--- title: "When Google said RubyGems was bad news" publication: "Ruby Weekly" issue: 653 published_at: "2023-05-11" canonical_url: "https://rubyweekly.com/issues/653" --- Plus some bad news, a critical caching bug, and the beauty of Bridgetown. | #​653 — May 11, 2023 [Read on the Web](https://rubyweekly.com/issues/653) Together with [![Memetria\](https://res.cloudinary.com/cpress/image/upload/c_fill,g_auto,w_600,h_145/e_make_transparent/co_white,e_outline:7/vvpdctzacmq3xehpvwps.png)](https://dashboard.memetria.com/rubyweekly) _From the editor:_ **This is a re-send of [yesterday's issue](https://rubyweekly.com/issues/653) of _Ruby Weekly._ 'Google Safe Browsing' flagged RubyGems․org as a malware site in error and, because we linked to it, they decided our email was a problem too.** [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/ulvxrmjf4c3lpycsx1ea.jpg)](https://twitter.com/rubygems_status/status/1656775128980799489) Many thanks to everyone who sent us notifications about yesterday's issue being tagged as malware or being sent to spam, but everything seems to be okay now. Maciej Mensfeld [tweeted about the problem](https://twitter.com/maciejmensfeld/status/1656770677087817729) initially and it [was resolved several hours ago.](https://twitter.com/rubygems_status/status/1656826901841993728) This issue also broke the entire use of RubyGems for numerous users using DNS systems protected by Google Safe Browsing, so we hope to feature some sort of post-mortem in the next issue. **If you received and enjoyed yesterday's issue, you can delete this one and enjoy the rest of your day.** If you did _not_ get yesterday's issue due to the above problem, here you are: Ruby Weekly [A Few Words on the State of Ruby Type Annotations](https://zverok.space/blog/2023-05-05-ruby-types.html) — If you spend much time on dev-oriented social media, static typing seems to be having quite the renaissance. Ruby, though, has remained fully dynamic, with the compromise being the addition of [RBS](https://github.com/ruby/rbs), a way to describe type signatures for Ruby code, plus third party tools like [Sorbet](https://sorbet.org/). Victor lays out the entire state of type annotations in Ruby and wants us to consider if there’s a sensible way forward. Victor Shepelev 🇺🇦 🫣 DHH has been thinking about static typing too: [he's definitely not a fan.](https://world.hey.com/dhh/programming-types-and-mindsets-5b8490bc) [Shopify Layoffs Affect Ruby Teams and More](https://news.shopify.com/important-team-and-business-changes) — It’s sad when any layoffs occur and particularly so with Shopify having a strong reputation in the Ruby world through being a large Ruby shop, [hiring many Ruby contributors](https://shopify.engineering/shopify-ruby-at-scale-research-investment), and funding programs like [Ruby Shield.](https://rubycentral.org/news/ruby-shield/) Ruby and Rails infrastructure ([#](https://ruby.social/@flavorjones/110312552827021900)) and YJIT teams have all been affected. Shopify [![\](https://copm.s3.amazonaws.com/d6106156.png)](https://dashboard.memetria.com/rubyweekly) [Memetria: Secure, Scalable, Full-Featured Redis 7 Hosting](https://dashboard.memetria.com/rubyweekly) — The latest Redis features, instrumented and scaled with the tools teams need as they grow. Memetria sponsor ▶[Exit(ing) Through the YJIT](https://www.youtube.com/watch?v=PBEklhwJcUA) — Somehow this talk escaped my attention till now, but if you want to _really_ understand the work going on with YJIT, one particular recent enhancement to its development, and how the Rust rewrite is going, this is for you. At just 29-minutes, the value per minute is high. Eileen M Uchitelle **QUICK BITS** - 📅 The [Call for Papers for _Rails World 2023_](https://rubyonrails.org/2023/5/9/rails-world-call-for-papers-now-open) is now open. The actual event takes place in Amsterdam on October 5-6 and there's a [waiting list for tickets](https://ti.to/rails-world/rails-world-2023) when they eventually drop. - 🎙 The _Ruby on Rails Podcast_ has shared a special episode of [▶️ a community panel from RailsConf 2023](https://www.therubyonrailspodcast.com/469). It's very mixed, upbeat and light hearted, but we do get to find out why _tenderlove_ is so called. - [Crystal](https://crystal-lang.org/) is a language that intrigues me and many Rubyists because it takes a lot of inspiration from Ruby, while being compiled and statically typed. In ['Crystal, the language for humans'](https://www.deusinmachina.net/p/a-look-at-the-crystal-programming), Diego Crespo makes similar arguments for Crystal as others have made for Ruby over the years. - Stack Overflow's annual developer survey [is now live.](https://stackoverflow.blog/2023/05/08/the-2023-developer-survey-is-now-live/) Let's see if we can give Ruby a good showing. 