Who contributed to Rails on August 4, 2026?

6 developers shipped this update, including 55728, kamipo, hmcguire-shopify, Hartley McGuire, jeremy, and dependabot.

What were the notable Rails updates?

Resolve attribute aliases in belongs_to change tracking, Merge pull request #58354 from 55728/fix-belongs-to-aliased-foreign-key-tracking, and Cache alias-resolved foreign key/type on BelongsToAssociation.

@rails

Ruby on Rails - Shopify, Basecamp, GitHub all run on it

github ↗

Pick a date

Topics: Ruby Full archive →

The Wire · Showcase

Rails fixes composite foreign key tracking across counter cache and autosave

By RepoJournal · Filed 06:55 UTC on August 4, 2026 · About Rails

6 people shipped this

kamipo @kamipo 4 cited

dependabot @dependabot 4 cited

55728 @55728 1 cited

hmcguire-shopify @hmcguire-shopify 1 cited

jeremy @jeremy 1 cited

Hartley McGuire @skipkayhil

Belongs_to associations with aliased or composite foreign keys were silently failing change detection, breaking counter cache increments, touch callbacks, and validation.

Rails shipped fixes across three related change tracking failures this cycle. The first resolves attribute aliases in belongs_to change tracking [1], where querying a foreign key by its alias never reported changes, causing counter_cache to go negative on destroy and touch: true to skip the previous parent [2]. That fix is now cached at initialization time for reuse across validation and touch sites [3]. The second addresses composite foreign keys in counter cache and autosave [4], where the Array form of reflection.foreign_key was coerced via to_s, making dirty tracking no-op. The third attack the same surface area with slightly different scope [5]. Propshaft also landed a test infrastructure fix [6] extracting duplicate assertions to a shared concern and making Resolver lazy-loaded so JSON.parse stubs take effect. Over at action_push_native, the gem now surfaces FCM quota violation details on throttle errors [7], allowing apps to distinguish between device message rate, topic message rate, and project-wide quota limits, which were previously all collapsed to QUOTA_EXCEEDED. Dependency bumps brought ActiveRecord and ActiveJob to 8.1.3.1 [8], [9], webmock to 3.26.2 [10], and actions/checkout to v7 [11].

Action items

→ Review belongs_to associations using alias_attribute on foreign keys - they now track changes correctly rails/rails [plan]
→ Update action_push_native to 0.x (check current version) to handle FCM quota violations if you differentiate throttle reasons rails/action_push_native [monitor]
→ Bump ActiveRecord and ActiveJob to 8.1.3.1 on next dependency refresh rails/rails [plan]

References

[1] Resolve attribute aliases in belongs_to change tracking ↗ rails/rails
[2] Merge pull request #58354 from 55728/fix-belongs-to-aliased-foreign-key-tracking rails/rails
[3] Cache alias-resolved foreign key/type on BelongsToAssociation rails/rails
[4] Honor composite / aliased FKs in belongs_to counter cache, autosave, and has_many :through nullify ↗ rails/rails
[5] Honor composite FKs in belongs_to counter cache, autosave, and has_many :through nullify rails/rails
[6] Fix assertionless tests in Resolver::StaticTest ↗ rails/propshaft
[7] Surface FCM quota violations on throttle errors ↗ rails/action_push_native
[8] Bump activerecord from 8.1.2 to 8.1.3.1 ↗ rails/action_push_native
[9] Bump activejob from 8.1.2 to 8.1.3.1 ↗ rails/action_push_native
[10] Bump webmock from 3.26.1 to 3.26.2 ↗ rails/action_push_native
[11] Bump actions/checkout from 4 to 7 ↗ rails/action_push_native

Quick answers

What shipped in Rails on August 4, 2026?: Belongs_to associations with aliased or composite foreign keys were silently failing change detection, breaking counter cache increments, touch callbacks, and validation. In total, 12 commits and 13 pull requests landed.
Who contributed to Rails on August 4, 2026?: 6 developers shipped this update, including 55728, kamipo, hmcguire-shopify, Hartley McGuire, jeremy, and dependabot.
What were the notable Rails updates?: Resolve attribute aliases in belongs_to change tracking, Merge pull request #58354 from 55728/fix-belongs-to-aliased-foreign-key-tracking, and Cache alias-resolved foreign key/type on BelongsToAssociation.

RAILS FIXES PLUCK REGRESSION, BOOTSNAP DITCHES MARSHAL FOR MSGPACK

Rails patched a critical regression in association plucking for new records that broke `ids` queries overnight, while bootsnap replaced Date marshalling with faster, more compact msgpack serialization.

ruby 40 shipped

@rails Aug 5

RAILS HARDENS FILE STORAGE, UNIFIES FOREIGN KEY HANDLING ACROSS 22 COMMITS

Rails killed a filesystem vulnerability while Propshaft eliminates globbing from production asset lookups in coordinated pushes toward Ractor compatibility.

ruby 35 shipped

@rails Aug 3

RAILS RESTORES ALIAS_ATTRIBUTE IN ASSOCIATIONS, FIXES SILENT FAILURES

A performance optimization from Rails 4.2 has been quietly breaking alias_attribute in associations for years, and it's finally fixed.

ruby 23 shipped

@rails Aug 2

RAILS DEPRECATES BINDS PARAMETER, UNIFIES REMOVAL TARGET TO 9.0

Rails is killing the `binds` positional argument across `insert`, `update`, and `delete` after moving bind parameters into the Arel AST, forcing a migration to a cleaner API before Rails 9.0.

ruby 29 shipped

Elsewhere on the wire

AI Agents Aug 6

LANGCHAIN HARDENS ANTHROPIC TOOL CALLING AND GIT CREDENTIALS AS OPENHANDS SHIPS 1.10.0

LangChain fixed a critical credential leak in evaluation runs while Anthropic tool schemas get proper fallback handling, as three major agent frameworks push releases across the ecosystem.

ai-agents 54 shipped

Local LLMs Aug 6

OLLAMA FIXES KV CACHE CORRUPTION, LLAMA.CPP HARDENS FILE SEARCH, VLLM KILLS MOE LEGACY CODE

Ollama patched a critical cache corruption bug that corrupts lazy snapshots during multi-request prefills, while llama.cpp hardened Windows junction traversal and vLLM removed 14 hardcoded MoE shards across quantization methods.