$ the-wire · showcase
Herb becomes the 8.2 default, Ractor-safe connections land
By RepoJournal · Filed · About Rails · Composed from the cited sources · methodology
Rails' next framework defaults swap the ERB compiler for Herb and give Active Record a connection handler that works in non-main ractors, while the site patches a security.txt gap and lemans hardens its agent sandbox.
Add a framework default to compile HTML+ERB templates through Herb rails/rails
config.action_view.erb_implementation now accepts :herb alongside :erubi, and config.load_defaults 8.2 sets it to :herb, so applications that opt into the new defaults compile HTML+ERB through Herb. Existing apps stay on erubi until they load the 8.2 defaults.
Active Record Ractor-friendly connection handling rails/rails
Active Record gains a connection handler, pool, and proxy that replace the defaults for non-main ractors, selected by a main ractor check at ActiveRecord::Base.connection_handler. Non-ractorized applications are unaffected, and it gives ractorized apps a way to query outside the main ractor.
Manually specify security validator in herb checker rails/rails
The herb checker now specifies its security validator manually because it is no longer the default in Herb 0.11. The merged 0.11 fix lands the same change on main.
Merge pull request #718 from robbyrussell/task/rr-693-add-security-txt rails/website
The Rails website serves /.well-known/security.txt per RFC 9116, giving vulnerability reporters a canonical contact path instead of an educated guess.
Merge pull request #725 from koic/re_enable_jekyll_redirect_from rails/website
jekyll-redirect-from is enabled again, restoring redirects that had been 404ing on trailing-slash URLs; the rest of the website desk is cosmetic, adding a since and handle for Mike and matching the core members section to the committers section width.
First prepares for ms-* tasks (more network allowance + more run stability + remove mtime leak) rails/lemans
lemans' miniswen runner gets --allow-hosts to proxy jailed commands to allowlisted hosts, --workdir for per-task working directories, and fixes so a background process holding a command's output no longer hangs the agent.
Action items
