Hi! This is Vipul bringing you the latest from this week’s changes in the Rails codebase. Infer primary_key: :id on associations with composite primary key models Prior to this change, you’d need to do the following to set up associations for composite primary key models: class Order self.primary_key = [:shop_id, :id] has_many :order_a...

Hi, Wojtek here. Let’s explore last 2 week’s changes in the Rails codebase. Rails Versions 7.0.7.2, 6.1.7.6 have been released Just after the previous security releases 7.0.7.1, 6.1.7.5 but with fixed file permissions. MRSK renamed to Kamal Due to a trademark claim, the project was renamed to Kamal. Add after_discard method to Active J...

Hi, it’s Greg, bringing you the latest changes in the Rails codebase. Introducing the Rails Luminary Awards: Nominations Now Open Starting at Rails World in October, the Rails Foundation will establish a new tradition of celebrating Rails Luminaries- people who’ve contributed to the Rails ecosystem and community with exceptional code, ...

Hi! This is Vipul bringing you the latest from this week's changes in the Rails codebase. Introduce config.dom_testing_default_html_version and use Rails::Dom::Testing to parse HTML in test helpers Previously support was added to Rails::Dom::Testing for HTML5. This may cause issues if we still want to rely on HTML4 based testing. This ...

Hi, it’s zzak. Let’s explore this week’s changes in the Rails codebase. Rack::Lint on Rails middleware tests While this work is not technically user-facing, it’s important to ensure the future of Rails continues to maintain compatibility with the Rack SPEC. You can read more about the Rack 3 upgrade guide if you’re interested or mainta...

This is Emmanuel... you haven't heard from me in a while. I'm doing great, and have a few merged pull requests that I want to share with you. Don't show secrets for MessageVerifier#inspect and KeyGenerator#inspect If anyone calls a cipher in the console, it will reveal the secret of the encryptor. By overriding the inspect method to di...

Hi, Wojtek here. Let’s see what changed in the Rails codebase. Add an option to preprocess Active Storage variants in background job Active Storage variants are processed on the fly when they are needed but sometimes we’re sure that they are accessed and want to process them upfront. class User < ApplicationRecord has_one_attached :ava...

Happy Friday Everyone! This is Vipul, bringing you the latest changes in the Rails codebase. [CVE-2023-28362] Possible XSS via User Supplied Values to redirect_to If you haven't already, its time to upgrade your Rails application to the latest version! Rails versions 7.0.5.1, 6.1.7.4 have been released with a security fix for a possibl...

Hi, it’s Greg, bringing you the latest changes in the Rails codebase. Rails World’s site is live! The Rails World conference website is live from today. It was created by Shona Chan, a junior developer from the Rails community. It was commissioned by the Rails Foundation, designed by Katya Sitko and created under the mentorship of Ayus...

Hi, it’s zzak. We’re officially half-way through June, and we’ve got a shorter edition this week but let’s hop in. Enable `force_ssl=true` in production by default This PR affects newly generated apps to make SSL enforcement the default behavior in production mode, ensuring all access to the application occurs over SSL, with Strict-Tra...

Hi! Emmanuel here writing from a train to Katowice! There have been quite a few developments in the Rails codebase over the last few weeks! Let's take a look at some of them, shall we? Create a class level #with_routing helper The with_routing helper can now be called at the class level. When called at this level, the routes will be se...

Hi, Wojtek here. Let’s explore this week’s changes in the Rails codebase. Update Action View to use HTML5 standards-compliant sanitizers Add support for HTML5 standards-compliant sanitizers, and default to Rails::HTML5::Sanitizer in the Rails 7.1 configuration if it is supported. Action View’s HTML sanitizers can be configured by setti...

Hey! zzak here with another edition of This Week in Rails. Reminder: The Rails World CFP is open until June 16. Whether you’re a seasoned veteran or a newcomer to the Rails ecosystem, we encourage you to submit proposals that showcase forward-thinking ideas and push the boundaries of what’s possible with Rails. Rails 7.0.5 has been rel...

Hello Everyone! This is Vipul, bringing you this week’s changes in the Rails codebase. Rails World Call for Papers now open This CFP is open until June 16, with space in the agenda for 26 talks on two tracks, and up to six workshops. Read the full announcement for more details and submit your proposal! Introduce ActiveRecord.disconnect...

Hi, this is Greg, bringing you this week’s changes in the Rails codebase. Rails World Call for Papers now open This CFP is open until June 16, with space in the agenda for 26 talks on two tracks, and up to six workshops. Read the full announcement for more details and submit your proposal! Prevent duplicate filters for encrypted attrib...

