News

Let there be docs! A documentation-first approach to Rails API development
We examine approaches to API documentation, with a case for why the documentation-first approach is beneficial, plus, we'll not only introduce a new Ruby gem, Skooma, that will be a revelation for those who are ready to follow this path, you can a...

Frontend Ruby with Glimmer DSL for Web by Andy Maleh (Montreal.rb Ruby Talk 2024/03) - YouTube
Rubyists would rather leverage the productivity, readability, and maintainability benefits of Ruby in Frontend Web Development than JavaScript to cut down development cost and time by half compared to using popular yet inferior JavaScript framewor...


RubyGems is not vulnerable to the xz/liblzma backdoor - RubyGems Blog
The past few days have seen the security world focused on the revelation of the xz/liblzma backdoor. For more background, see this early writeup of the issue, this GitHub Gist, this detailed timeline, and the official detail page for CVE-2024-3094...

Aaron Patterson ✅: "Worked more on optimizing dele…" - Mastodon
Worked more on optimizing delegates with @jhawthorn today. There are more edge cases that I thought there would be (of course), but I'm testing it in work CI rn. Anyway, I really hope we can land this in Ruby 3.4 (I'm confident we can).

Introducing props_template: A Jbuilder alternative
I like Jbuilder. It’s been part of every Rails project every time I run rails new and the first thing I reach for when I want to create JSON responses. It’s as synonymous with JSON as ERB is with HTML.But I wanted a version of Jbuilder that had la...


CVE-2024-27280: Buffer overread vulnerability in StringIO
We have released the StringIO gem version 3.0.1.1 and 3.0.1.2 that have a security fix for a buffer overread vulnerability. This vulnerability has been assigned the CVE identifier CVE-2024-27280.DetailsAn issue was discovered in StringIO 3.0.1, as...

History of the endless method syntax · Short Ruby - Email Courses
When I learn about a new language feature, I like to read and discuss the proposal. How and why it was accepted. What was the requester trying to accomplish, and what problem did they try to solve?Here, I will review how the endless method was int...