Modernize or Die® - CFML News for July 14th, 2020 - Episode 61

Gavin and Brad host this weeks episode. They discuss Adobe's patch day updates for CF 2016 and 2018. They discuss the content releases for CFcasts. They discuss The ColdFusion Meetup Onlines, with 2 new sessions announced for July 23rd and 30th by TJ VanToll and Alex Ziskind respectively, with the recording for Dan Wilson from last week. They announce 2 upcoming Adobe Webinars, scheduled July 23rd and July 30th. They announce a new survey, the Docker Developer survey, and they remind you to take the State of the CF Union survey from TeraTech.com. They discuss the two ColdBox workshops coming up in July, ColdBox Zero to Hero that happened last week and ColdBox Hero to Superhero API Edition. They discuss how the Adobe ColdFusion Certification is now online and remind you that Adobe's CF Summit Conference, being changed to a Online conference, now in November... more details to come in coming months. They spotlight a lot of great blog posts, tweets, videos and podcasts, too many to list, so listen to the show. They announce some jobs from twitter and getCfmlJobs.com. They show off the ForgeBox module of the Week, Lucee Spreadsheet, a Spreadsheet library for Lucee (and Adobe ColdFusion) This week's VS Code Tip of the week is Bracket Pair Colorizer 2 - This extension allows matching brackets to be identified with colours. The user can define which tokens to match, and which colours to use. For the show notes - visit the website https://cfmlnews.modernizeordie.io/episodes/modernize-or-die-cfml-news-for-july-14th-2020-episode-61 Music from this podcast used under Royalty Free license from SoundDotCom https://www.soundotcom.com/ and BlueTreeAudio https://bluetreeaudio.com

2020-07-14 Weekly News - Episode 61

Watch the video version on YouTube at https://youtu.be/TkOFnet0d6c

Hosts:

Gavin Pickin - Software Consultant for Ortus Solutions
Brad Wood - Software Consultant for Ortus Solutions

Thanks to our Sponsor - Ortus Solutions

Get live training from the makers of your favorite Box Product.
2 live workshops this month - ColdBox Zero to Hero July 9 & 10 which went great, and ColdBox Hero to Superhero API Edition July 23 & 24 - still time to register.
CFCasts Subscriptions are now available and ColdBox Masterclass videos are all recorded and are scheduled to be released.

Patreon Support
Thanks to our newest supporter: Jeff McCain
We are at the 48% mark for fully funding all of our Modernize or Die Podcasts via our Patreon site: https://patreon.com/ortussolutions . If you love our podcasts and all we do for the #coldfusion #cfml community considers chipping in, we are almost there!
https://www.ortussolutions.com/blog/we-need-your-help



News and Events


Adobe Security Patch Day

Adobe has released security updates for ColdFusion versions 2016 and 2018. These updates resolve multiple important vulnerabilities that could lead to privilege escalation.

Vulnerability Details: DLL search-order hijacking - Privilege escalation

Note: Adobe recommends updating your ColdFusion JDK/JRE to the latest version of the LTS releases for 1.8 and JDK 11. Applying the ColdFusion update without a corresponding JDK update will NOT secure the server.  See the relevant Tech Notes for more details.
Adobe  also recommends customers apply the security configuration settings as outlined on the ColdFusion Security page as well as review the respective Lockdown guides.  ( linked in the security bulletin )

Adobe Docker Images have been updated as well.
CommandBox Docker images updated very soon.

Security Bulletin: https://helpx.adobe.com/security/products/coldfusion/apsb20-43.html
Blog: https://community.adobe.com/t5/coldfusion/coldfusion-2018-release-update-10-and-coldfusion-2016-release-update-16-released/td-p/11287201?page=1


CFCasts Content Updates

Free Content: We have added the entire “What’s new in CommandBox 5” series.
Subscription Content: We have added 2 more videos in the ColdBox Master Class - Model Data Binding and Validation, and Putting it all Together.
All of the ColdBox Master Class videos are now recorded, edited, and scheduled for release, so keep an eye out for the remainder of these over the next few weeks.
https://cfcasts.com/browse


ICYMI - ColdFusion Meetup - "Your best options to build modern front-ends with JavaScript", with Dan Wilson

