Who contributed to Rails on August 3, 2026?

2 developers shipped this update, including kamipo and dependabot.

What were the notable Rails updates?

Restore `alias_attribute` support in associations, Consolidate MySQL `ALGORITHM` / `LOCK` into `MySQL::AlterTable` state, and Make `CommandRecorder#record` and `#inverse_of` private.

@rails

Ruby on Rails - Shopify, Basecamp, GitHub all run on it

github ↗

Pick a date

Topics: Ruby Full archive →

The Wire · Showcase

RAILS RESTORES ALIAS_ATTRIBUTE IN ASSOCIATIONS, FIXES SILENT FAILURES

By RepoJournal · Filed 06:55 UTC on August 3, 2026 · About Rails

2 people shipped this

kamipo @kamipo 4 cited

dependabot @dependabot 1 cited

A performance optimization from Rails 4.2 has been quietly breaking alias_attribute in associations for years, and it's finally fixed.

Rails patched a critical regression where alias_attribute on foreign keys and primary keys was silently ignored during association reads [1]. The culprit: a 2012 switch from the public read_attribute method to an internal _read_attribute fast path that skipped alias resolution entirely. Production apps worked around it without knowing the feature was broken.

Beyond that fix, Rails cleaned up MySQL migration internals by consolidating ALGORITHM and LOCK clauses into a single MySQL::AlterTable state [2], eliminating duplication across add_column, change_column, rename_column, and remove_column. The framework is also deprecating CommandRecorder#record and #inverse_of [3], moving away from Ruby's ruby2_keywords mechanism as that flag itself heads toward deprecation. ActionController::Parameters#deep_transform_keys! now transforms keys in place [4].

On the tooling side, tailwindcss-rails bumped GitHub Actions dependencies [5], a routine maintenance task that keeps CI pipelines current.

Action items

→ Upgrade to latest Rails if you use alias_attribute on foreign or primary keys in associations rails/rails [immediate]
→ Review code calling CommandRecorder#record or #inverse_of directly; these are now private rails/rails [plan]
→ Regenerate GitHub Actions workflows to pick up checkout v7.0.1 if using tailwindcss-rails rails/tailwindcss-rails [monitor]

References

[1] Restore `alias_attribute` support in associations ↗ rails/rails
[2] Consolidate MySQL `ALGORITHM` / `LOCK` into `MySQL::AlterTable` state rails/rails
[3] Make `CommandRecorder#record` and `#inverse_of` private ↗ rails/rails
[4] Merge pull request #58340 from 55728/remove-unused-deep-transform-keys-bang rails/rails
[5] build(deps): bump the github-actions group with 3 updates ↗ rails/tailwindcss-rails

Quick answers

What shipped in Rails on August 3, 2026?: A performance optimization from Rails 4.2 has been quietly breaking alias_attribute in associations for years, and it's finally fixed. In total, 15 commits and 8 pull requests landed.
Who contributed to Rails on August 3, 2026?: 2 developers shipped this update, including kamipo and dependabot.
What were the notable Rails updates?: Restore `alias_attribute` support in associations, Consolidate MySQL `ALGORITHM` / `LOCK` into `MySQL::AlterTable` state, and Make `CommandRecorder#record` and `#inverse_of` private.

RAILS FIXES PLUCK REGRESSION, BOOTSNAP DITCHES MARSHAL FOR MSGPACK

Rails patched a critical regression in association plucking for new records that broke `ids` queries overnight, while bootsnap replaced Date marshalling with faster, more compact msgpack serialization.

ruby 40 shipped

@rails Aug 5

RAILS HARDENS FILE STORAGE, UNIFIES FOREIGN KEY HANDLING ACROSS 22 COMMITS

Rails killed a filesystem vulnerability while Propshaft eliminates globbing from production asset lookups in coordinated pushes toward Ractor compatibility.

ruby 35 shipped

@rails Aug 4

Rails fixes composite foreign key tracking across counter cache and autosave

Belongs_to associations with aliased or composite foreign keys were silently failing change detection, breaking counter cache increments, touch callbacks, and validation.

ruby 25 shipped

@rails Aug 2

RAILS DEPRECATES BINDS PARAMETER, UNIFIES REMOVAL TARGET TO 9.0

Rails is killing the `binds` positional argument across `insert`, `update`, and `delete` after moving bind parameters into the Arel AST, forcing a migration to a cleaner API before Rails 9.0.

ruby 29 shipped

Elsewhere on the wire

AI Agents Aug 6

LANGCHAIN HARDENS ANTHROPIC TOOL CALLING AND GIT CREDENTIALS AS OPENHANDS SHIPS 1.10.0

LangChain fixed a critical credential leak in evaluation runs while Anthropic tool schemas get proper fallback handling, as three major agent frameworks push releases across the ecosystem.

ai-agents 54 shipped

Local LLMs Aug 6

OLLAMA FIXES KV CACHE CORRUPTION, LLAMA.CPP HARDENS FILE SEARCH, VLLM KILLS MOE LEGACY CODE

Ollama patched a critical cache corruption bug that corrupts lazy snapshots during multi-request prefills, while llama.cpp hardened Windows junction traversal and vLLM removed 14 hardcoded MoE shards across quantization methods.