Hi, it’s Greg, bringing you this week’s changes in the Rails codebase. Rails World tickets waiting list Many of you asked if there is a waiting list where you can be informed when Rails World tickets go on sale, and the Rails Foundation listened. Sign up here to be alerted when we release Early Bird tickets: https://ti.to/rails-world/r...

Hi, it’s zzak. ✈ RailsConf has come to a close, and Golden Week is upon us here in Japan. Lots to catch up on in This Week in Rails. Many documentation improvements to extend our SEO posture The venerable @p8 has been very busy trying to improve Rails documentation fortune with search engines. On the topic of documentation, the Postgre...

Hi. Wojtek here. We had 88 contributors this week including ChatGPT! Let’s explore the changes. AppSignal is the newest contributing member of The Rails Foundation It’s the third company to join The Rails Foundation as a contributing member. Introduce adapter for Trilogy Trilogy is a client library for MySQL-compatible database servers...

Saluton! That's Esperanto for "Hello!" 😜... Emmanuel Hayford here, let's see what's new in Rails as we gear up for Composite Primary Keys (CPKs) support. But first, here's a fine opportunity for junior Ruby on Rails developers: As part of preparations for the upcoming Rails World conference in Amsterdam, Netherlands this year, The Rail...

Hi, it’s Greg, bringing you the latest news about Ruby on Rails. We have exciting news from the Rails Foundation! The first-ever Rails World Conference is coming! Join the community on October 5 & 6 in Amsterdam, Netherlands, for keynotes, technical sessions, and all things Rails. A website with tickets and a CFP is coming soon! You ca...

Hi, it’s zzak, writing in from Aomori, Japan, home of the great Jonan Scheffler. 2023 is officially 25% over, time to enjoy 🌸 and explore this week’s changes in the Rails codebase. Add debug gem back to the Gemfile template With the release of Ruby v3.2.2, which happened today, we can safely add the “debug” gem back to the Gemfile temp...

Hi, it’s Wojtek with this week’s changes in the Rails codebase. Allow specifying WHERE clauses with column-tuple syntax. Querying through Active Record where now accepts a tuple syntax which accepts, as a key, an array of columns and, as a value, an array of corresponding tuples. This improves support for composite primary keys. Accept...

Kaixo! Long time no see. Emmanuel Hayford here. This week, a lot happened in Rails, so much so that to keep this edition short, I've had to cut some equally goodpull requests out. Here's what I have for you today: Allow querying by the whole record for composite query constraints Suppose you have defined an association between two mode...

Hi, this is Greg, bringing you the latest changes in the Rails codebase. Lockdown rails app in production for security Current Dockerfile generated by Rails runs as a non-root user which prevents modification of the operating system but leaves wide open all gems and the application itself. This change locks down the application gems an...

Hi, it’s zzak. Let’s explore this week’s changes in the Rails codebase. Turbo v7.3.0 is out! Be sure to check the release notes to see what changed. Configurable digest algorithm for Active Record Encryption This adds a new option to configure the digest algorithm in Active Record Encryption. It sets SHA-256 as the new default starting...

Hi, it’s Wojtek. Let’s dig into this week’s changes and announcements. Amanda Perino as new executive director for The Rails Foundation Please welcome Amanda to the job of leading the mission to improve the documentation, education, marketing, and events in the Rails ecosystem. Add ActiveJob.perform_all_later to enqueue multiple jobs a...

Hi, this is Greg, bringing you this week’s changes in the Rails codebase. Support preloading associations with composite keys This pull request adds support for Associations::Preloader to be able to preload associations associated by a composite foreign key (query_constraints) and by implication adds support for includes() relations. S...

Përshëndetje! Emmanuel here with the usual stuff. filtered_path in ActionController::Instrumentation event payloads over fullpath For security reasons, some data need to be filtered before it reaches bad actors. Rails now filters parameters in paths that may include sensitive information in logs. Instead of passing fullpath to ActionCo...

Hi, it’s zzak, happy 節分! I’m very excited for spring, this winter has been tough! Let’s get into this week’s changes in the Rails codebase. Use infinitive form for all task descriptions verbs All the common rails commands and some extended commands use the infinitive form for the verb in the description: “Generate …”, “Start …”, “Run …...

Hi, it's Wojtek. Let's explore this week's changes in the Rails codebase. Rails 7.0.4.2 and 6.1.7.2 have been released Released 7.0.4.2 and 6.1.7.2 versions addressing a compatibility issue with the 7.0.4.1 and 6.1.7.1 security releases from last week. Allow use of SSL-terminating reserve proxy that doesn't set headers Add ActionDispat...