A weekly roundup of Rails changes covering security, new APIs, and bug fixes. Key highlights include: capping string-to-integer coercion in ActiveRecord to prevent DoS attacks, introducing ActiveSupport::TimeFormats and DateFormats for safer custom format registration (deprecating the old global hash mutation), adding ActionController::Parameters#deep_transform_values, fixes for optimistic locking bugs around savepoint rollbacks and blob analysis, PostgreSQL 18.4+ support for NOT ENFORCED foreign key constraints, parallelized MirrorService uploads (5x speedup with multiple backends), and numerous smaller fixes and improvements across ActiveStorage, ActionDispatch, and the query interface.

8m read timeFrom rubyonrails.org
Post cover image
4.8K Impressions