You need to upgrade Rails 7.x and 8.x now

Together with

💡 The team that discovered the vulnerability has dubbed it KindaRails2Shell and explains more about it. Also note, if you're using Bundler's new cooldown protection, bundle update rails --cooldown 0 may be needed.

The Inliner is Yielding Benefits for ZJIT — ZJIT, the experimental just-in-time compiler written in Rust, has added inlining capabilities. This post shows how method inlining speeds up block-heavy code such as Array#each. Early microbenchmarks are striking, with up to 35x speed gains in one case.

Max Bernstein

⚡️ IN BRIEF:

• 🔎 Go to the official ruby-lang.org site and hit Cmd/Ctrl+K – it has search!

• 🏆 Nominations have opened for this year's Rails Luminary Awards. Last year's winner was Marco Roth of Herb fame.

• 🇪🇺 The sale of early bird tickets for Euruko, taking place this September in Czechia, ends this Saturday.

• 🎂 Rails is celebrating the 22nd anniversary of its first public release: v0.5.0 on July 24, 2004.

Golfing Ruby with Codex: From 250 Bytes to 90 — I tell the tale of pushing GPT-5.6 Sol to make a Roman numeral generator smaller, ending at 90 bytes. Along the way, many Ruby features popped out: character literals, endless methods, a 1.% exception trick, and a (not so) novel algorithm from 1976.

Peter Cooper

Curiosity Reduced the Heap Size by 60% — Agents are often good at diagnosing warnings and errors, but in this case an agent's attempts to ignore a warning led Paweł to a striking memory use saving.

Paweł Pacana

Courrier 1.0: A Gem to Send Emails Without SMTP — Brings the ability to send email through 13 providers and 7 newsletter platforms into a single library. There's also a Rails integration which brings generators and Active Job support.

Rails Designer

• Solid Queue 1.5 – DB-based queuing backend for Active Job. Lots of bugfixes, polling interval now defaults to 1 second, and there's a new bin/jobs check command to validate your config.

• RBS 4.1 – The official language for writing type signatures for Ruby now supports JRuby and adds a Rewriter API.

• 🖼️ RMagick 7.1 – The long-standing ImageMagick bindings get bug fixes, plus big changes to how text strings drawn by Draw#annotate are handled.

• SimpleCov 1.0.3 – Code coverage tool. If you missed the big 1.0 release, check it out as the new report UI is great.

• telegram-bot-ruby 2.8 – Ruby wrapper for Telegram Bot API 10.x.

• MCP Ruby SDK 1.0 – Official Ruby SDK for the Model Context Protocol.

• Gibbon 4.0 – MailChimp Marketing API wrapper for Ruby.