Rubyland

Robby on Rails 03 Nov 2026

Oh My Scrobbles: A Last.fm Scrobbler for Apple Music on Mac

Aha! Engineering Blog 02 Nov 2026

Moment of Ruby: an argument for nothing

Gusto Engineering - Medium 02 Nov 2026

What Slash Commands Actually Do

RubySec 02 Nov 2026

GHSA-345x-3rq2-jfrm (loofah): SVG `` and `` bypass local-reference restriction in Loofah

RubySec 02 Nov 2026

GHSA-3w22-6jfg-527w (nokogiri): Use-After-Free in Nokogiri when replacing an attribute value

RubySec 02 Nov 2026

GHSA-4p39-36wj-23h4 (nokogiri): Possible Mutation XSS when serializing `noscript` content in `Nokogiri::HTML5` documents

RubySec 02 Nov 2026

GHSA-cpgf-5mjf-73p7 (rails-html-sanitizer): Possible regular expression denial of service with certain configurations of rails-html-sanitizer

RubySec 02 Nov 2026

GHSA-h6v6-rg66-fqj4 (loofah): Mutation XSS in Loofah HTML5 scrubbers through unescaped attribute values

RubySec 02 Nov 2026

GHSA-h7wh-q2qr-458c (rails-html-sanitizer): Possible XSS via shared scrubber state in concurrent rails-html-sanitizer calls

RubySec 02 Nov 2026

GHSA-jcff-cj73-4w4f (loofah): Loofah allowed_uri? treats data:text/html as safe text/plain

RubySec 02 Nov 2026

GHSA-m3x9-938q-5767 (loofah): CSS url() sanitization bypass via escaped parentheses in Loofah

RubySec 02 Nov 2026

GHSA-mf2j-8f84-cc9q (loofah): Regular expression denial of service in Loofah's SVG local-reference check

RubySec 02 Nov 2026

GHSA-p9wj-w8xq-vjx6 (loofah): Loofah allowed_uri? treats javascript: alert(1) as safe

RubySec 02 Nov 2026

GHSA-v995-44v6-5fqm (nokogiri): Possible SSRF on JRuby when resolving external DTDs or entities with `NONET` set

Saeloun Blog 02 Nov 2026

Rails 8.2 adds fallback reads for RAILS_MASTER_KEY

Drifting Ruby Screencasts 01 Nov 2026

Idempotency

danielabaron.me RSS Feed 01 Nov 2026

IP-Based Route Restrictions on Heroku with Rails

RubySec 01 Nov 2026

GHSA-4rw8-495r-pf6j (graphql): Execution::Next renders objects whose authorized? check failed

RubySec 01 Nov 2026

GHSA-q3cc-p5hm-55wj (graphql): Interpreter runtime renders results from objects whose `.authorized?` checks had failed

RubySec 01 Nov 2026

GHSA-4fqr-96q8-xrfx (sqlite3): Possible SQL query truncation when a string is 4 GiB or larger

RubySec 01 Nov 2026

GHSA-76hq-g43j-f2rr (wasmtime): Data race in WASI when calling functions with `gvl: false`

RubySec 01 Nov 2026

GHSA-c9f2-f4vx-xq68 (wasmtime): Externref results may be stale references

RubySec 01 Nov 2026

GHSA-4w5q-wg7v-w6gp (addressable): Regular Expression Denial of Service in Addressable templates with several exploded variables

RubySec 01 Nov 2026

GHSA-539f-xcgw-2gjg (addressable): Addressable display_uri can show misleading hosts containing bidi and invisible characters

RubySec 01 Nov 2026

GHSA-8gmh-2hhj-2hv9 (addressable): Addressable URI normalization resolves some dotted path segments to the wrong path

RubySec 01 Nov 2026

GHSA-9crm-g4mf-wc5j (addressable): Addressable display_uri can show misleading hosts with invalid Punycode A-labels

RubySec 01 Nov 2026

GHSA-9f42-57jx-vpp3 (addressable): Regular Expression Denial of Service in Addressable templates with multiple variables

RubySec 01 Nov 2026

GHSA-j82w-28jv-3pmj (addressable): Regular Expression Denial of Service in Addressable templates with certain exploded expressions

RubySec 01 Nov 2026

GHSA-qq38-m9mg-xjj5 (addressable): Denial of service in Addressable URI path normalization

