Modernize or Die® - CFML News for July 14th, 2020 - Episode 61
Gavin and Brad host this weeks episode. They discuss Adobe's patch day updates for CF 2016 and 2018. They discuss the content releases for CFcasts. They discuss The ColdFusion Meetup Onlines, with 2 new sessions announced for July 23rd and 30th by TJ VanToll and Alex Ziskind respectively, with the recording for Dan Wilson from last week. They announce 2 upcoming Adobe Webinars, scheduled July 23rd and July 30th. They announce a new survey, the Docker Developer survey, and they remind you to take the State of the CF Union survey from TeraTech.com. They discuss the two ColdBox workshops coming up in July, ColdBox Zero to Hero that happened last week and ColdBox Hero to Superhero API Edition. They discuss how the Adobe ColdFusion Certification is now online and remind you that Adobe's CF Summit Conference, being changed to a Online conference, now in November... more details to come in coming months. They spotlight a lot of great blog posts, tweets, videos and podcasts, too many to list, so listen to the show. They announce some jobs from twitter and getCfmlJobs.com. They show off the ForgeBox module of the Week, Lucee Spreadsheet, a Spreadsheet library for Lucee (and Adobe ColdFusion) This week's VS Code Tip of the week is Bracket Pair Colorizer 2 - This extension allows matching brackets to be identified with colours. The user can define which tokens to match, and which colours to use. For the show notes - visit the website https://cfmlnews.modernizeordie.io/episodes/modernize-or-die-cfml-news-for-july-14th-2020-episode-61 Music from this podcast used under Royalty Free license from SoundDotCom https://www.soundotcom.com/ and BlueTreeAudio https://bluetreeaudio.com
Watch the video version on YouTube at https://youtu.be/TkOFnet0d6c
Gavin Pickin - Software Consultant for Ortus Solutions
Brad Wood - Software Consultant for Ortus Solutions
Thanks to our Sponsor - Ortus Solutions
Get live training from the makers of your favorite Box Product.
2 live workshops this month - ColdBox Zero to Hero July 9 & 10 which went great, and ColdBox Hero to Superhero API Edition July 23 & 24 - still time to register.
CFCasts Subscriptions are now available and ColdBox Masterclass videos are all recorded and are scheduled to be released.
Thanks to our newest supporter: Jeff McCain
We are at the 48% mark for fully funding all of our Modernize or Die Podcasts via our Patreon site: https://patreon.com/ortussolutions . If you love our podcasts and all we do for the #coldfusion #cfml community considers chipping in, we are almost there!
News and Events
Adobe Security Patch Day
Adobe has released security updates for ColdFusion versions 2016 and 2018. These updates resolve multiple important vulnerabilities that could lead to privilege escalation.
Vulnerability Details: DLL search-order hijacking - Privilege escalation
Note: Adobe recommends updating your ColdFusion JDK/JRE to the latest version of the LTS releases for 1.8 and JDK 11. Applying the ColdFusion update without a corresponding JDK update will NOT secure the server. See the relevant Tech Notes for more details.
Adobe also recommends customers apply the security configuration settings as outlined on the ColdFusion Security page as well as review the respective Lockdown guides. ( linked in the security bulletin )
Adobe Docker Images have been updated as well.
CommandBox Docker images updated very soon.
Security Bulletin: https://helpx.adobe.com/security/products/coldfusion/apsb20-43.html
CFCasts Content Updates
Free Content: We have added the entire “What’s new in CommandBox 5” series.
Subscription Content: We have added 2 more videos in the ColdBox Master Class - Model Data Binding and Validation, and Putting it all Together.
All of the ColdBox Master Class videos are now recorded, edited, and scheduled for release, so keep an eye out for the remainder of these over the next few weeks.
Thursday July 9 at 12pm US Eastern Time, UTC-4.
