Rails
RAILS PATCHES LIBVIPS IMAGE VULNERABILITY ACROSS THREE VERSIONS
Rails shipped emergency updates to 7.2, 8.0, and 8.1 this morning, disabling untrusted image loaders that could expose your attachment pipeline to arbitrary content.
read --wire →
$ tail -f topics/ruby.log
Ruby news, every morning.
Daily updates from the Ruby ecosystem - Rails, gems, and the projects that power Shopify, GitHub, and Basecamp.
7 updates across 1 project this week.
Your week in Ruby, every Monday.
One calm review of what shipped across Ruby - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Ruby projects - refine anytime. · Read a sample issue →
Recent wires
Rails
RAILS CORE DUMPS LEGACY CODE, RAISES SQLITE FLOOR
Rails is ripping out stale compatibility layers while enforcing a modern SQLite baseline, signaling the framework is shedding technical debt faster than the ecosystem moves.
read --wire →
Rails
SOLID_QUEUE FIXES RAILS 8.1 CONNECTION CHECKOUT CLASH
Solid Queue patched a critical incompatibility with Rails 8.1's permanent connection checkout mode that breaks the new DistinctValues module.
read --wire →
Rails
RAILS CLEANS UP DATABASE ADAPTER CRUFT, MARKS INSERT_RETURNING FOR REMOVAL
Rails is deprecating the `insert_returning` option after it became redundant across multiple insert paths, while extracting hidden parameters and removing dead code across the database layer.
read --wire →
Rails
Rails drops Python 2 relics, tightens TimeZone validation
Rails is removing ruby2_keywords shims across the codebase now that Ruby 3.3.1 is the minimum, while TimeZone#parse gets stricter about invalid input.
read --wire →
Rails
RAILS 8 LAZY ROUTES NOW THREAD-SAFE, SOLID QUEUE ADDS MIGRATION GENERATOR
A race condition in Rails 8's deferred route loading could serve 404s on valid routes under concurrent requests, and a fix landed overnight.
read --wire →
Rails
SOLID QUEUE 1.5.0 SHIPS WITH CRITICAL CONCURRENCY FIXES
Solid Queue v1.5.0 lands three separate fixes for a production bug that corrupts semaphore counts and lets concurrency-limited jobs run wild.
read --wire →
Rails
Rails Strips Dead Code, Solid Queue Hardens Tests and Drops Ruby 3.1
Aaron Patterson is cleaning up Rails internals while Solid Queue fixes flaky CI and raises its minimum Ruby version to 3.2.
read --wire →
Rails
RAILS CORE CLEANS HOUSE WITH FOUR DEPRECATION SWEEPS
Rails is systematically removing unused internals across Journey, RedisCacheStore, and test utilities, signaling a major cleanup push before the next major version.
read --wire →
Rails
SOLID QUEUE CUTS JOB DISPATCH OVERHEAD, RAILS FIXES SCHEMA MIGRATION DEFAULTS
Solid Queue eliminated redundant database queries in its hottest path, cutting unnecessary round-trips on every bulk job enqueue while Rails corrected a schema.rb default it shipped with reservations.
read --wire →
Rails
SOLID_QUEUE CLEANS UP CONFIG ERROR HANDLING
Solid Queue unified its fractured error and warning system, ending the inconsistency that made configuration failures hard to debug.
read --wire →
Rails
SOLID_QUEUE ADDS CONFIG VALIDATION BEFORE STARTUP
Solid Queue ships a critical safety check that catches broken recurring.yml before your supervisor silently exits with no workers running.
read --wire →
Rails
SOLID CABLE PATCHES ACTIONCABLE 8.2 COMPATIBILITY, RAILS HARDENS SCHEMA MIGRATION LOADING
Solid Cable ships v4.0.1 to fix ActionCable adapterization in Rails 8.2, while Rails core hardens schema migration parsing against real-world file edge cases.
read --wire →
Rails
RAILS KILLS SCHEMA_MIGRATIONS MERGE CONFLICTS
Rails just shipped a way to dump your migration versions directly into schema.rb, eliminating the version kwarg conflicts that plague multi-branch development.
read --wire →
Rails
SVG SANITIZER VULNERABILITY PATCHED, RAILS DOCS OVERHAULED
Rails-html-sanitizer 1.7.1 shipped overnight to plug an SVG href vulnerability that slipped through the xlink-only fix.
read --wire →
Rails
RAILS REWIRES VIEW HELPERS, POSTGRES 18.4 GETS SHARPER FOREIGN KEY TESTS
Rails is reorganizing its view layer with a new NavigationHelper module, while PostgreSQL 18.4 users lose their superuser dependency for foreign key validation.
read --wire →
Rails
ACTIVERECORD-SESSION_STORE DROPS RAILS 7.1 SUPPORT AND PATCHES SESSION FIXATION VULNERABILITY
The session store gem shipped breaking changes overnight, severing Rails 7.1 support and closing a critical session fixation hole that could let attackers extend sessions indefinitely.
read --wire →
Rails
SQLITE3 FOREIGN KEYS GET THEIR NAMES BACK
SQLite3 migrations just stopped silently destroying the wrong foreign keys.
read --wire →
Rails
RAILS TIGHTENS DESERIALIZATION ERROR HANDLING, PROPSHAFT EYES RUBY 4
Rails introduces a targeted deserialization error for orphaned job records, solving a production pain point at HEY while ActiveJob remains resilient.
read --wire →
Rails
RAILS FIXES FROZEN CACHE BUGS IN RACTORIZED APPS, SOLID QUEUE CATCHES UP
Rails shipped fixes for FrozenErrors that break ractorized applications when caches freeze with the app, while Solid Queue patched a breaking change in ActiveJob's shutdown protocol.
read --wire →