ZJIT 🤝 GC: Inlining GC Fastpath in ZJIT — JIT compilation first came to CRuby eight years ago, but the garbage collector has remained opaque to CRuby's JITs, with every allocation requiring a function call. Now, ZJIT can inline allocations, yielding a notable performance boost. Fingers crossed for Ruby 4.1!

Peter Zhu

🚨 We Give Your Auditors VEX, Not a Scanner Dump — We map your images, runtimes, and K8s workloads against CISA's KEV catalog, decide which findings actually impact your code, and issue the verdicts as VEX statements. Rails 7.2 is already EOL and 8.0 is next: Nov 7! What else is a risk in production?

FastRuby.io® | Infrastructure Assessment sponsor

Campfire Now Works on Spinel (Mostly) — Sam's work compiling Rails apps to run on Matz's Spinel Ruby AOT compiler has yielded a Campfire 'that chats' in a 5MB binary. Far from 100% complete, but you can grab it and try it for yourself.

Sam Ruby

🔒 A Critical Rails Vulnerability in Attackers' Crosshairs — Remember the major Active Storage vulnerability (dubbed KindaRails2Shell) from late July? It's now being actively exploited, and VulnCheck reckoned, back in early August, that patching may not be enough if your secrets leaked first.

Ionut Arghire (Security Week)

Adventures in Daylight Saving, Norfolk Island, and Time Zone Math — More timezone quirks (don't we love 'em?) including how Europe/Dublin's 'inverted' DST scheme can make Ruby's dst? disagree with itself, and why Norfolk Island's permanent 30 minute offset change broke a gem.

Daniel Doubrovkine

AI Shouldn't Cost More Than It Saves — We can find where LLMs pay off, validate with real data, and tune for cost/effectiveness. Need help? Let's talk.

SINAPTIA sponsor

ArchSpec: Executable Architecture Specs for Ruby Apps — An architecture linter for any Ruby codebase. Declare components and boundaries in a single spec, then changes can be checked in CI, with no AI and no app boot involved. Presets are included for Rails, hexagonal and modular monoliths. If you remember Packwerk, this goes a bit further.

Carmine Paolino

APM for Ruby on Rails. One Gem, Every Feature, One Bill — Errors, N+1 queries, slow SQL, Sidekiq jobs and host metrics. Every feature on every plan. Two-minute install.

AppSignal sponsor

Ferrum 0.18: The High-Level API to Control Chrome in Ruby — A long standing library that drives Chrome over CDP (no Selenium needed). 0.18 adds Ferrum::Worker for talking to Workers and Service Workers, an API for reading the CDP accessibility tree, and thread safety improvements. (Yes, we mentioned this release last week, but I only just noticed it deserved a full writeup!)

Dmitry Vorotilin and RubyCDP team

MiniMagick 5.4: A Mini Replacement for RMagick — For when you don't need the full power of RMagick and just need ImageMagick's features for resizing, rotating, converting, etc. v5.4 adds a feature to pass open file descriptors in, rather than writing/reading a temporary file.

Marohnić et al.

Vessel 0.3: Fast High-Level Web Crawling Framework — Ruby's answer to Scrapy is back with the first release in five years. Pages can now be fetched using Chrome via Ferrum or plain HTTP via Mechanize, plus we get proxy rotation, a middleware pipeline, and more.

Dmitry Vorotilin