RepoJournal
Rails @rails
159 wires and counting

$ follow Rails

Keep up with Rails in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-08-25
stories 31
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

Marcel's typeless Tika matches decoded

By RepoJournal · Filed · About Rails · Composed from the cited sources · methodology

matthewd jeremy skryukov flavorjones bensheldon
5 people shipped this
matthewd @matthewd 3 cited jeremy @jeremy 2 cited skryukov @skryukov 2 cited flavorjones @flavorjones 1 cited bensheldon @bensheldon 1 cited

Marcel's generator was emitting 26 type-less Tika matches as inert literal text, breaking file type detection, and today's fix finally decodes them.

The marcel fix [1] decodes type-less Tika matches that were silently generating wrong matchers. The generator only handled explicit `type="string"` matches, so value-bearing typeless matches emitted raw text like "0x30" instead of the hex-decoded DER SEQUENCE tag [2]. This also fixes a second latent defect in mask handling and the broadening hazard that fixing them exposed [1]. On the Active Record front, Matthew Draper's QueryIntent work [3] turns result delivery into an active behavior, preparing for query pipelining. A new predicate expression API on the predicate builder [4] gives types the ability to define Arel expressions for comparisons, replacing the earlier attempt and addressing #58407 and #58410. If you use ActionText, note the security-relevant fix [5] that strips user-supplied `<action-text-markdown>` elements during canonicalization, preventing URI-scheme bypasses. The i18n `translate` now resolves relative keys with a leading period in scope [6]. Also, query logging has been split into start and finish steps, deprecating the entire method wholesale [7]. The ai-evals desk added new model runs for Sonnet 5, GPT-5.6 Terra, qwen3.8-27b, and ox-alpha [8], and the website desk published the third Agents on Rails report [9].

Action items

References

  1. [1] Decode typeless Tika matches and honor masked rule offsets ↗ rails/marcel
  2. [2] Decode typeless Tika matches and honor masked rule offsets (#179) ↗ rails/marcel
  3. [3] Drive result delivery through QueryIntent ↗ rails/rails
  4. [4] Query predicate expressions for Active Record types, take 2 ↗ rails/rails
  5. [5] Strip user-supplied `<action-text-markdown>` while canonicalizing ↗ rails/rails
  6. [6] Allow `translate`'s `scope:` argument to resolve relative i18n keys with leading period ↗ rails/rails
  7. [7] Split query logging into separate start and finish steps ↗ rails/rails
  8. [8] Add Sonnet 5, GPT-5.6 Terra, qwen3.8-27b and ox-alpha runs ↗ rails/ai-evals
  9. [9] Third Agents on Rails report ↗ rails/website

$ ls rails/reviews/ # the step-back reads

the week in review Ractor-ready Active Record and Active Job land in Rails the month in review Herb becomes Rails 8.2 default
Full archive → Weekly reviews →

Quick answers

What shipped in Rails on August 25, 2026?
Marcel's generator was emitting 26 type-less Tika matches as inert literal text, breaking file type detection, and today's fix finally decodes them. In total, 21 commits and 10 pull requests landed.
Who contributed to Rails on August 25, 2026?
5 developers shipped this update, including jeremy, matthewd, flavorjones, bensheldon, and skryukov.
What were the notable Rails updates?
Decode typeless Tika matches and honor masked rule offsets, Decode typeless Tika matches and honor masked rule offsets (#179), and Drive result delivery through QueryIntent.
♥

$ log @rails --recent

Attribute-read regression fixed, decimal numericality corrected 79 shipped in_order_of double-serializes values, id_value alias restored 50 shipped Inlined attribute writers, leaner ActiveRecord::Key 31 shipped MySQL 5.6 falls off the support floor as Arel stops rebuilding literals 27 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training verl standardizes low-precision rollout kernels on DeepGEMM Agent Security Guardrails exposes hooks over HTTP, certifi floor raised in agent-scan

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.