$ the-wire · showcase
RAILS TIGHTENS RACTOR SUPPORT AND DEPRECATES BINDS ARGUMENT
By RepoJournal · Filed · About Rails · Composed from the cited sources · methodology
Rails is making ActionView's dependency tracker Ractor-shareable while removing a migrations filter that cluttered schema dumps, signaling the framework's push toward better concurrency and cleaner database tooling.
The ActionView dependency tracker registry is now Ractor-shareable [1], which means non-main Ractors can safely read the template digest path without isolation errors. The fix requires calling `share_registry` before the tracker becomes shareable, though this won't be added to initializers yet to preserve compatibility with custom trackers that might not be shareable themselves. Rails will call this from `Rails.application.ractorize!`, setting the stage for broader Ractor adoption across the framework [1]. Separately, Xavier Noria has removed the migrations filter from schema dumps [2], a cleanup that simplifies database introspection for teams managing complex migration histories. On the deprecation front, Rails is now deprecating the `binds` argument to `to_sql` [3], signaling a shift in how the framework handles SQL binding. The forensics team has also added tooling for CVE-2026-66066 [4], helping teams determine whether the Active Storage libvips vulnerability was exploited in their applications, a critical step before rotating secrets. Tailwindcss-rails bumped its dependency to v4.3.3 [5], tracking upstream fixes.
Action items
- → Review custom ActionView tracker registration for Ractor compatibility before next Rails upgrade rails/rails [plan]
- → Audit any code passing binds to to_sql and plan migration away from deprecated argument rails/rails [plan]
- → If using Active Storage with libvips, run CVE-2026-66066 forensic check on object store and logs rails/rails-forensics-CVE-2026-66066 [monitor]
- → Update tailwindcss-rails to 4.3.3 in next dependency refresh rails/tailwindcss-rails [monitor]
References
- [1] Make the Action View dependency tracker registry Ractor-shareable ↗ rails/rails
- [2] Merge pull request #58322 from rails/fxn/polish-migrations-dump ↗ rails/rails
- [3] Merge pull request #58310 from kamipo/deprecate_to_sql_binds_arg ↗ rails/rails
- [4] Add forensic tooling and method for CVE-2026-66066 ↗ rails/rails-forensics-CVE-2026-66066
- [5] build(deps): bump tailwindcss-ruby from 4.3.2 to 4.3.3 ↗ rails/tailwindcss-rails
