2021-09-28 Weekly News - Episode 120

Watch the video version on YouTube at https://youtu.be/rXPASiVo6ks

Hosts:
 
Eric Peterson - Senior Developer for Ortus Solutions
Gavin Pickin - Senior Developer for Ortus Solutions


Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and almost every other Box out there. 
A few ways  to say thanks back to Ortus Solutions:

Patreon Support

We have 38 patreons providing 100% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions.
We are now 41% of the way to our next goal, fully funding the ForgeBox.io site.
Now offering Annual Memberships, pay for the year and save 10% - great for businesses.



News and Events


Into the Box 2021 - Recap

Great Success! Especially the Viral Edgardo Cabezas with his Reggaeton - Video available :D

CBWire v1.0.0 - https://cbwire.ortusbooks.com/

Qb v8.7.0 & v8.7.1 Released - https://qb.ortusbooks.com/whats-new#8-7-0

ForgeBox v6.0.0

Stachebox v1.0.0 - ElasticSearch, LogStash, and FileBeats viewer

ContentBox v5.0.0 - Using Tailwind and AlpineJS got some love from attendees and twitter
MULTI-SITE!!!  New CLI installation and manager

New Ortus Github Actions for CFFormat, DocBox, Fixinator, Semantic Release
https://github.com/Ortus-Solutions/fixinator-action
https://github.com/Ortus-Solutions/commandbox-action
https://github.com/Ortus-Solutions/semantic-release-action

New Adobe ColdFusion Product Manager - In the Adobe Session Mark Takata had a lot of really encouraging things to say about the new #ColdFusion Product Manager who  is gearing up to take over the direction of CF!

For More information:
Keynote Day 1: https://youtu.be/NNYK1-NPBeI
Keynote Day 2: https://youtu.be/jK8RfFLQZjo
Full Session Videos coming to CFCasts soon
https://intothebox.org


CommandBox v5.4.1 released

We are pleased to announce the release of CommandBox 5.4.1.  This is a patch release with 5 small fixes for the 5.4.0 release.   There are a few bug fixes, and a couple small enhancements in this release.
https://www.ortussolutions.com/blog/commandbox-541-released


Lucee-Spreadsheet Release and Rename

Just released v3.0 of my spreadsheet library. Two big changes:
1) it's now "spreadsheet-cfml" instead of "lucee-spreadsheet"
2) calls can now be chained for simpler code (yeah for fluent builder patterns!)
Ortus fixed the forgebox slug so builds will not fail anymore and updating ForgeBox to have failover redirects for future issues in other projects
https://github.com/cfsimplicity/spreadsheet-cfml/
New Name - https://www.forgebox.io/view/spreadsheet-cfml
Old Name - https://www.forgebox.io/view/lucee-spreadsheet


Minor Stable Lucee Release Out - 5.3.8.206

Mainly a CFSchedule fix
https://github.com/lucee/Lucee/compare/5.3.8.201...5.3.8.206


Modernize Or Die Podcast - SoapBox Edition - Relaunching Oct 7th

Luis Majano is hosting a series of Community Members over the coming months.
Interview format.
Several episodes are recorded and prepped for release.
https://soapbox.modernizeordie.io/


Security Alert - Cring ransomware group exploits ancient ColdFusion server (CF9)

Active exploit of cf9 servers leading to ransomware attacks. This is why you should not be running software that's no longer updated!
Thank for heads up from @viviotech email to their clients, including one we share
https://news.sophos.com/en-us/2021/09/21/cring-ransomware-group-exploits-ancient-coldfusion-server/


Ortus Webinar for October - Gavin Pickin - Building Quick APIs - the extended version
In this session we will use ColdBox’s built in REST BaseHandler, and with CBSecurity and Quick ORM we will set up a secure API using fluent query language - and you’ll see how quick Quick development can be!
https://www.ortussolutions.com/events/webinars
Signup coming soon



Some people think October is pumpkin spice, halloween, but for us, its HACKTOBERFEST

Hacktoberfest 2021

Support open source throughout October!
Hacktoberfest encourages participation in the open source community, which grows bigger every year. Complete the 2021 challenge and earn a limited edition T-shirt.
GIVING TO OPEN SOURCE
Open-source projects keep the internet humming—but they can’t do it without resources. Donate and support their awesome work.
TREES NOT TEES
Rather than receive t-shirts as swag, you can choose to have a tree planted in your name and help make Hacktoberfest 2021 more carbon neutral.
To win a reward, you must sign up on the Hacktoberfest site and make four pull requests on any repositories classified with the 'hacktoberfest 'topic on GitHub or GitLab by October 31.
If an Ortus Solutions repo that you want to contribute to is not marked with the `hacktoberfest` topic, please let us know so we can fix it.
https://hacktoberfest.digitalocean.com/



