Rails Daily: Silent Query Bugs and Leaked Secrets
Rails fixes a cluster of silent-wrong-result bugs in Active Record preloading, merging, and integer casting, plus an Action Cable log leak and an Active Job time mutation. A controller config speedup also caused a regression now up for repair.
Duration: PT2M17S
Episode overview
This episode is a short developer briefing from Rails Daily.
It explains recent repository work in plain language.
- Show: Rails Daily
- Published: 2026-11-09T06:01:43Z
- Audio duration: PT2M17S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
It's Monday, November 9th, 2026 — welcome to Rails Daily.
The throughline this week is silent misbehavior — code that doesn't error, but quietly does the wrong thing.
First, Active Record query correctness. Pull request 59599 fixes preloading of a scoped has-many-through association when it follows an unscoped sibling. The second load was reusing the sibling's source records, silently ignoring joins, limits, offsets, grouping and select clauses. That's merged. The same class of…
Second, trust and side effects. Pull request 59527, now merged, stops Action Cable from logging raw websocket messages when a channel action fails, so values hidden by filter parameters no longer appear in clear text in production logs. If you rely on filtered logs for compliance, audit past logs for exposure.…
A performance change in pull request 59687 to read controller config without going through method missing sped up config access and reduced rescue-based delegates, with better behavior under Ractors, but it broke including request forgery protection outside controllers. Open pull request 59705 restores that.
In maintenance, routing documentation corrections and a fix for a flaky console reload test are…
Nearby episodes from Rails Daily
- Active Record Array Storage and Security Hardening Push
- Quiet Query Fixes and Allocation Cuts
- Through-Association Loading Fixes
- Weekly Recap - Speed Gains and Data Fixes
- Ractor Connection Hardening and Button To Cleanup
- MessagePack Cache Fixes and Reliability Hardening
- Serialization Speedups and SQLite Fixes
- Performance Trims and Compatibility Fixes