RuboCop 1.89 is out with improved rubydex integration that unlocks several project-wide analysis opportunities metaredux.com/posts/2026/0... Enjoy! #Ruby

RuboCop 1.89: Project-Wide Analysis with Rubydex

RuboCop 1.89 is out, and it comes with the usual assortment of new cops and bug fixes. But there’s one theme running through this release that I’m particularly excited about, and that’s what I want to...

metaredux.com

This is probably one of the hardest posts for me to write, as I do not enjoy reliving these experiences, but I write on them in the hopes that they help others struggling with the same issues: baweaver.com/writing/2026...

What's my development setup look like these days? Well I figured between jobs it was a good time for some spring (fall?) cleaning. baweaver.com/writing/2026...

8 years ago was my first lemur talk back at Southeast Ruby 2018.

Last day today, and a lot of work done. From the initial launch of HealthScribe to the infra underpinning HealthAI, Zocdoc, and multiple other VP+ level goals it's been quite a ride. I'll be starting a new role on the 11th, and it is indeed a Ruby shop, albeit one that uses a decent amount of Go.

Brandon Weaver@baweaver.bsky.social · 5d ago

Monday is my last day at Amazon. It's been a wild ride, I've learned a ton and grown a lot in my career, made a lot of amazing connections, but it's always hard to say goodbye. I'm grateful for all the folks who I've worked with, and I'm leaving on a high note.

Half tempted to wire up a HUD like monitor above my keyboard and give it mruby extensions.

Monday is my last day at Amazon. It's been a wild ride, I've learned a ton and grown a lot in my career, made a lot of amazing connections, but it's always hard to say goodbye. I'm grateful for all the folks who I've worked with, and I'm leaving on a high note.

Might write a post on my dev setup later. Been a while. Also made a portable setup repo for provisioning new laptops for... reasons, probably coincidentally related to the Go posts and writing spree.

The Rails security team published attack details and -- more importantly -- tools and agent skills to run a forensic investigation to help you determine if you were exploited. Be careful out there. discuss.rubyonrails.org/t/cve-2026-6...

[CVE-2026-66066] Attack details, and tools to perform a forensic investigation

Hello there, I’m writing as a member of the Rails security team about CVE-2026-66066. As mentioned in the advisory, GHSA-xr9x-r78c-5hrm, we held back details about the attack vector to allow applicat...

discuss.rubyonrails.org

Mike Dalessio@flavorjon.es · last wk.

Upgrade Rails immediately, kids, this is a big one. github.com/rails/rails/...

Introducing GemCP: MCP tools for RubyGems. Ask your AI agent about gem compatibility, dependencies, versions, and ownership with data straight from RubyGems.org. `gem install gemcp` and add it to your MCP config. github.com/baweaver/gemcp

Introducing GemCP: MCP tools for RubyGems. Ask your AI agent about gem compatibility, dependencies, versions, and ownership with data straight from RubyGems.org. `gem install gemcp` and add it to your MCP config. github.com/baweaver/gemcp

Upgrade Rails immediately, kids, this is a big one. github.com/rails/rails/...

Possible arbitrary file read and remote code execution in Active Storage variant processing

### Impact In its default configuration, a Rails application that displays image variants may allow an unauthenticated attacker to read arbitrary files from the server, including the process envi...

github.com

I have never cared for "debate" in online spaces because it has always felt _off_. It took me a long time to understand why. The problem isn't disagreement. It's that much of what we call "debate" isn't debate at all.

I have never cared for "debate" in online spaces because it has always felt _off_. It took me a long time to understand why. The problem isn't disagreement. It's that much of what we call "debate" isn't debate at all.

I believe the closing from my recent talk "We who remember magic" is quite relevant today: youtu.be/IQQtnttsI5A

Rocky Mountain Ruby 2025 - We Who Remember Magic by Brandon Weaver

YouTube video by Confreaks

youtu.be

I believe the closing from my recent talk "We who remember magic" is quite relevant today: youtu.be/IQQtnttsI5A

Rocky Mountain Ruby 2025 - We Who Remember Magic by Brandon Weaver

YouTube video by Confreaks

youtu.be

I find myself studying up on Go for.... reasons, so I decided to write up on a few examples while I'm doing so. baweaver.com/writing/2026...

I find myself studying up on Go for.... reasons, so I decided to write up on a few examples while I'm doing so. baweaver.com/writing/2026...

New unified color theme identified! Primarily using the Macchiato variant. catppuccin.com

Catppuccin

A soothing pastel theme for the high-spirited! We are a community-driven color scheme, perfect for coding, designing, and more. Explore our color palettes, discover our wide range of ports, and view o...

catppuccin.com

Next up we have Bloom filters, a way to ask whether or not you've seen something yet that can always answer "no" correctly, but _might_ be wrong when saying "yes" baweaver.com/writing/2026...

Next up we have Bloom filters, a way to ask whether or not you've seen something yet that can always answer "no" correctly, but _might_ be wrong when saying "yes" baweaver.com/writing/2026...

As technologists we must remember tech serves customers, and forgetting that leads to bad incentives. The customer doesn't care if you're using Ruby or RPG if they can't complete a purchase, remember what were building for.

@tenderlove.dev Heya can we chat some time?

So the rabbit hole tonight started here: bugs.ruby-lang.org/issues/22111 The question is how in the world do we pattern match in Ruby against String keyed hashes from things like JSON.parse? The issue proposes one way, I mention another at the bottom as a comment.

When everything is on fire, nothing is on fire. Where do you start when every problem seems intractable? By drawing a map. baweaver.com/writing/2026...

When everything is on fire, nothing is on fire. Where do you start when every problem seems intractable? By drawing a map. baweaver.com/writing/2026...

The sheer number of observability and related docs, books, conf talks, and articles I'm pulling together for the next Ozymandias article.... Cartography of a Ruin will cover one of my strongest opinions: You cannot "fix" what you cannot measure and prove.

New RubyGems.org design 👀

Hanami 3.0 wouldn’t be so full of goodness without the support of our sponsors. Rubyists deserve choice, and these fine companies are helping make it happen. Thank you to @mike.contribsys.com, @baweaver.bsky.social, @honeybadger.io, @fastruby.io, @appsignal.com, and @serpapi.com!

Hanakai@hanakai.org · last mo.

Hanami 3.0 is here and in full bloom 🌸 This is our most complete release yet: mailers, i18n, and Minitest now built in, your apps faster by default, and plenty more! hanakai.org/blog/2026/06...

Shelley wrote about a king whose monument outlived everything it was built on. I've spent 15 years inside Rails monoliths that did the same thing. This is the first post about what to do when you're standing in the ruins. baweaver.com/writing/2026...