2024-12-31 Weekly News — Episode 226

Watch the video version on YouTube at https://youtube.com/live/BUIfVQV0bhs?feature=share

Hosts: 

• Gavin Pickin - Senior Developer at Ortus Solutions
• Daniel Garcia - Senior Developer at Ortus Solutions

Big Thanks to our Sponsor - Ortus Solutions
The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there including BoxLang.
A few ways to say thanks back to Ortus Solutions:

• Buy Tickets to Into the Box 2025 in Washington DC https://t.co/cFLDUJZEyM
• April 30, 2025 - May 2, 2025 - Washington, DC
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
• Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
• 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
• Now on Amazon! In hardcover too!!!
• https://www.amazon.com/dp/B0CJHB712M
• Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support (holly)
We have 61 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements

Tomcat Vulnerability
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97. The mitigation for CVE-2024-50379 was incomplete. Users running Tomcat on a case insensitive file system with the default servlet write enabled (readonly initialisation parameter set to the non-default value of false) may need additional configuration to fully mitigate CVE-2024-50379 depending on which version of Java they are using with Tomcat: - running on Java 8 or Java 11: the system property sun.io.useCanonCaches must be explicitly set to false (it defaults to true) - running on Java 17: the system property sun.io.useCanonCaches, if set, must be set to false (it defaults to false) - running on Java 21 onwards: no further configuration is required (the system property and the problematic cache have been removed) Tomcat 11.0.3, 10.1.35 and 9.0.99 onwards will include checks that sun.io.useCanonCaches is set appropriately before allowing the default servlet to be write enabled on a case insensitive file system. Tomcat will also set sun.io.useCanonCaches to false by default where it can.
https://www.cve.org/CVERecord?id=CVE-2024-56337

How to resolve with Lucee: https://dev.lucee.org/t/cvs-exploit-of-tomcat-9-10-11/14590

End of 2024 - what did it bring it

What is 2025 bringing?

New Releases and Updates

Adobe Security Updates released December 23rd, 2024 - ColdFusion 2023 Update 12 and 2021 Update 18
We have released critical security updates for ColdFusion (2023 release) and ColdFusion (2021 release).
Adobe is aware that CVE-2024-53961 has a known proof-of-concept that could cause an arbitrary file system read.
View the security bulletin, APSB24-107, and the tech notes for more information.
https://coldfusion.adobe.com/2024/12/released-coldfusion-2023-and-2021-december-23rd-2024-security-updates/

An Initial Analysis of Adobe ColdFusion CVE-2024-53961 - from Hoyahaxa
Adobe released APSB24-107 today, which addresses one vulnerability in ColdFusion tracked as CVE-2024-53961 and described as a path traversal that could lead to file retrieval.  Based on a quick review of the corresponding patches, it appears to be a security enhancement that improves protection (and possibly remediates bypasses) against the attack vectors first addressed in APSB24-14 / CVE-2024-20767 back in March. 
https://www.hoyahaxa.com/2024/12/an-initial-analysis-of-cve-2024-53961.html

Blog from Charlie on the updates: https://www.carehart.org/blog/2024/12/23/ColdFusion_updates_released_Dec_23_2024

Webinars, Meetups and Workshops

ICYMI - Sac Interactive Meetup: All I Want for Christmas is AI with Luke Kilpatrick
Wed, Dec 18 · 6:00 PM PST
https://www.meetup.com/sacinteractive/events/303708503/?eventOrigin=home_page_upcoming_events$all

Sac Interactive Meetup: January with Kai Koenig

CFCasts Content Updates

https://www.cfcasts.com

Merry Xmas - All of the Into the Box 2024 videos are now available for paid subscriptions

https://www.cfcasts.com/series/into-the-box-2024

Conferences and Training

ITB 2025

• Location: Washington, DC
• Dates: April 30, 2025 - May 2, 2025 - Washington, DC
• Tickets and more info: https://t.co/cFLDUJZEyM
• 50% off blind tickets
  • $249.50 for the Conference
  • $349.50 for the Conference + Workshop!!!
• Call for Speakers CLOSED

CFCamp 2025
May 22, 23rd - 2025
Atomis Hotel Munich Airport
https://www.cfcamp.org/
Call for Speakers open - https://www.papercall.io/cfcamp2025
Closes February 28, 2025 ( 4am PST )

More conferences
Need more conferences, this site has a huge list of conferences for almost any language/community.
https://confs.tech/

Blogs, Posts, and Videos of the Week

12/29/24 - Blog - Ben Nadel - My Internal InVision Feature Demo Videos
Although InVision is shutting its doors, it's been an amazing journey; and, I've done a lot of work that I'm incredibly proud of. In particular, I feel great about the way in which I embraced experimentation with both arms; and, that I tried throwing as many features against the wall to see which would stick. Some of my experiments ended up being a "nothing burger". But, some of them went on to become highly valuable parts of the application and the user experience (UX). The whole process made me somewhat fearless in the face of opposition; and, taught me to love my failures just as much as my successes.

Watch the video version on YouTube at https://youtube.com/live/t2KMIxwc1c4?feature=share

Hosts: 

• Gavin Pickin - Senior Developer at Ortus Solutions
• Kai Koenig - Ventego Creative

Big Thanks to our Sponsor - Ortus Solutions
The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there including BoxLang.
A few ways to say thanks back to Ortus Solutions:

• Buy Tickets to Into the Box 2025 in Washington DC https://t.co/cFLDUJZEyM
• April 30, 2025 - May 2, 2025 - Washington, DC
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Now on Amazon! In hardcover too!!!
    • https://www.amazon.com/dp/B0CJHB712M
  • Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support
We have 60 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements

New Vulnerability Reported - Adobe Patched in March!
Today, CISA also added a critical Adobe ColdFusion vulnerability (tracked as CVE-2024-20767), which Adobe patched in March. Since then, several proof-of-concept exploits have been published online.

CVE-2024-20767 is due to an improper access control weakness that allows unauthenticated, remote attackers to read the system and other sensitive files. According to SecureLayer7, successfully exploiting ColdFusion servers with the admin panel exposed online can also allow attackers to bypass security measures and perform arbitrary file system writes.
https://www.scyscan.com/cve-2024-20767/adobe-coldfusion-improper-access-control-vulnerability/#google_vignette

Important notice: Upcoming deprecations and removals in ColdFusion (2025 release)
Added cfencode.sh to the table of removals.
Updated Customizing an HTTP response to HTTP reason phrases.
Added contact email id [email protected]
https://coldfusion.adobe.com/2024/12/important-notice-upcoming-deprecations-and-removals-in-coldfusion-2025-release/
 
ICYMI - Adobe CF2025 Beta is now open
Get an exclusive sneak peek at what’s next for ColdFusion! Sign up for the ColdFusion 2025 Beta Program and get early access to shape the future with us. Engage with the community in the forums, share your thoughts, and keep up with the newest updates and features.

