Rails/master is now 4.0.0.beta
The forthcoming 3.2.x release series will be the last branch of Rails that supports Ruby 1.8.7. There’s a new 3-2-stable branch in git to track the changes we need until 3.2.0 final is release and for managing point releases after that. So for now you should stop floating on rails/master if your application is not compatible with Ruby 1.9.3. We have updated the version numbers to indicate this bac
Rails 3.2 RC1: Faster dev mode & routing, explain queries, tagged logger, store
Rails 3.2 RC1: Faster dev mode & routing, explain queries, tagged logger, store Once you’ve boarded the Rails train, you just know that every stop along the way is going to be a good time. This release candidate is no different and we’ve packed it with loving goodies without making upgrading a hassle. Faster dev mode & routing The most noticeable new feature is that development mode got a ton and
Rails 3.1.0 has been released!
Hi everybody! It’s been 3 Months since RailsConf, so I think it’s time we released Rails 3.1.0. So, here it is! I’ve released Rails 3.1.0! CHANGES For a much more attractive and easy to read list of changes, please check out the awesome Rails 3.1.0 Release Notes on the Rails Guides site. For a less attractive list of changes, please continue to read! Here are some highlights of the major changes i
Rails 3.0.7 has been released!
Hello everyone! I’ve released Rails version 3.0.7! I want to say thanks to Santiago for handling the release candidate gems. He’s on vacation, so I get to do the real thing. The main change in this release is to fix a performance regression in ActiveRecord that was introduced in version 3.0.6. Changes For a web friendly view, check out the compare view on github. For those that want the TL;DR of t
Rails 3.0.5 has been released!
Aaron Patterson showed us some tenderlove this week by releasing Rails 3.0.5. Have a peek at what got updated. Bugs Fixed Fix when gzip returns a UTF-8 string on Ruby 1.9, when it is actually binary. commit Active Record limit values will not escape Arel SQL Literal nodes. commit Relation#where calls will always produce AND statements regardless of how conditions hashes behaves (reverting 00693209
CSRF Protection Bypass in Ruby on Rails
There is a vulnerability in Ruby on Rails which could allow an attacker to circumvent the CSRF protection provided. This vulnerability has been assigned the CVE Identifier CVE-2011-0447. Versions Affected: 2.1.0 and above Not affected: Applications which don’t use the built in CSRF protection. Fixed Versions: 3.0.4, 2.3.11 Impact Certain combinations of browser plugins and HTTP redirects can be us
New Releases: 2.3.11 and 3.0.4
Two new versions of Ruby On Rails have been released today. As well as including a number of bugfixes they contain fixes for some security issues. The full details of each of the vulnerabilities are available on the rubyonrails-security mailing list. We strongly urge you to update production Rails applications as soon as possible. Rather than post the advisories individually to this blog, I’ll jus
Ruby on Rails 2.3.9 Released
We’ve released Ruby on Rails 2.3.9 (gem and git tag) to extend the 2.3.8 bridge a few steps closer to Rails 3 and Ruby 1.9. If your app runs on Rails 2.3.9 without deprecation warnings, you’re looking good for an upgrade to Rails 3. Deprecations Changes i18n named-interpolation syntax from the deprecated Hello to the 1.9-native Hello %{name}. Replaces Kernel#returning with Object#tap which is nati
Ruby on Rails 2.3.7 Released
With the 2.3.6 release hot out of the oven, Nathan Weizenbaum began updating HAML to support it. He uncovered a couple of bugs in the HTML-safety changes backported from Rails 3, so we’re cutting a 2.3.7 release to fix them. If you use the rails_xss plugin for automatic HTML escaping, you should upgrade to Rails 2.3.7 and the latest rails_xss plugin. If you don’t use the rails_xss plugin yet, now’
Ruby on Rails 2.3.6 Released
We’ve released Ruby on Rails 2.3.6: six months of bug fixes, a handful of new features, and a strong bridge to Rails 3. We deprecated some obscure and ancient features in Rails 2.3.6 so we could cut them entirely from Rails 3. If your app runs on Rails 2.3.6 without deprecation warnings, you’re in good shape for a smooth sail onward. This slow-cooked dish is brought to you some 87 committers from
Ruby on Rails 2.3.5 Released
Rails 2.3.5 was released over the weekend which provides several bug-fixes and one security fix. It should be fully compatible with all prior 2.3.x releases and can be easily upgraded to with “gem update rails”. The most interesting bits can be summarized in three points. Improved compatibility with Ruby 1.9 There were a few small bugs preventing full compatibility with Ruby 1.9. However, we would
What's New in Edge Rails
So, Edge Rails is still chugging right along. There are new and interesting fixes, changes, and refactors going on all of the time. So, lets take a look at just a few that’ve gone in since the last post (it’s been a while, I know, I’m sorry!). ActionView and Helpers XSS escaping is now enabled by default. This means that if you want to explicitly output HTML to your views, you’ll probably have to
Upgrading to Snow Leopard
Last Friday, Apple released their new OS version: Snow Leopard. Upgrading to SL is very easy and even gives you back quite a lot of HD space. However a few things have changed in the OS and you need to understand what is going on so you won’t get frustrated with the updating process and won’t be wasting time fighting with the system. The key change for us Ruby developers, is the fact that, in Snow
Security Problem with authenticate_with_http_digest
A security problem has been reported with the digest authentication code in Ruby on Rails. This vulnerability can allow users to bypass your password protection. This vulnerability has been publicly disclosed on several websites, users are advised to take the mitigating steps described below immediately. The issue comes from the handling of the block passed to authenticate_or_request_with_http_dig
Rails 2.3: Templates, Engines, Rack, Metal, much more!
Rails 2.3: Templates, Engines, Rack, Metal, much more! Rails 2.3 is finally done and out the door. This is one of the most substantial upgrades to Rails in a very long time. A brief rundown of the top hitters: Templates: Allows your new skeleton Rails application to be built your way with your default stack of gems, configs, and more. Engines: Share reusable application pieces complete with routes
Rails 2.3 RC2: Final stop before release
The past month has seen a flurry of activity getting Rails 2.3 solid. We think we’ve ironed out all the major kinks now, but just to be sure, we’re running one last release candidate before it heads off to the presses. So please take some time to test out this release candidate. If we don’t get any reports of major blockers, we’re going to call this final within a week or two. We’ve put together a
mod_rails is on the way
Hongli and crew from Phusion have been hard at work for some time to fix the ease-of-deployment issue on Apache with their Passenger project. They now have a video that demos how simple it’ll be to install and get running with mod_rails. Check it out. Update: Hongli has posted some promising performance benchmarks for mod_rails.
Capistrano 2.2.0
Capistrano is a utility for managing remote servers and automating remote tasks. It is popularly used to deploy Rails applications (but can do oh, so much more!). Version 2.2.0 is now available (well, it’s released, anyway, you might need to wait for the file to propagate to the gem mirrors). gem install capistrano Version 2.2.0 sports the following changes: FEATURE: Dynamic role definition. The r
Ruby on Rails
Compress the complexity of modern web apps. Learn just what you need to get started, then keep leveling up as you go. Ruby on Rails scales from HELLO WORLD to IPO. You’re in good company. Over the past two decades, Rails has taken countless companies to millions of users and billions in market valuations. These are just a few of the big names. There have been many hundreds of thousands of apps cre
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
[ANN] Rails 3.0.10