Meetup Group Link: https://www.meetup.com/coldfusionmeetup/events/271482406/
ColdFusion Meetup - "What Web Developers Can Learn From Native Mobile Developers", w/ TJ VanToll
Thursday July 16 at 12pm US Eastern Time, UTC-4
Web developers tend to be unabashed defenders of the web platform, and tend to view native mobile platforms as proprietary, gated and bloated.
As a long-time web developer I felt this way too, but then something unexpected happened: I joined the dark side, and spent five years of my career working on—*gasp*—iOS and Android applications.
Now, like an explorer returning from a multi-year safari—I have so much to share! In this talk I’ll discuss how native development has improved the way I write code for the web, and how you can incorporate the best native app performance and testing tips into your web workflows.
Meetup Group Link: https://www.meetup.com/coldfusionmeetup/events/271613429/
ColdFusion Meetup - "Intro to NativeScript", with Alex Ziskind
Thursday July 23rd at 6pm US Eastern Time, UTC-4.
Web developers are people too. They have needs and wants beyond just slinging code that is destined for the modern browser. They may also dream of building native mobile apps. But learning XCode and Android Studio and objective C might not be in the cards.
Meetup Group Link: https://www.meetup.com/coldfusionmeetup/events/271844332/
Adobe Webinar - Understanding the what, when and how of API Manager architecture and its various components with Kailash Bihani
July 23, 2020
10 am PT
Dive right into API Manager architecture and learn about its various components including datastore, server and elastic search. Find out how to install API Manager and the myriad of settings you can play with to ensure the best performance!
Adobe Webinar - A bird's-eye view of PMT architecture and how to harness it's true potential with Nimit Sharma
July 30, 2020
10 am PT
This session will walk you through everything there is to know about PMT architecture and the configurations to look out for when installing PMT on your systems. Get a deeper look at how data flows in the system and the configuration files where the data is stored. Explore the common customer issues and find out how using archiving can reduce the disk consumption.
Docker Developer Survey
Welcome to the Docker Developer 2020 Survey! We'd like to learn a bit more about you, your background and really learn about our Docker user and customers! We appreciate you taking the time to fill this in so that we can improve our products and services.
Total survey time < 10 minutes.
Make sure you mention how much you love Swarm, because Ortus loves swarm
Reminder: State of the CF Union 2020 Survey
VOTE FOR OUR PODCASTS
Help us find out the state of the CF Union – what versions of CFML Engine do people use, what frameworks, tools etc. We will share the summary results with everyone who completes the survey so that you can see how you compare with other CF developers.
Most questions are multiple choice checkboxes that are fast to answer. Thanks for your time completing this survey!
486 respondents so far.
Partial Results: https://teratech.com/state-of-the-CF-Union-2020-partial-Results
Into the Box 2020 - Workshops - Virtual Live training
Gavin leading ColdBox Zero to Hero - July 9 - 10 - Great group, great progress.
Luis leading ColdBox Hero to Superhero API Edition July 23-24 - Filling up fast
2 x 6 hour days
1 hour lunch
1pm to 4pm central
Tickets available: $899
PODCAST10 - 10% off
There is a code for ITB attendees to save 15% - If you didn’t get the email contact us.
Alexa Live 2020
Wednesday, July 22 | 9:00 AM - 1:00 PM PT
Join Amazon leaders and Alexa product experts on July 22 for a half-day virtual event on building delightful customer experiences with voice. Alexa Live is a free educational event for skill builders, device makers, and business leaders. You’ll hear about the latest product advances in a keynote by VP Alexa Devices & Developers Nedim Fresko and see how to build new voice experiences with these offerings. You’ll dive deep on technologies through expert-led breakout sessions featuring device makers, brands, and independent developers. And you’ll learn how to build with voice yourself, or explore strategy, development, and integration options with Alexa solution providers.
Adobe ColdFusion Certification now available Online
Adobe Certified Professional: Adobe ColdFusion is an industry-leading certification program from Adobe, for ColdFusion developers. The course consists of 50+ online videos and is designed for professionals who have basic to advance level proficiency in any computer language and basic understanding of how web pages work. Successfully passing an assessment test at the end of the program will reward participants with a badge and certificate from Adobe.
