Blog

JWT authentication is everywhere. But rolling it correctly — with proper algorithm enforcement, key management, clock skew handling, JWE encryption, and zero security footguns — is anything but trivial. Today, we're shipping bx-jwt, a production-ready JWT/JWE module for BoxLang that handles all of it out of the box, so you can focus on building, not fighting cryptography.

BoxLang AI 3.2.0 is here, and it's a landmark release. We're shipping five major features — image generation, web search, a fluent audio builder API, a centralized agent registry, and deep MCP observability — along with a suite of analytics improvements and a critical bug fix. Let's dig in. 🎉

Search is one of those features that can make or break an application. Users expect it to be instant, forgiving of typos, and smart about relevance. Building that experience from scratch is a significant investment. That is exactly why we built bx-meilisearch — a BoxLang-native module that puts the full power of Meilisearch at your fingertips with a fluent, chainable DSL that feels right at home in any BoxLang application.

You know the drill. Someone opens a PR and half the review comments are about tabs vs spaces, where braces go, or why that one function has its arguments formatted differently from everything else. It's noise. And it's over.

We listen. A lot. And one message has come through loud and clear from our community: teams want a way to get into the BoxLang ecosystem with commercial licensing, real tooling, and actual support — without jumping straight to a full BoxLang+ subscription.

We're thrilled to announce the first stable release of bx-compat-soap, the official SOAP web services compatibility module for BoxLang web runtimes.

We're excited to announce the first stable release of bx-compat-rest, the official CFML REST compatibility module for the BoxLang web runtime. This release means that existing ACF and Lucee users, whose applications rely on CFML REST implemenations can now run on BoxLang.

BoxLang 1.13.0 is here, and it marks an important step forward for the platform. This release includes 48 tickets—every one of them completed—reflecting a focused effort on CFML compatibility, a more robust concurrency engine, a production-hardened miniserver, and meaningful tooling improvements.

ColdBox CLI 8.11 is here, and it's one of the most significant releases we've shipped for AI-assisted development. This release wires the CLI directly into our brand new public skills directory at skills.boxlang.io, brings our AI tooling in line with industry-wide agent conventions, and introduces a wave of quality-of-life improvements that make AI integration feel less like setup and more like infrastructure.

Today we're launching something we've been quietly building for months: skills.boxlang.io — a public, agent-agnostic directory for AI skills covering BoxLang, ColdBox, TestBox, CommandBox, and the entire Ortus ecosystem.