Check out the curated webinar schedule and join us!

https://coldfusion.adobe.com/2024/11/code-the-future-join-the-coldfusion-2025-beta-today/

New Releases and Updates

BoxLang Beta 25 Released

12/13/24 - BoxLang 1.0.0 Beta 25 Launched
8 New Features
14 Improvements
18 Bugs Fixed
https://boxlang.ortusbooks.com/readme/release-history/1.0.0-beta25
 
Webinars, Meetups and Workshops

Sac Interactive Meetup: All I Want for Christmas is AI with Luke Kilpatrick
Wed, Dec 18 · 6:00 PM PST
https://www.meetup.com/sacinteractive/events/303708503/?eventOrigin=home_page_upcoming_events$all

Sac Interactive Meetup: January with Kai Koenig

ICYMI - Online CF Meetup - From Development to Deployment: Load Testing ColdFusion Applications with Dakota Clum
Thursday, December 12, 2024
9:00 AM to 10:00 AM PST
This session will go over how to load test a ColdFusion application after it is deployed in your environment. We will cover load testing options, setting up a simulated load test, and tuning adjustments that can be made as a result of load testing.
https://www.meetup.com/coldfusionmeetup/events/304881310/
RECORDING: https://www.youtube.com/watch?v=SMksnutdp-0&list=PLG2EHzEbhy0-QirMKgSxhjkUyTSSTvHjL
 
ADOBE CF 2025 Beta - Seminars

ColdFusion 2025: What’s new and exciting - Mark Takata
Security and Stability in ColdFusion - Parvathy and Atul
VS Code plugin changes - Vikas Yadav
Smart language additions in ColdFusion - Ashudeep Sharma
Performance enhancements - Satyam Mishra
Unleash the power of Revamping CFCharts for modern applications - Yukti Agrawal
Spreadsheets & CSV Processing - Nikhil Dubey
Microsoft Graph Integration in ColdFusion: Unlocking data with Oauth - Shiva Marella
What’s new in containers - Suchika
Recap and QnA - Mark Takata

CFCasts Content Updates

https://www.cfcasts.com

Merry Xmas - All of the Into the Box 2024 videos are not available for paid subscriptions
https://www.cfcasts.com/series/into-the-box-2024

Conferences and Training

ICYMI - CF Summit India 2024
Join us for the Adobe ColdFusion India Summit, a premier, completely free event where developers, industry experts, and thought leaders come together to explore the latest in ColdFusion and web development. Network with peers, meet the ColdFusion engineering team, get your questions answered, discover strategies to boost your career and grow your business—all at no cost.
Price: Free
December 7, 2024
2 Cities: Bengaluru and Noida
Register: https://cf-indiasummit-2024.attendease.com
 
ITB 2025

• Location: Washington, DC
• Dates: April 30, 2025 - May 2, 2025 - Washington, DC
• Tickets and more info: https://t.co/cFLDUJZEyM
• 50% off blind tickets
  • $249.50 for the Conference
  • $349.50 for the Conference + Workshop!!!
• Call for Speakers CLOSED

CFCamp 2025
May 22, 23rd - 2025
Atomis Hotel Munich Airport
https://www.cfcamp.org/
Call for Speakers open - https://www.papercall.io/cfcamp2025
Closes February 28, 2025 ( 4...

2024-12-10 Weekly News — Episode 224

Watch the video version on YouTube at https://youtube.com/live/bV2CxQprVQM?feature=share

Hosts: 

• Gavin Pickin - Senior Developer at Ortus Solutions
• Grant Copley - Senior Developer at Ortus Solutions

Big Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there including BoxLang.
A few ways to say thanks back to Ortus Solutions:

• Buy Tickets to Into the Box 2025 in Washington DC https://t.co/cFLDUJZEyM
• April 30, 2025 - May 2, 2025 - Washington, DC
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Now on Amazon! In hardcover too!!!
    • https://www.amazon.com/dp/B0CJHB712M
  • Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support (jolly)
We have 59 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements
Adobe CF2025 Beta is now open

Get an exclusive sneak peek at what’s next for ColdFusion! Sign up for the ColdFusion 2025 Beta Program and get early access to shape the future with us. Engage with the community in the forums, share your thoughts, and keep up with the newest updates and features.

Make Your Voice Heard and Win Big!

Join our weekly engagement challenge during the ColdFusion 2025 Beta! Every week, we’ll reward top contributors with exciting prizes. Your feedback matters, and the more you share, the higher your chances of winning. Don’t miss out—get involved and be rewarded!

Deep Dive Sessions and Demo Code Access!

We’re thrilled to announce that for each feature in ColdFusion 2025, there will be exclusive deep-dive sessions hosted by the engineers who built it. These sessions will offer valuable insights and in-depth explanations straight from the experts.

Additionally, we’ve set up a central GIT repository where all demo code will be hosted. This is the same repository where Mark has already pushed his code, and it will be the hub for all developers to share their contributions. Check out the GIT links and start exploring the code!

Check out the curated webinar schedule and join us!

https://coldfusion.adobe.com/2024/11/code-the-future-join-the-coldfusion-2025-beta-today/

TestBox Latest Updates and News!
Did You Miss It? The New TestBox Site & v6.0 Are Here!
Share Your Feedback and Get Featured on Our Site!
We’re thrilled to have launched the new TestBox website and TestBox 6.0! If you haven’t had a chance to explore yet, visit TestBox to discover updated documentation, powerful resources, and features that make testing more efficient than ever.
https://www.ortussolutions.com/blog/testbox-updates-and-news

New Releases and Updates
ICYMI - CommandBox 6.1.0 Released!
We are pleased to announce the release of CommandBox 6.1.0, the latest release of our CLI, REPL, and Server, and Package Manager.  This is a minor update to our last release.  It has a handful of new features, and bug fixes, as well as better out-of-the-box support for BoxLang, our new CFML-compatible JVM language.