Adobe ColdFusion Summit 2020 - Replaces CF Summit West
No blog post or official announcement made
More conferences: https://confs.tech/
Blogs, Tweets and Videos of the Week
Blog - Saurav Ghosh - Adobe - ColdFusion (2018 release) Update 10 and ColdFusion (2016 release) Update 16 released
We are pleased to announce that we have released the updates for the following ColdFusion versions:
ColdFusion (2018 release) Update 10
ColdFusion (2016 release) Update 16
In this update, we’ve fixed a few security bugs and some other bugs, which are mentioned in the tech notes.
Tweet - Julian Halliwell - Lucee MariaDB Extension Fix
Finally fixed an OSGi issue preventing upgrades to the @lucee_server MariaDB Extension. You can now update to the latest 2.6.1 version of the driver in your server admin. https://github.com/cfsimplicity/lucee-mariadb #cfml
Blog - Brian Klaas - Beyond the Basics of Using AWS S3 in CFML: File Versioning in S3 Buckets
When editing files of any kind, users of modern applications expect to have access to previous versions of the file, and undo work that they don’t like or made in error. Implementing a versioning system isn’t easy, especially when file systems are generally set up to only allow one “copy” of any given file. It’s often up to you, the developer, to handle the versioning and ensure that new versions of uploaded files don’t overwrite older ones.
Blog - Ben Nadel - Testing wkhtmltopdf 0.12.6 With Docker In Lucee CFML 22.214.171.124
A few months ago, James Moberg listed out a good number of Command-Line utilities that he uses in ColdFusion. Among them is wkhtmltopdf, which is a tool that can convert HTML and CSS to PDFs using the Qt WebKit rendering engine. Since I've been digging into PDF document generation in Lucee CFML, with varying degrees of success, I thought it was time that I try out Moberg's wkhtmltopdf recommendation. As such, this weekend, I sat down and got a proof-of-concept working in Docker and Lucee CFML 126.96.36.199.
Live Stream - Matthew Clemente - A CFML Module for Weighted Round-Robin (Learning by Trial and Error)
I'll be testing and publishing a ForgeBox module for producing weighted round-robin results.
Blog - NerdVision - NerdVision officially supports Adobe ColdFusion and Lucee!
NerdVision now officially supports ColdFusion Markup Language for both Adobe ColdFusion and Lucee! You may ask "Why do you support CFML?" especially if you are reading this with no knowledge of CFML.
The reason for this support is we as a company grew up with CFML, we have being doing CFML since 1996.
Today a lot has changed; we no longer run our applications on servers in a server room or only use CFML. Today our applications are much more complicated running in a distributed model, on multiple technologies, on multiple services such as AWS, Google Cloud or Azure, maybe even all three!
Blog - Ben Nadel - Evaluating Database Records That Contain ColdFusion Interpolation Expressions In Adobe ColdFusion 2018
Yesterday, I was talking to Angel Gonzalez about an interesting use-case in ColdFusion - something that I've never personally tried before - evaluating database records that contain ColdFusion Expressions. Specifically, database records that contain String interpolation in which the interpolated value is being pulled out of the current ColdFusion request. I'm always curious to see how the CFML runtime can be used to unique ways; so, I thought I would try this out for myself.
The idea here is that the database record would contain a varchar value like:
... in which the dynamic name value would be pulled out of the ColdFusion request at runtime and interpolated as part of a dynamic evaluation.
Blog - Matt Gifford - Azure pipelines with CommandBox and TestBox
I’ve been trying to implement pipelines for my own personal and open source repositories so that I can easily perform automated unit tests against the CFML code.
I have a working Bitbucket pipeline script that works perfectly for any code I have in my Bitbucket repositories, but all of my open source projects are hosted on GitHub.