ICYMI - Adobe ColdFusion Updates Released

We are pleased to announce that we have released the updates for the following ColdFusion versions:
ColdFusion (2021 release) Update 2
ColdFusion (2018 release) Update 12
Note: The ColdFusion (2021 release) installers have also been refreshed with this update. The new server installers bundle Update 2 and JDK 11.0.11. The ColdFusion Add-Ons and other installers are bundled with JDK 11.0.11. The refreshed installers are available at ColdFusion downloads.
Biggest update here is supporting Big Sur.  (A little late with Monterey just around the corner.)
https://coldfusion.adobe.com/2021/09/coldfusion-2021-and-2018-september-updates/


ICYMI - Adobe CF 2021 Docker Images finally on DockerHub

Adobe has been putting their ColdFusion Docker images onto Docker hub
https://coldfusion.adobe.com/2021/09/adobe-coldfusion-2021-docker-image-now-available-dockerhub/
https://hub.docker.com/u/adobecoldfusion


ICYMI - Adobe 1 Day Workshop - Adobe ColdFusion Workshop with Damien Bruyndonckx

Wed, September 22, 2021
Wed, November 10, 2021
09:00 - 17:00 CEST EUROPEAN
Join the Adobe ColdFusion Workshop to learn how you and your agency can leverage ColdFusion to create amazing web content. This one-day training will cover all facets of Adobe ColdFusion that developers need to build applications that can run across multiple cloud providers or on-premise.
https://coldfusion-workshop.meetus.adobeevents.com/


ICYMI - Adobe Webinar for September - Head in the clouds: Installing ColdFusion on Azure and AWS with Mark Takata

Wed, September 22, 2021
09:00 - 10:00 PDT
If you’ve been thinking about getting your CF instance moved into the cloud but don’t know where to start, this webinar will get you rolling. We will explore how to install, configure and update CF2021 installs in both Amazon AWS and Microsoft Azure and give you tips and tricks on how to get things off the ground.
https://installing-coldfusion-on-azure-and-aws.meetus.adobeevents.com/



CFCasts Content Updates

https://www.cfcasts.com

Just Released

Send your suggestions at https://cfcasts.com/support



Conferences and Training


Into the Box 2021 - HYBRID - Live in Person in Texas. and Live Online

Great Success!
Keynote Day 1: https://youtu.be/NNYK1-NPBeI
Keynote Day 2: https://youtu.be/jK8RfFLQZjo
Full Session Videos coming to CFCasts soon
https://intothebox.org


Adobe ColdFusion Summit 2021

December 7th and 8th
Mark let us know the Keynote Speaker will be someone from outside of Adobe - will announce once the contract is inked. She works for a big company.
Virtual
Register for Free - https://cfsummit.vconfex.com/site/adobe-cold-fusion-summit-2021/1290
Blog - https://coldfusion.adobe.com/2021/09/adobe-coldfusion-summit-2021-registrations-open/



More conferences

Need more conferences, this site has a huge list of conferences for almost any language/community.
https://confs.tech/



Blogs, Tweets and Videos of the Week

Blog - We are Orange - From MURA to MASA
For those that don’t know, MURA is a very powerful CMS that is renowned for it’s fantastic UX – especially for content managers. Previously it was offered as an open source platform but that support ended in August of this year.
As seasoned MURA users – with some big clients running it – this could have presented a major problem. So, we came up with a solution… and we’re proud to announce that We Are Orange has forked the project and are now supporting a new version – called MASA – continuing its lifespan as an open source platform.
https://www.weareorange.eu/updates/from-mura-to-masa


Blog - Ben Nadel - Exploring The Scope Of SERIALIZABLE Transaction Row-Locking In Lucee CFML 5.3.7.47
Earlier this week, I looked at using SERIALIZABLE transactions to enforce unique naming constraints in MySQL and Lucee CFML. Transaction isolation isn't a topic that I'm super comfortable with. As such, I wanted to continue exploring the way in which transaction locking affects concurrent access to a given database table. More specifically, I wanted to better understand the scope of row-locking that is applied in a SERIALIZABLE transaction in MySQL 5.7.32 and Lucee CFML 5.3.7.47.
https://www.bennadel.com/blog/4122-exploring-the-scope-of-serializable-transaction-row-locking-in-lucee-cfml-5-3-7-47.htm


