RepoJournal
Rails

@rails

Ruby on Rails - Shopify, Basecamp, GitHub all run on it

Keep up with Rails in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Ruby Full archive →

The Wire · Showcase

RAILS TIGHTENS UUID VALIDATION, OPENS API-ONLY STORAGE

By RepoJournal · Filed · About Rails

PostgreSQL adapter now rejects malformed UUIDs that Rails was silently fixing, while Active Storage gains flexibility for API-only applications.

The PostgreSQL adapter caught a subtle bug where trailing dashes in UUIDs were being stripped automatically, masking invalid data at the application layer [1]. This fix ensures User.find('a0eebc999c0b4ef8bb6d6bb9bd380a11-') raises NotFound as expected, closing a validation gap that could hide data integrity issues in production. Meanwhile, Active Storage's base controller is now configurable, letting API-only apps inherit from ActionController::API instead of the default ActionController::Base [2]—a small change with real implications for Rails apps serving only JSON. The role-switching API got a cleanup too, moving prevent_writes configuration to method parameters for clearer semantics [3]. Test infrastructure improvements continue across the framework with more activerecord tests adopting notification assertions [4], reducing boilerplate and making the test suite easier to maintain.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Reject trailing dash in PostgreSQL adapter rails/rails
  2. [2] Allow configuring Active Storage base controller parent class ↗ rails/rails
  3. [3] Move `prevent_writes` defaulting to params of role switching methods ↗ rails/rails
  4. [4] Simplify more `activerecord` tests with `NotificationAssertions` helpers ↗ rails/rails

Quick answers

What shipped in Rails on May 9, 2026?
PostgreSQL adapter now rejects malformed UUIDs that Rails was silently fixing, while Active Storage gains flexibility for API-only applications. In total, 25 commits and 12 pull requests landed.
Who contributed to Rails on May 9, 2026?
3 developers shipped this update, including zzak, joshuay03, and Saidbek.
What were the notable Rails updates?
Reject trailing dash in PostgreSQL adapter, Allow configuring Active Storage base controller parent class, and Move `prevent_writes` defaulting to params of role switching methods.

More from @rails

Daily updates, in your inbox

Follow Rails

Keep up with Rails in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?