DevOps

What's New in RubyGems/Bundler 4.1, Part 1: override and prune

I'm Hiroshi Shibata (hsbt), a Ruby committer and the lead maintainer of RubyGems and Bundler. TL;DR RubyGems and Bundler 4.1.0.beta2 shipped on Octo…

Sidekiq to Kafka: A Mental-Model Map for Rails Developers

TL;DR: If you've spent years with Sidekiq, Kafka can look like "Sidekiq with extra steps". It isn't. Sidekiq moves jobs (commands to do something).…

CVE-2026-66066: an image upload path that reads /proc/self/environ

CVE-2026-66066: an image upload path that reads /proc/self/environ The shortest way to describe CVE-2026-66066 is that a framework default turned an…

I wrote a programming language where you code in Polish. Here are 7 things it taught me about Ruby.

I write Ruby for a living, and about two years ago it started bothering me that I had no real idea what happens between typing x = 5 and the machine…

Installing Ruby on Ubuntu 24.04

Ruby is a dynamic, object-oriented programming language perfect for creating basic scripts to complex web applications. It offers a modern syntax fo…

KPIAssembler: stop hand-picking KPIs, let AI propose them

Text-to-SQL looks great in a demo. Then someone ships a conversion rate that JOIN s without ON , a revenue figure that double-counts through a fan-o…

Building a Radio Player with Ruby & WebForms Core

WebForms Core (WFC) is a web development technology owned and developed by Elanat . It provides a server-driven approach for building interactive we…

Your Webhook Endpoint is a Tiny Distributed System

If you want the Rails implementation version of this, Webhooks in Rails goes deeper on verification, durable receipt, idempotency, retries, jobs, te…

Re-Organized configuration in Rails

A while back I wrote about organizing configuration in Rails . The idea was simple: drop YAML files into config/configurations/ and get namespaced c…

Durable Objects without Cloudflare, on the database you already run

When a build breaks, the bug fixes itself

When a build breaks, the bug fixes itself We stopped babysitting CI failures. Now a red build files its own bug — and an AI agent picks it up and sh…

One Rails request, one event: production context for coding agents

Wide Events is a Rails gem that puts the production context a coding agent needs onto one OpenTelemetry root span per request or job. In one product…

Kubernetes earned its security badge in 2017 and never came back

Kubernetes has an OpenSSF Best Practices badge . It earned that badge on 16 August 2017 at 14:52:28 UTC, and nobody has touched the entry since. The…

[Ruby] The True Value of Flow Control Operators

Introduction Ruby has four types of logical operators: && / || / and / or , each with a different precedence. && / || have higher pr…

Ruby Reactor vs dry-transaction vs Trailblazer: Choosing a Ruby Workflow Library in 2026

Four ways to orchestrate business logic in Ruby. One map to find yours. You're building something that involves multiple steps. Charge a card, send…

Ruby shipped the fix for SleeperGem 45 days before it happened

On June 3rd, Bundler 4.0.13 shipped a feature called cooldown . The release post described the problem it solves like this: "an account is compromis…

The four places a hand-rolled Ruby facade gives out

You don't need a gem to build a facade. This is a perfectly good one: class App def self . config = Rails . configuration def self . redis = REDIS_P…

Your next model upgrade won't close this gap

There's a comfortable thing people say when they see an AI agent query a code map. "Nice crutch. For now." The logic underneath it is reasonable. Co…

Beam Up: CLI to deploy static sites

Beam Up is a command-line tool I wanted for some time. Its goal is to make deployments of static sites across various providers simpler from your ma…

Facts — прохождение простой машины от HackTheBox

Простая машина от Hack The Box, на которой работает Camaleon CMS 2.9.0 под управлением nginx. В системе включена функция самостоятельной регистрации…

The webhook inbox pattern: stop writing this controller by hand

Every Rails app that takes Stripe webhooks has some version of this controller: def create payload = request . body . read sig_header = request . en…

The Silent Performance Killer in Rails: Understanding and Fixing N+1 Queries

If you've ever investigated a slow Rails endpoint, chances are you've encountered one of the most common performance problems in the Rails ecosystem…

Dynamic OG Images in Rails

Every blog post, product page, and profile in a Rails app deserves its own Open Graph image, the picture that shows up when someone shares the link…

Rails Performance Optimization: Fixing N+1 Queries with includes, preload, and eager_load

Originally published on Hashnode: https://railswithyashika.hashnode.dev/rails-performance-n-plus-one-queries When working with associations in Rails…

It Worked on My Machine (Literally)

I have a TRMNL on my desk. If you haven't seen one, it's a little e-ink display from trmnl.com that shows you whatever you tell it to: your calendar…

Pressure-testing Ota on Discourse: repo-wrapper truth matters more than a passing bundle command

Overview Discourse turned out to be a good pressure repo for a narrow but important reason: the difference between bundle existing and the repo's re…

Rails GuardDog: Advanced Security Scanner for Rails Applications

Rails GuardDog: Advanced Security Scanner for Rails Introduction Today I'm excited to announce Rails GuardDog v0.1.0 — an open-source security scann…

RubyConf has joined RailsConf & RailsWorld as another exclusive discriminatory unexcellent conference

(Originally published as this blog post: https://andymaleh.blogspot.com/2026/06/rubyconf-has-joined-railsconfrailsworld.html ) RubyConf has joined R…

🇺🇸 3 Essential Gems to Eliminate Friction in Your Rails Workflow

Anyone who works with Ruby on Rails knows that, despite the framework being incredible for productivity, there are some classic workflow deficiencie…

How to Pause and Resume Ruby Workflows Mid-Flight

Ruby Reactor 0.4.0 introduces interrupts — the first native saga pause/resume mechanism in the Ruby ecosystem. You've built a checkout flow. The use…