New Features

• WebSocket Server
• Updates to run BoxLang
• Add command to deploy Lucee lex or lco files
• Check if an entry has a hash associated to it and validate it

Improvement

• Sort by date last started when finding a server by web root
• Make semantic version prerelease identifiers not case sensitive
• default servlet pass predicate include Boxlang files

Tasks

• Update to Undertow 2.2.33.Final
• Update to Lucee 5.4.6.9
• Update bundled JRE to 11.0.23+9

9 Bugs

https://www.ortussolutions.com/blog/commandbox-610-released
https://commandbox.ortusbooks.com/

BoxLang Beta 23 and 24 Released

12/2/24 - BoxLang 1.0.0 Beta 24 Launched
3 New Features
6 Improvements
4 Bugs Fixed
https://www.ortussolutions.com/blog/boxlang-100-beta-24-launched

11/23/24 - BoxLang 1.0.0 Beta 23 Launched
4 New Features
2 Improvements
1 Tasks
10 Bugs Fixed
https://www.ortussolutions.com/blog/boxlang-100-beta-23-launched

Webinars, Meetups and Workshops

Online CF Meetup - From Development to Deployment: Load Testing ColdFusion Applications with Dakota Clum
Thursday, December 12, 2024
9:00 AM to 10:00 AM PST
This session will go over how to load test a ColdFusion application after it is deployed in your environment. We will cover load testing options, setting up a simulated load test, and tuning adjustments that can be made as a result of load testing.
https://www.meetup.com/coldfusionmeetup/events/304881310/

ADOBE CF 2025 Beta - Seminars

ColdFusion 2025: What’s new and exciting
Mark Takata
December 2, 2024

Security and Stability in ColdFusion
Parvathy and Atul
December 3, 2024

VS Code plugin changes
Vikas Yadav
December 4, 2024

Smart language additions in ColdFusion
Ashudeep Sharma
December 5, 2024

Performance enhancements
Satyam Mishra
December 9, 2024

Unleash the power of Revamping CFCharts for modern applications
Yukti Agrawal
December 10, 2024

Spreadsheets & CSV Processing
Nikhil Dubey
December 11, 2024

Microsoft Graph Integration in ColdFusion: Unlocking data with Oauth
Shiva Marella
December 13, 2024

What’s new in containers
Suchika
December 17, 2024

Recap and QnA
Mark Takata
December 18, 2024

CFCasts Content Updates

https://www.cfcasts.com

Conferences and Training

ICYMI - CF Summit India 2024
Join us for the Adobe ColdFusion India Summit, a premier, completely free event where developers, indust...

2024-11-19 Weekly News — Episode 223

Watch the video version on YouTube at https://youtube.com/live/bFX1uaN5Hec?feature=share

Hosts: 

• Gavin Pickin - Senior Developer at Ortus Solutions
• Eric Peterson - Senior Developer at Ortus Solutions

Big Thanks to our Sponsor - Ortus Solutions
The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there including BoxLang.
A few ways to say thanks back to Ortus Solutions:

• Buy Tickets to Into the Box 2025 in Washington DC https://t.co/cFLDUJZEyM
• April 30, 2025 - May 2, 2025 - Washington, DC
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Now on Amazon! In hardcover too!!!
    • https://www.amazon.com/dp/B0CJHB712M
  • Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support (jolly)
We have 59 patreons:
https://www.patreon.com/ortussolutions.

New Releases and Updates

CommandBox 6.1.0 Released!
We are pleased to announce the release of CommandBox 6.1.0, the latest release of our CLI, REPL, and Server, and Package Manager.  This is a minor update to our last release.  It has a handful of new features, and bug fixes, as well as better out-of-the-box support for BoxLang, our new CFML-compatible JVM language.

New Features

• WebSocket Server
• Updates to run BoxLang
• Add command to deploy Lucee lex or lco files
• Check if an entry has a hash associated to it and validate it

Improvement

• Sort by date last started when finding a server by web root
• Make semantic version prerelease identifiers not case sensitive
• default servlet pass predicate include Boxlang files

Tasks

• Update to Undertow 2.2.33.Final
• Update to Lucee 5.4.6.9
• Update bundled JRE to 11.0.23+9

9 Bugs

https://www.ortussolutions.com/blog/commandbox-610-released
https://commandbox.ortusbooks.com/

BoxLang Beta 22 Released

11/15/24 - BoxLang 1.0.0 Beta 22 Launched
4 New Features
10 Improvements
14 Bugs Fixed
https://boxlang.ortusbooks.com/readme/release-history/1.0.0-beta22

Webinars, Meetups and Workshops

Boost Your Confidence & Silence the Inner Critic: Overcome Imposter Phenomenon!
Sac Interactive Tech Meetup • Sacramento, CA
Wed, Nov 20 · 6:00 PM PST
https://www.meetup.com/sacinteractive/events/303708476/?eventOrigin=home_page_upcoming_events$all

Online ColdFusion Meetup - "ColdFusion Horizons: Unveiling 2025", Charvi Dhoot (CF Product Manager)--CFMeetup #311
Nov 21 at 12p US Eastern
Over the years, ColdFusion has evolved to support not only the development of dynamic web pages but also the creation of complex applications and services. It remains a popular choice for developers seeking a versatile and efficient platform for building web-based solutions and business applications.
As we look ahead to the imminent release of ColdFusion 2025, we invite you to join us for an exclusive feature showcase that highlights the compelling reasons to adopt this upcoming version. Additionally, this session will provide a comprehensive overview of the strategic vision for future releases, offering an opportunity for you to engage with new ideas under consideration and contribute valuable feedback.
Attend this talk to gain deeper insight into the current and future releases of ColdFusion on the horizon!
https://www.meetup.com/coldfusionmeetup/events/304633294/

CFCasts Content Updates

https://www.cfcasts.com

Introducing SocketBox

This innovative library simplifies WebSocket integration, making real-time features and message handling a breeze. Build engaging applications with SocketBox – get started today! #CFML #BoxLang #WebSockets #RealTime

https://www.cfcasts.com/series/ortus-bytes/videos/introducing-socketbox

Conferences and Training

CF Summit India 2024
Join us for the Adobe ColdFusion India Summit, a premier, completely free event where developers, industry experts, and thought leaders come together to explore the latest in ColdFusion and web development. Network with peers, meet the ColdFusion engineering team, get your questions answered, discover strategies to boost your career and grow your business—all at no cost.
Price: Free
December 7, 2024
2 Cities: Bengaluru and Noida
Register: https://cf-indiasummit-2024.attendease.com

