/Service Version

Mule

4.9.0 and later

OpenJDK

17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0, v66.0, v67.0

Fixed Issues

Issue Resolution ID

When using the OAuth Client Credentials connection type, the Invoke Apex Soap Method operation now renews the session after an INVALID_SESSION_ID or session-timeout fault, instead of continuing to use the expired session.

W-24083612

When using the OAuth Client Credentials connection type, metadata operations and Partner API operations now renew the session after an INVALID_SESSION_ID or session-timeout fault, instead of failing with a connectivity error.

W-23517165

The AllOrNoneHeader and CallOptions values in the Headers field are now applied on the Create Metadata, Update Metadata, Upsert Metadata, Delete Metadata, Read Metadata, List Metadata, Describe Metadata, Retrieve Metadata, Rename Metadata, and Deploy Metadata operations. Previously, these values were ignored.

W-24209547

The connector no longer includes the archived mule-connector-logging library, version 1.0.2, which has no published license metadata. Connector logging behavior is unchanged.

W-24327308

These libraries are upgraded to address reported security vulnerabilities:

  • The xmlschema-core library is upgraded to version 2.3.3.

  • The jackson-databind library is upgraded to version 2.22.3.

  • The commons-lang3 library is upgraded to version 3.20.0.

  • The commons-io library is upgraded to version 2.22.0.

  • The commons-collections4 library is upgraded to version 4.6.0.

  • The commons-text library is upgraded to version 1.15.0.

  • The cxf-rt-wsdl library is upgraded to version 4.2.3.

W-24369627, W-24137088, W-3300013

Apache Commons Collections 3.x is removed to address the sonatype-2024-3350 security vulnerability.

W-24209547

12.0.4

September 23, 2026

Compatibility

Application/Service Version

Mule

4.9.0 and later

OpenJDK

17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0, v66.0, v67.0

Fixed Issues

Issue Resolution ID

Streaming sources now reconnect and resume receiving events when a connection failure occurs during an in-progress restart. Previously, these sources stopped receiving events until the application was restarted.

W-24228300

The jackson-core library is upgraded to version 2.22.3 to address reported security vulnerabilities.

W-3300013

12.0.3

September 21, 2026

What’s New

  • This release includes general security fixes.

Compatibility

Application/Service Version

Mule

4.9.0 and later

OpenJDK

17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0, v66.0, v67.0

Fixed Issues

Issue Resolution ID

The test-only allure-junit4 dependency is no longer included in the shipped connector artifact.

W-24098525

The Invoke Apex REST operation now serializes request bodies using UTF-8 instead of the JVM default character encoding.

W-23682552

When uploading a batch fails, the Create Job Bulk API v2 operation now aborts the job instead of leaving it in the Open state.

W-23422580

These libraries are upgraded to address reported security vulnerabilities:

  • The jackson-core and jackson-databind libraries are upgraded to version 2.22.2.

  • The jackson-annotations library is upgraded to version 2.22.

  • The jetty library is upgraded to version 12.1.13.

  • The commons-codec library is upgraded to version 1.22.1.

  • The cxf-rt-wsdl library is upgraded to version 4.1.8.

W-3300013

12.0.2

August 20, 2026

Compatibility

Application/Service Version

Mule

4.9.0 and later

OpenJDK

17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0, v66.0, v67.0

Fixed Issues

Issue Resolution ID

Streaming sources no longer leak background worker threads, which previously accumulated over time and could degrade application performance.

W-23841225

The jakarta.mail library is upgraded to version 1.6.8 to address a reported security vulnerability.

W-23795603

12.0.1

August 6, 2026

What’s New

  • This connector version requires Mule runtime 4.6.22 or later if you’re using Mule 4.6.x, or Mule runtime 4.9.9 or later if you’re using Mule 4.9.x. If you prefer not to upgrade your Mule runtime, use the connector version released immediately after this one.

Compatibility

Application/Service Version

Mule

4.9.0 and later

OpenJDK

17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0, v66.0, v67.0

Fixed Issues

Issue Resolution ID

The Merge operation no longer returns an error resolving metadata for the Master Record input parameter.

W-17715398

When Cache Events In Memory is set to false (the default), streaming sources now correctly update the replay ID after processing events, preventing duplicate event reprocessing.

W-22893114

These libraries are upgraded to address reported security vulnerabilities:

  • The jetty library is upgraded to version 12.1.12.

  • The cometd library is upgraded to version 8.0.12.

W-3300013

12.0.0

July 21, 2026

What’s New

  • This connector is now compatible with Java 17 only.

  • The OAuth Username Password connection type is removed because Salesforce is retiring the OAuth 2.0 Username-Password flow. Applications that use this connection type fail to deploy on 12.0.0. Migrate to another supported connection type, such as OAuth 2.0, OAuth Client Credentials, OAuth JWT, or OAuth SAML.

  • The new Query Time Buffer (Seconds) field enables you to configure a polling time buffer (from 0 to 120 seconds) for source listeners to prevent missing records committed between polls for the On New Object, On Modified Object, and On Deleted Object sources. The query buffer time for the On Modified Object source now defaults to 0 seconds, instead of the former hardcoded default of 2 seconds. Applications that rely on the previous 2-second buffer must explicitly configure this value in the Query Time Buffer (Seconds) field. For more information, see Salesforce Connector Reference.

For more information about how to upgrade, see Upgrading and Migrating Salesforce Connector to 12.x.

Compatibility

Application/Service Version

Mule

4.9.0 and later

OpenJDK

17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0, v66.0, v67.0

Fixed Issues

Issue Resolution ID

The On Modified Object source now honors the read timeout configured in the connector configuration for internal DescribeSObjects calls. Previously, these calls defaulted to an infinite timeout (readTimeout=0), which caused connections to hang under certain network conditions.

