2022-10-18 Weekly News - Episode 168

Watch the video version on YouTube at https://youtu.be/SgTjYDH0N6M
 
Hosts: 

Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. 
A few ways  to say thanks back to Ortus Solutions:

 
Patreon Support ( effervescent )

Goal 1 - We have 42 patreons providing 100% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions.
Goal 2 - We are 33% of the way to fully fund the hosting of ForgeBox.io

News and Announcements

Update - Trying out Github Co-Pilot
I know Adam Tuttle, Carol Hamilton, Adam Cameron are using Co-Pilot, so I thought I would try it out. It’s interesting, it’s not very CF Smart yet, but it does give you some great pseudo code, especially with our testing.
https://github.com/features/copilot

Hacktoberfest 2023
HERE’S WHAT YOU NEED TO KNOW TO PARTICIPATE AND COMPLETE HACKTOBERFEST:
Register anytime between September 26 and October 31
Pull requests can be made in any GITHUB or GITLAB hosted project that’s participating in Hacktoberfest (look for the “hacktoberfest” topic)
Project maintainers must accept your pull/merge requests for them to count toward your total
Have 4 pull/merge requests accepted between October 1 and October 31 to complete Hacktoberfest
The first 40,000 participants (maintainers and contributors) who complete Hacktoberfest can elect to receive one of two prizes: a tree planted in their name, or the Hacktoberfest 2022 t-shirt.
https://hacktoberfest.com/
Ortus Blog about Hacktoberfest - https://www.ortussolutions.com/blog/october-is-here-and-that-means-hacktoberfest

New Releases and Updates

ColdFusion 2021 "refreshed" installers available (with update 5)...but only in one place for now
Here's some surprising news: Adobe has released a "refreshed" installer for CF2021, which includes update 5 (which came out last week) built-in.
TLDR: these new "refreshed" CF2021 installers are (for now) available only here: here.
https://www.carehart.org/blog/2022/10/17/cf2021_refreshed_installers_available_but_only_one_place_for_now


Spreadsheet-CFML v3.6.1
Spreadsheet-CFML v3.6.0 released with new support for adding data validation drop-downs #cfml
https://github.com/cfsimplicity/spreadsheet-cfml

ICYMI - Adobe ColdFusion 2021 and 2018 October Security Updates

CommandBox images are out as well

We are pleased to announce that we have released the updates for the following ColdFusion versions:

In these updates, we’ve fixed a few security and feature-specific bugs, along with other libraries. We’ve also introduced support for M1 macOS.
For more information, see the tech notes below:

https://community.adobe.com/t5/coldfusion-discussions/released-coldfusion-2021-and-2018-october-security-updates/m-p/13259746

ICYMI - cbElasticsearch 2.3.3 Released
We are pleased to announce the release of cbElasticsearch version 2.3.3. cbElasticsearch is the Elasticsearch module for the Coldbox platform, and provides a fluent CFML API for interacting with, searching, and serializing to Elasticsearch servers.
This release adds full compatibility for Elasticsearch v8.x as well as maintaining support for Elasticsearch versions 6 and 7.
https://www.ortussolutions.com/blog/cbelasticsearch-233-released

ICYMI - Fusion Reactor 9.1.0
Not long after FR 9 was released, 9.1.0 has been released with 2 bug fixes and 5 improvements.
https://docs.fusion-reactor.com/release-notes/#910


Webinar / Meetups and Workshops

New Ortus Friday Webinars - Every Friday at 11am CDT

Ortus Webinar
October 28th - 11am CDT
Step up your Testing with Gavin Pickin

Ortus - Office Hours
November 4th - 11am CDT
Daniel Garcia will host a variety of Ortus people
Office Hours questions & requests form available

Ortus Book Club - Patreon Only
November 11th - 11am CDT
Robert Martin
Clean Code

Ortus Webinar
November 18th - 11am CDT

CFUG Tech Talk - Document Services APIs and You by Raymond Camden
Thursday, October 20th, 2022 8:00pm-9:00pm IST (9:30 AM CDT)
Most organizations have to deal with documents, from PDFs to various Office formats, managing and processing documents can be overwhelming. In this talk, Raymond will discuss the various Adobe Document Services APIs and how they can help developers manage their document stores.
Register: https://www.eventbrite.com/e/document-services-apis-and-you-tickets-428587234957
Presentation URL: https://meet67421977.adobeconnect.com/document-services-apis/

CFHawaii - ColdFusion Builder for VS Code
Friday, October 28, 2022 at 3:00 PM to Friday, October 28, 2022 at 4:00 PM PDT
Mark Takata, the Adobe CF Technical Evangelist for ColdFusion will give a presentation on the new ColdFusion Builder extension for VS Code. During his talk he will discuss:
Access built-in support for IntelliSense code completion, better semantic code understanding, and code refactoring.
Identify security vulnerabilities and maintain the integrity of your code.
Manage your work with extensions, remote project support, integrated server management, a log viewer, and more!
Customize every feature to your liking by creating shortcuts, easily formatting and reusing code, and using powerful extensions to better your best.
https://www.meetup.com/hawaii-coldfusion-meetup-group/events/288977258/