ITB 2025

• Location: Washington, DC
• Dates: April 30, 2025 - May 2, 2025 - Washington, DC
• Tickets and more info: https://t.co/cFLDUJZEyM
• 50% off blind tickets
• $249.50 for the Conference
• $349.50 for the Conference + Workshop!!!
• Call for Speakers CLOSED

CFCamp 2025
May 22, 23rd - 2025
Atomis Hotel Munich Airport
https://www.cfcamp.org/
Call for Speakers open - https://www.papercall.io/cfcamp2025

More conferences
Need more conferences, this site has a huge list of conferences for almost any language/community.
https://confs.tech/

Blogs, Posts, and Videos of the Week

11/19/24 - Blog - Ortus Solutions - 5 Signs It’s Time to Modernize Your ColdFusion / CFML Application
ColdFusion has long been a reliable platform for building web applications, but like any technology, it requires maintenance and modernization over time. Whether you're using Lucee or Adobe ColdFusion, it’s critical to recognize the signs that your application is no longer meeting today’s standards in performance, security, and scalability. Let’s explore five clear indicators th...

2024-11-05 Weekly News — Episode 222

Watch the video version on YouTube at

Hosts: 

• Gavin Pickin - Senior Developer at Ortus Solutions
• Grant Copley - Senior Developer at Ortus Solutions

Big Thanks to our Sponsor - Ortus Solutions
The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there including BoxLang.
A few ways to say thanks back to Ortus Solutions:

• Buy Tickets to Into the Box 2025 in Washington DC https://t.co/cFLDUJZEyM
• April 30, 2025 - May 2, 2025 - Washington, DC
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Now on Amazon! In hardcover too!!!
    • https://www.amazon.com/dp/B0CJHB712M
  • Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support ()

We have 59 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements

Github Universe

This year marks our tenth GitHub Universe—and one theme has remained constant: our focus on developers and the developer experience. Over 10 years, that developer experience has evolved from inventing the pull request to building the world’s most widely adopted AI coding tool, GitHub Copilot.

Today, our platform serves more than 100 million developers, and through the power of this interconnected community combined with generative AI, we are enabling every developer to build, release, scale, and secure software rapidly.

Recap: https://github.blog/news-insights/product-news/universe-2024-previews-releases/

Videos: https://githubuniverse.com/?utm_source=github&utm_medium=banner&utm_campaign=24bannerheader16li-newsroom-press-releases-github-universe-2024

New Releases and Updates

BoxLang Betas — Beta 20-21

10/25/24 - BoxLang 1.0.0 Beta 20 Launched
6 New Features
11 Improvements
15 Bugs Fixed
https://www.ortussolutions.com/blog/boxlang-100-beta-20-launched

11/1/24 - BoxLang 1.0.0 Beta 21 Launched
4 New Features
5 Improvements
14 Bugs Fixed
https://www.ortussolutions.com/blog/boxlang-100-beta-21-launched

Webinars, Meetups and Workshops

Boost Your Confidence & Silence the Inner Critic: Overcome Imposter Phenomenon!
Sac Interactive Tech Meetup • Sacramento, CA
Wed, Nov 20 · 6:00 PM PST
https://www.meetup.com/sacinteractive/events/303708476/?eventOrigin=home_page_upcoming_events$all

CFCasts Content Updates

https://www.cfcasts.com

Introducing SocketBox

This innovative library simplifies WebSocket integration, making real-time features and message handling a breeze. Build engaging applications with SocketBox – get started today! #CFML #BoxLang #WebSockets #RealTime

https://www.cfcasts.com/series/ortus-bytes/videos/introducing-socketbox

Conferences and Training

CF Summit India 2024
Join us for the Adobe ColdFusion India Summit, a premier, completely free event where developers, industry experts, and thought leaders come together to explore the latest in ColdFusion and web development. Network with peers, meet the ColdFusion engineering team, get your questions answered, discover strategies to boost your career and grow your business—all at no cost.
Price: Free
December 7, 2024
2 Cities: Bengaluru and Noida
Register: https://cf-indiasummit-2024.attendease.com
 
ITB 2025

• Location: Washington, DC
• Dates: April 30, 2025 - May 2, 2025 - Washington, DC
• Tickets and more info: https://t.co/cFLDUJZEyM
• 50% off blind tickets
• $249.50 for the Conference
• $349.50 for the Conference + Workshop!!!
• Call for Speakers Announced - Deadline Nov 15th https://www.ortussolutions.com/blog/call-for-speakers-into-the-box-2025 

CFCamp 2025
May 22, 23rd - 2025
Atomis Hotel Munich Airport
https://www.cfcamp.org/

More conferences

Need more conferences, this site has a huge list of conferences for almost any language/community.
https://confs.tech/

Blogs, Posts, and Videos of the Week

11/4/24 - Blog - Ortus Solutions - Thanksgiving Day deals: Access Exclusive Discounts Until November 30th!
Prepare for the Ortus Thanksgiving Day Deals! This is your chance to enhance your development journey with amazing deals catered to everyone—from experienced developers to tech aficionados. Our unique offers are crafted to assist you in reaching your objectives while conserving your budget!

Don't Let These Incredible Offers Slip Away!
Utilize the code THKSGIVING24 at checkout to take advantage of these fantastic discounts before they end
https://www.ortussolutions.com/blog/thanksgiving-day-deals-access-exclusive-discounts-until-november-30th

Applies to:
ColdFusion Consulting
CFCasts
Couchbase/Redis Lucee Extensions
BoxLang Visionary License

11/1/24 - Blog - Ortus Solutions - Ortus October Newsletter 2024
Welcome to the October Ortus Newsletter! This month is packed with exciting content designed to boost your web development productivity, deepen your technical knowledge, and empower your development projects. We’ve packed this edition with cutting-edge news, insightful updates, and a lineup of valuable resources across our platforms.
https://www.ortussolutions.com/blog/ortus-october-newsletter-2024

10/31/24 - Blog - Ben Nadel - Safe-Navigation Operator ...