Alchemists: Articles 01 Nov 2026

Avoid Proton

Rails Revelry 01 Nov 2026

When Two Background Jobs Target the Same Record

code.dblock.org | tech blog 01 Nov 2026

Introducing Svet: A Git Repository Linter

Andy Croll 31 Oct 2026

Homebridge and Pi-hole on a Raspberry Pi 4

RubySec 31 Oct 2026

GHSA-744p-w4gc-m3gh (trilogy): SQL injection through `Trilogy#escape` with multibyte encodings

RubySec 31 Oct 2026

GHSA-2j8w-xcrc-x985 (rack): Rack::Request#host_with_port and `#base_url` return an invalid `Host` verbatim, enabling URL and allowlist bypass

RubySec 31 Oct 2026

GHSA-5v64-555j-wjxm (rack): Multipart parser retains parsed data in its scan buffer, allowing denial of service via memory exhaustion.

RubySec 31 Oct 2026

GHSA-p8x9-v4hv-2w4g (rack): Multipart boundary guard skips a leading empty or quoted `boundary` parameter, allowing parser differentials and WAF bypass

RubySec 31 Oct 2026

GHSA-wvg4-6p58-3gh3 (rack): Rack::Static `header_rules` bypass via unnormalized dot segments in the request path

Julik Tarkhanov 31 Oct 2026

Batching the billing ledger (but with less)

RubySec 30 Oct 2026

GHSA-r47x-6p6r-mvcp (dalli): Keys created by incr or decr can forge get_multi replies

Ruby on Rails: Compress the complexity of modern web apps 30 Oct 2026

No tricks, just treats

code.dblock.org | tech blog 30 Oct 2026

The Matter of Taste

Rails Revelry 30 Oct 2026

Your Rails debugging field guide

RubyMine : Intelligent Ruby and Rails IDE | The JetBrains Blog 30 Oct 2026

Compromised eMudhra Certificates: Update Your JetBrains IDEs, ReSharper, .NET Tools, Toolbox App, and Gateway Now

Remote Ruby 30 Oct 2026

RWX Agent-native CI/CD with Dan Manges

Greg Molnar 30 Oct 2026

SQL injection in the Trilogy MySQL adapter

RailsCarma – Ruby on Rails Development Company specializing in Offshore Development 30 Oct 2026

What Is AngularJS Mobile App Development? A Complete Guide for 2026

Josh Software 30 Oct 2026

Beyond the Perfect Demo

Ryan Bigg Blog 30 Oct 2026

Hands on the wheel

Awesome Ruby Newsletter 30 Oct 2026

💎 Issue 545 - Carton - Real boundaries for Ruby

John Nunemaker 30 Oct 2026

Don't Make a Human Do What AI Is Amazing At

avdi.codes 29 Oct 2026

https://avdi.codes/191403-2/?utm_source=rss&utm_medium=rss&utm_campaign=191403-2

code.dblock.org | tech blog 29 Oct 2026

One Tool for the (Spell Checking) Job

Ruby Weekly 29 Oct 2026

How fast can you actually patch Ruby?

All about coding 29 Oct 2026

Superpowers Ruby is becoming RubyPowers

Rails Designer Blog 29 Oct 2026

Introducing Hanami Icons

RubyGems Blog 29 Oct 2026

Ruby Central’s OSS Changelog: October 2026

Ruby Central 28 Oct 2026

Ruby Central’s OSS Changelog: October 2026

Super Good Blog 28 Oct 2026

Setting Up a New Solidus Store

OmbuLabs.ai 28 Oct 2026

Teaching an AI Scraper from Human Corrections

Island94.org 28 Oct 2026

Bad requests and the dream of a quiet Rails app

Evil Martians 28 Oct 2026

How to make postMessage type-safe in under 350 bytes

Carmine Paolino 28 Oct 2026

Solco: Stop Preparing Your Tracks, Start Preparing Your Gigs

Tim Riley 28 Oct 2026

Continuations 2026/43: Perplexing inconsistency

The Ruby on Rails Podcast 28 Oct 2026

Episode 558: Background Batches with JP Camara

RubyGems Blog 28 Oct 2026

4.1.0.beta3 Released

Planet Argon Blog 27 Oct 2026

Rails World: What Did our Software Delivery Manager get out of it?