Thursday July 9 at 12pm US Eastern Time, UTC-4.
The JavaScript ecosystem moves fast. In the last few years, the ecosystem has consolidated into several dominant choices like React, Angular, and Vue.js. Picking the right frameworks means you will be able to efficiently build apps your users will love. The right choice depends a lot on philosophy and your circumstances. In this presentation we’ll go over the major frameworks and discuss the pros and cons to each. We’ll also look at sample code and the overall developer experience. At the end of this talk, you’ll be better prepared to make the best choice for your company.
Recording: https://www.youtube.com/watch?v=_2_jWk-f9cI&list=PLG2EHzEbhy0-QirMKgSxhjkUyTSSTvHjL&index=2&t=0s
Meetup Group Link: https://www.meetup.com/coldfusionmeetup/events/271482406/


ColdFusion Meetup - "What Web Developers Can Learn From Native Mobile Developers", w/ TJ VanToll

Thursday July 16 at 12pm US Eastern Time, UTC-4
Web developers tend to be unabashed defenders of the web platform, and tend to view native mobile platforms as proprietary, gated and bloated.
As a long-time web developer I felt this way too, but then something unexpected happened: I joined the dark side, and spent five years of my career working on—*gasp*—iOS and Android applications.
Now, like an explorer returning from a multi-year safari—I have so much to share! In this talk I’ll discuss how native development has improved the way I write code for the web, and how you can incorporate the best native app performance and testing tips into your web workflows.
Meetup Group Link: https://www.meetup.com/coldfusionmeetup/events/271613429/


ColdFusion Meetup - "Intro to NativeScript", with Alex Ziskind

Thursday July 23rd at 6pm US Eastern Time, UTC-4.
Web developers are people too. They have needs and wants beyond just slinging code that is destined for the modern browser. They may also dream of building native mobile apps. But learning XCode and Android Studio and objective C might not be in the cards.
This is where NativeScript comes in; a framework that allows web developers to build native mobile apps using JavaScript and CSS. Alex Ziskind, the creator of NativeScripting.com, a school for learning NativeScript, will show you how to get started.
Meetup Group Link: https://www.meetup.com/coldfusionmeetup/events/271844332/


Adobe Webinar - Understanding the what, when and how of API Manager architecture and its various components with Kailash Bihani

July 23, 2020
10 am PT
Dive right into API Manager architecture and learn about its various components including datastore, server and elastic search. Find out how to install API Manager and the myriad of settings you can play with to ensure the best performance!
https://cfwebinar-apim.meetus.adobeevents.com/


Adobe Webinar - A bird's-eye view of PMT architecture and how to harness it's true potential with Nimit Sharma

July 30, 2020
10 am PT
This session will walk you through everything there is to know about PMT architecture and the configurations to look out for when installing PMT on your systems. Get a deeper look at how data flows in the system and the configuration files where the data is stored. Explore the common customer issues and find out how using archiving can reduce the disk consumption.
https://cfwebinar-pmt-architecture.meetus.adobeevents.com/


Docker Developer Survey

Welcome to the Docker Developer 2020 Survey! We'd like to learn a bit more about you, your background and really learn about our Docker user and customers! We appreciate you taking the time to fill this in so that we can improve our products and services.
Total survey time < 10 minutes.
Make sure you mention how much you love Swarm, because Ortus loves swarm
https://docs.google.com/forms/d/e/1FAIpQLSfCBAZLHZZafTOdhibV3tUPMlaZxbPA6-bWYlwXT9da2BksAQ/viewform


Reminder: State of the CF Union 2020 Survey

VOTE FOR OUR PODCASTS

Help us find out the state of the CF Union – what versions of CFML Engine do people use, what frameworks, tools etc. We will share the summary results with everyone who completes the survey so that you can see how you compare with other CF developers.
Most questions are multiple choice checkboxes that are fast to answer. Thanks for your time completing this survey!
486 respondents so far.
https://teratech.com/state-of-the-cf-union-2020/
Partial Results: https://teratech.com/state-of-the-CF-Union-2020-partial-Results




Conferences

Into the Box 2020 - Workshops - Virtual Live training

Gavin leading ColdBox Zero to Hero - July 9 - 10 - Great group, great progress.
Luis leading ColdBox Hero to Superhero API Edition July 23-24 - Filling up fast

2 x 6 hour days
9am-12pm Central
1 hour lunch
1pm to 4pm central

Tickets available: $899
https://www.ortussolutions.com/events
https://www.ortussolutions.com/blog/new-zero-to-hero-workshop-dates-announced-and-important-updates

Podcast Code:
PODCAST10 - 10% off
There is a code for ITB attendees to save 15% - If you didn’t get the email contact us.