2024-10-22 Weekly News — Episode 221

Watch the video version on YouTube at https://youtube.com/live/j-e_y4OwuCw?feature=share

Hosts: 

• Gavin Pickin - Senior Developer at Ortus Solutions

Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there including BoxLang.
A few ways to say thanks back to Ortus Solutions:

• Buy Tickets to Into the Box 2025 in Washington DC https://t.co/cFLDUJZEyM
• April 30, 2025 - May 2, 2025 - Washington, DC
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Now on Amazon! In hardcover too!!!
    • https://www.amazon.com/dp/B0CJHB712M
    • Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support ()
We have 59 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements

Lucee 6.1.1 (6.1.1.100-RC) Release Candidate
There is a new Lucee 6.1.1.100-RC release candidate available for testing. Give it a try and share your feedback with us.
What’s New?
This release focuses mainly on bug fixes, along with a few useful enhancements.
https://dev.lucee.org/t/lucee-6-1-1-6-1-1-100-rc-release-candidate/14353
 
ColdFusion 2023 and 2021 October 15th, 2024 updates
We are pleased to announce that we have released general updates to ColdFusion (2023 release) Update 11 and ColdFusion (2021 release) Update 17. The updates include bug fixes and enhancements in Administrator, Language, CFSetup, Database, and other areas. They also contain library upgrades, such as netty, ehcache, etc. The updates also include enhancements to whitespace management and client variable support in CFPM.
Known issues in the update
The PDF Services page in ColdFusion Administrator does not load even with the HTMLToPDF package installed
https://coldfusion.adobe.com/2024/10/released-coldfusion-2023-and-2021-october-15th-2024-updates/

CF Summit India Announced
We are excited to announce that the Adobe ColdFusion India Summit 2024 is happening on December 7, 2024, and this year, we’re bringing the event to two vibrant cities: Bengaluru and Noida. Whether you’re a seasoned developer or just beginning your journey in web development, this free summit offers a unique opportunity to learn, connect, and grow with the best minds in the industry.
https://coldfusion.adobe.com/2024/10/get-ready-for-adobe-coldfusion-india-summit-2024/

Announcing Java updates of Oct 2024 for 8, 11, 17, 21, and 23: thoughts and resources
It's that time again: there are new JVM updates released today (Oct 15, 2024) for the current long-term support (LTS) releases of Oracle Java, 8, 11, 17, and 21, as well as the new short-term release 23. (The previous short-term release, Java 22, is no longer updated.)
TLDR: The new updates are 1.8.0_431 (aka 8u431), 11.0.25, 17.0.13, 21.0.5, and 23.0.1 respectively. Crazy that there are now 5 current Java releases, I realize. More below, including more on each of them including what changed as well as bug fixes and the security fixes each version contains (including their CVE scores regarding urgency of concerns), which are offered in Oracle resources I list below.
https://www.carehart.org/blog/2024/10/15/java_updates_oct_2024

PayPal's NVP/SOAP API for Website Payments Pro accounts suddenly stopped working sometime early October
PayPal's NVP/SOAP API for Website Payments Pro accounts suddenly stopped working sometime around October 4th (possibly Sep 30). Some developers that reported having the issue were using legacy classic ASP and others were using ColdFusion. I believe we've been using the PayPal DoDirectPayment API since it was introduced back in 2002.
At some point, PayPal added the following undated disclaimer to their documentation. (According to Microsoft Copilot, "PayPal's NVP (Name-Value Pair) API was marked as "legacy" around October 12th, 2021".)
CFPayment (retired) supports WPP & Payflow, but not the new REST API method. Searching online for "ColdFusion (or cfml) paypal rest api" didn't return anything beneficial, so it became apparent that there was a need for a solution... any solution.
James Moberg has an updated Paypal Rest API Cfc available here: https://dev.to/gamesover/coldfusion-paypal-rest-api-cfc-339p
Secure Your ColdFusion Perpetual License Before Adobe’s Subscription-Only Switch
Following Adobe’s announcement at the Adobe ColdFusion Summit in Las Vegas, ColdFusion will transition to a subscription-only licensing model. This major shift in licensing strategy means developers and organizations have a limited window to secure their final perpetual ColdFusion license.
While we don’t know the date for the Adobe switch, FusionReactor customers have an exclusive opportunity to secure their last perpetual license and save significantly in the process. This final offer has been extended to December 31, 2024, giving organizations more months to make this crucial decision.
https://fusion-reactor.com/blog/secure-your-coldfusion-perpetual-license-before-adobes-subscription-only-switch/

Microsoft Copilot is a little Snarky about ColdFusion 😛

New Releases and Updates

Introducing CBSSO: Simplifying OAuth and SAML for ColdBox Applications
Ortus Solutions has unveiled its latest innovation, CBSSO, a game-changing module for ColdBox applications. CBSSO is designed to make integrating with OAuth and SAML identity providers easier than ever before, significantly reducing the complexity of managing Single Sign-On (SSO) flows. Whether your users authenticate through Google, Microsoft, Facebook, or custom identity providers, CBSSO streamlines the entire process.For CFML and ColdFusion developers, dealing with identity provider integrations can often feel like navigating through a labyrinth of documentation, redirects, and configurations. That’s where CBSSO comes in. By handling the technical details, CBSSO allows developers to focus on ...

2024-10-08 Weekly News — Episode 220

Watch the video version on YouTube at https://youtube.com/live/YOxkhO6DPzg?feature=share
 
Hosts: 

• Eric Peterson - Senior Developer at Ortus Solutions
• Gavin Pickin - Senior Developer at Ortus Solutions

Thanks to our Sponsor - Ortus Solutions
The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there including BoxLang.
A few ways to say thanks back to Ortus Solutions:

• Buy Tickets to Into the Box 2025 in Washington DC https://t.co/cFLDUJZEyM
• April 30, 2025 - May 2, 2025 - Washington, DC
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Now on Amazon! In hardcover too!!!
    • https://www.amazon.com/dp/B0CJHB712M
  • Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support (Supernatural)
We have 59 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements

New Library - SocketBox - Bring 1st Class Socket Support to BoxLang, Lucee and Adobe ColdFusion
The WebSocket server in CommandBox and BoxLang MiniServer is not really a separate "server" per se, since it’s on the same port. It’s just an upgrade listener which will upgrade any WS requests.
This websocket integration will work for Lucee, Adobe, and BoxLang alike as it passes incoming messages to the app via an "internal" HTTP request to /WebSocket.cfc?method=onProcess where the CF/BL code can handle it. The incoming request will have all cookies, headers, hostname, etc that the original websocket connection was started with, so normal CGI variables and session scopes should work fine.
You need to create a custom /WebSocket.cfc class that should extend the modules.socketbox.models.WebSocketCore class in this library which provides the base functionality.
https://www.forgebox.io/view/socketbox
https://community.ortussolutions.com/t/introducing-socketbox-a-new-websocket-library/10381/1

