Report Sender uses a connected app to get reporting data from the API. On April 28th, Salesforce reached out to us and told us that we were mandated to enable some additional security options for our connected app, or Report Sender would be at risk of being delisted or having service suspended.

If you'd like to learn more about the specific security requirements, see the Salesforce documentation.

This release should have no noticeable impact on any users, but it is required for Report Sender to continue working correctly. Administrators may notice a new Apex job running periodically to refresh users' security tokens.

Report Sender already uses a secure architecture. This change is not due to any security breach. Just updating security as Salesforce requires.