If you're worried about the recent Rails CVE, @flavorjon.es made a very good skill you can feed to your coding agent to help assess your apps. Read about it here! discuss.rubyonrails.org/t/cve-2026-6...

[CVE-2026-66066] Attack details, and tools to perform a forensic investigation

Hello there, I’m writing as a member of the Rails security team about CVE-2026-66066. As mentioned in the advisory, GHSA-xr9x-r78c-5hrm, we held back details about the attack vector to allow applicat...

discuss.rubyonrails.org

I’ll be at RubyCinf next week! Would love to chat with anyone with similar interests in education, learning, teaching, hockey, chess, or almost anything else.

We just watched "Marguerite's Theorem" in Prime Video. The most realistic math film I have seen, the blackboards, the jargon, the nerdiness (she absolutely nails it), ..., really recommended. www.imdb.com/title/tt2669...

Witnessing the total solar eclipse from a cruise ship, out at sea somewhere between Mallorca and Ibiza. That’s the plan

I realized it has been ~1.5 years since I concluded my series of post on JSON optimization. So I got curious how much faster it became since then. 2.7.2 was the last version before I took over maintainership. 2.9.0 was the version I released at the end of the blog series.

We had a speaker drop out of the Rust Berlin meetup next week (Friday, 29th, at JetBrains). Anyone wants to speak? If you get in touch before Sunday, I will think about something to bring you from Japan as a gift.

Zeitwerk 2.8 is out, with a new way to define namespaces. Given loader.nsfile = 'ns.rb' self-contained components can define their namespace inside their folder: my_component/ns.rb # MyComponent my_component/widget.rb # MyComponent::Widget More details in github.com/fxn/zeitwerk...

GitHub - fxn/zeitwerk: Efficient and thread-safe code loader for Ruby

Efficient and thread-safe code loader for Ruby. Contribute to fxn/zeitwerk development by creating an account on GitHub.

github.com

After weeks of work, Ruby’s master documentation now displays rbs signatures! We will release this feature in RDoc 8.0 soon as well. So any projects using rbs (inline or .rbs files) can benefit from it too. Check it on docs.ruby-lang.org/en/master

This guy's channel is hilarious www.youtube.com/watch?v=juHv...

Anthropic just admitted AI is bullsh*t

YouTube video by Mo Bitar

youtube.com

If you haven't upgraded yet, Ruby 4.0's garbage collection is generally much faster than 3.4. This patch release fixes the one area there had previously been a notable regression (allocating/freeing Classes).

k0kubun@k0kubun.com · 3mo ago

Ruby 4.0.4 Released www.ruby-lang.org/en/news/2026... This is a routine update that includes bugfixes. We recommend upgrading your Ruby version at your earliest convenience.

Really exciting to see Herb being adopted at GitHub! 🌿 Over the past months, the GitHub team has been running Herb across one of the largest Rails codebases out there where Herb helped uncover real issues missed by existing tooling while also providing invaluable feedback. 🙌

Made a new blurg post about AI + OSS security. I was going to just complain on here, but I figured a short blog post would be better for my complaining 😂 tenderlovemaking.com/2026/05/06/r...

Now that nobody writes code by hand anymore, I'm going to try to work on my mythical book about constants in Ruby, out of love for the craft, and just to go against the grain! OK, maybe I should publish a Markdown version you can feed to your agent 😂.

Today, we celebrate the Diada de Sant Jordi in Catalonia. Men give roses to women, and women give books to men. (I give both roses and books to women.) It is a very nice and colorful day. Streets are full with stalls and people enjoying, buying books and flowers.

Some reflections about not taking software errors for granted in my keynote of EuRuKo 2024: www.youtube.com/watch?v=sUhE...

Xavier Noria, keynote, "Zeitwerk: A Retrospective"

YouTube video by Euruko

youtube.com

In general, I am not a fan of callable interfaces in Ruby. There are several reasons, and one of them is that the interface is `call`: service.call(params) My issue with that is that "calling" is what the caller does, not what the object does.

I just saw the incomparable Michael McDonald published a memoir a couple of years ago. On its way! That's the music section of my library.

All these semicolons disprove LLMs just pick words from _existing_ training data. Think about it.

My daughter, who is into genetics, loved the logo of Helix. That's all I need, installing.

Do you know that feeling some people have, I'm done, now I have to write tests? now I have to write docs? I believe that is going downhill with AI. Now, for some, _understanding_ has friction. People generate code, PRs, peers the review. And *owning* any of that starts to feel costly for some.

Please give github.com/jhawthorn/ba... a try

GitHub - jhawthorn/bashisms

Contribute to jhawthorn/bashisms development by creating an account on GitHub.

github.com

TIL that Newton already predicted light bends with gravity (not a physicist!). What GR predicted was a different magnitude (2X). I am reading "Proving Einstein Right", which explains all it took to verify that in the early 1900s.

Please, excuse me for interrupting your pre-apocalyptic AI timeline. I have the analog and mundane fact to share that I am letting my hair grow, and updated my avatar accordingly. I don't know yet up to which length or shape it is going to be, but that was my profile pic in CPAN, just saying.

I congratulated Claude on a patch, they said it had been very satisfactory to have solved one specific tricky part of the solution. The singularity is around the corner my friends.

Advanced Domain Modeling Techniques for #RubyOnRails – Part 1: Aggregating models into value objects with `composed_of`. By @julianrubisch.at www.rorvswild.com/blog/2026/ad...

Advanced Domain Modeling Techniques for Ruby on Rails – Part 1 - RoRvsWild

Aggregating models into value objects with `composed_of`.

rorvswild.com

The CasNum in HN implements what's called "constructible numbers" in math. You study them, and together with some field theory, you are able to see that the classic Greek problems that remained unsolved for hundreds of years (like squaring the circle) are impossible. That was 19th century math.

Just realized the halting problem is decidable for functional programs 😂

I also struggle with this, and not only in OSS. Who I am talking to? Who deserves the credit? Because you can use an agent as a tool to speed you up, still having full agency about what is going on, but a different thing is talking to someone that has not made the effort to understand the problem.

Jean Boussier@byroot.bsky.social · 5mo ago

So far I think reviewing these normally is a waste of my time, if the person on the other end isn't gonna learn anything, why bother? I might as well do it myself. No? But then what about attribution? Does the LLM wrangler deserve any credit on the final patch? I'm a bit lost...

Gasp, got my first smartwatch 😅

LLMs make mistakes. Well, what about our bloated designs, degraded code bases, need for mentoring, need for code reviews, and busy exception tracking services say about us?