New Releases and Updates

TestBox v6.0.0 Release
TestBox 6.x is a major update to the testing framework, introducing key improvements like full support for BoxLang. With this release, users can write tests, specs, and harnesses directly in BoxLang. A new BoxLang CLI runner simplifies running specs and bundles without needing a web server. Additionally, the CLI now detects BoxLang projects, adds headless web server testing with the bx-web-support module, and includes dynamic assertion methods for cleaner test writing. Significant new features include environment helpers, display name annotations, and improved debugging and matcher functions.
https://www.ortussolutions.com/blog/testbox-v600-release

qb v10 is BoxLang Certified

Hyper v7.5.3 is BoxLang Certified

Upgrade to FusionReactor 12.1.1 Now: Defect in FusionReactor 12.1.0 That Can Potentially Disable Metrics Shipper
On September 26th, 2024, we learned of a bug affecting some customers who upgraded to FusionReactor Agent version 12.1.0.
We want to provide a detailed account of the bug, its impact, and the steps we’ve taken to resolve it. Transparency and communication are central to our approach, and we want to ensure that all customers are informed and empowered to take the necessary action.
https://fusion-reactor.com/blog/upgrade-to-fusionreactor-12-1-1-now-defect-in-fusionreactor-12-1-0-that-can-potentially-disable-metrics-shipper/
 
BoxLang Betas — Beta 16-17

9/27/24 - BoxLang 1.0.0 Beta 16 Launched
2 New Features
9 Improvements
11 Bugs Fixed
https://boxlang.ortusbooks.com/readme/release-history/1.0.0-beta16
https://www.ortussolutions.com/blog/boxlang-100-beta-16-launched

10/4/24 - BoxLang 1.0.0 Beta 17 Launched
1 New Features
3 Improvements
2 Bugs Fixed
https://boxlang.ortusbooks.com/readme/release-history/1.0.0-beta17
https://www.ortussolutions.com/blog/boxlang-100-beta-17-launched

Webinars, Meetups and Workshops

October 2024 Seattle ColdFusion User Group Meeting
Wednesday, October 16, 2024
5:00 PM to 6:00 PM PDT

Adobe ColdFusion Summit 2024 Recap
Will Frankhouser and Leon O'Daniel will share a complete recap of their experiences at Adobe ColdFusion Summit 2024, including what's coming soon with Adobe ColdFusion 2025, takeaways from the sessions, and more.

Establishing a Connection and Transferring Files to Netsuite Using Adobe ColdFusion's FTP Features
This session recaps an actual real-live case study where Leon O'Daniel assisted a large clothing manufacturer with how to quickly and easily establish a connection and transfer files to their Netsuite FTP account.

ColdFusion Tag/Function of the Month
Will Frankhouser will be sharing his ColdFusion Tag/Function of the month and how to use it in your next ColdFusion application project.

https://www.meetup.com/seattle-coldfusion-user-group/events/303894410/?eventOrigin=home_page_upcoming_events$all

Sacramento Interactive: Debugging With JavaScript with Kevin Goble
Wednesday, October 16, 2024
6:00 PM to 8:00 PM PDT
Workshop is open to new and curious programmers. We'll first go over some philosophy about dealing with code that does the unexpected. Then we'll follow up with some live practical examples utilizing debugging tools. If your only weapon against bugs right now is console logs, if debugging feels like playing Where's Waldo, this is a workshop for you!
https://www.meetup.com/sacinteractive/events/303708439/?eventOrigin=home_page_upcoming_events$all

2024-09-24 Weekly News — Episode 219

Watch the video version on YouTube at https://youtube.com/live/DBqxto5X7iE?feature=share
 
Hosts: 

• Gavin Pickin - Senior Developer at Ortus Solutions
• Daniel Garcia - Senior Developer at Ortus Solutions

Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there including BoxLang.
A few ways to say thanks back to Ortus Solutions:

• Buy Tickets to Into the Box 2025 in Washington DC https://t.co/cFLDUJZEyM
• April 30, 2025 - May 2, 2025 - Washington, DC
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Now on Amazon! In hardcover too!!!
    • https://www.amazon.com/dp/B0CJHB712M
• Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support (supercali)

We have 58 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements

ColdFusion 2023 Security Update 10, ColdFusion 2021 Security Update 16
Release Date: September 10, 2024

Adobe Product Security Bulletin APSB24-71 fixes one critical vulnerability.

Vulnerabilities Fixed
CVE-2024-41874 - critical (9.8) Deserialization of Untrusted Data vulnerability allowing for arbitrary code execution
Links & Resources

- APSB24-71 - Adobe Product Security Bulletin
https://helpx.adobe.com/security/products/coldfusion/apsb24-71.html

- CF2023 Update 10 - Adobe KB article for ColdFusion 2023 Update 10
https://helpx.adobe.com/coldfusion/kb/coldfusion-2023-update-10.html

- CF2021 Update 16 - Adobe KB article for ColdFusion 2021 Update 16
https://helpx.adobe.com/coldfusion/kb/coldfusion-2021-update-16.html

- Forum Thread - Adobe ColdFusion forum thread discussing ColdFusion 2023 Update 10 and CF 2021 Update 16.
https://community.adobe.com/t5/coldfusion-discussions/now-live-adobe-coldfusion-2023-and-2021-september-2024-security-updates/td-p/14852233

Notes / Issues
No updates to connector or packages in this release. Fixed bug CF-4223435 caused by previous update.
https://tracker.adobe.com/#/view/CF-4223435
 
CFCamp - Save the Date
May 22, 23rd - 2025
Atomis Hotel Munich Airport

Into the Box 2025 - Call for Speakers Still Open - Closing soon Nov 1st
We’re excited to invite you to share your knowledge and insights at Into the Box 2025: The Future is Dynamic for Modern Web Developers!
We’re seeking speakers eager to discuss their latest projects, share best practices, or explore new trends in web development. If you have valuable insights, we’d love to hear from you!
Submit your topics using the form below. The deadline is midnight on November 1, 2024. We encourage everyone to submit up-to-date and trendy topics like Modern CFML tools, BoxLang, AI, Frameworks, Open Source Libraries, Modern Web Development Trends, Cybersecurity, etc. Feel free to share all your ideas!
https://www.ortussolutions.com/blog/call-for-speakers-into-the-box-2025

