RepoJournal
Rails

@rails

Ruby on Rails — Shopify, Basecamp, GitHub all run on it

What actually shipped in Rails, written up every day — commits, pull requests, releases, and security advisories.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Ruby Full archive →

The Wire · Showcase

RAILS CORE CLEANS HOUSE WITH FOUR DEPRECATION SWEEPS

By RepoJournal · Filed · About Rails

Rails is systematically removing unused internals across Journey, RedisCacheStore, and test utilities, signaling a major cleanup push before the next major version.

Four separate merges hit rails/rails overnight, all focused on pruning deprecated code paths [1] [2] [3] [4]. The Journey router lost public methods that haven't been used externally, RedisCacheStore's DEFAULT_REDIS_OPTIONS constant is now flagged for removal [4], and Cookies::HTTP_HEADER is being deprecated [3]. These aren't breaking changes yet, but they're breadcrumbs leading to a leaner Rails in the next major release. On the cache front, solid_cache pulled in actionpack 8.1.2.1 [7], which includes two Active Support security fixes (CVE-2026-33176 and CVE-2026-33170). Solid_cache also bumped nokogiri to 1.19.4 [5] addressing a possible invalid memory read, and concurrent-ruby to 1.3.7 [8], which ships three security fixes. The test suite for solid_cache is being synced to work with Rails main [6], suggesting the cache layer is staying in sync with upstream changes.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Remove unused Journey public methods rails/rails
  2. [2] Merge pull request #58188 from Shopify/rubydex-remove-v6-reference-definition rails/rails
  3. [3] Merge pull request #58190 from Shopify/remove-unused-cookies-http-header rails/rails
  4. [4] Merge pull request #58191 from Shopify/deprecate-redis-default-options rails/rails
  5. [5] Bump nokogiri from 1.19.2 to 1.19.4 ↗ rails/solid_cache
  6. [6] Fix tests on Rails main ↗ rails/solid_cache
  7. [7] Bump actionpack from 8.1.2 to 8.1.2.1 ↗ rails/solid_cache
  8. [8] Bump concurrent-ruby from 1.3.6 to 1.3.7 ↗ rails/solid_cache

Quick answers

What shipped in Rails on July 22, 2026?
Rails is systematically removing unused internals across Journey, RedisCacheStore, and test utilities, signaling a major cleanup push before the next major version. In total, 43 commits and 31 pull requests landed.
Who contributed to Rails on July 22, 2026?
4 developers shipped this update, including Nikita Vasilevsky, Hartley McGuire, dependabot, and djmb.
What were the notable Rails updates?
Remove unused Journey public methods, Merge pull request #58188 from Shopify/rubydex-remove-v6-reference-definition, and Merge pull request #58190 from Shopify/remove-unused-cookies-http-header.

More from @rails

Daily updates, in your inbox

Follow Rails

What actually shipped in Rails, written up every day — commits, pull requests, releases, and security advisories.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?