2021-11-09 Weekly News - Episode 125

Watch the video version on YouTube at https://youtu.be/XkpNcuDzhhw

Hosts:

Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and almost every other Box out there. 
A few ways  to say thanks back to Ortus Solutions:

Patreon Support

We have 37 patreons providing 93% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions.
Now offering Annual Memberships, pay for the year and save 10% - great for businesses.



News and Events



ColdBox Mail Services 2.0 Released - Fluent Mail For All

We are so excited to bring you a major release of our cbmailservices module. This module has been around since our initial versions of ColdBox and it has now matured into a modern and fluent library for sending mail.
https://www.ortussolutions.com/blog/coldbox-mail-services-20-fluent-mail-for-all
https://www.forgebox.io/view/cbmailservices


FORGEBOX 6 has landed!

After several months of work, we are proud to announce the release of FORGEBOX 6. This has been a major undertaking spawning several months worth of work, a complete UI revamp for registered users, many bug fixes, multi-key API, and much more. We have also introduced our new Business Accounts (https://forgebox.io/plans) with the ability for organizations to have a simple and human way of managing their final package releases and their teams.
https://www.ortussolutions.com/blog/forgebox-6-has-landed



Tonight!!! - Mid Michigan CFUG Meeting - Using AI and machine learning along with ColdFusion to build a smarter call center with Nick Kwiatkowski

Tuesday 11/9/21 at 7 pm eastern
Using AI and machine learning along with ColdFusion to build a smarter call center at the next Mid-Michigan CFUG meeting Tuesday 11/9/21 at 7 pm eastern. 
Michigan State University’s, Nick Kwiatkowski, will be showing how to create voice and text-based chat bots that you can deploy to your contact centers (and help desks!) to help automate frequently asked questions.
Meeting URL: https://bit.ly/3w9LZ7D


Adobe 1 Day Workshop - Adobe ColdFusion Workshop with Damien Bruyndonckx

Wed, November 10, 2021
09:00 - 17:00 CEST EUROPEAN
Join the Adobe ColdFusion Workshop to learn how you and your agency can leverage ColdFusion to create amazing web content. This one-day training will cover all facets of Adobe ColdFusion that developers need to build applications that can run across multiple cloud providers or on-premise.
https://coldfusion-workshop.meetus.adobeevents.com/


Ortus Webinar for November - Javier Quintero - FORGEBOX Business Plan: Introducing Organizations and Teams

November 19th at 11:00 AM Central Time (US and Canada)
In this webinar, Javier Quintero, lead developer of FORGEBOX, will present the new features and the improved UI that is now available on FORGEBOX 6. Moreover, he’ll explore in depth the Business Plan that is directed towards organizations and teams so they can collaborate and support their software building needs. He will show us how to create a new organization, how you can add members to it with specific roles, and how you can control teams, members, packages and publish access.
with Javier Quintero
https://us02web.zoom.us/meeting/register/tZclfuGopjkiG9TIMoC93YbKIcLM1ok_KKlw


Online CF Meetup - "Avoiding Server-Side Request Forgery (SSRF) Vulns in CFML", with Brian Reilly

Thursday, November 11, 2021 - 9:00 AM to 10:00 AM PST
Server-Side Request Forgery (SSRF) vulnerabilities allow an attacker to make arbitrary web requests (and in some cases, other protocols too) from the application environment. Exploiting these flaws can lead to leaking sensitive data, accessing internal resources, and under certain circumstances, remote command execution.
Several ColdFusion/CFML tags and functions can process URLs as file path arguments -- including some tags and and functions that you might not expect. If these tags and functions process unvalidated user-controlled input, this can lead to SSRF vulnerabilities in your applications. In addition to providing a list of affected tags and functions, I'll cover some approaches for identifying and remediating vulnerable code. My goal for this talk is to raise awareness about what may be a security blindspot for some ColdFusion/CFML developers.
https://www.meetup.com/coldfusionmeetup/events/281850930/


ICYMI - Online CF Meetup - "Migrating apps to ColdFusion 2021 from earlier versions", with Charlie Arehart