New Releases and Updates

FusionReactor 12.1: Expanding Horizons with Java 21 Support and Enhanced Cloud Integration
We’re thrilled to announce the release of FusionReactor 12.1, our latest update that brings exciting new features to enhance your application performance monitoring experience. This release focuses on expanding language support, improving cloud integration, and streamlining user access. Let’s dive into the key features that make FusionReactor 12.1 a game-changer for developers and operations teams alike.
https://fusion-reactor.com/blog/fusionreactor-12-1-expanding-horizons-with-java-21-support-and-enhanced-cloud-integration/
 
BoxLang Betas — Beta 11-15

8/23/24 - BoxLang 1.0.0 Beta 11 Launched
9 New Features
9 Improvements
8 Bugs Fixed
https://www.ortussolutions.com/blog/boxlang-100-beta-11-launched 

8/30/24 - BoxLang 1.0.0 Beta 12 Launched
5 New Features
8 Improvements
5 Bugs Fixed
https://www.ortussolutions.com/blog/boxlang-100-beta-12-launched 

9/6/24 - Blog - Ortus Solutions - BoxLang 1.0.0 Beta 13 Launched
4 New Features
5 Improvements
20 Bugs Fixed
https://www.ortussolutions.com/blog/boxlang-100-beta-13-launched

9/13/24 - Blog - Ortus Solutions - BoxLang 1.0.0 Beta 14 Launched
6 New Features
4 Improvements
16 Bugs Fixed
https://www.ortussolutions.com/blog/boxlang-100-beta-14-launched

9/19/24 - Blog - Ortus Solutions -  BoxLang 1.0.0 Beta 15 Launched
5 New Features
10 Improvements
22 Bugs Fixed
https://www.ortussolutions.com/blog/boxlang-100-beta-15-launched 

Webinars, Meetups and Workshops

ICYMI - Online ColdFusion Meetup - "Options for running Redis (Valkey/etc), locally or as-a-service", w/ Charlie Arehart
You may be considering use of Redis (or alternatives like Valkey), whether for caching or as a document store/db or as an alternative repository for sessions (such as is an option for ColdFusion sessions since CF2016). But before you can USE Redis you need to have some IMPLEMENTATION of it. In this session, veteran server troubleshooter Charlie Arehart will review different approaches for implementing Redis (and/or Valkey, and other plug-compatible replacements): with most approaches being free, while some come at a...

2024-08-20 Weekly News — Episode 218

Watch the video version on YouTube at https://youtube.com/live/sK5ns9Y_gR0?feature=share
 
Hosts: 

• Gavin Pickin - Senior Developer at Ortus Solutions
• Daniel Garcia - Senior Developer at Ortus Solutions

Thanks to our Sponsor - Ortus Solutions
The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there including BoxLang.
A few ways to say thanks back to Ortus Solutions:

• Buy Tickets to Into the Box 2025 in Washington DC https://t.co/cFLDUJZEyM
• April 30, 2025 - May 2, 2025 - Washington, DC
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
• Now on Amazon! In hardcover too!!!
  • https://www.amazon.com/dp/B0CJHB712M
• Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support (supercali)

We have 58 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements

Into the Box 2025 - Call for Speakers Now Open
We’re excited to invite you to share your knowledge and insights at Into the Box 2025: The Future is Dynamic for Modern Web Developers!
We’re seeking speakers eager to discuss their latest projects, share best practices, or explore new trends in web development. If you have valuable insights, we’d love to hear from you!
Submit your topics using the form below. The deadline is midnight on November 1, 2024. We encourage everyone to submit up-to-date and trendy topics like Modern CFML tools, BoxLang, AI, Frameworks, Open Source Libraries, Modern Web Development Trends, Cybersecurity, etc. Feel free to share all your ideas!
https://www.ortussolutions.com/blog/call-for-speakers-into-the-box-2025

New Releases and Updates

Adobe ColdFusion Updates - ColdFusion 2023 and 2021 August 20th, 2024 General Updates
We are pleased to announce that we have released general updates to ColdFusion (2023 release) Update 9 and ColdFusion (2021 release) Update 15. We've upgraded Tomcat from version 9.0.85 to version 9.0.93 for both versions.
https://coldfusion.adobe.com/2024/08/released-coldfusion-2023-and-2021-august-20th-2024-general-updates/

BoxLang Betas — Beta 9 and 10

Beta 9 released - August 9th, 2024

New Features

BL-105 PDF Module
BL-110 objectLoad() and objectSave() implemented and renamed to objectSerialize() and objectDeserialize()
BL-420 Exit REPL with quit or exit
BL-422 Ability to serialize BoxLang classes to binary and deserialize them back using it's state
BL-423 New experimental features block on the `boxlang.json`
BL-424 BoxRunner action commands now for: compile, cftranspile, featureAudit

Improvements

BL-414 Renaming of Box Cache functions to standardized cache{function}()
BL-415 Increase precision of math operations by using BigDecimal
BL-421 Finalize FileUpload, FileUploadAll BIFs and File Component upload actions in Web Support

Bugs

BL-405 BigIntegers cause error: integer number too large
BL-419 Not all unquoted tag attribute values are parsing

Beta 10 released - August 16th, 2024

New Features

BL-435 transpile queryGetRow() to queryRowData()
BL-436 Ini files support
BL-437 JSStringFormat BIF
BL-439 xml component
BL-442 getVariable() & BL-443 setVariable()
BL-444 Add getClientVariablesList() to compat
BL-448 New getDescendantsOfType() AST method with predicate
BL-449 Implement single quote escapes in queries and preserveSingleQuotes
BL-450 Allow .cfm and .cfs files from the boxlang CLI runner
BL-440 Add isNumericDate BIF
BL-441 Add getHTTPTimeString BIF to web-support
BL-143 Writedump label support
BL-447 java.math.BigInteger caster

Improvements

BL-425 When doing class serialization make sure to identify which properties have
BL-426 content component can have body
BL-429 Enhance error messages for parsing invalid tag code

