Category Selected:

releases

Blog

ColdBox Security v2.0.0 Released!

Luis Majano |  September 27, 2019

We are so excited to release The ColdBox Security Module version 2.0.0. It has been quite a few years since we did a major version of our security module, but it is worth the wait. It is just easier to say we completely rewrote it in modern CFML and introduced modern Security practices, HMVC security to modules, annotation driven security and JWT token services. Never again write API security, we got you covered! We also completelty rewrote the documentation and now we have yet another awesome security book: https://coldbox-security.ortusbooks.com/

install cbsecurity
update cbsecurity

There are just too many things to talk about in this release, so we will just list out the major features and you can visit our docs for the complete rundown of ColdBox Security 2.0.0.

Introduction

The ColdBox cbsecurity module will enhance your ColdBox applications by providing out of the box security in the form of:

  • A security rule engine for incoming requests
  • Annotation driven security for handlers and actions
  • JWT (Json Web Tokens) generator, decoder and authentication services

Features

  • Ability to have global security rules
  • Ability for modules to add their own security rules and action overrides
  • Ability to distinguish between authentication and authorization issues
  • Annotation driven cascading security for handlers and actions
  • Security rules can exist in:
    • XML File
    • JSON File
    • Database
    • Models
  • The rules can be configured to use regular expressions or simple snippets
  • Can use ColdFusion authentication security
  • Can leverage any custom authentication provider
  • Plug any Authentication service or can leverage cbauth by default
  • Capability to distinguish between invalid authentication and invalid authorization and determine an outcome of the process.
  • Ability to load/unload security rules from contributing modules.
  • Ability for each module to define it's own validator
Read More

CommandBox 4.8.0 Released

Brad Wood |  September 17, 2019

We're proud to announce the immediate release of CommandBox 4.8.0 which is a minor release, containing a handful of bug fixes, new features, and improvements.  You can download the new release on our product page:

https://www.ortussolutions.com/products/commandbox

Please note this release is still using Lucee 5.2 to power the CLI due to unaddressed bugs still in the 5.3 series of releases.  We are still working with LAS to get those fixed, but in the mean time, we still recommend using Java 8 for your CLI to avoid errors.

Read More

swagger SDK and cbSwagger v2 Released!

Luis Majano September 03, 2019

Spread the word

Luis Majano

September 03, 2019

Spread the word


Share your thoughts

We are very excited to finally update our swagger modules to version 2: swagger-sdk, cbSwagger. This major version has tons of new features and improvements when documenting ColdBox APIs. However, the biggest features are that we now support the latest Open API Spec => v3.0.2 and we can export your documentation in either JSON or YAML. Check out the release notes below to see all the great new improvements.

Swagger SDK v2.0

This module allows for software development using the Swagger/OpenAPI specification.

box install swagger-sdk

v2.0.0

  • Open API 3.02 support instead of swagger
  • New template layout
  • Engine removals: lucee4.5, ACF10, ACF11
  • Upgraded jackson-core to latest v2.9.9
  • Upgraded snakeyaml to latest v1.24
  • Added more tests
  • Added ability to chain methods on all methods that where void before.
  • document.asYAML() is not fully implemented so you can convert the document to yaml.
  • Upgraded createLinkedHashMap() to use new ACF structNew( "ordered" ) instead.

cbSwagger v2.0

This module automatically generates OpenAPI documenation from your configured application and module routes in either JSON or YAML by simply visiting /cbSwagger in your URL. Focus on building your APIs and document them with ease by simply annotating your handlers.

box install cbSwagger

v2.0.0

  • feature: Upgraded to swagger-sdk 2.0.0 to support OpenAPI 3.0.x. A great guide on migrating is here: https://blog.readme.io/an-example-filled-guide-to-swagger-3-2/

  • Migrated cbSwagger settings to the moduleSettings struct instead of top-level in the config/ColdBox.cfc. Make sure you move your settings.

  • feature : You can now pass a format to the /cbSwagger endpoint to either get the OpenAPI doc as json or yml. Eg: /cbswagger?format=yml

  • feature : You have two distinct routes for the json and yml formats: /cbSwagger/json and /cbSwagger/yml

  • You can choose your default output format via the module settings: defaultFormat setting. Valid options are json and yml

  • features : Support for ColdBox 5 event routing and response routing.

  • improvement : You can now tag your handlers with a displayName that will be used for operation ID building

  • improvement : Improved the way operation Ids are reported so they can be unique when reusing handler actions.

