Ruby on Rails: Weekly Recap - Security & Developer Experience

This week brought important Active Storage security documentation improvements and new developer tooling, with 2 merged pull requests and 22 additional commits focusing on query commands, PWA scaffolding, and ActiveJob attributes.

Duration: PT2M33S

Episode overview

This episode is a short developer briefing from Ruby on Rails.

It explains recent repository work in plain language.

  • Show: Ruby on Rails
  • Published: 2026-04-20T00:00:00Z
  • Audio duration: PT2M33S

Transcript excerpt

This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.

Good morning. This is your Ruby on Rails weekly recap for April 13th through 20th, 2026.

2 PRs merged, 22 additional commits this week.

Starting with security improvements: PR #57179 strengthens Active Storage documentation around redirect and proxy modes. The changes clarify that "hard to guess" URLs don't provide access control - they're tamper-proof but can expose files if leaked. Updated warnings now appear across blob and representation…

For performance, PR #57199 optimizes ActiveRecord relation extension merging. Profiling identified this as a bottleneck, and the fix reduces overhead during query building operations.

Notable feature additions include a new query command for read-only database operations, merged in commit 450e18f. This adds `rails query` with comprehensive usage documentation and 238 test cases, targeting safer database exploration in production environments.

PWA support expanded with offline fallback pages in commit 5cc560f. The scaffold now generates an offline action, HTML template, and enhanced service worker examples. Like existing PWA routes, these remain commented by default for explicit opt-in.

Nearby episodes from Ruby on Rails

  1. Query Optimization and String Performance Updates
  2. Bug Fixes and Performance Improvements
  3. Docker Image Optimization
  4. PostgreSQL Upgrade and Documentation Updates
  5. ActiveJob Attributes and Documentation Fixes
  6. Database and Infrastructure Fixes
  7. ActiveRecord Performance Optimization
  8. PWA Enhancements and Bug Fixes