How Fast Can You Actually Patch Ruby? — When the Ruby security fixes shipped last week, Dennis timed how long they took to reach version managers, Docker images, CI services and hosts. The core team's image took eight minutes, while Docker's official image (Rails and Kamal's default) took ~16 hours.

Dennis Paagman

Your Dashboard Shouldn’t Wait for a Cron Job — The nightly job rolls up yesterday’s rows so the dashboard loads. Numbers lag a day and the job keeps growing. TimescaleDB continuous aggregates refresh rollups inside Postgres, so ActiveRecord reads fresh totals. Get $1000 credit to start.

Tiger Data (creators of TimescaleDB) sponsor

Bad Requests and the Dream of a Quiet Rails App — Requests for /.env and /wp-admin, binary bytes in User-Agent headers, made-up MIME types… Ben walks through the Rails middleware stack to show why some junk requests become 500s, and why even 'handled' ones can still set off your error monitor.

Ben Sheldon

What's New at RubyGems.org: Ruby Central's Changelog Returns — Ruby Central catches us up on RubyGems.org and Bundler 4.1 work. Its AI scans of popular gems are a highlight: reviewers rejected 90% of the findings they looked into, though one was a critical auth bypass in rubyntlm.

Kirk Haines (Ruby Central)

Thank You, But I Prefer It My Way — If an LLM can just rewrite a library, is it worth persuading a maintainer about your PR or do you just route around it? Julik ponders the complexities and offers some practical ways forward.

Julik Tarkhanov

I Get 215 GitHub Notifications a Day, So I Built a Bot to Triage Them — A look at how the creator of RubyLLM built a RubyLLM-powered agent to label issues and PRs, reply only when useful, and sort the rest onto a board.

Carmine Paolino

Carton: Real Boundaries for Ruby — Built on Ruby 4's experimental Ruby::Box, Carton enforces module boundaries at runtime where only what a 'carton' exports is visible outside it, monkey patches to core classes stay contained, and each carton can bring its own gem versions.

David Cristofaro

🚨 Rails 8.0 Support Ends Nov 7 | Get AI Upgrades on Autopilot — Our AI agent ships small upgrade PRs that pass your tests; nothing merges without you. Join the beta waitlist.

FastRuby.io® | AI-Native Rails Maintenance sponsor

Spree 6.0: A Rewrite of the Rails E-Commerce Platform — Marketplace, B2B, tax and inventory features are now in the open source core, carts and orders are separate models, and the checkout state machines are gone. Note that Rails now powers only the backend, with a React admin and Next.js storefront.

Spree Commerce

GenevaDrive: Durable, Step-Based Workflows for Rails — Define multi-step workflows tied to a record, with waits, resumable steps over large collections, and signals from webhooks. State lives in your database, with steps surviving restarts and duplicate job runs being skipped.

Julik Tarkhanov

⏱️ Horologium: Scientific Time Library for Ruby — A new gem, extracted from Astronoby, that handles eight time scales including TAI, TT, TDB, UTC and UT1, plus leap seconds (which Time can't represent) and precise Julian dates.

Rémy Hannequin