Thursday, November 4, 2021
9:00 AM to 10:00 AM PDT
While CF2021 has been out now for a year (released in Nov 2020), many orgs may only now be considering moving to it, whether from CF2018 or perhaps CF2016, CF11, CF10, or even earlier. How have the versions changed, in ways that some older code may not run on CF2021? And if you're skipping some CF version/s, what might have tripped you up in those, though not really "new" in CF2021 itself? And what can you do to mitigate such challenges?
In this session, CF troubleshooter Charlie Arehart will share from his experience helping folks make such migrations the past year (and for years with previous CF versions), whether in his role as an independent consultant or providing assistance to the CF community. He'll cover things you can consider in advance of the migration as well as things that might help during or after the migration. Most importantly, this talk will focus on the differences between CF2021 and various earlier CF versions. (Note that he has previously given a talk on migrating CF admin settings, and he plans a future talk on some other aspects of migration.)
https://www.meetup.com/coldfusionmeetup/events/281800384/
Recording: https://www.youtube.com/watch?v=QQBHnQExFqc



CFCasts Content Updates

https://www.cfcasts.com

Just Released

A new series of ForgeBox coming very soon

Send your suggestions at https://cfcasts.com/support



Conferences and Training


Deploy by Digital Ocean

THE VIRTUAL CONFERENCE FOR GLOBAL DEVELOPMENT TEAMS
November 16-17, 2021
https://deploy.digitalocean.com/home


AWS re:Invent

NOV. 29 – DEC. 3, 2021 | LAS VEGAS, NV
CELEBRATING 10 YEARS OF RE:INVENT
Virtual: Free
In Person: $1799
https://reinvent.awsevents.com/


Postgres Build

Online - Free
Nov 30-Dec 1 2021
https://www.postgresbuild.com/


ITB Latam 2021

December 2-3, 2021
Into the Box LATAM is back and better than ever! Our virtual conference will include speakers from El Salvador and all over the world, who'll present on the latest web and mobile technologies in Latin America.
Registration is completely free so don't miss out!
ITB Latam Schedule Posted
https://latam.intothebox.org/


Adobe ColdFusion Summit 2021

December 7th and 8th - Virtual
Agenda is out!!!
@Adobe @coldfusion #CFSummit2021 keynote we will be featuring @ashleymcnamara! Her talk will focus on the history & future of DevRel how we got here & where we're going.
2 tracks - 1 all CFML - the other a mix of CFML and semi-related topics
Register for Free - https://cfsummit.vconfex.com/site/adobe-cold-fusion-summit-2021/1290
Blog - https://coldfusion.adobe.com/2021/09/adobe-coldfusion-summit-2021-registrations-open/


jConf.dev

Now a free virtual event
December 9th starting at 8:30 am CDT/2:30 pm UTC.
https://2021.jconf.dev/?mc_cid=b62adc151d&mc_eid=8293d6fdb0


VueJS Nation Conference

Online Live Event
January 26th & 27th 2022
Register for Free
Call for Speakers is open
https://vuejsnation.com/


More conferences

Need more conferences, this site has a huge list of conferences for almost any language/community.
https://confs.tech/



Blogs, Tweets and Videos of the Week


Blog - Ben Nadel - Writing To The Standard Out / Console Using WriteDump() In Adobe ColdFusion 2021
As I'm starting to modernize my ColdFusion blogging platform, one thing that I am missing terribly from Lucee CFML is the ability to write to the standard out (stdout) and standard error (stderr) streams. In a Docker / containerized context, writing to the output streams is a powerful debugging tool (not to mention a log aggregation technique). A few months ago, I looked at porting the systemOutput() function from Lucee CFML to Adobe ColdFusion; but, I just recently discovered that the CFDump tag and the writeDump() function in Adobe ColdFusion can write directly to the "console" (Standard Out) instead of to the browser. This isn't as seamless as systemOutput(); but, it may just be good enough!
https://www.bennadel.com/blog/4150-writing-to-the-standard-out-console-using-writedump-in-adobe-coldfusion-2021.htm


Blog - Ben Nadel - ColdFusion Component Setters / Accessors Are Chainable For Easy Dependency-Injection
This is primarily a note-to-self; but the other day, I stumbled upon / remembered that the auto-generated accessors in a ColdFusion component are chainable. At work, I never think about this because we use a dependency-injection framework which performs all the setter-injection for us. However, in my blogging platform, all the components are wired-up manually in my onApplicationStart() event-handler. As such, the fact that I can chain my setter accessors leads to a lovely, fluent API.
https://www.bennadel.com/blog/4149-coldfusion-component-setters-accessors-are-chainable-for-easy-dependency-injection.htm


Blog - Ben Nadel - Considering An isError() Decision Function In ColdFusion
As I mentioned earlier today, I'm looking to use Rollbar's Java SDK in my Adobe ColdFusion 2021 app (namely, this blog). The Rollbar SDK exposes a fairly simple API. However, that simple API uses a data-type that I almost never think about in my code: java.lang.Throwable. To be clear, I deal with error objects all the time in ColdFusion; but, I'm usually serializing them to the "Standard Error" stream (where they get slurped-up into our log aggregator) - I'm never worrying about the actual data-type and what impact it may have on Java method signatures. It got me thinking about decision functions; and, why there is no isError() built-in function (BIF).
https://www.bennadel.com/blog/4148-considering-an-iserror-decision-function-in-coldfusion.htm


Blog - Javier Quintero - Ortus Solutions - FORGEBOX 6 has landed!
After several months of work, we are proud to announce the release of FORGEBOX 6. This has been a major undertaking spawning several months worth of work, a complete UI revamp for registered users, many bug fixes, multi-key API, and much more. We have also introduced our new Business Accounts (https://forgebox.io/plans) with the ability for organizations to have a simple and human way of managing their final package releases and their teams.
https://www.ortussolutions.com/blog/forgebox-6-has-landed


Blog - Adam Cameron - A question about the overhead of OOP in CFML
A question cropped up on the CFML Slack channel the other day. My answer was fairly long-winded so I decided to post it here as well. I asked the original questioner, and they are OK with me reproducing their question.
Again, I have a question to experienced OOP cfml coders. From the clean code concept I know I should break code into smaller (er even its smallest ) pieces. Is there any possible reason to stop doing that at a certain level in CFML? Eg. for performance reasons? Eg. lets assume I have a component named Car.cfc. Should I always break a Car.cfc component into Wheel.cfc, Engine.cfc, CarBody.cfc accordingly? Does the createObject behave like include files that would come with a certain overhead because of physical file request? What is when I also break Engine.cfc into many little pieces (and Wheel.cfc also)?
Andreas @ CFML Slack Channel
Here's my answer. I've tidied up the English in some places, but have not changed any detail of what I said.
This is interesting as Eric is battling this in quick and has made some amazing strides lately
https://blog.adamcameron.me/2021/11/a-question-about-overhead-of-oop-in-cfml.html


Blog - Ben Nadel - Getting Rollbar's Java SDK 1.7.10 Working In Adobe ColdFusion 2021
As I mentioned the other day, I'm preparing to pour some love into my ColdFusion blogging platform. One area in much need of love is my error logging. If you can even imagine, this blog still uses email as the primary means to report errors! *Ring ring ring* - Hello. What's that? The 1990's called and they want their error handling back? As a step towards modernization, I thought I would try out Rollbar - they have both a client-side JavaScript SDK and a server-side Java SDK. And, I think they have a cool name. Getting Rollbar's Java SDK 1.7.10 working with Adobe ColdFusion 2021 turned out to be a bit of a battle.
https://www.bennadel.com/blog/4147-getting-rollbars-java-sdk-1-7-10-working-in-adobe-coldfusion-2021.htm



CFML Jobs

Several positions available on https://www.getcfmljobs.com/
Listing over 227 ColdFusion positions from 102 companies across 123 locations in 5 Countries.

1 new jobs listed

Full-Time - ColdFusion Developer at Gold Coast QLD - Australia
Posted Nov 03
https://www.getcfmljobs.com/jobs/index.cfm/australia/ColdFusion-Developer-at-Gold-Coast-QLD/11375



ForgeBox Module of the Week

ColdBox Mail Services 2.0

by Luis Majano and Ortus Solutions

We are so excited to bring you a major release of our cbmailservices module. This module has been around since our initial versions of ColdBox and it has now matured into a modern and fluent library for sending mail.
https://www.ortussolutions.com/blog/coldbox-mail-services-20-fluent-mail-for-all

https://www.forgebox.io/view/cbmailservices



VS Code Hint Tips and Tricks of the Week

New Relic CodeStream: GitHub, GitLab, Bitbucket PRs and Code Review

New Relic CodeStream is a developer collaboration platform that integrates essential dev tools into VS Code. Eliminate context-switching and simplify code discussion and code review by putting collaboration tools in your IDE.

Integrations

CodeStream is now part of New Relic - This must be very recent
https://marketplace.visualstudio.com/items?itemName=CodeStream.codestream



Thank you to all of our Patreon Supporters

These individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox.

You can support us on Patreon here https://www.patreon.com/ortussolutions

Now offering Annual Memberships, pay for the year and save 10% - great for businesses.

You can see an up to date list of all sponsors on Ortus Solutions' Website
https://ortussolutions.com/about-us/sponsors