Blog

Winter '27 raises the Apex heap limit to 10MB synchronous and 25MB asynchronous. What the new limits are, the opt-in setting that keeps sandbox deploys safe, and how to check your org's limit at runtime.

Winter '27 adds FORMULA() to the SOQL WHERE clause (Beta, API v68.0), letting you compare two fields with arithmetic inside the query. Syntax, supported types, restrictions, and when to use it.

Winter '27 makes complex template expressions generally available in Lightning Web Components. Write JavaScript expressions directly in the HTML template, drop formatting-only getters, and bind raw data inside iterations.

Winter '27 lets you use 'latest' in place of a version number in the Salesforce REST API URI. What it does, why you should still pin versions in production integrations, and when the keyword is the right call.

How Apex enforces object, field and record access in Summer '26 (API v67.0): the four access layers, what an omitted sharing keyword really does, how sharing keywords interact with USER_MODE, why SECURITY_ENFORCED missed the WHERE clause, and when to use stripInaccessible.

How attackers mass-scanned public Experience Cloud sites through the /s/sfsites/aura endpoint in 2026, the four data access layers for guest users, and Salesforce's recommended hardening steps in priority order, plus what to look for in Event Monitoring.

Pick the right Salesforce integration pattern in four questions. Covers inbound and outbound tools, data virtualization, event-driven options, and how the official Salesforce Integration Patterns guide ranks each solution.

What actually stays on the profile, what moves to permission sets, and how to migrate a profile-heavy org to the permission-set-led model — with audit SOQL, permission set group design rules and the pitfalls that break user access mid-migration.

After raising an Apex class to API version 67.0, it either fails to compile or silently returns fewer records and throws permission errors. This scenario covers the three secure-by-default changes in Summer '26 and how to safely migrate each one.

After the Summer '26 upgrade, SSO logins fail for everyone and nothing appears in login history. This scenario covers the retirement of the single-configuration SAML framework and how to migrate to the multiple-configuration framework before enforcement breaks authentication.

ETL jobs, Data Loader automations and vendor connectors that authenticate with the SOAP login() call start getting rejected. This scenario covers the Use API Auth permission introduced in Summer '26, the path to the Summer '27 retirement, and how to migrate integrations to OAuth before they break.