Rubyland

news, opinion, tutorials, about ruby, aggregated
Sources About
Rémi Mercier 

Square? Or freeform? (Ruby Stained Glass Notes #03)

DEV Community: Brandon Weaver 

Moving to baweaver.com

Benito Serna 

You can ask your coding agent for a selector to compare UI options

Awesome Ruby Newsletter 

💎 Issue 527 - RubyLLM: A single, beautiful Ruby framework for all major AI providers

Ruby Weekly 

A Rails blog app in a ~500KB binary

Rails Designer Blog 

Beam Up: CLI to deploy static sites

avdi.codes 

https://avdi.codes/158216-2/?utm_source=rss&utm_medium=rss&utm_campaign=158216-2

Once a Maintainer 

Once a Maintainer: Mike Dalessio

avdi.codes 

https://avdi.codes/158050-2/?utm_source=rss&utm_medium=rss&utm_campaign=158050-2

avdi.codes 

https://avdi.codes/157853-2/?utm_source=rss&utm_medium=rss&utm_campaign=157853-2

avdi.codes 

https://avdi.codes/157772-2/?utm_source=rss&utm_medium=rss&utm_campaign=157772-2

Ruby Central 

Announcing the RubyConf VIP Raffle

Ruby Central 

SmartFinancial Is Coming to RubyConf 2026 and They're Hiring!

avdi.codes 

https://avdi.codes/157638-2/?utm_source=rss&utm_medium=rss&utm_campaign=157638-2

The Rails Tech Debt Blog 

Painfully Simple Test Case Mistakes That Are Easy To Fix

Evil Martians 

Choose your fighter: benchmarking 5 WebSocket servers for Node.js

RubySec 

GHSA-g9g8-vgvw-g3vf (nokogiri): Possible invalid memory read when calling `Nokogiri::XML::Node#initialize_copy_with_args` with incorrect argument type

The Ruby on Rails Podcast 

Episode 540: Jeremy Smith and Blue Ridge Ruby

Carmine Paolino 

Founding a Company in Germany: €9,600, 152 Days, and I Still Can’t Send an Invoice

a-chacon 

Procman: An alternative for running Procfile apps

Weelkly Article – Linking Ruby knowledge from the most remote places in the world. 

How Ruby Itself Uses Dependabot: A Look Behind MRI’s Dependency Management

Benito Serna 

Make a method a recurring task with solid queue

RubyGems Blog 

4.0.15 Released

Planet Argon Blog 

Your Rails App Just Got Acquired. Now What?

OmbuLabs Blog 

How to Write a Claude Code Skill

avdi.codes 

Is Successful Agentic Coding a Delusion?

The Rails Tech Debt Blog 

JRuby & Rails Compatibility Table

The Bike Shed 

503: Seeing the Graph for the Trees

RubySec 

CVE-2026-54904 (concurrent-ruby): Concurrent Ruby - `AtomicReference#update` livelocks when the stored value is `Float::NAN`

RubySec 

CVE-2026-54905 (concurrent-ruby): Concurrent Ruby - `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity

RubySec 

CVE-2026-54906 (concurrent-ruby): Concurrent Ruby - ReadWriteLock allows wrong-thread write release and stray read-release counter corruption

RubySec 

CVE-2026-54500 (oj): Oj - intern.c form_attr (uninitialized stack read)

RubySec 

CVE-2026-54502 (oj): Oj - Stack Buffer Overflow in Oj.dump via Large Indent

RubySec 

CVE-2026-54592 (oj): Oj - Stack Buffer Overflow in Oj::Doc#each_child via Deeply Nested Input

Aha! Engineering Blog 

I'm the agent for Claude now

avdi.codes 

https://avdi.codes/156725-2/?utm_source=rss&utm_medium=rss&utm_campaign=156725-2

Ruby on Rails: Compress the complexity of modern web apps 

Here are the Rails World 2026 speakers

RubySec 

CVE-2026-54297 (faraday): Faraday - Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters

RubySec 

GHSA-mqq5-j7w8-2hgh (alchemy_cms): AlchemyCMS - Unauthenticated nested page API leaks restricted and unpublished content

Weelkly Article – Linking Ruby knowledge from the most remote places in the world. 

Can Ruby Next Help You Upgrade an Application Gradually?

Left of the Dev 

New book: Testing Rails from Scratch

RubySec 

GHSA-5prr-v3j2-97mh (nokogiri): Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`

RubySec 

GHSA-5v8h-3h3q-446p (nokogiri): Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception

RubySec 

GHSA-8678-w3jw-xfc2 (nokogiri): Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247

RubySec 

GHSA-9cv2-cfxc-v4v2 (nokogiri): Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes

RubySec 

GHSA-p67v-3w7g-wjg7 (nokogiri): Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime

RubySec 

GHSA-phwj-rprq-35pp (nokogiri): Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`

RubySec 

GHSA-wfpw-mmfh-qq69 (nokogiri): Nokogiri: Possible Use-After-Free in XInclude Processing

RubySec 

GHSA-wjv4-x9w8-wm3h (nokogiri): Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type

avdi.codes 

https://avdi.codes/155720-2/?utm_source=rss&utm_medium=rss&utm_campaign=155720-2

RubySec 

CVE-2026-12515 (katello): katello - missing repository authorization in content_uploads exposes cross-product content existence

RubySec 

CVE-2026-55518 (avo): Avo - Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalation

Ruby on Rails: Compress the complexity of modern web apps 

This Week in Rails: June 19, 2026

Remote Ruby 

Navigating Subscription Overhauls and Payments

Noteflakes 

Rethinking modularity in Ruby applications

Tim Riley 

Continuations 2026/24: Clearing the decks

Weelkly Article – Linking Ruby knowledge from the most remote places in the world. 

