The Wire · Showcase
RAILS CORE CLEANS HOUSE WITH FOUR DEPRECATION SWEEPS
By RepoJournal · Filed · About Rails
Rails is systematically removing unused internals across Journey, RedisCacheStore, and test utilities, signaling a major cleanup push before the next major version.
Four separate merges hit rails/rails overnight, all focused on pruning deprecated code paths [1] [2] [3] [4]. The Journey router lost public methods that haven't been used externally, RedisCacheStore's DEFAULT_REDIS_OPTIONS constant is now flagged for removal [4], and Cookies::HTTP_HEADER is being deprecated [3]. These aren't breaking changes yet, but they're breadcrumbs leading to a leaner Rails in the next major release. On the cache front, solid_cache pulled in actionpack 8.1.2.1 [7], which includes two Active Support security fixes (CVE-2026-33176 and CVE-2026-33170). Solid_cache also bumped nokogiri to 1.19.4 [5] addressing a possible invalid memory read, and concurrent-ruby to 1.3.7 [8], which ships three security fixes. The test suite for solid_cache is being synced to work with Rails main [6], suggesting the cache layer is staying in sync with upstream changes.
One email a day. Unsubscribe in one click.
What actually shipped in Rails, written up every day — commits, pull requests, releases, and security advisories.
One email a day. Unsubscribe in one click. Read a past issue →
Action items
- → Audit your apps for RedisCacheStore::DEFAULT_REDIS_OPTIONS usage before next upgrade rails/rails [plan]
- → Update solid_cache to pull actionpack 8.1.2.1 for Active Support security fixes rails/solid_cache [immediate]
- → Bump concurrent-ruby to 1.3.7 in your Gemfiles (three security fixes included) ruby-concurrency/concurrent-ruby [plan]
References
- [1] Remove unused Journey public methods rails/rails
- [2] Merge pull request #58188 from Shopify/rubydex-remove-v6-reference-definition rails/rails
- [3] Merge pull request #58190 from Shopify/remove-unused-cookies-http-header rails/rails
- [4] Merge pull request #58191 from Shopify/deprecate-redis-default-options rails/rails
- [5] Bump nokogiri from 1.19.2 to 1.19.4 ↗ rails/solid_cache
- [6] Fix tests on Rails main ↗ rails/solid_cache
- [7] Bump actionpack from 8.1.2 to 8.1.2.1 ↗ rails/solid_cache
- [8] Bump concurrent-ruby from 1.3.6 to 1.3.7 ↗ rails/solid_cache