Bugs

BL-427 MalformedInputException: Input length = 1 when parsing CFC
BL-428 component detection can be tricked if there is a tag comment line starting with the word "component"
BL-432 Regression: Can't run files via BoxRunner due to new action command logic
BL-451 Sometimes trying to shutdown runtime throws NPE if it was never started fully
BL-452 pretty print visitor outputting extra " on tag catch block
BL-453 pretty print visitor doesn't handle array notation invocation

https://www.ortussolutions.com/blog/boxlang-100-beta-10-launched

Webinars, Meetups and Workshops

ICYMI - Online ColdFusion Meetup Group - "CF Scheduled Tasks: there’s more than you may know", with Charlie Arehart
Thursday Aug 8th at 12pm US Eastern Time
If folks were asked to discuss CF scheduled tasks, I suspect most would feel "there's not much to say". But there really is a lot more to working with them than simply "setting a given url to run on a given schedule" (did you know it could be a CFC, for instance? Did you know about the cron time feature? Did you know about clustering scheduled tasks--even with ColdFusion Standard?). Besides there being more features than many may realize, there are also some common problems people face when running them, and there are tools and techniques to help with that.
In this talk, veteran CF troubleshooter Charlie Arehart will address all these and more, starting with several ways to create them (yes, even more than just cfschedule and the CF Admin UI) then more on those more advanced/easily missed features, as well as tools and techniques for solving common problems with them. We'll also explore configuration files and features for managing tasks. Finally we'll also cover ways CF scheduled tasks may NOT work well and discuss alternatives to them.
https://www.meetup.com/coldfusionmeetup/events/302616793/?eventOrigin=group_events_list

ICYMI - Online ColdFusion Meetup Group - "Getting Started with BoxLang Runtimes", with Luis Majano & Brad Wood
BoxLang is a new application server released by Ortus Solutions. It can run...

2024-08-06 Weekly News — Episode 217

Watch the video version on YouTube at https://youtube.com/live/Z3m5Nd7HoJc?feature=share

Hosts: 

• Eric Peterson - Senior Developer at Ortus Solutions
• Dan Card - Senior Developer at Ortus Solutions

Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. 
A few ways to say thanks back to Ortus Solutions:

• Buy Tickets to Into the Box 2025 in Washington DC https://t.co/cFLDUJZEyM
• April 30, 2025 - May 2, 2025 - Washington, DC
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Now on Amazon! In hardcover too!!!
  • https://www.amazon.com/dp/B0CJHB712M
  • Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support (Stupendous)

We have 57 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements

BoxLang — Dynamic : Modular : Productive

https://boxlang.io/
https://boxlang.ortusbooks.com/

New Releases and Updates

CFConfig v2.0.6
Now supports BoxLang servers

Spreadsheet-CFML v4.1.0 – v4.2.0

• Add moveSheet()
• Add sheet position to sheetInfo() properties
• Upgrade POI to 5.3.0, commons-csv to 1.11.0 and excel-streaming-reader to 4.4.0
• Allow datatype to be specified with addColumn()

Sentry v2
Updated to match Sentry’s current event structure design

cbq v3.0.8 – v3.0.9
SyncProvider bug fixes

BoxLang Betas — Beta 2 through 8
Beta 2

New Features

• Encryption module — bx-password-encrypt
• New event: onRequestFlushBuffer
• Ability to coerce BoxLang functions, lambdas, and UDFs, to well-known functional interfaces for Java interop
• Add parallel streams from BoxLang arrays
• Truthy / Falsey completion for boolean caster
• New Fluent Attempt BIF and class
• Add the ability to add member methods to BoxLang classes — built-in class serialization to JSON
• New static helper on Array class: fromString( list, delimiter ) to create quick BoxLang arrays from strings
• New BIFs for registered interceptors into the request pool and the global pool: BoxRegisterRequestInterceptor, BoxRegisterInterceptor
• writeDump abort support
• writeOutput on complex BoxLang types should call the toString() on it
• Native encrypt, decrypt and generateSecretKey() BIFs

Bug Fixes

• writeDump expanded collapsed support
• writeDump top support
• listDeleteAt returns a list with multiple delimiters as a list with whole delimiters
• structNew with localeSensitive flag throws error
• structKeyTranslate returns void
• structGet does not create struct when missing
• structFindValue returning null owner
• No named applications not auto creating name
• Application listener requests interception points not registered
• Ambiguous if statements when not using curly braces
• this.javasettings not expanding to correct pathing
• this.javasettings ignores paths to actual jars and classes
• cfdirectory fails on centOS, converting datetime
• dateAdd() modifies its argument
• toString not formatting doubles correctly
• Attempt to cast instead of expecting strings inside isValid
• Regression on JSON serialization of box classes with JSON exclude annotations

https://www.ortussolutions.com/blog/boxlang-100-beta-2-launched

Beta 3

New Features

• Implement query cache ability
• Coerce java SAMs (Single Abstract Method interface) from BoxLang function interfaces
• AsyncService support for Virtual Thread Executors (create/manage)
• Bifs for module info: getModuleList() and getModuleInfo( module )
• Dumping of Java Classes now includes a dump of the toString() value to visualize values better
• New dump template for BoxLang Functions
• Allow the createDynamicProxy BIF to support the request class loader so it can load classes from loaded libraries in the application.bx, runtime, and more.
• New Script Binaries for bxCFTranspiler, bxCompiler, bxFeatureAudit tools in the distribution bin folder

Improvements

• Refactor JDBC connection retrieval out of the QueryOptions class
• Dynamic method matching discovery algorithms updated to do 2 pass algorithm: exact then loose coercion matching
• Improvement of cache service and cache provider methods for easier BoxLang interactions
• Refactored the dump css to resources/dump/html/Dump.css
• Migrate dynamic proxies to native java implementation from the JDK
• Passing the session id to the onSessionStart listener
• Give better warnings if the sessionStorage is not a valid string

Bug Fixes

• attributecollection not handled properly on cfthrow
• Left in system out calls that need to be removed
• JSR ScriptEngine starting runtime without debug flag if passed
• Creating a default cache was not setting the right name and a "default" already registered exception was being thrown
• Default argument values not always checked for type
• Implements missing from Box Class metadata
• Static Scope missing from metadata

https://www.ortussolutions.com/blog/boxlang-100-beta-3-launched

Beta 4

Improvements

• Query caching improvements and compatibility updates
• Ensure request attributes are available to the web runtime scope
• bx-compat CFML compatibility module updates to ensure null query column values are returned as empty strings

Bug Fixes

• Fixes compilation issue with variables name cfcatch
• CFML compatibility for CGI.QUERY_STRING when not provided
• Fix null queryparam functionality

https://www.ortussolutions.com/blog/boxlang-100-beta-4-launched

Beta 5

New Features

• Data Navigators
• Original Configuration
• StringBind BIF and member function
• At...