--- title: "What the inclusion of Bundler in Ruby means" publication: "Ruby Weekly" issue: 427 published_at: "2018-11-29" canonical_url: "https://rubyweekly.com/issues/427" --- This week's Ruby news, issue 427 #427 — November 29, 2018 [Read on the Web](https://rubyweekly.com/issues/427) Ruby Weekly [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60/tappjw5nliugrmhsqo78.jpg)](https://github.com/ciconia/modulation) [Modulation: Explicit Dependency Management for Ruby](https://github.com/ciconia/modulation) — An interesting experiment that feels a bit like JavaScript’s `import` syntax. Intended for managing dependencies between source files _inside_ Ruby apps and not for third-party dependencies. Sharon Rosner [Bundler is Built Into Ruby 2.6](http://engineering.appfolio.com/appfolio-engineering/2018/11/26/bundler-is-built-into-ruby-260preview3) — What the inclusion of Bundler in Ruby means, including, what happens when you install Bundler as a gem. To me, this feels as big a step as when RubyGems became part of Ruby in 1.9. Noah Gibbs [![\](https://copm.s3.amazonaws.com/6fe088ff.png)](https://www.datadoghq.com/dg/apm/ruby-tracing/?utm_source=Advertisement&utm_medium=CooperPress&utm_campaign=CooperPress-RubyWeeklyP) [Monitoring and Distributed Tracing for Ruby Apps](https://www.datadoghq.com/dg/apm/ruby-tracing/?utm_source=Advertisement&utm_medium=CooperPress&utm_campaign=CooperPress-RubyWeeklyP) — Utilize flame graphs, search and analytics for distributed traces, and automated anomaly detection to optimize Ruby application performance. Monitor application data alongside infrastructure metrics and logs in real-time. Try Datadog free. Datadog sponsor [Finding Ruby Performance Hotspots via Allocation Stats](https://blog.presidentbeef.com/blog/2018/11/28/finding-ruby-performance-hotspots-via-allocation-stats/) — An interesting walkthrough of how a developer discovered and fixed some performance issues in [ruby_parser](https://github.com/seattlerb/ruby_parser/) by investigating object allocations. Justin Collins [Rails 4.2, 5.0, 5.1, and 5.2 Security Fix Releases](https://weblog.rubyonrails.org/2018/11/27/Rails-4-2-5-0-5-1-5-2-have-been-released/) — Rails 4.2.11, 5.0.7.1, 5.1.6.1 and 5.2.1.1 have been released with some important security fixed in these, so upgrade pronto. Official Rails Blog [An Official 'Snap' Package of Ruby Now Available](https://www.ruby-lang.org/en/news/2018/11/08/snap/) — [Snaps](https://snapcraft.io/) are self-contained software packages for Linux distributions that avoid some of the issues other package systems have with dependencies and now Ruby has its own official ‘snap’ package. [Snapcraft link](https://snapcraft.io/ruby) or [GitHub repo.](https://github.com/ruby/snap.ruby) Hiroshi Shibata [Securing Sensitive Data in Rails](https://ankane.org/sensitive-data-rails) — A rather comprehensive look at what data is sensitive and how to secure the many ways of accessing and storing that data. Andrew Kane 💻 Jobs [Senior Ruby Developer](https://companycam.com/careers/ruby-on-rails-developer/?&utm_source=cooperpress&utm_medium=newsletter&utm_campaign=job_listing&utm_content=ruby_rails&utm_term=q4_2018) — We are a rapid growing startup in the construction space, helping companies to streamline field documentation and communication. CompanyCam LLC [BackerKit Is Looking for a Sr. Developer (SF)](https://jobs.lever.co/backerkit/4c9d58a0-8c18-4b4b-a047-32feef42f32d?lever-source=ruby-weekly) — The leading platform for creators that want to focus on creating. We're building some neat stuff, join us. [Check out our team values here](https://www.keyvalues.com/backerkit). Backerkit [Join Our Career Marketplace & Get Matched With A Job You Love](https://www.hired.com/ruby) — Through Hired, software engineers have transparency into salary offers, competing opportunities, and job details. Hired 📘 Articles & Tutorials [Fibers and Enumerators in Ruby: Turning Blocks Inside Out](https://blog.appsignal.com/2018/11/27/ruby-magic-fibers-and-enumerators-in-ruby.html) — Lots of posts on fibers recently…here the focus is on flow control and how Fibers compare to Enumerables. Julik Tarkhanov [Why On Earth Do Fibers Exist?](https://thesmartnik.com/why-on-earth-do-fibers-exist.html) — _“Fibers were created so one could implement generator pattern”_ What’s the generator pattern? Read on. Nikita Misharin [Advanced Ruby Exception Handling](https://blog.cloud66.com/advanced-ruby-exception-handling/) — Did you know that, as of Ruby 2.1, `Exception#cause` lets you find the original exception that led to another? Dimitrios Lisenko [How Well Do You Know Ruby's Exception System?](https://honeybadger.leadpages.co/exceptions/) — Ruby's exception system is more powerful than many people realize. Download our free eBook to level up from novice to expert. 🤘 Honeybadger sponsor [Stopping Slow Client DoS Attacks with Puma on Passenger 6](https://blog.phusion.nl/2018/11/28/stopping-slow-client-dos-attacks-with-puma-on-passenger-6/) — A ‘slow client’ attack is when an attack opens up HTTP connections and then operates _very slowly_, consuming resources of the server. Passenger 6 makes it easy to avoid this problem. Camden Narzt (Phusion) [How To Use Heredocs in Ruby](https://www.rubyguides.com/2018/11/ruby-heredoc/) — [Heredocs](https://en.wikipedia.org/wiki/Here_document) (a.k.a. here documents) are document-style multiline string literals. Jesus Castello [`dup` vs `clone` in Ruby: Understanding The Differences](https://www.rubyguides.com/2018/11/dup-vs-clone/) — Worth revising if you want to copy objects properly and not be surprised by the result. Jesus Castello [Four Things About Pry, The Powerful Ruby REPL/Console](https://revs.runtime-revolution.com/four-things-about-pry-a0ebb10c6c2e) — If you’re still not using [Pry](https://github.com/pry/pry), maybe these benefits could sell you on the idea. Bruno Jacquet [Rails Scaffolding and TDD Are Incompatible](https://www.codewithjason.com/rails-scaffolding-tdd-incompatible/) — Principally because scaffolding requires you write tests _after_. But this isn’t a big problem, says Jason. Jason Swett ['We Don't Have Time to Write Tests'](https://www.codewithjason.com/dont-time-write-tests/) — _“No matter what your scenario, don’t fall into the fallacious belief that skipping tests saves time.”_ Jason Swett 🔧 Code & Tools [JRuby 9.2.4.1 Released](https://www.jruby.org/2018/11/28/jruby-9-2-4-1.html) The JRuby Team [MetaCLI: 'Lazy' Command-line Option Parsing](https://github.com/Roman2K/metacli) — Dynamically figures out command line arguments and options from method definitions. Roman Le Négrate [Video Encoding, Storage, and Delivery in A Single Platform](https://get.mux.com/2AtZKle) MUX sponsor [Rails 5.2.2.rc1 Released](https://weblog.rubyonrails.org/2018/11/28/Rails-5-2-2-rc1-has-been-released/) — The 5.2.2 release candidate is out now, and if no regressions are found, the final release can be expected early next week. Official Rails Blog [Scenic: Versioned Database Views for Rails](https://github.com/scenic-views/scenic) — Bring the power of SQL views to a Rails app without having to switch to a full SQL schema format. Scenic [Instagram Crawler: An Instagram Photo Downloader](https://github.com/mgleon08/instagram-crawler) — Be careful of TOS and data protection issues here and use responsibly. Leon Ji [Rack::Attack: Rack Middleware for Blocking and Throttling](https://github.com/kickstarter/rack-attack) — Continues to get frequent updates and releases. Kickstarter Curated by [Cooperpress](https://cooperpress.com/) [Change your email address](https://rubyweekly.com/edit_subscription/*|UID|*) or[Stop getting this newsletter](https://rubyweekly.com/leave/*|UID|*) © Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom