Who contributed to Rails on August 13, 2026?

4 developers shipped this update, including Mike Dalessio, Hartley McGuire, Aaron Patterson, and npezza93.

What were the notable Rails updates?

Allow ffmpeg and ffprobe input arguments to be configured (#58461), Remove attribute_method_patterns_cache, and Restore performance for dynamic attribute read.

@rails

Ruby on Rails - Shopify, Basecamp, GitHub all run on it

github ↗

Pick a date

Topics: Ruby Full archive →

The Wire · Showcase

RAILS HARDENS MEDIA PROCESSING, KILLS UNBOUNDED CACHE

By RepoJournal · Filed 06:55 UTC on August 13, 2026 · About Rails

4 people shipped this

Hartley McGuire @skipkayhil 2 cited

npezza93 @npezza93 2 cited

Mike Dalessio @flavorjones 1 cited

Aaron Patterson @tenderlove

Active Storage just got tighter controls over ffmpeg and ffprobe, while Rails core ripped out a problematic attribute cache that was breaking Ractor compatibility.

Rails merged a hardening patch [1] that lets you constrain ffmpeg and ffprobe input arguments, closing a gap in media-processing security. The catch: ffmpeg's flags are position-dependent, and the old config was inserting arguments after `-i`, breaking codec and protocol whitelists. This fix restores the ability to lock down your attack surface. In parallel, Rails removed the attribute_method_patterns_cache [2], an unbounded in-memory cache that sped up dynamic respond_to? checks but was incompatible with Ractors and could bloat indefinitely. The removal trades some dispatch speed for correctness, though follow-up work [3] has already restored performance for the common case with micro-optimizations. Over on solid_cable, Nick Pezza landed two polling optimizations [4] [5]: memoizing cable configuration and eliminating wasteful re-hashing of channel names on every poll cycle, storing hashed channels directly in the watching hash to bypass redundant computation.

Action items

→ Review your Active Storage media-processing config if you're using ffmpeg for video previews rails/rails [plan]
→ Monitor dynamic attribute access performance in your apps after upgrading Rails rails/rails [monitor]
→ If you're running solid_cable, upgrade to get polling performance gains rails/solid_cable [plan]

References

[1] Allow ffmpeg and ffprobe input arguments to be configured (#58461) rails/rails
[2] Remove attribute_method_patterns_cache rails/rails
[3] Restore performance for dynamic attribute read rails/rails
[4] Use the channel hash directly instead of rehashing every poll ↗ rails/solid_cable
[5] Memoize cable configuration ↗ rails/solid_cable

Quick answers

What shipped in Rails on August 13, 2026?: Active Storage just got tighter controls over ffmpeg and ffprobe, while Rails core ripped out a problematic attribute cache that was breaking Ractor compatibility. In total, 24 commits and 15 pull requests landed.
Who contributed to Rails on August 13, 2026?: 4 developers shipped this update, including Mike Dalessio, Hartley McGuire, Aaron Patterson, and npezza93.
What were the notable Rails updates?: Allow ffmpeg and ffprobe input arguments to be configured (#58461), Remove attribute_method_patterns_cache, and Restore performance for dynamic attribute read.

RAILS EMBRACES HTTP QUERY METHOD, KILLS LEGACY WORKAROUNDS

Rails just registered RFC 10008's QUERY method for structured queries too large for URL strings, while stripping out deprecated Marshal workarounds that bloat the codebase.

ruby 35 shipped

@rails Aug 12

ACTIVE RECORD RACTOR SAFETY PUSH, JSON 3.x SUPPORT LANDS ACROSS RAILS ECOSYSTEM

Rails is methodically closing ractor safety gaps in Active Record while the entire ecosystem moves to JSON 3.x compatibility.

ruby 52 shipped

@rails Aug 11

RAILS DEPRECATES CREATE ALIAS AS API CLEANUP CONTINUES

Rails is tightening its connection adapter API by deprecating the `create` method alias of `insert`, part of a broader push to align method names with their SQL equivalents.

ruby 19 shipped

@rails Aug 10

RAILS TIGHTENS SQL SAFETY AND LOGGING CONTROL IN MAINTENANCE PUSH

Rails shipped five commits across parameter binding, logger filtering, and migration recording that tighten SQL injection prevention and give you finer control over noisy dependencies.

ruby 32 shipped

Elsewhere on the wire

AI Agents Aug 14

LANGCHAIN SHIPS OPENAI 3.0 SUPPORT, CLINE PATCHES SANDBOX LEAKS

LangChain's openai integration now supports the OpenAI Python SDK 3.0 while maintaining backward compatibility, and Cline fixes unbounded subprocess growth in long-running deployments.

ai-agents 37 shipped

Local LLMs Aug 14

OLLAMA LAUNCHES DEEPSEEK AND MUSE INTEGRATIONS WHILE VLLM SHIPS HARDWARE-AGNOSTIC MODELING

Ollama just opened its launch ecosystem to DeepSeek Harness and Meta's Muse Code, while vLLM pivots to HuggingFace transformers as a unified backend for tail models.

+12

llms 261 shipped

@CachyOS Aug 14

CACHY AUR KEEPS PACE: FOUR MAJOR PACKAGE BUMPS OVERNIGHT

Claude, ChatGPT, and Zen Browser all shipped point releases into the AUR-derived repos while the core PKGBUILDS pipeline handled Go, Python, and OBS Studio rebuilds.