OmbuLabs.ai 27 Oct 2026

1682 Conference: The PB&J Principle

Gusto Engineering - Medium 27 Oct 2026

How Spec-Driven Development Shaped My New Way of Engineering

The Rails Tech Debt Blog 27 Oct 2026

Making AI Agents Safe to Retry

Radan Skorić's website 27 Oct 2026

"Make the change easy, then make the easy change" is a great way to code with AI

Robby on Rails 27 Oct 2026

Rails, AI, Open Source, and Getting Too Old for Late-Night Punk Shows

Paagman.dev 26 Oct 2026

How fast can you actually patch Ruby?

RubySec 26 Oct 2026

GHSA-wgw9-qhqg-8hv5 (sanitize): CSS property and URL allowlists can be bypassed via CSS nesting in stylesheets

RubySec 26 Oct 2026

GHSA-h7x6-9mqf-vgmx (avo): Global Avo.configuration.locale mutation via params[:set_locale] (process-wide state poisoning)

RubySec 26 Oct 2026

GHSA-x65r-p6hf-94hv (avo): Missing authorization on Avo association show endpoint exposes related records

baweaver 26 Oct 2026

Tales of the Autistic Developer - High-Functioning Depression

Sam Ruby 25 Oct 2026

Benchmarking Campfire with Many Users

Saeloun Blog 25 Oct 2026

Rails 8.2 drops Marshal message fallback

justin․searls․co - Digest 24 Oct 2026

🎙️ Breaking Change podcast v57.1 - iPhone Duo Review

Julik Tarkhanov 24 Oct 2026

Thank you, but I prefer it my way

Greg Molnar 24 Oct 2026

Deploying with Kamal using a locally built Ruby image

The Rails Tech Debt Blog 24 Oct 2026

Bootstrap 4 to 5, One Controller at a Time

Ruby on Rails: Compress the complexity of modern web apps 23 Oct 2026

Safer secrets, ZJIT, and more!

code.dblock.org | tech blog 23 Oct 2026

I Am Just One Engineer Armed with AI

RubySec 23 Oct 2026

GHSA-5287-hmjh-qmqq (pghero): Insecure direct object reference (IDOR)

RubySec 23 Oct 2026

GHSA-pq4g-8rxf-4g29 (crass): Incorrect tokenization of bad URLs enables CSS sanitizer bypass

Ruby Weekly 23 Oct 2026

Ruby regexp security fixes: a newsflash

Sam Ruby 23 Oct 2026

What the Campfire Benchmark Measures

Blog 23 Oct 2026

uml-viewer: see the architecture of a Rails app in the browser

Remote Ruby 23 Oct 2026

Jeff Dickey is Back

Carmine Paolino 23 Oct 2026

I Get 215 GitHub Notifications a Day, So I Built a Bot to Triage Them

Ruby News 23 Oct 2026

Regexp compilation fixes related to GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264

Ruby News 23 Oct 2026

Ruby 4.0.9 Released

Ruby News 23 Oct 2026

Ruby 3.4.12 Released

Ruby News 23 Oct 2026

Ruby 3.3.13 Released

code.dblock.org | tech blog 22 Oct 2026

Introducing Markdownlint Spellcheck

Awesome Ruby Newsletter 22 Oct 2026

💎 Issue 544 - Does Ruby on Rails still make sense?

Planet Argon Blog 22 Oct 2026

PHP2Shell: What We Checked, What We Fixed, and What We Learned

Ruby Weekly 22 Oct 2026

How Rails made its enums 4.5x faster

Shopify Engineering 22 Oct 2026

We gave AI agents a mobile dev environment

Code With Rails 22 Oct 2026

Catch Broken HTML Before Deploy with Rails' New Herb Template Engine

Josh Software 22 Oct 2026

Goroutine Leaks: The Silent Memory Leak Most Golang Developers Ignore

RailsCarma – Ruby on Rails Development Company specializing in Offshore Development 22 Oct 2026

Top 10 Software Outsourcing Companies in India for 2026

Ruby on Rails: Compress the complexity of modern web apps 22 Oct 2026

On Rails — Hussain Akram & Antonio Carlos de Souza: Rails Scales for the Rest of Us

Rails Designer Blog 22 Oct 2026

Distort HTML with SVG's feDisplacementMap

Ruby News 22 Oct 2026

Ruby 4.0.8 Released

code.dblock.org | tech blog 22 Oct 2026

Introducing Dylint Spellcheck (Rust)

Julik Tarkhanov 21 Oct 2026

Serving your packages with Paquette

Rails at Scale 21 Oct 2026

Rails is a JIT compiler