lystn

2020-07-14 Weekly News - Episode 61Watch the video version on YouTube at https://youtu.be/TkOFnet0d6cHosts:Gavin Pickin - Software Consultant for Ortus SolutionsBrad Wood - Software Consultant for Ortus SolutionsThanks to our Sponsor - Ortus SolutionsGet live training from the makers of your favorite Box Product.2 live workshops this month - ColdBox Zero to Hero July 9 a 10 which went great, and ColdBox Hero to Superhero API Edition July 23 a 24 - still time to register.CFCasts Subscriptions are now available and ColdBox Masterclass videos are all recorded and are scheduled to be released.Patreon SupportThanks to our newest supporter: Jeff McCainWe are at the 48% mark for fully funding all of our Modernize or Die Podcasts via our Patreon site: https://patreon.com/ortussolutions . If you love our podcasts and all we do for the #coldfusion #cfml community considers chipping in, we are almost there!https://www.ortussolutions.com/blog/we-need-your-help News and EventsAdobe Security Patch DayAdobe has released security updates for ColdFusion versions 2016 and 2018. These updates resolve multiple important vulnerabilities that could lead to privilege escalation. Vulnerability Details: DLL search-order hijacking - Privilege escalation Note: Adobe recommends updating your ColdFusion JDK/JRE to the latest version of the LTS releases for 1.8 and JDK 11. Applying the ColdFusion update without a corresponding JDK update will NOT secure the server.  See the relevant Tech Notes for more details. Adobe  also recommends customers apply the security configuration settings as outlined on the ColdFusion Security page as well as review the respective Lockdown guides.  ( linked in the security bulletin )Adobe Docker Images have been updated as well.CommandBox Docker images updated very soon.Security Bulletin: https://helpx.adobe.com/security/products/coldfusion/apsb20-43.htmlBlog: https://community.adobe.com/t5/coldfusion/coldfusion-2018-release-update-10-and-coldfusion-2016-release-update-16-released/td-p/11287201?page=1CFCasts Content UpdatesFree Content: We have added the entire “What’s new in CommandBox 5” series.Subscription Content: We have added 2 more videos in the ColdBox Master Class - Model Data Binding and Validation, and Putting it all Together.All of the ColdBox Master Class videos are now recorded, edited, and scheduled for release, so keep an eye out for the remainder of these over the next few weeks.https://cfcasts.com/browseICYMI - ColdFusion Meetup - "Your best options to build modern front-ends with JavaScript", with Dan WilsonThursday July 9 at 12pm US Eastern Time, UTC-4.The JavaScript ecosystem moves fast. In the last few years, the ecosystem has consolidated into several dominant choices like React, Angular, and Vue.js. Picking the right frameworks means you will be able to efficiently build apps your users will love. The right choice depends a lot on philosophy and your circumstances. In this presentation we’ll go over the major frameworks and discuss the pros and cons to each. We’ll also look at sample code and the overall developer experience. At the end of this talk, you’ll be better prepared to make the best choice for your company.Recording: https://www.youtube.com/watch?v=_2_jWk-f9cIalist=PLG2EHzEbhy0-QirMKgSxhjkUyTSSTvHjLaindex=2at=0sMeetup Group Link: https://www.meetup.com/coldfusionmeetup/events/271482406/ColdFusion Meetup - "What Web Developers Can Learn From Native Mobile Developers", w/ TJ VanTollThursday July 16 at 12pm US Eastern Time, UTC-4Web developers tend to be unabashed defenders of the web platform, and tend to view native mobile platforms as proprietary, gated and bloated.As a long-time web developer I felt this way too, but then something unexpected happened: I joined the dark side, and spent five years of my career working on—*gasp*—iOS and Android applications.Now, like an explorer returning from a multi-year safari—I have so much to share! In this talk I’ll discuss how native development has improved the way I write code for the web, and how you can incorporate the best native app performance and testing tips into your web workflows.Meetup Group Link: https://www.meetup.com/coldfusionmeetup/events/271613429/ColdFusion Meetup - "Intro to NativeScript", with Alex ZiskindThursday July 23rd at 6pm US Eastern Time, UTC-4.Web developers are people too. They have needs and wants beyond just slinging code that is destined for the modern browser. They may also dream of building native mobile apps. But learning XCode and Android Studio and objective C might not be in the cards.This is where NativeScript comes in; a framework that allows web developers to build native mobile apps using JavaScript and CSS. Alex Ziskind, the creator of NativeScripting.com, a school for learning NativeScript, will show you how to get started.Meetup Group Link: https://www.meetup.com/coldfusionmeetup/events/271844332/Adobe Webinar - Understanding the what, when and how of API Manager architecture and its various components with Kailash BihaniJuly 23, 202010 am PTDive right into API Manager architecture and learn about its various components including datastore, server and elastic search. Find out how to install API Manager and the myriad of settings you can play with to ensure the best performance!https://cfwebinar-apim.meetus.adobeevents.com/Adobe Webinar - A bird's-eye view of PMT architecture and how to harness it's true potential with Nimit SharmaJuly 30, 202010 am PTThis session will walk you through everything there is to know about PMT architecture and the configurations to look out for when installing PMT on your systems. Get a deeper look at how data flows in the system and the configuration files where the data is stored. Explore the common customer issues and find out how using archiving can reduce the disk consumption.https://cfwebinar-pmt-architecture.meetus.adobeevents.com/Docker Developer SurveyWelcome to the Docker Developer 2020 Survey! We'd like to learn a bit more about you, your background and really learn about our Docker user and customers! We appreciate you taking the time to fill this in so that we can improve our products and services. Total survey time l 10 minutes.Make sure you mention how much you love Swarm, because Ortus loves swarmhttps://docs.google.com/forms/d/e/1FAIpQLSfCBAZLHZZafTOdhibV3tUPMlaZxbPA6-bWYlwXT9da2BksAQ/viewformReminder: State of the CF Union 2020 SurveyVOTE FOR OUR PODCASTSHelp us find out the state of the CF Union – what versions of CFML Engine do people use, what frameworks, tools etc. We will share the summary results with everyone who completes the survey so that you can see how you compare with other CF developers.Most questions are multiple choice checkboxes that are fast to answer. Thanks for your time completing this survey!486 respondents so far.https://teratech.com/state-of-the-cf-union-2020/Partial Results: https://teratech.com/state-of-the-CF-Union-2020-partial-ResultsConferencesInto the Box 2020 - Workshops - Virtual Live trainingGavin leading ColdBox Zero to Hero - July 9 - 10 - Great group, great progress.Luis leading ColdBox Hero to Superhero API Edition July 23-24 - Filling up fast2 x 6 hour days9am-12pm Central1 hour lunch1pm to 4pm centralTickets available: $899https://www.ortussolutions.com/eventshttps://www.ortussolutions.com/blog/new-zero-to-hero-workshop-dates-announced-and-important-updatesPodcast Code:PODCAST10 - 10% offThere is a code for ITB attendees to save 15% - If you didn’t get the email contact us. Alexa Live 2020Wednesday, July 22 | 9:00 AM - 1:00 PM PTJoin Amazon leaders and Alexa product experts on July 22 for a half-day virtual event on building delightful customer experiences with voice. Alexa Live is a free educational event for skill builders, device makers, and business leaders. You’ll hear about the latest product advances in a keynote by VP Alexa Devices a Developers Nedim Fresko and see how to build new voice experiences with these offerings. You’ll dive deep on technologies through expert-led breakout sessions featuring device makers, brands, and independent developers. And you’ll learn how to build with voice yourself, or explore strategy, development, and integration options with Alexa solution providers. https://developer.amazon.com/en-US/alexa/alexa-live?sc_category=Ownedasc_channel=EMasc_campaign=AL2020_EMasc_segment=DEVasc_publisher=MHasc_content=FourthInviteasc_detail=07092020asc_country=WWasc_place=BTDamkt_tok=eyJpIjoiWmprMU1qaGpPR0ZsTVdRMSIsInQiOiJ6d3pucjRpZDQ3M0JoY1dONk5QanBsREpZeEhUOHZcL2dwSVdBVllJbG1Lc3o4ZU9tNVY2UHk5Vkw5dWgzc1pSaDI4STAwdHRjTHZcL3BwaUZpMTJCUmt5TnFBcGR6cU5SRENCMSt0OVRmNWdzVUFFYUkweThqTUtGWU5hcFFiMkJRIn0%3DAdobe ColdFusion Certification now available OnlineAdobe Certified Professional: Adobe ColdFusion is an industry-leading certification program from Adobe, for ColdFusion developers. The course consists of 50+ online videos and is designed for professionals who have basic to advance level proficiency in any computer language and basic understanding of how web pages work. Successfully passing an assessment test at the end of the program will reward participants with a badge and certificate from Adobe.https://www.adobe.com/products/coldfusion-family/certificate.htmlAdobe ColdFusion Summit 2020 - Replaces CF Summit WestDate: NovemberLocation: Onlinehttps://cfsummit.adobeevents.com/Admission: FreeNo blog post or official announcement madeCF CampTBAMore conferences: https://confs.tech/Blogs, Tweets and Videos of the WeekBlog - Saurav Ghosh - Adobe - ColdFusion (2018 release) Update 10 and ColdFusion (2016 release) Update 16 releasedWe are pleased to announce that we have released the updates for the following