Developer Updates

Apex heap limits rise from 6 MB to 10 MB for synchronous transactions and from 12 MB to 25 MB for asynchronous ones, with a setting to keep the old limit during transition.

A new ApexIntegrationTests capability lets test classes make real HTTP callouts to external services instead of relying only on mock responses.

A new Tooling API REST resource returns detailed metadata about Apex types, built to power IDE code completion and to ground AI agents that work with Apex.

LWC HTML templates can now contain complex JavaScript expressions, generally available with API version 66.0 and enabled per component.

The lwc:external template attribute lets you drop standard web components from outside Salesforce into LWC templates without iframes or static resource workarounds.

A Salesforce-provided plugin gives Claude Code org-specific context through hosted MCP servers so AI-generated Salesforce code is grounded in your actual metadata.

REST API URIs can now use latest in place of a version number, so integrations automatically resolve to the current API version.

A new explicitNamespace property on Database.QueryOptions lets managed package code disambiguate fields when a subscriber org has a custom field with the same name.

Compile All Classes gets a selective option: recompile only the Apex classes that are currently invalid instead of the entire codebase.

ApexGuru now detects duplicate and near-duplicate Apex code in production and Full Copy sandboxes, with results surfaced inside IDEs including VS Code and Cursor.

Starting in Winter '27, authenticating through the SOAP API login() call requires the Use Any API permission, matching the rule already applied elsewhere.

Flow Builder stores End element positions in the flow metadata XML, so external tools and version control preserve exactly where you placed them.

A new FORMULA() function in SOQL lets you run calculations directly in a WHERE clause, comparing fields without creating helper formula fields.

Flow Builder gains a dedicated Test mode in beta: reusable test scenarios, mock outputs, assertions, and code coverage for flows.

Winter '27 enforces several release updates, including profile filtering, authorized email domains, accessibility styling, and the retirement of the OAuth 2.0 Username-Password flow.

Expose color, spacing, and dimension settings of your custom LWC flow screen components directly in Flow Builder with the new stylingHook tags.

Data Mask and Seed (v3.0) ships as a built-in core app with a simpler UI, so you can mask production data and seed sandboxes with realistic test data without installing a managed package.

Context Service actions can now be called directly from Flow using Apex-defined data types, letting admins pass context in and out through Flow variables without custom code.

Agentforce Vibes 2.0 makes VS Code a provider-agnostic, intent-driven IDE where you orchestrate multi-agent swarms across models like Claude and GPT-5, backed by 30+ Skills and 60+ MCPs.

Salesforce Multi-Framework lets developers build AI agents and apps with industry-standard frameworks like React inside one secure, governed Salesforce environment.

The Headless Experience Layer separates business logic, data, and permissions from the UI, so you define intent once and it renders natively everywhere your users work.

Marketing Cloud Next now supports AMPscript alongside Handlebars, letting marketers retrieve and format CRM data in email content with familiar syntax and inline validation.

Flow data tables can now show the related record name instead of the raw record ID for lookup fields-and optionally link directly to that record with a single click.

A new Web Console arrives alongside Summer '26, providing an in-browser code editing and execution environment directly within Salesforce-no external IDE required for quick code tasks.

The Salesforce-managed X (formerly Twitter) authentication provider is being retired in Summer '26. Orgs using it for login or integration must migrate to their own X Developer app before enforcement or authentication will break.

Apex's Blob.toPdf() method is updated to use the Visualforce PDF rendering service in Summer '26, improving font support and multi-character handling-but potentially changing existing PDF outputs.

Apex batch action results are now returned in the same order as the original request-a behavior change originally scheduled for Spring '25, now enforced in Summer '26.

API integrations still using hardcoded Salesforce instance URLs (e.g., na1.salesforce.com) must switch to My Domain URLs before Summer '26 enforcement-or API calls will break.

A new Create Agent element lets you add AI-powered Agentforce agents directly from the Flow Builder canvas, with custom instructions and actions configured inline.

New Apex code using API version 67 runs database operations in user mode by default and enforces sharing rules-making secure-by-default the new standard.

Apex now supports multiline string literals using triple single-quotes and dynamic string population via String.template() with variable maps-no more messy concatenation.

Preview individual Lightning Web Components directly in your browser or VS Code without full page reloads-now generally available with the Live Preview extension.

Lightning Web Components now support a central state management system, letting multiple components share and synchronize data through a shared store without complex event chains.

A new opt-in Release Manager lets you preview upcoming Salesforce features in sandboxes via three channels: Standard (stable), Accelerated (production-ready), and Dev (in development).

Create PDF documents directly from Apex code without Visualforce. New PageReference.getContentAsPDF() method simplifies document generation.

ISV partners can now debug subscriber org issues without requesting login access. Enhanced tooling for managed package troubleshooting.

Modernized sandbox copy and refresh interface. Cleaner layout, better progress tracking, and improved configuration options.

Expose Apex REST and AuraEnabled methods as Agentforce agent actions without extra wrappers.

Speed up queries with Data 360 SQL for compact form queries and custom SQL in CRM Analytics.

Starting 2026, new certificates have shorter maximum lifespans. Plan for more frequent rotations and avoid certificate pinning.

Enhanced cross-site scripting protection for Visualforce pages using apex:inputField. Test pages in sandbox before production deployment.

Model Context Protocol support for AI agent development. Helps convert JavaScript LWCs to TypeScript and enables secure data connections.

Web-based IDE with AI-powered Vibe Codey assistant. Generate code from conversational instructions, debug, test, and deploy from browser.

Major update to Lightning Design System with improved UI consistency and performance optimizations across the platform.

Open standard for AI systems to securely connect with data, apps, and workflows. Agentforce agents can access Sales, Service, Marketing clouds.

Near real-time monitoring of additional event types via Streaming API. Enhanced security, performance, and adoption insights.

Embed custom Lightning Web Components in Salesforce Dashboards. Display complex visualizations alongside standard widgets.

Define agent behavior with Agent Script, a YAML-like language. Provide structured instructions for predictable AI agent responses.

Query up to 50 million records with the new Cursor class. Cache results server-side and paginate with fine control.

New test level runs only relevant tests during deployment. Salesforce determines which tests matter based on code changes.

Create reusable SOQL queries and expose them via REST API. Validate once, use anywhere including Agentforce actions.

Create and update records from LWC using GraphQL mutations. Reduce Apex dependencies with client-side data manipulation.

Import type definitions for base components using @salesforce/lightning-types npm package. Better TypeScript support for LWC.

LWC templates now support complex JavaScript expressions, not just properties and getters. More flexibility in template binding.

Add component and property descriptions to LWC metadata. Agentforce for Setup can recommend your components during page configuration.

Outbound messages no longer send session IDs. A security improvement that affects legacy integrations relying on this feature.

New Connected Apps creation is disabled by default. Migrate to External Client Apps for better security and packaging.