As a result, I wanted to get the testing pipelines set up using the Microsoft Azure developer tools associated with Github.
TLDR: Enter Pete Freitag, who had some documentation for his incredible Fixinator project on how to run CommandBox and internal box commands in Azure.
Tweet - Throwback ColdFusion Lives TShirt
Another oldie but goodie. Tee from #cfunited #coldfusion #adobecoldfusion 20 year developer with 2 decades of meets/exceeds expectations in reviews seeking full time remote position. Experience here: chrismichele.github.io #HealthyAtHome #remotejobs #remotework
Tweet - WebManDMan - Modernize or Die
I’m on my way there specially since our company is subscribing to everything azure. It’s up to me to subscribe to it and move away from our monolithic server. In parallel I need to catch up with commandbox servers, fusegaurd, fixinator, testbox, coldbox6. #modernizeOrDie right?
Blog - VS Code - Remote development in Containers
This tutorial walks you through running Visual Studio Code in a Docker container using the Remote - Containers extension. You need no prior knowledge of Docker to complete this tutorial.
Running VS Code inside a Docker container can be useful for many reasons, but in this walkthrough we'll focus on using a Docker container to set up a development environment that is isolated from your local environment.
Several positions available on https://www.getcfmljobs.com/
Listing over 48 ColdFusion positions from 36 companies across 23 locations in 5 Countries
1 new jobs this week.
Full-Time - Senior Coldfusion Developer (REMOTE) - United States
Posted: Jul 12
Contract - ColdFusion Developer for Allied Consultants, Inc.- US-TX-Austin
ForgeBox Module of the Week
Spreadsheet library for Lucee (and Adobe ColdFusion)
Originally adapted from the https://github.com/teamcfadvance/cfspreadsheet-railo extension, this is a standalone library for reading, creating and formatting spreadsheets in Lucee Server which does not require installation as an extension. It can also be used with Adobe ColdFusion.
Unlike Adobe ColdFusion, Lucee doesn't support spreadsheet functionality out of the box. An extension exists for Lucee, but I decided to create a standalone library which doesn't depend on customisation of the engine.
Note that this is not a Lucee extension, so does not need to be installed. To use it, simply copy the files/folders to a location where Spreadsheet.cfc can be called by your application code.
- No installation required, either at the server or individual web context level.
- read() method offers all the features of the <cfspreadsheet action="read"> tag in script in addition to the basic options of SpreadsheetRead().
- Offers a number of additional functions and options (see below)
- Fixes various outstanding bugs/omissions.
- No dependency on Lucee within the included jar files.
- Invoking the library doesn't create a workbook instance (a.k.a. Spreadsheet Object), meaning:
- a blank workbook isn't created unnecessarily when reading an existing spreadsheet
- the library can be stored as a singleton in application scope
- Also works with Adobe ColdFusion (see below)
- Written entirely in CFML script.
VS Code Hint Tips and Tricks of the Week
Bracket Pair Colorizer 2
CoenraadS.bracket-pair-colorizer-2 | 1,074,677 installs
This extension allows matching brackets to be identified with colours. The user can define which tokens to match, and which colours to use.
Differences between v1 and v2?
v2 Uses the same bracket parsing engine as VSCode, greatly increasing speed and accuracy. A new version was released because settings were cleaned up, breaking backwards compatibility.
Lots of great new settings and features I wasn’t using in V1, but now i need to take the time to use them
Thank you to all of our Patreon Supporters
Thanks to our newest supporter: Jeff McCain
These individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox, ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox.
You can support us on Patreon here https://www.patreon.com/ortussolutions
Carl Von Stetten
You can see an up to date list of all sponsors on Ortus Solutions' Website
Switch to Modernize or Die ® Podcast - SoapBox Edition - Switch to Modernize or Die ® Podcast - Conference Edition
Music from this podcast used under Royalty Free license from SoundDotCom and BlueTreeAudio© 2019 Ortus Solutions