My Rails World keynote will be streaming in a few hours on YouTube. I dare say this one might ruffle a few feathers, but it also just needs to be said. piped.video/live/V9SxpJpHuus…
Since Jan 1, I've received 200+ vulnerability reports and reviewed every one. Most looked AI-generated, and some days different people reported the exact same issue. I assigned just four CVEs. Over 98% were AI slop or unverified. This is the daily reality of OSS.
RubyGems 4.0.21 is out now: blog.rubygems.org/2026/09/16…
This release is regular bug fix release. Bundler prevent to update beta version with `bundle update --bundler` now.
Ruby 4.0.7 Released ruby-lang.org/en/news/2026/0…
This is a routine update that includes bugfixes. We recommend upgrading your Ruby version at your earliest convenience.
Made another MCP server for Ruby core development.
Ask "Has matz ever been open to type annotations in Ruby's syntax?" and it feeds the agent what matz said on the mailing lists since 2001, with sources, to answer from.
github.com/ruby/blade-mcp/tr…
RubyGems and Bundler 4.1.0.beta1 is out.
gem update --system --pre
I will introduce the notable features one by one until the final release. Please try it in your development environment. Feedback is welcome.
blog.rubygems.org/2026/09/09…
RubyGems 4.0.20 and Bundler 4.0.20 are out. This is a cumulative bug fix release for the 4.0 series, and it backports the fixes for running gem and Bundler under RUBY_BOX=1 on Ruby 4.0: blog.rubygems.org/2026/09/02…
RubyGems and Bundler now pass their full test suites with RUBY_BOX=1. I am working toward Ruby 4.1 so that Ruby::Box is stable enough for real projects.
bugs.ruby-lang.org/issues/22…
resolv 0.7.2 and 0.3.2 are out, fixing CVE-2026-80212 (memory exhaustion) and CVE-2026-80213 (hostname validation bypass). Only code that resolves names through the resolv gem is affected. Ordinary socket and Net::HTTP connections are not.
ruby-lang.org/en/news/2026/0…
My team is working on bringing @rails into the Ractor-age. Here Edouard shares how we used one of the references applications to prove that it is possible and what could be impacts on latency and memory.
railsatscale.com/2026-08-11-…
RubyGems and Bundler 4.0.19 are out. With the cooldown setting enabled, install, update, and lock now end with a summary of the gem versions skipped because they were published too recently. No more guessing what the cooldown held back.
blog.rubygems.org/2026/08/20…
Thanks to @evilmartians and their Ruby/Rails LLM discoverability scorecard, guides.rubygems.org now serves a sitemap, llms.txt, and raw Markdown for every page. Add .md to any guide URL to get the text without the markup.
blog.rubygems.org/2026/08/06…
RubyGems and Bundler 4.0.18 are out. bundle lock and bundle cache now accept a --cooldown flag, and the release also carries a long list of bug fixes.
blog.rubygems.org/2026/08/05…