ColdFusion versions:ColdFusion (2018 release) Update 10ColdFusion (2016 release) Update 16In this update, we’ve fixed a few security bugs and some other bugs, which are mentioned in the tech notes.https://coldfusion.adobe.com/2020/07/coldfusion-2018-release-update-10-and-coldfusion-2016-release-update-16-released/Tweet - Julian Halliwell - Lucee MariaDB Extension FixFinally fixed an OSGi issue preventing upgrades to the @lucee_server MariaDB Extension. You can now update to the latest 2.6.1 version of the driver in your server admin. https://github.com/cfsimplicity/lucee-mariadb #cfmlhttps://twitter.com/cfsimplicity/status/1282713959955681280https://twitter.com/cfsimplicity/Blog - Brian Klaas - Beyond the Basics of Using AWS S3 in CFML: File Versioning in S3 BucketsWhen editing files of any kind, users of modern applications expect to have access to previous versions of the file, and undo work that they don’t like or made in error. Implementing a versioning system isn’t easy, especially when file systems are generally set up to only allow one “copy” of any given file. It’s often up to you, the developer, to handle the versioning and ensure that new versions of uploaded files don’t overwrite older ones.https://brianklaas.net/aws/coldfusion/2020/07/13/Beyond-Basics-S3-Versioning.htmlBlog - Ben Nadel - Testing wkhtmltopdf 0.12.6 With Docker In Lucee CFML 5.3.4.80A few months ago, James Moberg listed out a good number of Command-Line utilities that he uses in ColdFusion. Among them is wkhtmltopdf, which is a tool that can convert HTML and CSS to PDFs using the Qt WebKit rendering engine. Since I've been digging into PDF document generation in Lucee CFML, with varying degrees of success, I thought it was time that I try out Moberg's wkhtmltopdf recommendation. As such, this weekend, I sat down and got a proof-of-concept working in Docker and Lucee CFML 5.3.4.80.https://www.bennadel.com/blog/3862-testing-wkhtmltopdf-0-12-6-with-docker-in-lucee-cfml-5-3-4-80.htmLive Stream - Matthew Clemente - A CFML Module for Weighted Round-Robin (Learning by Trial and Error)I'll be testing and publishing a ForgeBox module for producing weighted round-robin results.https://www.youtube.com/watch?v=sbgvtStxzhYafeature=youtu.beBlog - NerdVision -  NerdVision officially supports Adobe ColdFusion and Lucee!NerdVision now officially supports ColdFusion Markup Language for both Adobe ColdFusion and Lucee!  You may ask "Why do you support CFML?"  especially if you are reading this with no knowledge of CFML. The reason for this support is we as a company grew up with CFML, we have being doing CFML since 1996.Today a lot has changed; we no longer run our applications on servers in a server room or only use CFML. Today our applications are much more complicated running in a distributed model, on multiple technologies, on multiple services such as AWS, Google Cloud or Azure, maybe even all three! https://www.nerd.vision/post/nerdvision-officially-supports-adobe-coldfusion-and-luceeBlog - Ben Nadel - Evaluating Database Records That Contain ColdFusion Interpolation Expressions In Adobe ColdFusion 2018Yesterday, I was talking to Angel Gonzalez about an interesting use-case in ColdFusion - something that I've never personally tried before - evaluating database records that contain ColdFusion Expressions. Specifically, database records that contain String interpolation in which the interpolated value is being pulled out of the current ColdFusion request. I'm always curious to see how the CFML runtime can be used to unique ways; so, I thought I would try this out for myself.The idea here is that the database record would contain a varchar value like:Hello, #name#... in which the dynamic name value would be pulled out of the ColdFusion request at runtime and interpolated as part of a dynamic evaluation.https://www.bennadel.com/blog/3861-evaluating-database-records-that-contain-coldfusion-interpolation-expressions-in-adobe-coldfusion-2018.htmBlog - Matt Gifford - Azure pipelines with CommandBox and TestBoxI’ve been trying to implement pipelines for my own personal and open source repositories so that I can easily perform automated unit tests against the CFML code.I have a working Bitbucket pipeline script that works perfectly for any code I have in my Bitbucket repositories, but all of my open source projects are hosted on GitHub.As a result, I wanted to get the testing pipelines set up using the Microsoft Azure developer tools associated with Github.TLDR: Enter Pete Freitag, who had some documentation for his incredible Fixinator project on how to run CommandBox and internal box commands in Azure.https://www.monkehworks.com/2020/07/09/azure-pipelines-with-commandbox-and-testbox.htmlTweet - Throwback ColdFusion Lives TShirtAnother oldie but goodie. Tee from #cfunited #coldfusion #adobecoldfusion 20 year developer