Adobe Workshops & Webinars
Join the Adobe ColdFusion Workshop to learn how you and your agency can leverage ColdFusion to create amazing web content. This one-day training will cover all facets of Adobe ColdFusion that developers need to build applications that can run across multiple cloud providers or on-premise



WEBINAR - WEDNESDAY, NOVEMBER 23, 2022
10:00 AM PST
Building Native Mobile Applications with Adobe ColdFusion & Monaco.io
Mark Takata
https://building-native-mobile-apps-with-cf-monaco-io.meetus.adobeevents.com/

WEBINAR - THURSDAY, DECEMBER 22, 2022
10:00 AM PST
Winter Holiday Special: A preview of ColdFusion 2023
Mark Takata
https://winter-special-preview-of-cf2023.meetus.adobeevents.com/

FREE :)
Full list - https://meetus.adobeevents.com/coldfusion/


CFCasts Content Updates

https://www.cfcasts.com

Just Released

Conferences and Training

ICYMI - ViteConf
Tuesday and Wednesday October 11-12, 2022
Online: Free
Making Web Development Instant
https://viteconf.org/

ICYMI - Microsoft Ignite
Wednesday-Friday October 12–14, 2022
Online: Free
In Person: $1895

Explore the latest innovations, learn from product experts and partners, level up your skillset, and create connections from around the world. Join us October 12–14 at 9:00 AM PDT to help shape the future of tech.
https://ignite.microsoft.com/en-US/home


AWSome Day Online Conference - This week
THURSDAY, OCTOBER 20, 2022
9AM – 12PM PT | 12PM – 3PM ET
We're bringing the cloud down to Earth
Join us for a free virtual 3-hour AWS Cloud training event delivered by our skilled in-house instructors.
https://aws.amazon.com/events/awsome-day/americas/

Deploy from Digital Ocean
November 15-16, 2022
The virtual conference for global builders
Subtract Complexity,
Add Developer Happiness
Join us on the mission to simplify the developer experience.
https://deploy.digitalocean.com/

Into the Box Latam 2022
Dec 7th
More information is coming very soon.

Dev Nexus
April 4-6th in Altanta
EARLY BIRD CONFERENCE PASS - APRIL 5-6 (AVAILABLE UNTIL NOVEMBER 20)
(Approx 40% off)
If you are planning to speak, please submit often and early. The CALL FOR PAPERS is open until November 15
WORKSHOPS WILL BE ON JAVA, JAVA SECURITY, SOFTWARE DESIGN, AGILE, DEVOPS, KUBERNETES, MICROSERVICES, SPRING ETC. SIGN UP NOW, AND YOU WILL BE ABLE TO CHOOSE A WORKSHOP, LATER ON,
https://devnexus.com/
 
Into the Box 2023 - 10th Edition
May 17, 18, and 19th, 2022.
Middle of May - start planning.
Final dates will be released as soon as the hotel confirms availability.

CFCamp
No CFCAMP 2022, we're trying again for summer 2023
TLDR is that it's just too hard and there's too much uncertainty right now.


More conferences

Need more conferences, this site has a huge list of conferences for almost any language/community.
https://confs.tech/



Blogs, Tweets, and Videos of the Week

10/17/22 - Blog - Charlie Arehart - ColdFusion 2021 "refreshed" installers available (with update 5)...but only in one place for now
Here's some surprising news: Adobe has released a "refreshed" installer for CF2021, which includes update 5 (which came out last week) built-in.
Did you know about this? You'd be forgiven if you had not heard, for reasons I will explain. And I'm glad to share the news, though it's a good news/bad news sort of thing (just like with the update itself. More on that in another post to come.)
TLDR: these new "refreshed" CF2021 installers are (for now) available only here: here.
https://www.carehart.org/blog/2022/10/17/cf2021_refreshed_installers_available_but_only_one_place_for_now

10/17/22 - Tweet - James Moberg - Boolean Coercion in Javascript
I learned #coldfusion long before javascript, I often forget that CFML is non-standard & treats numeric values as boolean. This obviously doesn't work in JS. Using Boolean() or !! is recommended for coercion.

Here's some helpful tips that I found:
https://www.samanthaming.com/tidbits/19-2-ways-to-convert-to-boolean/
https://twitter.com/gamesover/status/1582166204910686209
https://twitter.com/gamesover



10/14/22 - Blog - Julian Halliwell - Adding validation drop-downs to your spreadsheets with CFML
As web application developers we're used to adding drop-downs to our web UIs via <select> HTML elements. They're a reliable way of making sure people make a valid choice from a limited set of options - countries or credit card providers, for instance.
Drop-down lists are also supported in the world of spreadsheets via "Data Validation" or"Validity" menu options, depending on the software you are using.
https://blog.simplicityweb.co.uk/131/adding-validation-drop-downs-to-your-spreadsheets-with-cfml

