I'd like to announce that Rails 3.2.12, 3.1.11, and 2.3.17 have been released. 3.2.12 and 3.1.11 contain one security fix, and 2.3.17 contains two security fixes. It is recommended that you update immediately. You can read about the security fixes by following these links: CVE-2013-02...
I'd like to announce that 3.0.20, and 2.3.16 have been released. These releases contain one extremely critical security fix so please update IMMEDIATELY . You can read about the security fix by following this link: CVE-2013-0333 In order to ease upgrading, the only major changes in ea...
I'd like to announce that 3.2.11, 3.1.10, 3.0.19, and 2.3.15 have been released. These releases contain two extremely critical security fixes so please update IMMEDIATELY . You can read about the security fixes by following these links: CVE-2013-0155 CVE-2013-0156 In order to ease upg...
Rails versions 3.2.10, 3.1.9, and 3.0.18 have been released. These releases contain an important security fix. It is recommended that all users upgrade immediately . The security identifier is CVE-2012-5664, and you can read about the issue here . For other change in each particular r...
Rails versions 3.2.10, 3.1.9, and 3.0.18 have been released. These releases contain an important security fix. It is recommended that all users upgrade immediately . The security identifier is CVE-2012-5664, and you can read about the issue here . For other change in each particular r...
Rails Contributors is a website that keeps track of all contributions made to the Ruby on Rails code base. The application tries hard to give credit as accurately as possible, which is something you cannot do with git log . For example, according to Git the author of this commit is "@...
The People Behind Rails 4 Posted by fxn , November 21, 2012 @ 12:00 am Rails 4 is coming along nicely with a ton of new stuff , but this major release would have not been possible without the help of some people whose contributions have been outstanding. We want to dedicate this post ...
Performance Improvement to send_file: Avoid having to pass an open file handle as the response body. Rack::Sendfile will usually intercept the response and just uses the path directly, so no reason to open the file. This performance improvement also resolves an issue with jRuby encodi...
Rails 3.2.9.rc3 has been released. If no regressions are found I will release 3.2.9 final this Monday 12th. If you find a regression open an issue on github and mention me on it, mail me or tweet me, whatever but let me know :).
Rails 3.2.9.rc1 has been released. If no regressions are found I will release 3.2.9 final this Thursday 1st. If you find a regression open an issue on github and mention me on it, mail me or tweet me, whatever but let me know :).
Do not set RAILS_ENV to "development" when using db:test:prepare and related rake tasks. This was causing the truncation of the development database data when using RSpec. In RC2 was fixed again when using config.active_record.schema_format = :sql Rafael Mendonça França Do not conside...
Good news everyone! Rails version 3.1.8 has been released. This release of Rails contains three important security fixes: CVE-2012-3463 Ruby on Rails Potential XSS Vulnerability in select_tag prompt CVE-2012-3464 Potential XSS Vulnerability in Ruby on Rails CVE-2012-3465 XSS Vulnerabi...
Good news everyone! Rails version 3.0.17 has been released. This release of Rails contains three important security fixes: CVE-2012-3463 Ruby on Rails Potential XSS Vulnerability in select_tag prompt CVE-2012-3464 Potential XSS Vulnerability in Ruby on Rails CVE-2012-3465 XSS Vulnerab...
Setting up continuous integration for Rails has been a complicated undertaking in the past. Rails needs to be tested against different Ruby versions and various modes (such as running test cases in isolation/non-isolation, running ActiveRecord with identitymap enabled/disabled). This ...
Rails 3.2.8.rc2 has been released. If no regressions are found we will release 3.2.8 final around Wednesday 8th. IMPORTANT We are removing all the deprecation warnings that we introduced in 3.2.x. We have decided to stop introducing API deprecations in all point releases going forward...
Rails 3.2.8.rc1 has been released. If no regressions are found we will release 3.2.8 final on Friday. IMPORTANT We are removing all the deprecation warnings that we introduced in 3.2.x. We have decided to stop introducing API deprecations in all point releases going forward. From now ...
Good news everyone! Rails version 3.2.7 has been released. This version contains an important security fix, please upgrade immediately. The security fix impacts people using digest authentication from Action Pack. You can read more about the problem here . Thank you to Charlie Somervi...
Good news everyone! Rails version 3.2.7 has been released. This version contains an important security fix, please upgrade immediately. The security fix impacts people using digest authentication from Action Pack. You can read more about the problem here . Thank you to Charlie Somervi...
Over the years I have seen some confusion about what is exactly docrails and how it relates to the documentation of Ruby on Rails. This post explains everything you want to know about this aspect of the project. What is docrails? docrails is a branch of Ruby on Rails with public write...
The Enterprise is evolving: economic crisis, a new generation of developers, new management, insane deadlines. Ruby and Rails have quickly become very attractive for the Enterprise and having big companies acting as startups is often something a lot of managers dream of. As a matter o...
The forthcoming 3.2.x release series will be the last branch of Rails that supports Ruby 1.8.7. There’s a new 3-2-stable branch in git to track the changes we need until 3.2.0 final is release and for managing point releases after that. So for now you should stop floating on rails/mas...
Good news everyone! Rails version 3.0.14 has been released. This release of Rails contains two important security fixes: CVE-2012-2694 Ruby on Rails Unsafe Query Generation Risk in Ruby on Rails CVE-2012-2695 Ruby on Rails SQL Injection Please note that the last round of security fixe...
Good news everyone! Rails version 3.1.6 has been released. This release of Rails contains two important security fixes: CVE-2012-2694 Ruby on Rails Unsafe Query Generation Risk in Ruby on Rails CVE-2012-2695 Ruby on Rails SQL Injection Please note that the last round of security fixes...
Good news everyone! Rails version 3.2.6 has been released. This release of Rails contains two important security fixes: CVE-2012-2694 Ruby on Rails Unsafe Query Generation Risk in Ruby on Rails CVE-2012-2695 Ruby on Rails SQL Injection Please note that the last round of security fixes...
Good news everyone! Rails version 3.2.5 has been released. This version of Rails is a less broken version of 3.2.4! What happened with 3.2.4? A regression was reported in the release candidate. I reverted that regression without releasing another release candidate for testing. This re...
Good news everyone! Rails version 3.2.4 has been released. This release of Rails contains two important security fixes: CVE-2012-2660 Ruby on Rails Active Record Unsafe Query Generation Risk CVE-2012-2661 Ruby on Rails Active Record SQL Injection Vulnerability It is suggested that all...
Good news everyone! Rails version 3.1.5 has been released. This release of Rails contains two important security fixes: CVE-2012-2660 Ruby on Rails Active Record Unsafe Query Generation Risk CVE-2012-2661 Ruby on Rails Active Record SQL Injection Vulnerability It is suggested that all...
Good news everyone! Rails version 3.0.13 has been released. This release of Rails contains two important security fixes: CVE-2012-2660 Ruby on Rails Active Record Unsafe Query Generation Risk CVE-2012-2661 Ruby on Rails Active Record SQL Injection Vulnerability It is suggested that al...
The HTTP method PUT means resource creation or replacement at some given URL. Think files, for example. If you upload a file to S3 at some URL, you want either to create the file at that URL or replace an existing file if there's one. That is PUT. Now let's say a web application has a...
