Blog

CommandBox Docker v3.5.0 Images Released

Jon Clausen May 03, 2022

Spread the word

Jon Clausen

May 03, 2022

Spread the word


Share your thoughts

CommandBox 3.5.0 Docker images released



Today we are pleased to announce the release of version 3.5.0 of our CommandBox Docker images, which contains significant upgrades to the underlying CommandBox engine.

Most significantly, this release upgrades the CommandBox binary to 5.5.1, which uses Lucee 5.3.9 as the underlying CFML engine. In addition, this release changes the underlying base image over to use the eclipse-temurin image builds, as the adoptopenjdk builds are being sunsetted. With this change, the underlying Debian version changes to use Ubuntu 20.0.0 (focal). As such, some custom installs in Dockerfiles may need updates to available packages from this distro.

In addition, we have added linux/arm/v7 as an available architecture, for 32-bit systems. Alpine images continue to be available in only amd64 at this time.

Changelog for this version - versions denote `[CommandBox binary version ]/[ image version ]:

[5.5.1/3.5.0] - 2022-05-03

Changed

  • Change base images to use the eclipse-temurin base images
  • Change Ubuntu version to 20.0.0 (focal)
  • JREs updated to jre-11.0.15
  • CommandBox binary updated to 5.5.1

Added

  • Added linux/arm/v7 to supported architectures for Debian-based images

CommandBox Docker Hub Statistics

Add Your Comment

Recent Entries

BoxLang 1.17 Series Part 4 : WriteDump Enhanced!

BoxLang 1.17 Series Part 4 : WriteDump Enhanced!

You call writeDump() on an ORM entity or a very rich class graph . The browser locks up. Thirty seconds later you get a page with forty thousand rows on it, you scroll for a while, you give up, and you go edit your code to dump a sub-key instead. Or worse, you crash the server.

Luis Majano
Luis Majano
September 11, 2026
BoxLang AI 3.4 Blog Series Part 4 : Locking Down Prompt Injection

BoxLang AI 3.4 Blog Series Part 4 : Locking Down Prompt Injection

LLM applications face a class of attack traditional input validation was never built for: prompt injection. An attacker embeds instructions in user input, a retrieved document, a web page your tool fetched, or an MCP result, trying to override your system prompt, exfiltrate data, or hijack a tool call. BoxLang AI 3.4.0 ships four layered, configurable defenses against exactly this, plus one more that's on unconditionally.

Luis Majano
Luis Majano
September 11, 2026