Alexa Live 2020

Wednesday, July 22 | 9:00 AM - 1:00 PM PT
Join Amazon leaders and Alexa product experts on July 22 for a half-day virtual event on building delightful customer experiences with voice. Alexa Live is a free educational event for skill builders, device makers, and business leaders. You’ll hear about the latest product advances in a keynote by VP Alexa Devices & Developers Nedim Fresko and see how to build new voice experiences with these offerings. You’ll dive deep on technologies through expert-led breakout sessions featuring device makers, brands, and independent developers. And you’ll learn how to build with voice yourself, or explore strategy, development, and integration options with Alexa solution providers.
https://developer.amazon.com/en-US/alexa/alexa-live?sc_category=Owned&sc_channel=EM&sc_campaign=AL2020_EM&sc_segment=DEV&sc_publisher=MH&sc_content=FourthInvite&sc_detail=07092020&sc_country=WW&sc_place=BTD&mkt_tok=eyJpIjoiWmprMU1qaGpPR0ZsTVdRMSIsInQiOiJ6d3pucjRpZDQ3M0JoY1dONk5QanBsREpZeEhUOHZcL2dwSVdBVllJbG1Lc3o4ZU9tNVY2UHk5Vkw5dWgzc1pSaDI4STAwdHRjTHZcL3BwaUZpMTJCUmt5TnFBcGR6cU5SRENCMSt0OVRmNWdzVUFFYUkweThqTUtGWU5hcFFiMkJRIn0%3D


Adobe ColdFusion Certification now available Online

Adobe Certified Professional: Adobe ColdFusion is an industry-leading certification program from Adobe, for ColdFusion developers. The course consists of 50+ online videos and is designed for professionals who have basic to advance level proficiency in any computer language and basic understanding of how web pages work. Successfully passing an assessment test at the end of the program will reward participants with a badge and certificate from Adobe.
https://www.adobe.com/products/coldfusion-family/certificate.html


Adobe ColdFusion Summit 2020 - Replaces CF Summit West

Date: November
Location: Online
https://cfsummit.adobeevents.com/
Admission: Free
No blog post or official announcement made


CF Camp
TBA


More conferences: https://confs.tech/



Blogs, Tweets and Videos of the Week


Blog - Saurav Ghosh - Adobe - ColdFusion (2018 release) Update 10 and ColdFusion (2016 release) Update 16 released
We are pleased to announce that we have released the updates for the following ColdFusion versions:
ColdFusion (2018 release) Update 10
ColdFusion (2016 release) Update 16
In this update, we’ve fixed a few security bugs and some other bugs, which are mentioned in the tech notes.
https://coldfusion.adobe.com/2020/07/coldfusion-2018-release-update-10-and-coldfusion-2016-release-update-16-released/


Tweet - Julian Halliwell - Lucee MariaDB Extension Fix
Finally fixed an OSGi issue preventing upgrades to the @lucee_server MariaDB Extension. You can now update to the latest 2.6.1 version of the driver in your server admin. https://github.com/cfsimplicity/lucee-mariadb #cfml
https://twitter.com/cfsimplicity/status/1282713959955681280
https://twitter.com/cfsimplicity/


Blog - Brian Klaas - Beyond the Basics of Using AWS S3 in CFML: File Versioning in S3 Buckets
When editing files of any kind, users of modern applications expect to have access to previous versions of the file, and undo work that they don’t like or made in error. Implementing a versioning system isn’t easy, especially when file systems are generally set up to only allow one “copy” of any given file. It’s often up to you, the developer, to handle the versioning and ensure that new versions of uploaded files don’t overwrite older ones.
https://brianklaas.net/aws/coldfusion/2020/07/13/Beyond-Basics-S3-Versioning.html