Herb and ReActionView: A Glimpse Into the Future of Rails Views

Ryan Bigg Blog 

Comsol Customer Service

The Rails Tech Debt Blog 

No Node

Awesome Ruby Newsletter 

💎 Issue 526 - Lisp's Influence on Ruby

Rails Designer Blog 

Build a reusable before/after image slider with Stimulus

Syed Aslam 

What SOLID Still Teaches Ruby Programmers

avdi.codes 

https://avdi.codes/154684-2/?utm_source=rss&utm_medium=rss&utm_campaign=154684-2

Ruby Weekly 

41M requests/hour on Rails

avdi.codes 

https://avdi.codes/154635-2/?utm_source=rss&utm_medium=rss&utm_campaign=154635-2

avdi.codes 

https://avdi.codes/154575-2/?utm_source=rss&utm_medium=rss&utm_campaign=154575-2

avdi.codes 

https://avdi.codes/154526-2/?utm_source=rss&utm_medium=rss&utm_campaign=154526-2

avdi.codes 

https://avdi.codes/154516-2/?utm_source=rss&utm_medium=rss&utm_campaign=154516-2

Rails Designer Blog 

Build a reusable before/after image slider with Stimulus

Hi, we're Arkency 

Ingress is not the owner of the invariant

Weelkly Article – Linking Ruby knowledge from the most remote places in the world. 

Ruby 4.0 Is Here. Why Is AI Still Writing Ruby 3.0?

Giant Robots Smashing Into Other Giant Robots 

Meet thoughtbot at Brighton Ruby 2026

Ruby Central 

RubyConf 2026 Is Where Ruby's Next Chapter Begins

RubyMine : Intelligent Ruby and Rails IDE | The JetBrains Blog 

Your JetBrains IDE Expertise, Now on LinkedIn

Evil Martians 

Building a design system specced for engineers and agents

avdi.codes 

https://avdi.codes/154098-2/?utm_source=rss&utm_medium=rss&utm_campaign=154098-2

The Ruby on Rails Podcast 

Episode 539: Travis Dockter and Blastoff Rails

The Rails Tech Debt Blog 

How to Parallelize Your RSpec Test Suite Locally

Gusto Engineering - Medium 

Storage Is the Missing Piece for Agent-Built Software

The Bike Shed 

502: Apps That Make Our Work Go

Hanakai 

Help us test the Hanami 3.0 release candidate

Ryan Bigg Blog 

Verify faster

Rails Designer Blog 

Building a quiz with Stimulus

André Arko 

jj's whole deal

Ruby Central 

Shopify Joins the Ruby Alliance

Aha! Engineering Blog 

The next hit: How LLMs change the way engineers work

Code With Rails 

Build a Workflow-Priority Ticket Queue with Rails' in_order_of Array Grouping

Rémi Mercier 

Ideas are cheap. But glass? Not so much. (Ruby Stained Glass Notes #02)

André Arko 

rv plan and progress update

Noteflakes 

Software as Craft: a First Look at Syntropy

RubySec 

CVE-2026-47240 (net-imap): Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument

RubySec 

CVE-2026-47241 (net-imap): Net::IMAP: Denial of Service via incomplete raw argument validation

RubySec 

CVE-2026-47242 (net-imap): Net::IMAP: Command Injection via ID command argument

Ruby on Rails: Compress the complexity of modern web apps 

This Week in Rails: June 12, 2026

Remote Ruby 

[The lost episode 259]  All Right, Rant Time - Debugging

The Rails Tech Debt Blog 

How to Leverage PurgeCSS in Your Rails App for Faster Stylesheets

BigBinary Blog 

How we built Neeti our an AI assistant for NeetoCal

Awesome Ruby Newsletter 

💎 Issue 525 - Small PRs, big speedups: The Ruby performance work you almost missed

JRuby.org News 

JRuby 10.0.6.0 Released

Ruby Weekly 

Small PRs, big Ruby speedups

Ruby Magic by AppSignal 

Finding the Slow Query Killing Your Rails App

Radan Skorić's website 

RubyConf Austria and the future of Ruby conferences

Hi, we're Arkency 

Let Your AI Assistant Explore the Event Store with res-mcp

Rails Designer Blog 

Building a quiz with Stimulus

BigBinary Blog 

Debugging frontend crash and handling circular dependency

Ruby Central 

Strengthening Security for the Ruby Ecosystem: A Team of Security Engineers in Residence

Ruby Central 

Governance: Expanding Participation in Ruby Central

Planet Argon Blog 

Rails Connections - Tropical on Rails 2026 Highlights

Syed Aslam 

When a Rails Object Needs Types but Not a Table

Ruby Central 

A Heartfelt Thank You to GitLab: Our Longtime Coffee & Lanyard Sponsor