RubyFlow

Voice control for your Ruby on Rails app

Mon, 21 Sep 2026 21:52:19 +0000

https://github.com/igorkasyanchuk/voice_control - wanna use Jev AI to control your Ruby on Rails app with voice? Easy!

Amazing Print v3.0.0

Mon, 21 Sep 2026 16:48:05 +0000

Amazing Print, the maintained fork of the popular Awesome Print gem to enhance the pretty-printing of Ruby objects, has been updated to version 3. It works with the next version of Rails (8.2, or 9, or whatever the next version number will be). If you are still using Awesome Print, you will want to migrate to Amazing Print v3 as part of your next Rails upgrade, or your app will crash on boot! Thankfully it should be a drop-in replacement, since the coloring default behavior has been updated to be closer to Amazing Print’s defaults. A new colors option has been introduced for further tweaking. Pro-tip: are you migrating from Awesome Print and missing the old-school hash rocket visual style? Add AmazingPrint.defaults = { hash_format: :rocket } to your ~/.irbrc or ~/.pryrc.

Beskar 0.2: Rails security with coordinated rate limits and session revocation

Mon, 21 Sep 2026 10:30:08 +0000

I’ve released Beskar 0.2.0, an MIT-licensed security engine for Rails 8+. It combines authentication rate limits, scanner detection, configurable account locks, persistent IP bans, and a mountable security dashboard. This release moves enforcement state into the shared database, coordinates limits across application workers without requiring Redis, and adds durable session revocation.

I made a Jev gem with an API that feels like it belongs in Ruby

Mon, 21 Sep 2026 10:24:15 +0000

I released jev-feels, a small Ruby/Rails gem for semantic predicates powered by Jev

Your Transaction Committed. Did the Job Reach the Queue?

Sun, 20 Sep 2026 04:20:53 +0000

A source-backed trace of deferred Active Job enqueueing, why a Solid Queue failure can arrive after the application transaction commits, and when shared storage or an outbox changes the guarantee.

Bootstrap Helpers are back

Fri, 18 Sep 2026 23:32:04 +0000

https://claudiob.github.io/bh/

Testing Background Jobs with Minitest Rails

Fri, 18 Sep 2026 14:47:25 +0000

https://minitestrails.com/guide/testing-background-jobs/

Vessel 0.3.0 is here (and is completely redone)

Fri, 18 Sep 2026 07:31:56 +0000

Ruby is getting a new release of Vessel, Ruby alternative to Python popular Scrapy project.

The Embarrassing Ruby/Rails Community Chronicles 2026-09-17

Fri, 18 Sep 2026 01:20:39 +0000

The life of a Ruby dev in 2026! I made an effort to post a recorded talk that I gave at my local Montreal Ruby meetup as a helpful gesture for the benefit of the Ruby community at large… https://andymaleh.blogspot.com/2026/09/the-embarrassing-rubyrails-community.html

Montreal.rb February 2026 Crystal: Ruby with Static Typing

Thu, 17 Sep 2026 18:44:13 +0000

The video and slides for the Montreal.rb February 2026 talk “Crystal: Ruby with Static Typing” have been published! The real exciting bit to any real Rubyist is that Crystal has similar syntax to Ruby’s and similar performance to that of C/C++/Rust. That is extremely exciting and awesome!!! It means Rubyists don’t have to struggle through C or Rust’s syntax to get performance enhancement as they have a much more elegant option in Crystal. https://andymaleh.blogspot.com/2026/09/montrealrb-february-2026-crystal-ruby.html

RippleEffect: static change-impact analysis for Rails

Wed, 16 Sep 2026 22:49:16 +0000

I built RippleEffect, a Ruby gem for figuring out what a Rails change might affect before you refactor.

Rails Hyperdrive: supercharged agentic development for Rails

Wed, 16 Sep 2026 17:34:42 +0000

Shipping skills could soon mean as much as READMEs. As AI writes more, libraries that teach agents to correctly use their APIs will win. Rails Hyperdrive lets gems distribute agent guidance, and getting started just takes Markdown files and a gemspec metadata entry.

Coldwire: offline support for Rails, Hotwire, and Hotwire Native

Tue, 15 Sep 2026 15:14:20 +0000

https://github.com/noreastergroup/coldwire-rails

Video: Glimmer DSL for Web 0.10.5 Before & After Mutations

Tue, 15 Sep 2026 03:49:35 +0000

Release video for Glimmer DSL for Web (Award-Winning Frontend Framework for Ruby on Rails) 0.10.5 Before & After Mutations. https://youtu.be/BJ0oSsyddMg

Support Award-Winning Open-Source Projects for the Benefit of the Ruby Community!