Blog - Ben Nadel - Testing wkhtmltopdf 0.12.6 With Docker In Lucee CFML 5.3.4.80
A few months ago, James Moberg listed out a good number of Command-Line utilities that he uses in ColdFusion. Among them is wkhtmltopdf, which is a tool that can convert HTML and CSS to PDFs using the Qt WebKit rendering engine. Since I've been digging into PDF document generation in Lucee CFML, with varying degrees of success, I thought it was time that I try out Moberg's wkhtmltopdf recommendation. As such, this weekend, I sat down and got a proof-of-concept working in Docker and Lucee CFML 5.3.4.80.
https://www.bennadel.com/blog/3862-testing-wkhtmltopdf-0-12-6-with-docker-in-lucee-cfml-5-3-4-80.htm


Live Stream - Matthew Clemente - A CFML Module for Weighted Round-Robin (Learning by Trial and Error)
I'll be testing and publishing a ForgeBox module for producing weighted round-robin results.
https://www.youtube.com/watch?v=sbgvtStxzhY&feature=youtu.be


Blog - NerdVision -  NerdVision officially supports Adobe ColdFusion and Lucee!
NerdVision now officially supports ColdFusion Markup Language for both Adobe ColdFusion and Lucee!  You may ask "Why do you support CFML?"  especially if you are reading this with no knowledge of CFML.
The reason for this support is we as a company grew up with CFML, we have being doing CFML since 1996.
Today a lot has changed; we no longer run our applications on servers in a server room or only use CFML. Today our applications are much more complicated running in a distributed model, on multiple technologies, on multiple services such as AWS, Google Cloud or Azure, maybe even all three!
https://www.nerd.vision/post/nerdvision-officially-supports-adobe-coldfusion-and-lucee


Blog - Ben Nadel - Evaluating Database Records That Contain ColdFusion Interpolation Expressions In Adobe ColdFusion 2018
Yesterday, I was talking to Angel Gonzalez about an interesting use-case in ColdFusion - something that I've never personally tried before - evaluating database records that contain ColdFusion Expressions. Specifically, database records that contain String interpolation in which the interpolated value is being pulled out of the current ColdFusion request. I'm always curious to see how the CFML runtime can be used to unique ways; so, I thought I would try this out for myself.
The idea here is that the database record would contain a varchar value like:
Hello, #name#
... in which the dynamic name value would be pulled out of the ColdFusion request at runtime and interpolated as part of a dynamic evaluation.
https://www.bennadel.com/blog/3861-evaluating-database-records-that-contain-coldfusion-interpolation-expressions-in-adobe-coldfusion-2018.htm


Blog - Matt Gifford - Azure pipelines with CommandBox and TestBox
I’ve been trying to implement pipelines for my own personal and open source repositories so that I can easily perform automated unit tests against the CFML code.
I have a working Bitbucket pipeline script that works perfectly for any code I have in my Bitbucket repositories, but all of my open source projects are hosted on GitHub.
As a result, I wanted to get the testing pipelines set up using the Microsoft Azure developer tools associated with Github.
TLDR: Enter Pete Freitag, who had some documentation for his incredible Fixinator project on how to run CommandBox and internal box commands in Azure.
https://www.monkehworks.com/2020/07/09/azure-pipelines-with-commandbox-and-testbox.html


Tweet - Throwback ColdFusion Lives TShirt
Another oldie but goodie. Tee from #cfunited #coldfusion #adobecoldfusion 20 year developer with 2 decades of meets/exceeds expectations in reviews seeking full time remote position. Experience here: chrismichele.github.io #HealthyAtHome #remotejobs #remotework
https://twitter.com/christie_codes/status/1282698500736786433
https://twitter.com/christie_codes


Tweet - WebManDMan - Modernize or Die
I’m on my way there specially since our company is subscribing to everything azure. It’s up to me to subscribe to it and move away from our monolithic server. In parallel I need to catch up with commandbox servers, fusegaurd, fixinator, testbox, coldbox6. #modernizeOrDie right?
https://twitter.com/webmandman/status/1281289803397345281
https://twitter.com/webmandman/


Blog - VS Code - Remote development in Containers
This tutorial walks you through running Visual Studio Code in a Docker container using the Remote - Containers extension. You need no prior knowledge of Docker to complete this tutorial.
Running VS Code inside a Docker container can be useful for many reasons, but in this walkthrough we'll focus on using a Docker container to set up a development environment that is isolated from your local environment.
https://code.visualstudio.com/docs/remote/containers-tutorial?fbclid=IwAR1MZUFOrwvvEtQPntg5n0wiO1kkU_4h-dfQ54OlYTVr7FbVNKf-agPUd6U



CFML Jobs

Several positions available on https://www.getcfmljobs.com/
Listing over 48 ColdFusion positions from 36 companies across 23 locations in 5 Countries

1 new jobs this week.