📕 Tutorials, Articles, and Videos [Solving a Critical Bug in the Default Rails Caching Library](https://www.aha.io/engineering/articles/solving-a-critical-bug-in-the-default-rails-caching-library) — A look at a flaw involving Dalli and memcached that results in incorrect HTML being returned from a cache. (If you’re not using Dalli and memcached, this wouldn’t have affected you.) Andrew Jones [Let's Make a Blog with Bridgetown](https://hanamimastery.com/episodes/44-bridgetown) — Jekyll is probably the best known Ruby static site generator but [Bridgetown](https://www.bridgetownrb.com/) is the _best_, claims Seb Wilgosz. See the basics either in an 8-minute screencast or the accompanying article. Hanami Mastery [Five Easily Missed Performance Fixes for Rails Apps](https://pawelurbanek.com/rails-performance-fixes) — A look at a few configuration and infrastructure-related tweaks that can have big performance impacts. Paweł Urbanek [Free eBook: Advanced Database Programming with Rails and Postgres](https://pganalyze.com/ebooks/advanced-database-programming-rails-postgres?utm_source=RubyWeeklySecondary05112023) — Learn about subqueries, materialized views, and custom data types in Postgres & Rails and follow along with our examples. pganalyze sponsor [Organize Business Logic in Your Rails App](https://blog.appsignal.com/2023/05/10/organize-business-logic-in-your-ruby-on-rails-application.html) — A high level breeze through a few different approaches to structure. Julian Rubisch [Should I Use Action Filters?](https://www.visuality.pl/posts/should-i-use-action-filters) — Mateusz makes the argument for restricting your use of [filters](https://guides.rubyonrails.org/action_controller_overview.html#filters) and being more explicit about what your methods need. Mateusz Woźniczka [Four Essential Tools to Level Up Your Rails Security](https://www.fastruby.io/blog/rails/security/ruby-security-toolkit.html) Ernesto Tagwerker (FastRuby) [Deploying a Jekyll-Powered Blog to AWS Amplify](https://blog.saeloun.com/2023/05/10/deploy-jekyll-blog-to-aws-amplify/) Gowsik Vivekanandan [Revisiting Ruby's `throw` and `catch`](https://www.akshaykhot.com/throw-and-catch-in-ruby/) Akshay Khot 🛠 Code & Tools [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/ievcyrdkx6cryxfzahgc.jpg)](https://github.com/ankane/safely) [Safely: Rescue and Report Exceptions in Non-Critical Code](https://github.com/ankane/safely) — The idea here is that while you may want to know about failures and exceptions, they don’t necessarily need to result in bailing out entirely. Andrew Kane [Litestack 0.20: Embedded Services for Ruby Webapps](https://github.com/oldmoe/litestack) — An interesting project that tries to provide an extended but contained environment for Ruby webapps with an SQLite backed database, job processing system, cache, and even pub/sub mechanism. v0.20 adds LiteCable, an SQLite driver for ActionCable opening up even more real-time opportunities. Mohammad A. Ali [Fixed Price Monthly Code Maintenance for Rails Apps](https://reinteractive.com/service/code-care) — No time to do those small but critical updates? CodeCare will take care of necessary tweaks, bug fixes, upgrades and ongoing improvements for your app. reinteractive Pty Ltd sponsor [IoMonitor 1.0: A Way to Detect Potential Memory Bloat](https://github.com/DmitryTsepelev/io_monitor) — Push this into your Rails app and get more insight into when a lot of I/O (through either Active Record or Net::HTTP for now) is resulting in relatively little output. Dmitry Tsepelev [An AI-Powered Assistant Right in Your Rails Console](https://github.com/railsjazz/ask_chatgpt) — Would you appreciate an AI powered assistant helping you out right inside `rails console`? You need an OpenAI API key, but this does the rest. Igor Kasyanchuk [Sending Tweets from Ruby using Twitter v2 OAuth2](https://gist.github.com/jkotchoff/e2f5e5fa431f090ab2fb62613287dfbb) — I’m very behind the times with Twitter’s API drama, but Jason sent this in and promised it would be useful to someone. Jason Kotchoff Jobs [Find Ruby Jobs with Hired](https://hired.com/join/?utm_source=newsletter&utm_medium=sponsor&utm_campaign=%28b2c%29%28l-all%29%28r-all%29%28cooper-rubyweekly%29&utm_content=easy-job-hunting) — Hired makes job hunting easy-instead of chasing recruiters, companies approach you with salary details up front. Create a free profile now. Hired [Senior Backend Engineer (Remote - EMEA)](https://booqable.com/careers/backend-developer/) — Booqable prides itself on being a global company with team members working together from across the world. We are remote-first, so you can join us from wherever you are. Booqable - [Solidus 4.0](https://solidus.io/blog/2023/05/08/solidus-v4-0) ↳ Rails-based e-commerce platform. - [ActiveHash 3.2](https://github.com/active-hash/active_hash) ↳ Read-only ActiveRecord-esque hashes. - [Maxitest 5.0](https://github.com/grosser/maxitest) ↳ Minitest enhanced with many more features. - [RuboCop::GraphQL 1.2](https://github.com/DmitryTsepelev/rubocop-graphql) ↳ For enforcing [graphql-ruby](https://github.com/rmosolgo/graphql-ruby) best practices. - [test-queue 0.8](https://github.com/tmm1/test-queue) ↳ Parallel test runner for CI environments. - [FakeRedis 0.9.2](https://github.com/guilleiguaran/fakeredis) ↳ In-memory fake Redis for testing/experimenting. - [Twilio-Ruby 6.0](https://github.com/twilio/twilio-ruby) – Twilio API client library. - [debug 1.8.0](https://github.com/ruby/debug/releases/tag/v1.8.0) Curated by [Peter Cooper](https://twitter.com/cooperx86) and [Glenn Goodrich](https://twitter.com/ruprict). Published by [Cooperpress](https://cooperpress.com/). [Change your email](https://rubyweekly.com/edit_subscription/*|UID|*) or [Stop getting this newsletter.](https://rubyweekly.com/leave/*|UID|*) © Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom Other weekly newsletters we publish include [Postgres Weekly](https://postgresweekly.com/), [React Status](https://react.statuscode.com/), [Frontend Focus](https://frontendfoc.us/), and [JavaScript Weekly](https://javascriptweekly.com/).