2020-07-14 Weekly News - Episode 61Watch the video version on YouTube at
https://youtu.be/TkOFnet0d6cHosts:
Gavin Pickin - Software Consultant for Ortus Solutions
Brad Wood - Software Consultant for Ortus Solutions
Thanks to our Sponsor - Ortus SolutionsGet live training from the makers of your favorite Box Product.
2 live workshops this month - ColdBox Zero to Hero July 9 & 10 which went great, and ColdBox Hero to Superhero API Edition July 23 & 24 - still time to register.
CFCasts Subscriptions are now available and ColdBox Masterclass videos are all recorded and are scheduled to be released.
Patreon SupportThanks to our newest supporter: Jeff McCain
We are at the 48% mark for fully funding all of our Modernize or Die Podcasts via our Patreon site:
https://patreon.com/ortussolutions . If you love our podcasts and all we do for the #coldfusion #cfml community considers chipping in, we are almost there!
https://www.ortussolutions.com/blog/we-need-your-help News and EventsAdobe Security Patch DayAdobe has released security updates for ColdFusion versions 2016 and 2018. These updates resolve multiple important vulnerabilities that could lead to privilege escalation.
Vulnerability Details: DLL search-order hijacking - Privilege escalation
Note: Adobe recommends updating your ColdFusion JDK/JRE to the latest version of the LTS releases for 1.8 and JDK 11. Applying the ColdFusion update without a corresponding JDK update will NOT secure the server. See the relevant Tech Notes for more details.
Adobe also recommends customers apply the security configuration settings as outlined on the ColdFusion Security page as well as review the respective Lockdown guides. ( linked in the security bulletin )
Adobe Docker Images have been updated as well.
CommandBox Docker images updated very soon.
Security Bulletin:
https://helpx.adobe.com/security/products/coldfusion/apsb20-43.htmlBlog:
https://community.adobe.com/t5/coldfusion/coldfusion-2018-release-update-10-and-coldfusion-2016-release-update-16-released/td-p/11287201?page=1CFCasts Content UpdatesFree Content: We have added the entire “What’s new in CommandBox 5” series.
Subscription Content: We have added 2 more videos in the ColdBox Master Class - Model Data Binding and Validation, and Putting it all Together.
All of the ColdBox Master Class videos are now recorded, edited, and scheduled for release, so keep an eye out for the remainder of these over the next few weeks.
https://cfcasts.com/browseICYMI - ColdFusion Meetup - "Your best options to build modern front-ends with JavaScript", with Dan WilsonThursday July 9 at 12pm US Eastern Time, UTC-4.
The JavaScript ecosystem moves fast. In the last few years, the ecosystem has consolidated into several dominant choices like React, Angular, and Vue.js. Picking the right frameworks means you will be able to efficiently build apps your users will love. The right choice depends a lot on philosophy and your circumstances. In this presentation we’ll go over the major frameworks and discuss the pros and cons to each. We’ll also look at sample code and the overall developer experience. At the end of this talk, you’ll be better prepared to make the best choice for your company.
Recording:
https://www.youtube.com/watch?v=_2_jWk-f9cI&list=PLG2EHzEbhy0-QirMKgSxhjkUyTSSTvHjL&index=2&t=0sMeetup Group Link:
https://www.meetup.com/coldfusionmeetup/events/271482406/ColdFusion Meetup - "What Web Developers Can Learn From Native Mobile Developers", w/ TJ VanTollThursday July 16 at 12pm US Eastern Time, UTC-4
Web developers tend to be unabashed defenders of the web platform, and tend to view native mobile platforms as proprietary, gated and bloated.
As a long-time web developer I felt this way too, but then something unexpected happened: I joined the dark side, and spent five years of my career working on—*gasp*—iOS and Android applications.
Now, like an explorer returning from a multi-year safari—I have so much to share! In this talk I’ll discuss how native development has improved the way I write code for the web, and how you can incorporate the best native app performance and testing tips into your web workflows.
Meetup Group Link:
https://www.meetup.com/coldfusionmeetup/events/271613429/ColdFusion Meetup - "Intro to NativeScript", with Alex Ziskind
Thursday July 23rd at 6pm US Eastern Time, UTC-4.
Web developers are people too. They have needs and wants beyond just slinging code that is destined for the modern browser. They may also dream of building native mobile apps. But learning XCode and Android Studio and objective C might not be in the cards.
This is where NativeScript comes in; a framework that allows web developers to build native mobile apps using JavaScript and CSS. Alex Ziskind, the creator of NativeScripting.com, a school for learning NativeScript, will show you how to get started.
