RepoJournal
Rails

@rails

Ruby on Rails - Shopify, Basecamp, GitHub all run on it

Keep up with Rails in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Ruby Full archive →

The Wire · Showcase

RAILS ADDS ATOMIC CACHE READS, TIGHTENS FORM SECURITY

By RepoJournal · Filed · About Rails

Rails merged support for one-shot cache deletions via Redis GETDEL while fixing a security guidance issue in the getting-started docs.

The headline feature is a new `delete: true` option for `Rails.cache.read` [1] that atomically reads and deletes a cache entry in RedisCacheStore, eliminating race conditions in one-time-read patterns. This lands the Redis GETDEL command directly in the cache API—useful for tokens, OTPs, and other single-use secrets you want guaranteed to vanish after consumption. On the forms side, Rails removed `autocomplete="off"` from the authenticity_token example in the getting-started guide [2], correcting guidance that contradicted browser security best practices. A separate PR added datalist support to FormBuilder [3], expanding form capabilities without breaking changes. Over in bootsnap, the team updated documentation to reflect recent header size optimizations [4], a housekeeping change that ensures developers get accurate benchmarking expectations. The Rails changelog itself got a URL fix [5] to clean up fallout from an earlier PR. These are solid, incremental improvements—nothing that demands immediate action, but the cache deletion feature is worth knowing about for your next OTP or session management implementation.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Rails.cache.read: add support to new option delete: true ↗ rails/rails
  2. [2] Merge pull request #57304 from ryu/fix-getting-started-autocomplete-off rails/rails
  3. [3] Add datalist to FormBuilder ↗ rails/rails
  4. [4] Use the latest header size in the readme ↗ rails/bootsnap
  5. [5] Fix changelog url rails/rails

Quick answers

What shipped in Rails on May 8, 2026?
Rails merged support for one-shot cache deletions via Redis GETDEL while fixing a security guidance issue in the getting-started docs. In total, 16 commits and 11 pull requests landed.
Who contributed to Rails on May 8, 2026?
3 developers shipped this update, including glaucocustodio, tahsin352, and justinlocsei.
What were the notable Rails updates?
Rails.cache.read: add support to new option delete: true, Merge pull request #57304 from ryu/fix-getting-started-autocomplete-off, and Add datalist to FormBuilder.

More from @rails

Daily updates, in your inbox

Follow Rails

Keep up with Rails in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?