Most read.
Salesforce Winter '27 Turns On Profile Filtering: What Breaks, and How to Test It First
Winter '27 enforces Profile Filtering, so users see only their own profile name. What breaks in Flows, validation rules and Apex, and how to test it early.
Salesforce Winter '27 Requires Use Any API Auth for SOAP login(): Find Your Exposure First
Winter '27 requires the Use Any API Auth permission for SOAP API login(), or the call errors. The queries to size your exposure and check who holds it.
Salesforce Retires the OAuth Username-Password Flow on 20 February 2027: Migrate Before Your Integrations Break
Salesforce postponed the OAuth 2.0 username-password flow retirement to 20 February 2027. What breaks, how to find affected integrations, and how to migrate.
Salesforce Winter '27 Security Readiness: The Release Updates and the Sandbox Window to Test Them
Winter '27 enforces two security changes, not the five widely listed. Three slipped to 2027 or were cancelled. The dates, what breaks, and how to test.
Salesforce Restricts the OAuth Device Flow on 30 November 2026: Your Connected App Has to Become an External Client App
From 30 November 2026 the OAuth device flow works only from local external client apps. Connected apps that use it must migrate or stop authenticating.
Jev vs Clef vs Laya: Cloudflare's Clef Decision Model Tested on 600 Business Decisions
I ran Cloudflare's new Clef and Clef-flash through the same tests as Jev, Laya and Einstein: 600 decisions plus 7 real failures. Accuracy, speed and cost.
How to Set Up VS Code as Your Git Merge and Diff Tool: Complete Guide
Configure VS Code as your Git merge and diff tool using the built-in merge editor or external mergetool/difftool. Covers --wait flag, 3-way merge editor, and team setup.
Salesforce Strips Non-Public Fields from Aura Action Responses in Spring '27: The Break Only Shows in the Browser
Spring '27 strips non-public system fields from Aura action responses. Why components fail silently, and why no build or Apex test will catch it first.
Salesforce Is Retiring the Email Change Verification Exemption: Set Up Authorized Email Domains Before 1 December 2026
Adopt Authorized Email Domains was cancelled. Its replacement enforces 1 December 2026. How to keep your email verification exception before it lands.
Salesforce Security Enforcement in 2026: Every Change, Date, and What Admins Must Do
Across 2026 Salesforce turns a stack of security recommendations into hard enforcement: MFA, report step-up auth, IP blocking and more. The full list and dates.
Salesforce Retires the OAuth User-Agent Flows on 20 February 2027: Move to Web-Server Flow with PKCE
The OAuth user-agent and hybrid user-agent flows retire on 20 February 2027. What breaks, why a token in the URL is the problem, and where to move next.
Anthropic's Scion vs Git: Why Anthropic Replaced Git, and What It Means for Your Team
Anthropic replaced Git in its monorepo with Scion after AI agents pushed merges past 30,000 a day. How Scion differs from Git, and what your team can borrow.
Salesforce MFA Enforcement in 2026: What Admins Must Verify and Do
Salesforce moves from contractual MFA to hard enforcement in mid-2026, with a stricter phishing-resistant bar for admins. How to verify your org and comply.
Salesforce Outage Recovery After Incident 20004433: What Fails Silently Once the Status Page Turns Green
Salesforce incident 20004433 hit core services on 16 September 2026. The sf CLI queries that find the async work that failed quietly while you waited.
Connecting sf CLI to Your Salesforce Org: sf org login web Complete Guide
How to connect sf CLI to your Salesforce org using sf org login web. Covers sandbox vs production login, org aliases, and verifying your connection.
Salesforce Stops Supporting Incorrect Instanced URLs in API Traffic: Production Windows Run January to March 2027
Salesforce now enforces the instanced URL change per instance: sandboxes are done and production runs January to March 2027. Find your window and fix it now.
Fetching Code Metadata from Salesforce with sf CLI: ApexClass, ApexTrigger, LWC, Aura
How to retrieve ApexClass, ApexTrigger, LightningComponentBundle, and AuraDefinitionBundle metadata from Salesforce using sf CLI, for admins who oversee developers or need to deploy code.
Migrating Legacy Named Credentials Before They Become the Next Salesforce Deadline
Legacy Named Credentials mix secrets and access in one record with no permission set control. Migrate during the Winter '27 window, and how the split works.
Salesforce Platform Event Delivery Limits: How to Measure, Attribute and Cut Usage
Deliveries are counted per subscriber, so cost grows with consumers rather than event volume. How to measure usage, attribute it per client, and reduce it.
Fetching OmniStudio Metadata with sf CLI: OmniScript, DataRaptor, FlexCard, Integration Procedure
How to retrieve OmniScript, DataRaptor (OmniDataTransform), FlexCard (OmniUiCard), and Integration Procedure metadata from Salesforce using sf CLI, with standard runtime requirements and deployment caveats.