Blog

CommandBox 5.4.1 Released

Brad Wood September 17, 2021

Spread the word

Brad Wood

September 17, 2021

Spread the word


Share your thoughts

We are pleased to announce the release of CommandBox 5.4.1.  This is a patch release with 5 small fixes for the 5.4.0 release.   There are a few bug fixes, and a couple small enhancements in this release.

Get the update

You can download the latest version from our product page:

https://www.ortussolutions.com/products/commandbox#download

This update has no changes to the jar files, so if you are already on the 5.4.0 version, you should be able to use the "upgrade" command to get the 5.4.1 version.

CommandBox> upgrade

Release Notes

Bug

COMMANDBOX-1374 Some installs unnecessarily write to the box.json

COMMANDBOX-1370 ConfigService::settingExists() fails in race conditions due to non-varscoped variables in JSONService

Improvement

COMMANDBOX-1372 Support excludePaths in watcher DSL and watch command

COMMANDBOX-1369 Ensure Adobe wars have a seeds.properties file

COMMANDBOX-1368 Add tab complete for "env clear" command

COMMANDBOX-1367 Ignore empty startScript on server start

Add Your Comment

Recent Entries

BoxLang 1.17 Series Part 4 : WriteDump Enhanced!

BoxLang 1.17 Series Part 4 : WriteDump Enhanced!

You call writeDump() on an ORM entity or a very rich class graph . The browser locks up. Thirty seconds later you get a page with forty thousand rows on it, you scroll for a while, you give up, and you go edit your code to dump a sub-key instead. Or worse, you crash the server.

Luis Majano
Luis Majano
September 11, 2026
BoxLang AI 3.4 Blog Series Part 4 : Locking Down Prompt Injection

BoxLang AI 3.4 Blog Series Part 4 : Locking Down Prompt Injection

LLM applications face a class of attack traditional input validation was never built for: prompt injection. An attacker embeds instructions in user input, a retrieved document, a web page your tool fetched, or an MCP result, trying to override your system prompt, exfiltrate data, or hijack a tool call. BoxLang AI 3.4.0 ships four layered, configurable defenses against exactly this, plus one more that's on unconditionally.

Luis Majano
Luis Majano
September 11, 2026