Blog

Brad Wood

March 06, 2020

Spread the word


Share your thoughts

We are pleased to announce the release of CommandBox 5.0.0.  This is a major release of our CLI package manager, REPL, and server tool. In this version are many library updates, new features, and bug fixes.  All in all, there were 77 tickets closed for this release.

New Stuff

We released the 5.0.0-RC.1 release candidate for testing on Feb 14th and only found a couple small issues, so overall the 5.0.0 final release is the same as what was documented on this post for the RC

https://www.ortussolutions.com/blog/commandbox-500-rc1-release-candidate-available

Please refer there for a full list of the major changes and features.  

  • Java 11+ support
  • Lucee 5.3 and JBoss Undertow 2.x
  • Git access token support
  • Lucee Extension management
  • Faster server startup scripts for warming up Docker containers
  • File globbing improvements
  • New server tray menu options
  • New undertow configuration options

Acquire It

You can download CommandBox 5.0.0 from our download page, apt/yum repos, or HomeBrew for you Mac users.

Our docs are fully updated and can be found here:

https://commandbox.ortusbooks.com/

And, as always, if you find any issues, you can reach out to us here on our ticket tracker:

https://ortussolutions.atlassian.net/projects/COMMANDBOX

 

Add Your Comment

Recent Entries

BoxLang 1.17 Series Part 4 : WriteDump Enhanced!

BoxLang 1.17 Series Part 4 : WriteDump Enhanced!

You call writeDump() on an ORM entity or a very rich class graph . The browser locks up. Thirty seconds later you get a page with forty thousand rows on it, you scroll for a while, you give up, and you go edit your code to dump a sub-key instead. Or worse, you crash the server.

Luis Majano
Luis Majano
September 11, 2026
BoxLang AI 3.4 Blog Series Part 4 : Locking Down Prompt Injection

BoxLang AI 3.4 Blog Series Part 4 : Locking Down Prompt Injection

LLM applications face a class of attack traditional input validation was never built for: prompt injection. An attacker embeds instructions in user input, a retrieved document, a web page your tool fetched, or an MCP result, trying to override your system prompt, exfiltrate data, or hijack a tool call. BoxLang AI 3.4.0 ships four layered, configurable defenses against exactly this, plus one more that's on unconditionally.

Luis Majano
Luis Majano
September 11, 2026
BoxLang 1.17 Series Part 3 : Encrypted Config Secrets

BoxLang 1.17 Series Part 3 : Encrypted Config Secrets

Everyone knows the datasource password should not be sitting in plain text in a config file. Everyone has also, at some point, shipped exactly that, because the alternative was a pile of environment variable plumbing that nobody wanted to build on a deadline. x

Luis Majano
Luis Majano
September 08, 2026