Rails Daily: Quiet Data Leaks and Silent Config Bugs
Today's Rails merges center on a cluster of subtle correctness bugs — thread-local state leaking across requests, config flags being silently ignored, and passwords leaking into logs — plus a mutable indexed row optimization for attribute casting.
Duration: PT2M29S
Episode overview
This episode is a short developer briefing from Rails Daily.
It explains recent repository work in plain language.
- Show: Rails Daily
- Published: 2026-09-16T06:03:51Z
- Audio duration: PT2M29S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good morning, it's September 16th, 2026, and this is Rails Daily.
The theme running through today's activity isn't new features — it's bugs that were quietly wrong for a long time, hiding in edge cases around configuration, isolation, and logging.
Start with TaggedLogging. Two PRs from americos, 58774 and 58775, both fix the same root problem: a logger created without a block was storing its tag stack as a plain instance variable instead of using isolated execution state. That meant tags could leak across threads and fibers, and mixing block and non-block…
Config handling had its own quiet failure mode. PR 58714 fixes "keepalive: false" in database dot yml being treated as absent because Ruby treats false as falsy — the fix switches to "fetch" so explicit false is respected. Same spirit in PR 58725, where Trilogy's SSL options weren't reaching the mysql and mysqldump…
Two more fixes worth flagging: PR 58720 restores key order in "read multi" when the local cache is active — a repeat of a bug already patched in "fetch multi" — and PR 58777 closes a temp file before renaming it in atomic write, since buffered writes weren't flushed before the file swap.
On performance, byroot's PR…
Nearby episodes from Rails Daily
- Ractor Safety Takes Center Stage
- Weekly Recap - Ractor Readiness and Active Storage Stability
- Data Integrity Fixes Across the Stack
- Boot Failures, a Security Fix, and a Broken Main
- Ractor Safety and Boot-Time Failures
- The Ractor Safety Push
- Edge Cases, Ractors, and Cleanup
- Cleanup, Concurrency, and a JSON Wake-Up Call