Meetup Group Link:
https://www.meetup.com/coldfusionmeetup/events/271844332/Adobe Webinar - Understanding the what, when and how of API Manager architecture and its various components with Kailash Bihani
July 23, 2020
10 am PT
Dive right into API Manager architecture and learn about its various components including datastore, server and elastic search. Find out how to install API Manager and the myriad of settings you can play with to ensure the best performance!
https://cfwebinar-apim.meetus.adobeevents.com/Adobe Webinar - A bird's-eye view of PMT architecture and how to harness it's true potential with Nimit SharmaJuly 30, 2020
10 am PT
This session will walk you through everything there is to know about PMT architecture and the configurations to look out for when installing PMT on your systems. Get a deeper look at how data flows in the system and the configuration files where the data is stored. Explore the common customer issues and find out how using archiving can reduce the disk consumption.
https://cfwebinar-pmt-architecture.meetus.adobeevents.com/Docker Developer Survey
Welcome to the Docker Developer 2020 Survey! We'd like to learn a bit more about you, your background and really learn about our Docker user and customers! We appreciate you taking the time to fill this in so that we can improve our products and services.
Total survey time < 10 minutes.
Make sure you mention how much you love Swarm, because Ortus loves swarm
https://docs.google.com/forms/d/e/1FAIpQLSfCBAZLHZZafTOdhibV3tUPMlaZxbPA6-bWYlwXT9da2BksAQ/viewformReminder: State of the CF Union 2020 Survey
VOTE FOR OUR PODCASTS
Help us find out the state of the CF Union – what versions of CFML Engine do people use, what frameworks, tools etc. We will share the summary results with everyone who completes the survey so that you can see how you compare with other CF developers.
Most questions are multiple choice checkboxes that are fast to answer. Thanks for your time completing this survey!
486 respondents so far.
https://teratech.com/state-of-the-cf-union-2020/Partial Results:
https://teratech.com/state-of-the-CF-Union-2020-partial-ResultsConferencesInto the Box 2020 - Workshops - Virtual Live trainingGavin leading ColdBox Zero to Hero - July 9 - 10 - Great group, great progress.
Luis leading ColdBox Hero to Superhero API Edition July 23-24 - Filling up fast
2 x 6 hour days
9am-12pm Central
1 hour lunch
1pm to 4pm central
Tickets available: $899
https://www.ortussolutions.com/eventshttps://www.ortussolutions.com/blog/new-zero-to-hero-workshop-dates-announced-and-important-updatesPodcast Code:
PODCAST10 - 10% off
There is a code for ITB attendees to save 15% - If you didn’t get the email contact us.
Alexa Live 2020Wednesday, July 22 | 9:00 AM - 1:00 PM PT
Join Amazon leaders and Alexa product experts on July 22 for a half-day virtual event on building delightful customer experiences with voice. Alexa Live is a free educational event for skill builders, device makers, and business leaders. You’ll hear about the latest product advances in a keynote by VP Alexa Devices & Developers Nedim Fresko and see how to build new voice experiences with these offerings. You’ll dive deep on technologies through expert-led breakout sessions featuring device makers, brands, and independent developers. And you’ll learn how to build with voice yourself, or explore strategy, development, and integration options with Alexa solution providers.
https://developer.amazon.com/en-US/alexa/alexa-live?sc_category=Owned&sc_channel=EM&sc_campaign=AL2020_EM&sc_segment=DEV&sc_publisher=MH&sc_content=FourthInvite&sc_detail=07092020&sc_country=WW&sc_place=BTD&mkt_tok=eyJpIjoiWmprMU1qaGpPR0ZsTVdRMSIsInQiOiJ6d3pucjRpZDQ3M0JoY1dONk5QanBsREpZeEhUOHZcL2dwSVdBVllJbG1Lc3o4ZU9tNVY2UHk5Vkw5dWgzc1pSaDI4STAwdHRjTHZcL3BwaUZpMTJCUmt5TnFBcGR6cU5SRENCMSt0OVRmNWdzVUFFYUkweThqTUtGWU5hcFFiMkJRIn0%3D
Adobe ColdFusion Certification now available Online
Adobe Certified Professional: Adobe ColdFusion is an industry-leading certification program from Adobe, for ColdFusion developers. The course consists of 50+ online videos and is designed for professionals who have basic to advance level proficiency in any computer language and basic understanding of how web pages work. Successfully passing an assessment test at the end of the program will reward participants with a badge and certificate from Adobe.
https://www.adobe.com/products/coldfusion-family/certificate.htmlAdobe ColdFusion Summit 2020 - Replaces CF Summit West
Date: November
Location: Online
https://cfsummit.adobeevents.com/Admission: Free
No blog post or official announcement made
CF Camp
TBA
More conferences:
https://confs.tech/Blogs, Tweets and Videos of the Week
Blog - Saurav Ghosh - Adobe - ColdFusion (2018 release) Update 10 and ColdFusion (2016 release) Update 16 releasedWe are pleased to announce that we have released the updates for the following ColdFusion versions:
ColdFusion (2018 release) Update 10
ColdFusion (2016 release) Update 16
In this update, we’ve fixed a few security bugs and some other bugs, which are mentioned in the tech notes.
