$ the-wire · showcase
Symbol routing formats restored, action_methods stops stringifying
By RepoJournal · Filed · About Rails · Composed from the cited sources · methodology
Rails fixed a routing regression that dates to 4.0 and cut per-controller work that scaled with controllers times route helpers, while the security policy now lists GitHub private vulnerability reporting alongside HackerOne.
Accept Symbol values for the routing format: option rails/rails
The routing format: option accepted only strings: format: "json" set both a format requirement and a default, while format: :json added neither, so /users.xml still matched and recognize_path("/users")[:format] returned nil. Symbols worked in Rails 3.2 and regressed in 4.0, so any route written with the symbol form has been silently unconstrained since then and now behaves as intended.
Compute action_methods without stringifying every public instance method rails/rails
AbstractController::Base.action_methods used to convert every public instance method of a controller to a String and build a Set, then subtract route helper names converted to Strings again, once per controller. The cost was proportional to controllers times route helpers in applications that include url helpers; GitLab, at 684 controllers, is the cited case.
Read structure dump exclusions from the database being dumped rails/rails
structure_dump built its --ignore-table/-T exclusions by matching schema_ignored_tables against ActiveRecord::Base's current connection rather than the database being dumped, then prefixed the target database's name onto the result. bin/rails db:schema:dump was already correct because DatabaseTasks.dump_schema wraps the dump in with_temporary_pool(db_config), so only direct structure_dump calle...
Add GitHub private vulnerability reporting to the security policy (#766) rails/website
The security policy previously named HackerOne as the only reporting channel; private vulnerability reporting is now enabled on rails/rails and is listed beside it, and rails/rails is formatted as code on the policy page.
Remove Markdown directives in Active Storage rails/rails
The rest of the day is housekeeping: Markdown directives were removed from the Active Storage and Active Record documentation, and two website commits corrected the This Week in Rails entry for 2026-10-30 and a pull request description.
