Blog

CommandBox 3.4.0 Released

Brad Wood November 16, 2016

Spread the word

Brad Wood

November 16, 2016

Spread the word


Share your thoughts

We are pleased to announce the general availability of CommandBox 3.4.0.  This is a minor release of the CLI tool aimed at fixing bugs and introducing a number of small improvements and polish to the tool

Download

You can download the latest version of CommandBox via our download page, or with your favorite package manager like Homebrew or apt-get.  

Download CommandBox

View updated Documentation

Read Command API Docs

Bug Fixes

This release fixes an issue where Adobe CF servers will not start if you're machine is offline and also fixes a bug where the previous version of CommandBox didn't correctly remove old versions of jar files on upgrade.

Enhancements

Git tags when bumping a package command can have a custom prefix now.  Tab completion options are also alphabetized.  Ctrl-C is also handled better on Unix and actually works in Windows!  Also, the timestamp on your sever.json file won't be updated unless the contents of the file actually changed.

Release Notes

Here is the full list of everything that changed in the CommandBox 3.4.0 release.

Bug

  • [COMMANDBOX-471] - Adobe Servers won't start offline
  • [COMMANDBOX-472] - start serverConfigFile=myServer.json doesn't load json settings
  • [COMMANDBOX-475] - Adobe web.xml Flex config path is wrong after first engine start
  • [COMMANDBOX-480] - Error checking whether server is running
  • [COMMANDBOX-484] - cflib-coldbox endpoint creates invalid CFML for Adobe
  • [COMMANDBOX-485] - write history before command finishes
  • [COMMANDBOX-491] - Coldbox create interceptor doesn't create test with proper CFC mapping
  • [COMMANDBOX-492] - war path not stored in server.json as relative path
  • [COMMANDBOX-494] - CFML upgrades don't delete removed files
  • [COMMANDBOX-496] - Forgetting a named server deletes the 'default' server.json too

New Feature

Improvement

Add Your Comment

Recent Entries

BoxLang 1.17 Series Part 4 : WriteDump Enhanced!

BoxLang 1.17 Series Part 4 : WriteDump Enhanced!

You call writeDump() on an ORM entity or a very rich class graph . The browser locks up. Thirty seconds later you get a page with forty thousand rows on it, you scroll for a while, you give up, and you go edit your code to dump a sub-key instead. Or worse, you crash the server.

Luis Majano
Luis Majano
September 11, 2026
BoxLang AI 3.4 Blog Series Part 4 : Locking Down Prompt Injection

BoxLang AI 3.4 Blog Series Part 4 : Locking Down Prompt Injection

LLM applications face a class of attack traditional input validation was never built for: prompt injection. An attacker embeds instructions in user input, a retrieved document, a web page your tool fetched, or an MCP result, trying to override your system prompt, exfiltrate data, or hijack a tool call. BoxLang AI 3.4.0 ships four layered, configurable defenses against exactly this, plus one more that's on unconditionally.

Luis Majano
Luis Majano
September 11, 2026