Mon, 14 Sep 2026 04:16:28 +0000

I got a weird message from a dev on LinkedIn sharing with me a Frontend UI he built in Opal Ruby, supposedly as inspiration by my library Glimmer DSL for Web (award-winning Opal Frontend Framework for Rails)… https://andymaleh.blogspot.com/2026/09/support-award-winning-open-source.html

Rails 8 rate_limit and Solid Cache do not compose: the lost first increment

Sun, 13 Sep 2026 12:02:38 +0000

https://launchkit.codes/yield/rails-without-redis

A Record Passed to Active Job Becomes an Identifier, Not a Snapshot

Sun, 13 Sep 2026 05:27:10 +0000

A source-backed explanation of how Active Job turns an Active Record argument into a GlobalID locator, why workers load later row state, and how to preserve event-time facts without discarding transient deserialization failures.

Faster rendering for your partials

Fri, 11 Sep 2026 20:07:40 +0000

https://github.com/igorkasyanchuk/view_bind - with this gem, you can render your partials 10%, 20%, 400% faster. Depending on your code. Benchmarks are inside, so you can.

Free Rails Architecture Checkup for coding agents

Thu, 10 Sep 2026 23:46:18 +0000

A repo-aware prompt for Codex, Claude Code, Cursor, and similar tools that audits an existing Rails application for conflicting architectural precedent, missing decisions, structural risks, and agent context gaps.

A URL shortener in pure Rails, and the one line that decides who it redirects to

Thu, 10 Sep 2026 14:25:38 +0000

https://launchkit.codes/yield/rails-url-shortener

Ruby, Rails & AI Daily: Active Storage RCE Under Active Exploitation, ZJIT Inlines GC

Thu, 10 Sep 2026 01:59:16 +0000

Kicking off a daily roundup on RubyInsights covering Ruby, Rails, and AI. Today’s edition leads with CVE-2026-66066 (“KindaRails2Shell”), the Active Storage RCE that’s now confirmed under active exploitation months after patches shipped for Rails 7.2.3.2, 8.0.5.1, and 8.1.3.1, worth a fleet check even if you patched back in July. Also covered: ZJIT learning to inline GC allocations, this week’s Rails codebase updates, Claude Fable 5.1 topping the Agents on Rails benchmark, Chrome 153’s 230 security fixes, and the new wave of cybersecurity-focused models from OpenAI, Anthropic, and Google. Full roundup with sources.

Your Webhook Endpoint Is a Tiny Distributed System

Wed, 09 Sep 2026 17:45:07 +0000

A simple bit of webhook consumption is sometimes not that simple:

Ruby Daily: RubyLLM 2.0 hits RC, Active Storage exploited in the wild, Rails goes Rac

Tue, 08 Sep 2026 23:13:01 +0000

I’ve started a daily roundup of the Ruby, Rails and AI world over at RubyInsights, and today had more than usual to cover. ruby_llm 2.0.0.rc1 hit RubyGems, the first RC of the rewrite that splits providers from protocols and makes the Responses API the OpenAI default. More urgently, CVE-2026-66066 in Active Storage (CVSS 9.5, arbitrary file read via libvips) is now being exploited in the wild, so if you accept image uploads: patch to 7.2.3.2 / 8.0.5.1 / 8.1.3.1, and rotate secret_key_base and your storage credentials, because the patch does not un-leak what was already read. On the happier side, the September 4 This Week in Rails is almost entirely Ractor-safety merges, and ZJIT now inlines the GC allocation fastpath for about 1.77x on hash allocation.

time to run some maintenance tasks

Tue, 08 Sep 2026 22:07:15 +0000

https://github.com/igorkasyanchuk/maintenance_on_steroids - a new gem, inspired by the limitations of Shopify/maintenance_tasks gem.

Ruby, Rails & AI Weekly Roundup: KindaRails2Shell Under Active Attack, Ractor-Ready

Mon, 07 Sep 2026 23:37:27 +0000

This week’s roundup leads with CVE-2026-66066 (KindaRails2Shell), which went from published PoC to active exploitation on August 30: more than 50 detections within hours, around 360 by Monday, and roughly 7,100 exposed instances counted in early August. The part worth re-checking even if you already patched is that the fix is version-coupled. Vips.block_untrusted(true) only exists if libvips is 8.13 or newer and your ruby-vips binding is recent enough to call it, so an app on Rails 8.1.3.1 sitting on an old libvips reports itself as patched while staying fully exploitable. And because the chain reads SECRET_KEY_BASE before escalating to RCE, patching does not undo a read that already happened.