Blog - Ben Nadel - CFThread "ElapsedTime" Is Not "Processor Time" In Lucee CFML 5.3.8.201
This morning, as I was trying to perform some follow-up exploration on SERIALIZABLE transactions in MySQL, I noticed something strange about the metadata exposed by the CFThread tag in Lucee CFML. Whereas Adobe ColdFusion (ACF) documents the ElapsedTime property as being "The amount of processor time that was spent handling the thread", this property looks to mean something different in Lucee CFML. It appears to be the amount of time that has elapsed since the CFThread tag was spawned; but, has nothing to do with when it ended; or, how much time it took to execute.
https://www.bennadel.com/blog/4121-cfthread-elapsedtime-is-not-processor-time-in-lucee-cfml-5-3-8-201.htm


Blog - Ben Nadel - Fixing Protocols In My ColdFusion Custom Tag DSL For HTML Emails
Last week, I looked at the fact that [Yahoo! Mail won't render href attributes with encoded protocols]. In that post, I created a ColdFusion user defined function (UDF) to un-encoded the https:// portion of the href attribute. After letting that approach bake in production at InVison for a while without an issues, I've decided to move the fix into my ColdFusion custom tag DSL for HTML emails. With this new implementation, I've pushed the logic down into the <html:a> and <html:src> custom tag implementations so that the developer can continue to use these tags without any changes to their code.
https://www.bennadel.com/blog/4123-fixing-protocols-in-my-coldfusion-custom-tag-dsl-for-html-emails.htm


Blog - Ben Nadel - Request Tracing Propagation When Consuming Amazon SQS Queues In Lucee CFML 5.3.8.201
As I continue to explore the use of Amazon SQS queues in Lucee CFML, I have to start thinking about request tracing. In a monolithic application, request tracing is much less of a value-add since most operations happen within a single request. Once I start using a message queue to decouple steps within a larger workflow, however, I break out of that single-request boundary. As such, if I want to identify "message creation" as being related to "message consumption", I have to propagate the concept of tracing through the message queue life-cycle. I'm sure there are loads of ways to do this. So, what follows is just one possible way to propagate request tracing through Amazon SQS in a Lucee CFML 5.3.8.201 application.
https://www.bennadel.com/blog/4118-request-tracing-propagation-when-consuming-amazon-sqs-queues-in-lucee-cfml-5-3-8-201.htm


Tweet - Ben Nadel - Too Clever or Too Cool - Execute assignments as part of return statements
I am sure many people will hate this syntax / technique. But, I love the fact that #Lucee #CFML allows me to execute assignments as part of return statements. This allows my #ColdFusion to look more and more like my #JavaScript. Both of which are my happy place! 💪
https://twitter.com/BenNadel/status/1439532846528479235
https://twitter.com/BenNadel/


Blog - Ben Nadel - Spreading Http And HttpParam Tags Across Multiple Function Calls In Lucee CFML 5.3.8.201
Back when InVision was running on Adobe ColdFusion 10, I leaned heavily on the native Http.cfc component when making network requests. However, once we switched over to Lucee CFML 5.3, where tag support in CFScript is much more robust, I found myself reverting back to the http and httpParam tags for network requests. There's something I find so elegant about the syntax of tags and their builder-like pattern of construction. One nice about using the Http.cfc ColdFusion component, however, is that it can be passed around and augmented such as with the injection of tracing headers. This got me thinking about augmenting http tags with httpParam tags; and, whether such an augmentation could be spread across function calls in Lucee CFML 5.3.8.201.
https://www.bennadel.com/blog/4117-spreading-http-and-httpparam-tags-across-multiple-function-calls-in-lucee-cfml-5-3-8-201.htm


Blog - Brad Wood - Ortus Solutions - CommandBox v5.4.1 released
We are pleased to announce the release of CommandBox 5.4.1.  This is a patch release with 5 small fixes for the 5.4.0 release.   There are a few bug fixes, and a couple small enhancements in this release.
https://www.ortussolutions.com/blog/commandbox-541-released


