Salesforce CLI 2.152.14
security+~***!
Salesforce CLI 2.152.14 adds --debug-level and --category-level flags to the apex run command for controlling anonymous Apex debug logs, and the two flags are mutually exclusive. It removes a Hyperforce/JWT gate that blocked sf org create user on Hyperforce orgs when the Dev Hub used JWT authentication. The release also fixes sf org open exiting before the browser launched, a broken sf-trust bin path in @salesforce/plugin-trust, and adds support for the ReferralIntakeConfiguration metadata type in DX projects. A security fix bumps the npm version pinned in npm-shrinkwrap.json to pull in a patched tar.
What changes for platform teams
Teams running anonymous Apex from the CLI can set debug log levels per predefined level or per category. Teams that run user creation on Hyperforce orgs with JWT Dev Hubs can now use that command, and the npm install failure from the broken bin path is resolved.
Changes
- We addressed an issue where the published npm-shrinkwrap.json pinned a version of npm that bundled a vulnerable version of tar. We bumped the pinned npm version to pull in a patched tar.security
- We removed the Hyperforce/JWT gate that blocked sf org create user on Hyperforce orgs when the Dev Hub used JWT authentication. The underlying platform issue is now resolved, so this command works in that scenario. For example:changed
- The apex run command has two new flags for controlling the debug log level when you execute anonymous Apex. Use --debug-level to set a predefined level (NONE, DEBUGONLY, DB, PROFILING, CALLOUT, or DETAIL), or --category-level for fine-grained, per-category control (the two flags are mutually exclusive). For example:added
- The sf org open command no longer exits before the browser finishes launching, which caused intermittent failures, especially on Windows and in the VS Code integrated terminal.fixed
- We fixed a broken sf-trust bin path in @salesforce/plugin-trust that pointed at an unpublished bin/dev file, which silently skipped the bin link and broke npm install. It now points at the published bin/run.js.fixed
- Salesforce DX projects now support the ReferralIntakeConfiguration metadata type.fixed
Full release notes ↗ · all Salesforce CLI releases
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules