A weekly roundup of Rails changes covering security, new APIs, and bug fixes. Key highlights include: capping string-to-integer coercion in ActiveRecord to prevent DoS attacks, introducing ActiveSupport::TimeFormats and DateFormats for safer custom format registration (deprecating the old global hash mutation), adding ActionController::Parameters#deep_transform_values, fixes for optimistic locking bugs around savepoint rollbacks and blob analysis, PostgreSQL 18.4+ support for NOT ENFORCED foreign key constraints, parallelized MirrorService uploads (5x speedup with multiple backends), and numerous smaller fixes and improvements across ActiveStorage, ActionDispatch, and the query interface.
4.8K Impressions