Blog - Ben Nadel - Yahoo! Mail Does Not Render Anchor Tags With Encoded HREF Attributes
When rendering view templates in Lucee CFML (or any server-side language for that matter), rule number-one is don't trust the content. This is a corollary to an older rule, don't trust the user. As such, when I render content, I almost always wrap it in one of the many encoding methods that ColdFusion offers: encodeForHtml() or encodeForHtmlAttribute(). And, for the most part, this works wonderfully. However, I just discovered yesterday that Yahoo! Mail won't render Anchor (<a>) tags with fully-encoded href attributes. Specifically, it will strip-out the href attribute entirely if the link protocol is encoded. To fix this, I had to walk-back some of the encoding in my HTML emails. For anyone else that runs into this problem, I thought it might be helpful to put together a demo in Lucee CFML 5.3.8.201.
https://www.bennadel.com/blog/4115-yahoo-mail-does-not-render-anchor-tags-with-encoded-href-attributes.htm


Tweet - Ben Nadel - Undocumented Features that suddenly don’t work
Hmmm, after installing Adobe #ColdFusion 2018 hotfix earlier this week, I am seeing that this:
query[ column_name ].indexOf( value )
... no longer works. This was an undocumented feature, but it suddenly stopped working. Case in point, don't use undocumented features.
https://twitter.com/BenNadel/status/1438834934760755203
https://twitter.com/BenNadel



CFML Jobs

Several positions available on https://www.getcfmljobs.com/
Listing over 198 ColdFusion positions from 93 companies across 115 locations in 5 Countries.

8 new jobs listed

Full-Time - Middle ColdFusion Developer at Hyderabad, Telangana - India
Posted Sep 27
https://www.getcfmljobs.com/jobs/index.cfm/india/Middle-ColdFusion-Developer-at-Hyderabad-Telangana/11346

Full-Time - Full Stack Developer - Java/SQL/ColdFusion at United States - United States
Posted Sep 24
https://www.getcfmljobs.com/jobs/index.cfm/united-states/Full-Stack-Developer-JavaSQLColdFusion-at-United-States/11345

Full-Time - ColdFusion Developer (REMOTE) at REMOTE - United States
Posted Sep 18
https://www.getcfmljobs.com/jobs/index.cfm/united-states/CFDev-at-Remote-US/11344

Full-Time - ColdFusion Software Developer - Mid to Senior Level - Remote - United States
Posted Sep 17
https://www.getcfmljobs.com/jobs/index.cfm/united-states/ColdFusion-Software-Developer-Mid-to-Senior-Level-Remote-Position-at-Denver-CO/11343

Full-Time - Coldfusion Engineer at United States - United States
Posted Sep 17
https://www.getcfmljobs.com/jobs/index.cfm/united-states/Coldfusion-Engineer-at-United-States/11342

Full-Time - Sr Software Engineer Lead Coldfusion at Pune, Maharashtra - India
Posted Sep 16
https://www.getcfmljobs.com/jobs/index.cfm/india/Sr-Software-Engineer-Lead-Coldfusion-at-Pune-Maharashtra/11341

Full-Time - Senior Coldfusion Developer |LATAM| at Colon, PA - United States
Posted Sep 15
https://www.getcfmljobs.com/jobs/index.cfm/united-states/Senior-Coldfusion-Developer-LATAM-at-Colon-PA/11339

Full-Time - ColdFusion Developer at Herndon, VA - United States
Posted Sep 15
https://www.getcfmljobs.com/jobs/index.cfm/united-states/ColdFusion-Developer-at-Herndon-VA/11340



ForgeBox Module of the Week

CBWire - ColdBox + Livewire

Laravel Livewire is a library that makes it simple to build modern, reactive, dynamic interfaces using Laravel Blade as your templating language. This is a great stack to choose if you want to build an application that is dynamic and reactive but don't feel comfortable jumping into a full JavaScript framework like Vue.

Now we have it in ColdBox for CFML - BETA
https://www.forgebox.io/view/cbwire
https://cbwire.ortusbooks.com/


VS Code Hint Tips and Tricks of the Week

Emoji Log

After building hundreds of open source software I've ended up inventing a git commit log standard called EMOJI-LOG that helps me understand a project's history with a less cognitive load just by looking at the git log.

https://marketplace.visualstudio.com/items?itemName=ahmadawais.emoji-log-vscode



Thank you to all of our Patreon Supporters

These individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox.

You can support us on Patreon here https://www.patreon.com/ortussolutions

Now offering Annual Memberships, pay for the year and save 10% - great for businesses.

You can see an up to date list of all sponsors on Ortus Solutions' Website
https://ortussolutions.com/about-us/sponsors