Blog

CommandBox 4.6.0 Released

Brad Wood March 01, 2019

Spread the word

Brad Wood

March 01, 2019

Spread the word


Share your thoughts

We are pleased to announce the release of CommandBox 4.6.0.  This is a minor release that fixes a few bugs and adds a couple nice features.  We recommend you upgrade at your earliest convenience.  

The latest binaries are available from our download page.

The latest docs are here in GitBook.

The latest ASCII art is waiting for you in the CLI.

And the latest release notes are below.

Release Notes

Bug

  • [COMMANDBOX-934] - Server commands can have huge delay on Windows
  • [COMMANDBOX-937] - List artifacts alphabetically.
  • [COMMANDBOX-939] - /usr/bin/open on Linux
  • [COMMANDBOX-942] - Errors in command CFCs can cause box to exit completely during tab complete
  • [COMMANDBOX-949] - Running native binary that returns lots of text can perform poorly
  • [COMMANDBOX-950] - Interceptor service blows up if you register a module with an interceptor not matching any current states
  • [COMMANDBOX-951] - Allow modules to register an interceptor with no currently valid states
  • [COMMANDBOX-953] - Catch errors from desktop.isDesktopSupported()

New Feature

  • [COMMANDBOX-930] - Allow system setting (env var) expansions in REPL
  • [COMMANDBOX-932] - Improve task DSL to allow access to exit code
  • [COMMANDBOX-944] - Add config setting to debug raw native command being used in the "run" command

Improvement

  • [COMMANDBOX-249] - Enforce correct casing conventions on scaffolding commands
  • [COMMANDBOX-927] - Update propertyFile core module
  • [COMMANDBOX-928] - Improve default ignores in box.json from init command.
  • [COMMANDBOX-929] - Disable ping to time server host by default
  • [COMMANDBOX-931] - Allow exit code to be returned via "return" keyword
  • [COMMANDBOX-935] - Improve syntax highlighting in REPL
  • [COMMANDBOX-938] - Checking interrupted status from inside a thread doesn't end the task/command
  • [COMMANDBOX-943] - Remove hint from default CFC in Lucee for CommandBox CFCs with no hint of their own
  • [COMMANDBOX-945] - Endpoint URL shows incorrectly for forgebox endpoints
  • [COMMANDBOX-948] - Enhance tab complete for private slugs

Add Your Comment

Recent Entries

BoxLang 1.17 Series Part 4 : WriteDump Enhanced!

BoxLang 1.17 Series Part 4 : WriteDump Enhanced!

You call writeDump() on an ORM entity or a very rich class graph . The browser locks up. Thirty seconds later you get a page with forty thousand rows on it, you scroll for a while, you give up, and you go edit your code to dump a sub-key instead. Or worse, you crash the server.

Luis Majano
Luis Majano
September 11, 2026
BoxLang AI 3.4 Blog Series Part 4 : Locking Down Prompt Injection

BoxLang AI 3.4 Blog Series Part 4 : Locking Down Prompt Injection

LLM applications face a class of attack traditional input validation was never built for: prompt injection. An attacker embeds instructions in user input, a retrieved document, a web page your tool fetched, or an MCP result, trying to override your system prompt, exfiltrate data, or hijack a tool call. BoxLang AI 3.4.0 ships four layered, configurable defenses against exactly this, plus one more that's on unconditionally.

Luis Majano
Luis Majano
September 11, 2026