[Snyk] Security upgrade com.force.api:force-partner-api from 67.0.0 to 68.0.0

[ashitsalesforce]

Snyk has created this PR to fix 2 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	Allocation of Resources Without Limits or Throttling SNYK-JAVA-COMFASTERXMLJACKSONCORE-18517159	828	com.force.api:force-partner-api: 67.0.0 -> 68.0.0 Major version upgrade Proof of Concept
	Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-17440598	781	com.force.api:force-partner-api: 67.0.0 -> 68.0.0 Major version upgrade Proof of Concept

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

[ashitsalesforce]

This is a major version upgrade that corresponds to the Salesforce Winter '27 API release (v68.0). While specific release notes detailing breaking changes for the force-partner-api library or the underlying Salesforce Partner API v68.0 were not found, major Salesforce API releases can introduce new features, and changes to objects and fields.

Analysis:

• The library version directly correlates with the Salesforce API version. Upgrading from 67.0.0 to 68.0.0 means moving from the Summer '26 API to the Winter '27 API.
• Official changelogs for the force-wsc (Web Service Connector) Java library are not typically published; developers rely on the main Salesforce API release notes.
• Without the official Winter '27 release notes, it is not possible to confirm the exact API changes. However, major version updates in the Salesforce ecosystem often include additions or modifications that may require code verification.

Recommendation:
Given the nature of a major API version upgrade and the lack of detailed release notes at this time, this change is assessed as medium risk. Developers should test their integration against a Salesforce Winter '27 sandbox environment to ensure that existing API interactions function as expected before deploying to production.

Source: Salesforce Developer Documentation

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.