https://coldfusion.adobe.com/2020/07/coldfusion-2018-release-update-10-and-coldfusion-2016-release-update-16-released/Tweet - Julian Halliwell - Lucee MariaDB Extension FixFinally fixed an OSGi issue preventing upgrades to the @lucee_server MariaDB Extension. You can now update to the latest 2.6.1 version of the driver in your server admin.
https://github.com/cfsimplicity/lucee-mariadb #cfml
https://twitter.com/cfsimplicity/status/1282713959955681280https://twitter.com/cfsimplicity/Blog - Brian Klaas - Beyond the Basics of Using AWS S3 in CFML: File Versioning in S3 BucketsWhen editing files of any kind, users of modern applications expect to have access to previous versions of the file, and undo work that they don’t like or made in error. Implementing a versioning system isn’t easy, especially when file systems are generally set up to only allow one “copy” of any given file. It’s often up to you, the developer, to handle the versioning and ensure that new versions of uploaded files don’t overwrite older ones.
https://brianklaas.net/aws/coldfusion/2020/07/13/Beyond-Basics-S3-Versioning.htmlBlog - Ben Nadel - Testing wkhtmltopdf 0.12.6 With Docker In Lucee CFML 5.3.4.80A few months ago, James Moberg listed out a good number of Command-Line utilities that he uses in ColdFusion. Among them is wkhtmltopdf, which is a tool that can convert HTML and CSS to PDFs using the Qt WebKit rendering engine. Since I've been digging into PDF document generation in Lucee CFML, with varying degrees of success, I thought it was time that I try out Moberg's wkhtmltopdf recommendation. As such, this weekend, I sat down and got a proof-of-concept working in Docker and Lucee CFML 5.3.4.80.
https://www.bennadel.com/blog/3862-testing-wkhtmltopdf-0-12-6-with-docker-in-lucee-cfml-5-3-4-80.htmLive Stream - Matthew Clemente - A CFML Module for Weighted Round-Robin (Learning by Trial and Error)I'll be testing and publishing a ForgeBox module for producing weighted round-robin results.
https://www.youtube.com/watch?v=sbgvtStxzhY&feature=youtu.beBlog - NerdVision - NerdVision officially supports Adobe ColdFusion and Lucee!NerdVision now officially supports ColdFusion Markup Language for both Adobe ColdFusion and Lucee! You may ask "Why do you support CFML?" especially if you are reading this with no knowledge of CFML.
The reason for this support is we as a company grew up with CFML, we have being doing CFML since 1996.
Today a lot has changed; we no longer run our applications on servers in a server room or only use CFML. Today our applications are much more complicated running in a distributed model, on multiple technologies, on multiple services such as AWS, Google Cloud or Azure, maybe even all three!
https://www.nerd.vision/post/nerdvision-officially-supports-adobe-coldfusion-and-luceeBlog - Ben Nadel - Evaluating Database Records That Contain ColdFusion Interpolation Expressions In Adobe ColdFusion 2018Yesterday, I was talking to Angel Gonzalez about an interesting use-case in ColdFusion - something that I've never personally tried before - evaluating database records that contain ColdFusion Expressions. Specifically, database records that contain String interpolation in which the interpolated value is being pulled out of the current ColdFusion request. I'm always curious to see how the CFML runtime can be used to unique ways; so, I thought I would try this out for myself.
The idea here is that the database record would contain a varchar value like:
Hello, #name#
... in which the dynamic name value would be pulled out of the ColdFusion request at runtime and interpolated as part of a dynamic evaluation.
https://www.bennadel.com/blog/3861-evaluating-database-records-that-contain-coldfusion-interpolation-expressions-in-adobe-coldfusion-2018.htm
Blog - Matt Gifford - Azure pipelines with CommandBox and TestBoxI’ve been trying to implement pipelines for my own personal and open source repositories so that I can easily perform automated unit tests against the CFML code.
I have a working Bitbucket pipeline script that works perfectly for any code I have in my Bitbucket repositories, but all of my open source projects are hosted on GitHub.
As a result, I wanted to get the testing pipelines set up using the Microsoft Azure developer tools associated with Github.