10/13/22 - Blog - Ben Nadel - Trying To Get The Most Trustworthy IP Address For A User In ColdFusion
On a recent Penetration Test (PenTest), one of our systems was flagged for not properly validating the X-Forwarded-For HTTP header, which is a recording of the various IP addresses along the network path being made by an inbound request. To be honest, I've never really thought deeply about IP addresses from a security standpoint before; but, having this show up on a PenTest sent me down a bit of a rabbit hole. And, I thought it might be worth talking a bit about why IP addresses pertain to security in ColdFusion.
https://www.bennadel.com/blog/4337-trying-to-get-the-most-trustworthy-ip-address-for-a-user-in-coldfusion.htm

10/13/22 - Tweet - Brian Rielly - Coldfusion Xml Allow Path - CF 2021 Update 5 breaks XML
hmmm...
I haven't tested this at all yet, but I wonder if orgs that need to set  "coldfusion.xml.allowPathCharacters = true" will loose any added protection against XXE, XSLT injection, and other XML-based attacks.
#coldfusion #xxe #xml #APSB22-44
https://stackoverflow.com/questions/74058674/coldfusion-2021-update-5-breaks-xml
https://twitter.com/hoyahaxa/status/1580618984231096321
https://twitter.com/hoyahaxa

10/12/22 - Tweet - Adam Cameron - Writing code on ColdFusion 5…
https://twitter.com/adam_cameron/status/1580103376041230336
https://twitter.com/adam_cameron

10/11/22 - Blog - Mark Takata - Adobe - CFSummit 2022 Recap
Well, that’s another CF Summit in the books, and the first in-person event in 2 years. It was an absolute joy and thrill to be able to see all of you that made it to the event this year in person. I just wanted to take a moment and re-live a bit of the fun, give thanks to folks and give some updates.
https://coldfusion.adobe.com/2022/10/cfsummit-2022-recap/


10/11/22 - Blog - Mark Bockenstedt - Can Destructured Variables Be Scoped In ColdFusion?
Destructuring is a convenient way to assign the values from complex objects like arrays & structs into distinct variables. That's all well & good, but all examples I've seen don't bother with variable scoping. Proper scoping is important for explicitness and to better understand where your variables are coming from. Without proper scoping, you may be pulling a variable from an unexpected location.
All examples that follow were written and executed on ColdFusion 2021, Update 4 using cffiddle.org.
https://www.bockensm.com/2022/10/11/scoping-destructured-variables/


10/7/22 - Tweet Thread - Brad Wood - explaining wirebox
With a framework like WireBox, the calling code doesn't need to know
* where the dependency lives
* how to build it
* what init() args it requires
* what nested dependencies it needs
You just call wirebox.getInstance( "foobar" ) and WireBox does the rest. #abstraction
Like when you order a steak at Applebee's- you don't tell the chief where the cow lives, what the cow needs to eat, or where his seasonings are in the kitchen.  You just ask the waiter for a "steak" and the kitchen does the rest.
https://twitter.com/bdw429s/status/1578464811553554438
https://twitter.com/bdw429s


CFML Jobs

Several positions available on https://www.getcfmljobs.com/
Listing over 142 ColdFusion positions from 78 companies across 65 locations in 5 Countries.

4 new jobs listed this week


Full-Time - ColdFusion Developer at India - India
Oct 18
https://www.getcfmljobs.com/jobs/index.cfm/india/ColdFusion-Developer-at-India/11529

Full-Time - Senior ColdFusion Developer at Brisbane QLD - Australia
Oct 17
https://www.getcfmljobs.com/jobs/index.cfm/australia/Senior-ColdFusion-Developer-at-Brisbane-QLD/11528

Full-Time - SE-ColdFusion at Bengaluru, Karnataka - India
Oct 13
https://www.getcfmljobs.com/jobs/index.cfm/india/SEColdFusion-at-Bengaluru-Karnataka/11526

Full-Time - Senior Software Engineer-ColdFusion Developer at United Stat.. - United States
Oct 13
https://www.getcfmljobs.com/jobs/index.cfm/united-states/Senior-Software-EngineerColdFusion-Developer-at-United-States/11527


Other Job Links

ForgeBox Module of the Week

PKCE - pronounced PIXIE

By Matt Gifford

PKCE Generator
A CFML component to generate or verify a Proof Key for Code Exchange (PKCE) challenge pair.

https://www.forgebox.io/view/pkce

VS Code Hint Tips and Tricks of the Week

JavaScript (ES6) code snippets

This extension contains code snippets for JavaScript in ES6 syntax for Vs Code editor (supports both JavaScript and TypeScript).

https://marketplace.visualstudio.com/items?itemName=xabikos.JavaScriptSnippets


Thank you to all of our Patreon Supporters

These individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox.

You can support us on Patreon here https://www.patreon.com/ortussolutions

Don’t forget, we have Annual Memberships, pay for the year and save 10% - great for businesses.

You can see an up to date list of all sponsors on Ortus Solutions' Website
https://ortussolutions.com/about-us/sponsors 

Thanks everyone!!!