  • improvement : Refactored createLinkedHashMap() -> structNew( "ordered" )

  • improvement: Removed lucee 4.5, acf11 support.

DataBoss - Dynamic Administrator v3.0.0 Released!

Luis Majano |  August 29, 2019

It has been a long time coming, but we finally get a major release for DataBoss our Dynamic Administrator. This major release brings a slew of updates, new features and now Adobe 2016, 2018 and Lucee 5 Support.

Read More

Brad Wood

August 22, 2019

Spread the word


Share your thoughts

We are pleased to announce the first release of the CommandBox Service Manager 1.0.0.  The Service Manager is a commercial CommandBox module that allows you to create, update, and control Windows Services for your CommandBox servers with ease.  You can configure logging, auto-restart, and the user the service runs as.   This is ideal for a staging or production server setup where you want certain CommandBox servers to always be running, even if the server reboots.

Usage

 After you purchase and install module, you'll unlock a new set of "server service" commands to create and manage your services.

install commandbox-service-manager@ortus

server service create
server service start

Here is the full list of commands you can use:

  • server service create - Create a new Windows service that will start a CommandBox server
  • server service remove - Remove a Windows service
  • server service update - Update settings for an existing service
  • server service start - Start a service (same as clicking start in the Windows Services screen)
  • server service stop - Stop a service (same as clicking stop  in the Windows Services screen)
  • server service restart - Restart a service (same as clicking restart in the Windows Services screen)
  • server service status - View the status of a service

You can read more in depth information in our docs:

https://commandbox-service-manager.ortusbooks.com/

Purchase

The module is priced at $49 per server and you can manage as many services as you like on that server with your license.  The licensing is simple and works the same whether it's your production server, or a local development machine.  

To purchase the module and start using it today, head over to our product page:

https://ortussolutions.com/products/commandbox-service-manager

Linux support is underway and we'll be adding Mac support as well soon.

Luis Majano

August 16, 2019

Spread the word


Share your thoughts

We are very excited to announce the release of ColdBox version 5.6.0 alongside all the companion standalone libraries: WireBox, LogBox and CacheBox.

What's New With 5.6.0

ColdBox 5.6.0 is a minor version update with lots of fixes, improvements, performance enhancements and some nice new features. Below are the major areas of improvement and the full release notes. To update ColdBox or any of the standalone libraries just leverage CommandBox:

  • update coldbox
  • update logbox
  • update wirebox
  • update cachebox

Major Updates

Performance

We had two specific tickets that have resulted in extreme performance improvements for ALL ColdBox requests. You will feel and see the difference:

  • [COLDBOX-799] - Event Handler Bean: Single instance per handler action for major performance improvements

This ticket was contributed by Dom Watson (https://twitter.com/dom_watson) one of the lead engineers of the amazing PresideCMS project built on top of ColdBox. We worked together to avoid the creation of handler beans on each runnable event. We now cache each event handler bean representation which results in an extreme boost in performance. Thanks Dom!

  • [COLDBOX-810] - Remove afterInstanceAutowire interceptor in handlerService as afterHandlerCreation is now officially removed.

Thanks to our local mad scientist Brad Wood, he reported that the handler services still listened to ALL CFC creations in an application in order to relay an afterHandlerCreation interception point from the good 'ol 2.6 days. This has been finally removed and boom, another big boost in performance!

Better Bug Reports

We have enhanced the bug reporting templates to include much more information when dealing with exceptions:

  • Show SQL error details on Adobe CF
  • Current route, params and debug info
  • Contributing module for the current routed URL

Merging of HTTP Verbs

Thanks to our very own Eric Peterson, you can now merge HTTP verbs on the same route pattern, which you could not do before:

router
    .post( "photos/", "photos.create" )
    .get( "photos/", "photos.index" )
    .delete( "photos/", "photos.remove" );

ColdBox Core Release Notes

Bugs

  • [COLDBOX-778] - ModuleService to add default route doesn't work correctly
  • [COLDBOX-794] - Fix default bug report to show SQL error detail for adobe SQL exceptions
  • [COLDBOX-796] - When doing package resolving if you are in a module it still tries to resolve a module
  • [COLDBOX-806] - Error in HTML helper WRAPPERATTRS doesn't exist in argument scope
  • [COLDBOX-811] - Include the colon for non 80 or 443 port numbers #419 in github

New Features

  • [COLDBOX-812] - Allow merging of HTTP verbs when doing separate verbs for the same route
  • [COLDBOX-813] - Update cfconfig to use env variables instead of inline mixins, modernizeOrDie