TLDR: Enter Pete Freitag, who had some documentation for his incredible Fixinator project on how to run CommandBox and internal box commands in Azure.
https://www.monkehworks.com/2020/07/09/azure-pipelines-with-commandbox-and-testbox.html Tweet - Throwback ColdFusion Lives TShirtAnother oldie but goodie. Tee from #cfunited #coldfusion #adobecoldfusion 20 year developer with 2 decades of meets/exceeds expectations in reviews seeking full time remote position. Experience here: chrismichele.github.io #HealthyAtHome #remotejobs #remotework
https://twitter.com/christie_codes/status/1282698500736786433https://twitter.com/christie_codes Tweet - WebManDMan - Modernize or Die I’m on my way there specially since our company is subscribing to everything azure. It’s up to me to subscribe to it and move away from our monolithic server. In parallel I need to catch up with commandbox servers, fusegaurd, fixinator, testbox, coldbox6. #modernizeOrDie right?
https://twitter.com/webmandman/status/1281289803397345281https://twitter.com/webmandman/ Blog - VS Code - Remote development in ContainersThis tutorial walks you through running Visual Studio Code in a Docker container using the Remote - Containers extension. You need no prior knowledge of Docker to complete this tutorial.
Running VS Code inside a Docker container can be useful for many reasons, but in this walkthrough we'll focus on using a Docker container to set up a development environment that is isolated from your local environment.
https://code.visualstudio.com/docs/remote/containers-tutorial?fbclid=IwAR1MZUFOrwvvEtQPntg5n0wiO1kkU_4h-dfQ54OlYTVr7FbVNKf-agPUd6U
CFML Jobs
Several positions available on
https://www.getcfmljobs.com/Listing over 48 ColdFusion positions from 36 companies across 23 locations in 5 Countries
1 new jobs this week.
Full-Time - Senior Coldfusion Developer (REMOTE) - United States
Posted: Jul 12
https://www.getcfmljobs.com/viewjob.cfm?jobid=11095Twitter JobsContract - ColdFusion Developer for Allied Consultants, Inc.- US-TX-Austin
https://social.icims.com/job/ColdFusion-Developer-Job-US-TX-Austin-27897978.html?isd_source=twitter&isd_pub=2409222&pubId=14099&iis=Social%20Networks&iisn=No%20Reply&iieid=pt1594739093703a48a0
ForgeBox Module of the WeekLucee SpreadsheetSpreadsheet library for Lucee (and Adobe ColdFusion)
Originally adapted from the
https://github.com/teamcfadvance/cfspreadsheet-railo extension, this is a standalone library for reading, creating and formatting spreadsheets in Lucee Server which does not require installation as an extension. It can also be used with Adobe ColdFusion.
Unlike Adobe ColdFusion, Lucee doesn't support spreadsheet functionality out of the box. An extension exists for Lucee, but I decided to create a standalone library which doesn't depend on customisation of the engine.
Note that this is not a Lucee extension, so does not need to be installed. To use it, simply copy the files/folders to a location where Spreadsheet.cfc can be called by your application code.
Benefits:
- No installation required, either at the server or individual web context level.
- read() method offers all the features of the <cfspreadsheet action="read"> tag in script in addition to the basic options of SpreadsheetRead().
- Offers a number of additional functions and options (see below)
- Fixes various outstanding bugs/omissions.
- No dependency on Lucee within the included jar files.
- Invoking the library doesn't create a workbook instance (a.k.a. Spreadsheet Object), meaning:
- a blank workbook isn't created unnecessarily when reading an existing spreadsheet
- the library can be stored as a singleton in application scope
- Also works with Adobe ColdFusion (see below)
- Written entirely in CFML script.
https://www.forgebox.io/view/lucee-spreadsheetVS Code Hint Tips and Tricks of the Week
Bracket Pair Colorizer 2
CoenraadS.bracket-pair-colorizer-2 | 1,074,677 installs
This extension allows matching brackets to be identified with colours. The user can define which tokens to match, and which colours to use.
Differences between v1 and v2?
v2 Uses the same bracket parsing engine as VSCode, greatly increasing speed and accuracy. A new version was released because settings were cleaned up, breaking backwards compatibility.
Lots of great new settings and features I wasn’t using in V1, but now i need to take the time to use them
https://marketplace.visualstudio.com/items?itemName=CoenraadS.bracket-pair-colorizer-2Thank you to all of our Patreon Supporters
Thanks to our newest supporter: Jeff McCainThese individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox, ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox.
You can support us on Patreon here
https://www.patreon.com/ortussolutionsBen Nadel
Brett DeLine
Carl Von Stetten
Charlie Arehart
Da Li
Dan Card
Daniel Garcia
David Belanger
Didier Lesnicki
Don Bellamy
Erick Hoffman
Gary Knight
Jan Jannek
Jeff McCain
Jeremy Adams
Jordan Clark
Joseph Lamoree
Kai Koenig
Laksma Tirtohadi
Matthew Clemente
Mingo Hagen
Ryan Hughes
Scott Steinbeck
Shawn Oden
Steven Klotz
Synaptrix
Yogesh Mathur
You can see an up to date list of all sponsors on Ortus Solutions' Website
https://ortussolutions.com/about-us/sponsors