W-20080289

These libraries are upgraded to address reported security vulnerabilities:

  • The Apache CXF library is upgraded to version 4.1.7.

  • The jackson-core and jackson-databind libraries are upgraded to version 2.21.5.

  • The woodstox-core library is upgraded to version 6.7.0.

  • The httpclient library is upgraded to version 4.5.14.

  • The commons-codec library is upgraded to version 1.22.0.

  • The opencsv library is upgraded to version 5.12.0.

  • The jackson-annotations library is upgraded to version 2.21.

  • The gson library is upgraded to version 2.12.0.

  • The jaxws-rt library is upgraded to version 2.3.7.

  • The jetty library is upgraded to version 12.1.10.

  • The cometd-java library is upgraded to version 8.0.7.

W-23198392, W-21363914, W-22929772, W-23192337, W-22894638

11.5.0

June 25, 2026

What’s New

  • Salesforce Connector now supports Salesforce API v67.0.

Compatibility

Application/Service Version

Mule

4.6.6 and later

OpenJDK

8, 11, and 17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0, v66.0, v67.0

11.4.0

April 5, 2026

What’s New

  • Salesforce Connector now supports Salesforce API v66.0.

Compatibility

Application/Service Version

Mule

4.6.6 and later

OpenJDK

8, 11, and 17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0, v66.0

Fixed Issues

Issue Resolution ID

The variable name for Time unit is changed from objectTTLUnit to objectTTLTimeUnit. The display name (Time unit) remains unchanged.

W-21082898

These libraries are upgraded to address reported security vulnerabilities:

  • The jackson-core library is upgraded to version 2.18.6.

  • The commons-text library is upgraded to version 1.14.0.

  • The guava library is upgraded to version 32.1.3-jre.

  • The mule-connector-logging library is upgraded to version 1.0.2.

W-21713141

11.3.4

March 20, 2026

Compatibility

Application/Service Version

Mule

4.6.6 and later

OpenJDK

8, 11, and 17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0

Fixed Issues

Issue Resolution ID

The variable names for Object TTL and Time unit are changed from objectTTLTimeout and objectTTLTimeoutUnit to objectTTL and objectTTLUnit to resolve a backward compatibility break introduced in version 11.3.0. Previously, this change caused existing applications to fail during build with an error stating that the objectTTL attribute was not allowed. The display names (Object TTL and Time unit) remain unchanged.

W-21082898

The jetty.version library is upgraded to version 9.4.58.v20250814 to address reported security vulnerabilities.

W-21577093

11.3.3

January 21, 2026

Compatibility

Application/Service Version

Mule

4.6.6 and later

OpenJDK

8, 11, and 17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0

Fixed Issues

Issue Resolution ID

The Token field is renamed to Security Token for the Basic Authentication connection type.

W-19987844

The connector now handles Apex class failure responses correctly and no longer throws the java.lang.ClassCastException error when propagating errors from Salesforce. Previously, when an Apex class returned a failure response code, the connector failed to cast SalesforceException to ModuleException, preventing proper error propagation.

W-20089710

The connector now correctly closes the streaming connection for the Replay Channel Listener source before attempting a source restart during 403 or 401 error scenarios. By stopping the streaming client before raising a connection exception, the connector prevents a leak where multiple client IDs remain active and receive the same platform events.

W-20604291

11.3.2

December 7, 2025

Compatibility

Application/Service Version

Mule

4.6.6 and later

OpenJDK

8, 11, and 17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0

Fixed Issues

Issue Resolution ID

The connector with the OAuth Client Credentials connection type now renews the token when an INVALID_SESSION_ID error occurs in the Create Job and Create Job Bulk Api V2 operations.

W-19714693

11.3.1

November 19, 2025

Compatibility

Application/Service Version

Mule

4.6.6 and later

OpenJDK

8, 11, and 17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0

Fixed Issues

Issue Resolution ID

The Spring Framework dependency now excludes the spring-context and spring-aop libraries to address the CVE-2024-38820 security vulnerability.

W-19805552

11.3.0

October 3, 2025

What’s New

  • Salesforce Connector now supports Salesforce API v65.0.

  • The connector no longer supports the Basic Authentication connection type for the Salesforce API v65.0.

  • The variable names for Object TTL and Time unit are changed from objectTTL and objectTTLTimeUnit to objectTTLTimeout and objectTTLTimeoutUnit. The display names (Object TTL and Time unit) remain unchanged.

Compatibility

Application/Service Version

Mule

4.6.6 and later

OpenJDK

8, 11, and 17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0, v65.0

11.2.3

September 12, 2025

Compatibility

Application/Service Version

Mule

4.6.6 and later

OpenJDK

8, 11, and 17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0

Fixed Issues

Issue Resolution ID

For the OAuth JWT connection type, the connector now uses the SHA256WithRSA algorithm to sign certificates by default.

W-19075988

11.2.2

September 4, 2025

Compatibility

Application/Service Version

Mule

4.6.6 and later

OpenJDK

8, 11, and 17

Salesforce, Salesforce Government Cloud

v37.0, v38.0, v39.0, v40.0, v41.0, v42.0, v43.0, v44.0, v45.0, v46.0, v47.0, v48.0, v49.0, v50.0, v51.0, v52.0, v53.0, v54.0, v55.0, v56.0, v57.0, v58.0, v59.0, v60.0, v61.0, v62.0, v63.0, v64.0

Fixed Issues

Issue Resolution ID

The Query xml stream operation now correctly throws the SALESFORCE:INVALID_INPUT error instead of the MULE:UNKNOWN error when invalid input is provided.

W-18779869

The connector with the OAuth Client Credentials connection type now renews the token when an INVALID_SESSION_ID error occurs in the Invoke apex rest method operation.

W-19003555

See Also