Improvements

  • [COLDBOX-795] - Add more current route information to the BugReport.cfm template
  • [COLDBOX-797] - Ability for bug reports and app to know which module contributed the incoming URL route.
  • [COLDBOX-798] - Use of .keyExists() can needlessly use memory in requests, suggest StructKeyExists() instead
  • [COLDBOX-799] - Event Handler Bean: Single instance per handler action for major performance improvements
  • [COLDBOX-800] - HandlerService.cfc$newHandler(): declares variables that are never used
  • [COLDBOX-810] - Remove afterInstanceAutowire interceptor in handlerService as afterHandlerCreation is now officially removed.

CacheBox Release Notes

Bugs

  • [CACHEBOX-56] - AbstractCacheProvider.getOrSet(): local var unscoped when checking if null

CommandBox 4.7.0 Released

Brad Wood |  June 17, 2019

We are pleased to announce the general availability of CommandBox 4.7.0.  This is a minor release and contains a nice collection of small bug fixes and new enhancements to the CLI.  

Docs

All docs are updated and viewable here:

https://commandbox.ortusbooks.com/

Download

You can grab the latest version of the CommandBox via our download page here:

https://www.ortussolutions.com/products/commandbox#download

Our apt and yum repos are updated and Homebrew should be updated very soon.

Read More

ColdBox 5.5.0 Released!

Luis Majano |  June 14, 2019

What's New With v5.5.0

We are very excited to bring you ColdBox Platform v5.5.0! This is a minor release packed with a punch of improvements and some cool new features. The major libraries upgraded are ColdBox MVC and WireBox in this release.

Read More

Luis Majano

June 12, 2019

Spread the word


Share your thoughts

Modernize all things!

FORGEBOX v4.7.0 released!

Today we are pleased to announce a minor release for our FORGEBOX suite of products to version 4.7.0. This release includes lots of fixes and some great additions.

Release Notes

Here are the detailed release notes for this release.

Bugs

  • [FORGEBOX-163] - box.json validation error while adding version from web UI completely clears screen and loses data
  • [FORGEBOX-298] - Adding version allows the user to check the "stable" checkbox
  • [FORGEBOX-355] - Update s3sdk settings configuration to include building the URL to avoid empty issues
  • [FORGEBOX-358] - Forgebox Registration page "Privacy Policy" link is broken/ not set. Clicking on it loses the page and all the form values you've filled out.
  • [FORGEBOX-359] - Mailing list checkbox on registration page is not working when selected
  • [FORGEBOX-360] - Blanks is displayed when Editing a package on packages with html markup
  • [FORGEBOX-361] - Fix Ownership of packages issue when publishing from collaborators
  • [FORGEBOX-362] - Button for adding a new version not firing
  • [FORGEBOX-365] - Admin cannot change username, fails with exception
  • [FORGEBOX-371] - Error creating versions, fails with exceptions from UI
  • [FORGEBOX-372] - Error calling admin:settings.getLiveActivations from UI
  • [FORGEBOX-374] - Do not show badges if package does not have any version
  • [FORGEBOX-375] - Do not show version badge if the package does not have any version

New Features

  • [FORGEBOX-322] - Fine tuning of public versions tab with much better UX
  • [FORGEBOX-324] - Reset Password action from user listing screen for admins
  • [FORGEBOX-332] - Create the beginnings of the Package Dependency Viewer in the UI
  • [FORGEBOX-334] - Add latest version badge to the package view top section
  • [FORGEBOX-335] - Add package type badge (public,private) on the package view section

Improvements

  • [FORGEBOX-138] - Show code to make ForgeBox badges on the package maintainer screen.
  • [FORGEBOX-351] - Change user dashboard links on the public UI to @username for consistency and just plain nice!
  • [FORGEBOX-366] - Upgrade to ColdBox 5.4.1
  • [FORGEBOX-367] - Upgrade of mementifier to latest version
  • [FORGEBOX-368] - Upgrade to sentry for logging
  • [FORGEBOX-369] - Upgrade s3sdk to avoid debugging code
  • [FORGEBOX-370] - Upgrade to testbox 3

Quick v2.0.0 Released!

Eric Peterson |  April 30, 2019

We are pleased to announce the general availability of Quick 2.0.0. It's been a long road with 14 betas(!) and months of testing from dedicated users. The end result is a more refined and performant product. Come check out the headline features.

Comments are currently closed
Read More