RepoJournal
Rails

@rails

Ruby on Rails - Shopify, Basecamp, GitHub all run on it

Keep up with Rails in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Ruby Full archive →

The Wire · Showcase

ACTIVE STORAGE CRASH FIXED, JBUILDER PATCHED

By RepoJournal · Filed · About Rails

Rails plugged a critical crash in direct uploads when touch_attachment_records is disabled, while jbuilder shipped a one-line fix for a regression that broke partials with extra locals.

The Rails team fixed a nasty bug where disabling ActiveStorage.touch_attachment_records would crash on direct upload workflows [1]. This wasn't a theoretical edge case: it happened when attaching existing Blobs to records, and it cascaded from a prior refactor. Ship this fix before your next deploy if you're using that config. In parallel, jbuilder 2.15.1 landed a quick revert to fix partials for Active Model when extra locals are passed in [2]. That regression snuck in recently and broke downstream code; the patch is surgical. Rails core also tightened multiparameter attribute parsing to throw proper MultiparameterAssignmentErrors instead of raw NoMethodErrors when keys are malformed [3]. And Active Job got a new capability: job backends can now inspect the job itself in the stopping? callback, letting Solid Queue and Good Job pause long-running continuations based on queue attributes [4]. Finally, security hardening swept across sprockets and activeresource with explicit GitHub Actions workflow permissions pinned to contents: read [5], [6].

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Prevent `ActiveStorage.touch_attachment_records = false` from crashing the attachment of a Blob rails/rails
  2. [2] v2.15.1 ↗ rails/jbuilder
  3. [3] Fix `NoMethodError` for malformed multiparameter attribute keys ↗ rails/rails
  4. [4] Active Job: pass job to `stopping?` for fine-grained control over interruption ↗ rails/rails
  5. [5] ci: add explicit workflow-level permissions to ci ↗ rails/sprockets
  6. [6] ci: add permissions: contents: read to ci ↗ rails/activeresource

Quick answers

What shipped in Rails on May 27, 2026?
Rails plugged a critical crash in direct uploads when touch_attachment_records is disabled, while jbuilder shipped a one-line fix for a regression that broke partials with extra locals. In total, 20 commits, 11 pull requests, and 1 releases landed.
Who contributed to Rails on May 27, 2026?
3 developers shipped this update, including 55728, bdewater-thatch, and arpitjain099.
What were the notable Rails updates?
Prevent `ActiveStorage.touch_attachment_records = false` from crashing the attachment of a Blob, v2.15.1, and Fix `NoMethodError` for malformed multiparameter attribute keys.

More from @rails

Daily updates, in your inbox

Follow Rails

Keep up with Rails in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?