News

RubyGems is not vulnerable to the xz/liblzma backdoor - RubyGems Blog
The past few days have seen the security world focused on the revelation of the xz/liblzma backdoor. For more background, see this early writeup of the issue, this GitHub Gist, this detailed timeline, and the official detail page for CVE-2024-3094...

Aaron Patterson ✅: "Worked more on optimizing dele…" - Mastodon
Worked more on optimizing delegates with @jhawthorn today. There are more edge cases that I thought there would be (of course), but I'm testing it in work CI rn. Anyway, I really hope we can land this in Ruby 3.4 (I'm confident we can).

Introducing props_template: A Jbuilder alternative
I like Jbuilder. It’s been part of every Rails project every time I run rails new and the first thing I reach for when I want to create JSON responses. It’s as synonymous with JSON as ERB is with HTML.But I wanted a version of Jbuilder that had la...


CVE-2024-27280: Buffer overread vulnerability in StringIO
We have released the StringIO gem version 3.0.1.1 and 3.0.1.2 that have a security fix for a buffer overread vulnerability. This vulnerability has been assigned the CVE identifier CVE-2024-27280.DetailsAn issue was discovered in StringIO 3.0.1, as...

History of the endless method syntax · Short Ruby - Email Courses
When I learn about a new language feature, I like to read and discuss the proposal. How and why it was accepted. What was the requester trying to accomplish, and what problem did they try to solve?Here, I will review how the endless method was int...



In-Depth look at Action Mailbox | Cody Norman Personal Website
The Rails guides for the Action Mailbox Basics do a pretty good job of explaining what Action Mailbox is. Here’s how they describe what Action Mailbox is:Action Mailbox routes incoming emails to controller-like mailboxes for processing in Rails. I...