version bump

.editorconfig

@@ -0,0 +1,20 @@
+# http://editorconfig.org
+
+root = true
+
+[*]
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = false
+indent_style = tab
+indent_size = 4
+tab_width = 4
+
+[*.yml]
+indent_style = space
+indent_size = 2
+
+[*.{md,markdown}]
+trim_trailing_whitespace = false
+insert_final_newline = false

.gitattributes

@@ -0,0 +1,22 @@
+# Auto detect text files and perform LF normalization
+* text=auto
+
+# Custom for Visual Studio
+*.cs     diff=csharp
+*.sln    merge=union
+*.csproj merge=union
+*.vbproj merge=union
+*.fsproj merge=union
+*.dbproj merge=union
+
+# Standard to msysgit
+*.doc	 diff=astextplain
+*.DOC	 diff=astextplain
+*.docx diff=astextplain
+*.DOCX diff=astextplain
+*.dot  diff=astextplain
+*.DOT  diff=astextplain
+*.pdf  diff=astextplain
+*.PDF	 diff=astextplain
+*.rtf	 diff=astextplain
+*.RTF	 diff=astextplain

.github/dependabot.yml

@@ -0,0 +1,17 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+version: 2
+updates:
+  # GitHub Actions - updates `uses:` in workflows
+  - package-ecosystem: "github-actions"
+    directory: "/.github/workflows" # Location of .github/workflows
+    schedule:
+      interval: "weekly"
+
+  # Docker - updates Dockerfiles and image versions
+  - package-ecosystem: "docker"
+    directory: "/builds" # Adjust if your Dockerfile is in a subfolder
+    schedule:
+      interval: "weekly"

.github/workflows/pull-request.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     env:
       DOCKER_IMAGE: ortussolutions/commandbox
-      COMMANDBOX_VERSION: 6.1.0
+      COMMANDBOX_VERSION: 6.2.1
     strategy:
       matrix:
         include:
@@ -78,7 +78,7 @@ jobs:
             BUILD_IMAGE_TAG: boxlang-alpine
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@master

.github/workflows/release.yml

@@ -118,7 +118,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@master
@@ -134,8 +134,8 @@ jobs:
         env:
           DOCKER_IMAGE: ortussolutions/commandbox
           BUILD_IMAGE_TAG: ${{ matrix.BUILD_IMAGE_TAG }}
-          COMMANDBOX_VERSION: 6.2.0
-          IMAGE_VERSION: 3.13.2
+          COMMANDBOX_VERSION: 6.2.1
+          IMAGE_VERSION: 3.13.5
         run: |
           # Tag Builds
           if [[ $GITHUB_REF == refs/tags/* ]]; then
@@ -179,14 +179,14 @@ jobs:
 
       - name: DockerHub Login
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v1
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Build Final
         if: github.event_name != 'pull_request'
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v6
         env:
           DOCKER_BUILDKIT: 1
         with:

.github/workflows/scans.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     env:
       DOCKER_IMAGE: ortussolutions/commandbox
-      COMMANDBOX_VERSION: 6.1.0
+      COMMANDBOX_VERSION: 6.2.1
     strategy:
       matrix:
         include:
@@ -29,7 +29,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@master
@@ -41,7 +41,7 @@ jobs:
         uses: docker/setup-buildx-action@master
 
       - name: Build local container
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v6
         env:
           DOCKER_BUILDKIT: 1
         with:
@@ -62,7 +62,7 @@ jobs:
           by-cve: "true"
 
       - name: Upload Anchore Report
-        uses: github/codeql-action/upload-sarif@v2
+        uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: ${{ steps.securityscan.outputs.sarif }}
           category: "BoxLang-Runtime-${{ github.env.BRANCH }}"

.markdownlint.json

@@ -0,0 +1,16 @@
+{
+	"line-length": false,
+	"single-h1": false,
+	"no-hard-tabs" : false,
+	"fenced-code-language" : false,
+	"no-bare-urls" : false,
+	"first-line-h1": false,
+	"no-multiple-blanks": {
+		"maximum": 2
+	},
+	"no-duplicate-header" : {
+		"siblings_only" : true
+	},
+	"no-duplicate-heading" : false,
+	"no-inline-html" : false
+}

LICENSE

@@ -0,0 +1,15 @@
+Apache License, Version 2.0
+
+Copyright Since [2005] [Luis Majano and Ortus Solutions,Corp]
+
+Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.