Cool Down Before You Install: Give New Gems a Few Days to Be Vetted — A compromised account can ship a malicious gem and your next bundle install can pull it within minutes. Bundler 4.0.13, released yesterday, provides an opt-in 'cooldown' to hold back releases until they've 'aged' a few days. Meanwhile, bundle outdated shows what’s waiting and for how long.

Hiroshi Shibata (RubyGems)

What Is Legacy Software in the Age of AI? — Software becomes legacy by succeeding long enough to accumulate the weight of every decision and shortcut made along the way. AI creates speed, but also many unintended consequences resulting in more user friction, not less.

Test Double sponsor

Beyond Enumerable: For Want of Better Windows — Enumerable gives names to most of the loops you’d otherwise hand-write, but not all of them. Brandon goes after a shape it doesn't have, stateful sliding windows, and builds his own efficient implementation.

Brandon Weaver

Managing Ruby Versions with Mise — A very basic introduction, but as I’ve fallen in love with Mise this year for managing all of my languages (e.g. Go, Node, Rust) and multiple Ruby implementations (e.g. TruffleRuby and JRuby, alongside CRuby) I want it to be on everyone’s radar. It’s great!

Georgi Mitrev

What If Hanami Had Templateless Views? — It doesn’t take much to add this to Hanami, showing just how flexible the web framework can be.

Paweł Świątkowski

Jidoka: Automation with a Human Touch — Pair coding agents with senior engineers to modernize legacy code and ship faster with built-in quality.

JIDOKA by SINAPTIA sponsor

Meet Mata: Live Reloading with DOM Morphing for Rack Apps — A lightweight "live reload" solution for views in Rack apps. It uses Server-Sent Events (SSE) and idiomorph for updating the DOM. GitHub repo.

Rails Designer

Depot's Sherlock Can Now Analyze Your CI Builds — Ask it to break down your pipeline analytics, debug slow builds, or open a support ticket. It just works.

Depot sponsor

SimpleCov 1.0 RC1: The Code Coverage Analysis Tool — SimpleCov provides an effective way to use the code coverage data collected during testing by Coverage. The changelog is a rather long list, but shows big strides forward in its config, parallel test support, and coverage for unloaded files.

Berlin, Fleischer, Matsuda, et al.

🔒 Console1984: A More Secure, Auditable Rails Console — rails console can often come in handy in prod, but it can also provide users with a little too much power. This extension helps to protect against easy access of sensitive information and provides an audit trail for when it happens.

Basecamp

Tmuxinator: A Tool to Manage Complex tmux Sessions Easily — tmux is a terminal multiplexer a lot like screen but with more features (and increasingly popular in the LLM era as a way to give agents persistent, controllable terminal sessions).

Bargi and Chow