Full-Time - Senior Coldfusion Developer (REMOTE) - United States
Posted: Jul 12
https://www.getcfmljobs.com/viewjob.cfm?jobid=11095

Twitter Jobs

Contract - ColdFusion Developer for Allied Consultants, Inc.- US-TX-Austin
https://social.icims.com/job/ColdFusion-Developer-Job-US-TX-Austin-27897978.html?isd_source=twitter&isd_pub=2409222&pubId=14099&iis=Social%20Networks&iisn=No%20Reply&iieid=pt1594739093703a48a0



ForgeBox Module of the Week

Lucee Spreadsheet

Spreadsheet library for Lucee (and Adobe ColdFusion)

Originally adapted from the https://github.com/teamcfadvance/cfspreadsheet-railo extension, this is a standalone library for reading, creating and formatting spreadsheets in Lucee Server which does not require installation as an extension. It can also be used with Adobe ColdFusion.

Unlike Adobe ColdFusion, Lucee doesn't support spreadsheet functionality out of the box. An extension exists for Lucee, but I decided to create a standalone library which doesn't depend on customisation of the engine.

Note that this is not a Lucee extension, so does not need to be installed. To use it, simply copy the files/folders to a location where Spreadsheet.cfc can be called by your application code.

Benefits:
- No installation required, either at the server or individual web context level.
- read() method offers all the features of the <cfspreadsheet action="read"> tag in script in addition to the basic options of SpreadsheetRead().
- Offers a number of additional functions and options (see below)
- Fixes various outstanding bugs/omissions.
- No dependency on Lucee within the included jar files.
- Invoking the library doesn't create a workbook instance (a.k.a. Spreadsheet Object), meaning:
          - a blank workbook isn't created unnecessarily when reading an existing spreadsheet
          - the library can be stored as a singleton in application scope
- Also works with Adobe ColdFusion (see below)
- Written entirely in CFML script.

https://www.forgebox.io/view/lucee-spreadsheet



VS Code Hint Tips and Tricks of the Week

Bracket Pair Colorizer 2

CoenraadS.bracket-pair-colorizer-2 |  1,074,677 installs

This extension allows matching brackets to be identified with colours. The user can define which tokens to match, and which colours to use.

Differences between v1 and v2?
v2 Uses the same bracket parsing engine as VSCode, greatly increasing speed and accuracy. A new version was released because settings were cleaned up, breaking backwards compatibility.

Lots of great new settings and features I wasn’t using in V1, but now i need to take the time to use them

https://marketplace.visualstudio.com/items?itemName=CoenraadS.bracket-pair-colorizer-2



Thank you to all of our Patreon Supporters

Thanks to our newest supporter: Jeff McCain

These individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox, ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox.

You can support us on Patreon here https://www.patreon.com/ortussolutions

Ben Nadel
Brett DeLine
Carl Von Stetten
Charlie Arehart
Da Li
Dan Card
Daniel Garcia
David Belanger
Didier Lesnicki
Don Bellamy
Erick Hoffman
Gary Knight
Jan Jannek
Jeff McCain
Jeremy Adams
Jordan Clark
Joseph Lamoree
Kai Koenig
Laksma Tirtohadi
Matthew Clemente
Mingo Hagen
Ryan Hughes
Scott Steinbeck
Shawn Oden
Steven Klotz
Synaptrix
Yogesh Mathur

You can see an up to date list of all sponsors on Ortus Solutions' Website
https://ortussolutions.com/about-us/sponsors



★ Support this podcast on Patreon ★

Switch to Modernize or Die ® Podcast - SoapBox Edition - Switch to Modernize or Die ® Podcast - Conference Edition

Powered by

Music from this podcast used under Royalty Free license from SoundDotCom and BlueTreeAudio

© 2019 Ortus Solutions