News
Bundler: Bundler v2.7: last release before Bundler 4
A major release of Bundler is finally happening, consolidating unreleased major changes that had been pending for a decade. It will be named Bundler 4 (skipping Bundler 3), so that we can release it in lockstep with RubyGems 4, making the version ...
Polyglot 1.10 - i18n_headers improvements · Polyglot
Jekyll-Polyglot 1.10 is now available. It has vast improvements and changes to the i18n_headers liquid plugin for SEO improvements, and minor adjustments for parallel build idempotency. Community Contributions and Vibe Coding helped with a large p...
CVE-2025-24294: Possible Denial of Service in resolv gem
A denial of service vulnerability has been discovered in the resolv gem bundled with Ruby. This vulnerability has been assigned the CVE identifier CVE-2025-24294. We recommend upgrading the resolv gem.
Details
The vulnerability is caused by an in...
Introducing On Rails: A New Podcast 🎙️ from the Rails Foundation
There’s no shortage of podcasts about new tools, trending libraries, and web development hot takes. But what’s often missing are the deeper conversations, the ones about how teams actually made things work in production, under pressure, and with r...
Safeguard against DoS in Rails helper - Dogs with sunglasses - Hey, Darius here
One recent contribution to the Rails codebase caught my attention. It concerns the distance_of_time_in_words method. The fix is meant to prevent a possible Denial of Service while using this method.
The contribution was brought by Stazer. I found...
Visit our blog