with 2 decades of meets/exceeds expectations in reviews seeking full time remote position. Experience here: chrismichele.github.io #HealthyAtHome #remotejobs #remoteworkhttps://twitter.com/christie_codes/status/1282698500736786433https://twitter.com/christie_codesTweet - WebManDMan - Modernize or Die I’m on my way there specially since our company is subscribing to everything azure. It’s up to me to subscribe to it and move away from our monolithic server. In parallel I need to catch up with commandbox servers, fusegaurd, fixinator, testbox, coldbox6. #modernizeOrDie right?https://twitter.com/webmandman/status/1281289803397345281https://twitter.com/webmandman/Blog - VS Code - Remote development in ContainersThis tutorial walks you through running Visual Studio Code in a Docker container using the Remote - Containers extension. You need no prior knowledge of Docker to complete this tutorial.Running VS Code inside a Docker container can be useful for many reasons, but in this walkthrough we'll focus on using a Docker container to set up a development environment that is isolated from your local environment.https://code.visualstudio.com/docs/remote/containers-tutorial?fbclid=IwAR1MZUFOrwvvEtQPntg5n0wiO1kkU_4h-dfQ54OlYTVr7FbVNKf-agPUd6U CFML JobsSeveral positions available on https://www.getcfmljobs.com/Listing over 48 ColdFusion positions from 36 companies across 23 locations in 5 Countries1 new jobs this week.Full-Time - Senior Coldfusion Developer (REMOTE) - United StatesPosted: Jul 12https://www.getcfmljobs.com/viewjob.cfm?jobid=11095Twitter JobsContract - ColdFusion Developer for Allied Consultants, Inc.- US-TX-Austinhttps://social.icims.com/job/ColdFusion-Developer-Job-US-TX-Austin-27897978.html?isd_source=twitteraisd_pub=2409222apubId=14099aiis=Social%20Networksaiisn=No%20Replyaiieid=pt1594739093703a48a0ForgeBox Module of the WeekLucee SpreadsheetSpreadsheet library for Lucee (and Adobe ColdFusion)Originally adapted from the https://github.com/teamcfadvance/cfspreadsheet-railo extension, this is a standalone library for reading, creating and formatting spreadsheets in Lucee Server which does not require installation as an extension. It can also be used with Adobe ColdFusion.Unlike Adobe ColdFusion, Lucee doesn't support spreadsheet functionality out of the box. An extension exists for Lucee, but I decided to create a standalone library which doesn't depend on customisation of the engine.Note that this is not a Lucee extension, so does not need to be installed. To use it, simply copy the files/folders to a location where Spreadsheet.cfc can be called by your application code.Benefits: - No installation required, either at the server or individual web context level. - read() method offers all the features of the lcfspreadsheet action="read"g tag in script in addition to the basic options of SpreadsheetRead(). - Offers a number of additional functions and options (see below) - Fixes various outstanding bugs/omissions. - No dependency on Lucee within the included jar files. - Invoking the library doesn't create a workbook instance (a.k.a. Spreadsheet Object), meaning:          - a blank workbook isn't created unnecessarily when reading an existing spreadsheet          - the library can be stored as a singleton in application scope - Also works with Adobe ColdFusion (see below) - Written entirely in CFML script.https://www.forgebox.io/view/lucee-spreadsheetVS Code Hint Tips and Tricks of the WeekBracket Pair Colorizer 2CoenraadS.bracket-pair-colorizer-2 |  1,074,677 installsThis extension allows matching brackets to be identified with colours. The user can define which tokens to match, and which colours to use.Differences between v1 and v2?v2 Uses the same bracket parsing engine as VSCode, greatly increasing speed and accuracy. A new version was released because settings were cleaned up, breaking backwards compatibility.Lots of great new settings and features I wasn’t using in V1, but now i need to take the time to use themhttps://marketplace.visualstudio.com/items?itemName=CoenraadS.bracket-pair-colorizer-2Thank you to all of our Patreon SupportersThanks to our newest supporter: Jeff McCainThese individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox, ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox. You can support us on Patreon here https://www.patreon.com/ortussolutionsBen Nadel Brett DeLineCarl Von Stetten Charlie ArehartDa Li Dan CardDaniel GarciaDavid Belanger Didier Lesnicki Don Bellamy Erick HoffmanGary Knight Jan JannekJeff McCainJeremy Adams Jordan Clark Joseph LamoreeKai Koenig Laksma TirtohadiMatthew Clemente Mingo HagenRyan Hughes Scott SteinbeckShawn Oden Steven KlotzSynaptrix Yogesh MathurYou can see an up to date list of all sponsors on Ortus Solutions' Websitehttps://ortussolutions.com/about-us/sponsors★ Support this podcast on Patreon ★