Rails 5.0: Action Cable, API mode, and so much more After six months of polish, four betas, and two release candidates, Rails 5.0 is finally done! It’s taken hundreds of contributors and thousands of commits to get here, but what a destination: Rails 5.0 is without a doubt the best, most complete version of Rails yet. It’s incredible that this community is still going so strong after so long. Than

Hi everyone! Rails 4.0.9 and 4.1.5 have been released! These two releases contain a security fix, so please upgrade as soon as possible! In order to make upgrading as smooth as possible, we’ve only included commits directly related to each security issue. The security fix for 4.0.9 and 4.1.5 is: CVE-2014-3514 the commits for 4.0.9 can be found here, and the commits for 4.1.5 can be found here. Her

Hi everyone! Rails 3.2.18, 4.0.5 and 4.1.1 have been released! These three releases contain important security fix, so please upgrade as soon as possible! In order to make upgrading as smooth as possible, we’ve only included commits directly related to each security issue. The security fixes is: CVE-2014-0130 The commits for 3.2.18 can be found here, the commits for 4.0.5 can be found here, and th

Rails 4.1.0: Spring, Variants, Enums, Mailer previews, secrets.yml Rails 4.1.0 might carry a minor version bump, but there’s nothing minor about the bag of goodies it carries. It simply means that upgrading from 4.0.x should be a relatively mild affair as most of the changes are additions or improvements, not backwards-incompatible changes. Let’s go over some of those new goodies. Spring is our ne

Hi everyone, I am happy to announce that Rails 4.0.4 has been released. This is a bug fix release and includes more than 290 commits. This release is also known as “Regression Not Found” release, since no regressions are found after 4.0.4.rc1. CHANGES since 4.0.3 To view the changes for each gem, please read the changelogs on GitHub: Action Mailer CHANGELOG Action Pack CHANGELOG Active Model CHANG

Rails 4.1.0 beta1: Variants, Spring, mailer previews, JS CSRF, config/secrets.yml, Enums Hohoho, it’s Xmas time, kids! We have a beta full of goodies for everyone who’s been nice this year. Rails 4.1 is packed to the gills with more marvelous real-world feature extractions, bug fixes, and the tireless polish only a community full of Rails elves could bestow it with. While this is just a beta relea

Hi everyone, I am happy to announce that Rails 4.0.1 has been released. This is a bug fix release and includes more than 460 commits. This release comes up with an important change on how Active Record handles subsequent order calls. In Rails 4.0.0 when you do something like this:

Hi everyone, I am happy to announce that Rails 3.2.15 has been released. This is a bug fix release and includes 56 commits. This release also contains one security fix that you can read about here. Users are encouraged to upgrade as soon as possible. CHANGES since 3.2.14 To view the changes for each gem, please read the changelogs on GitHub: Action Mailer CHANGELOG Action Pack CHANGELOG Active Mod

Hi everyone, I am happy to announce that Rails 3.2.14 has been released. This is a bug fix release and includes more than 150 commits. I also want to announce that the next 3.2.x release, 3.2.15, will be the last bug fix release of this family. After it we will only release security fixes. So, if you have issues on 3.2.x that you think should be included on 3.2.15, let us know thought the GitHub i

Rails 4.0 is finally ready after a thorough process of betas and release candidates. It’s an amazing new version packed with new goodies and farewells to old features past their expiration date. A big focus has been on making it dead simple to build modern web applications that are screaming fast without needing to go the client-side JS/JSON server route. Much of this work was pioneered for Rails

Just in time for the opening of RailsConf, we managed to push out the first release candidate of Rails 4.0. This incorporates no less than 1,368 commits since beta 1. You can see the full list of changes on Github. If you’re interested in a high-level review of what’s in Rails 4.0, please see the announcement we made for beta 1. As last time, please give this release candidate an honest try. This

[SEC] [ANN] Rails 3.2.13, 3.1.12, and 2.3.18 have been released! Hi everyone! Rails versions 3.2.13, 3.1.12, and 2.3.18 have been released. These releases contain important security fixes. It is recommended users upgrade as soon as possible. Please check out these links for the security fixes: CVE-2013-1854 Symbol DoS vulnerability in Active Record CVE-2013-1855 XSS vulnerability in sanitize_css i

[SEC][ANN] Rails 3.2.12, 3.1.11, and 2.3.17 have been released! Hi everybody. I’d like to announce that Rails 3.2.12, 3.1.11, and 2.3.17 have been released. 3.2.12 and 3.1.11 contain one security fix, and 2.3.17 contains two security fixes. It is recommended that you update immediately. You can read about the security fixes by following these links: CVE-2013-0276 CVE-2013-0277 Please note that tod

[SEC][ANN] Rails 3.0.20, and 2.3.16 have been released! Hi everybody. I’d like to announce that 3.0.20, and 2.3.16 have been released. These releases contain one extremely critical security fix so please update IMMEDIATELY. You can read about the security fix by following this link: CVE-2013-0333 In order to ease upgrading, the only major changes in each gem is the security fix. To see the detaile

Good news everyone! Rails version 3.2.8 has been released. IMPORTANT This version contains three important security fixes, please upgrade immediately. CVE-2012-3463 Ruby on Rails Potential XSS Vulnerability in select_tag prompt CVE-2012-3464 Potential XSS Vulnerability in Ruby on Rails CVE-2012-3465 XSS Vulnerability in strip_tags One of security fixes impacts all users and is related to HTML esca

Rails 3.2.3 has been released!!!. IMPORTANT This release changes the default value of config.active_record.whitelist_attributes to true. This change only affects newly generated applications so it should not cause any backwards compatibility issues for users who are upgrading but it may affect some tutorials and introductory material. For more information see the mass assignment section of the rub

Rails 3.1.2 has been released. This is a patch-level release containing bug fixes and an important security fix. Possible XSS vulnerability in the translate helper method in Ruby on Rails There is a vulnerability in the translate helper method which may allow an attacker to insert arbitrary code into a page. Versions Affected: 3.0.0 and later, 2.3.X in combination with the rails_xss plugin Not Aff

Hi everyone, Rails 3.1.1 has been released. This release requires at least sass-rails 3.1.4 CHANGES Action Mailer No changes Action Pack stylesheet_link_tag(‘/stylesheets/application’) and similar helpers doesn’t throw Sprockets::FileOutsidePaths exception anymore [Santiago Pastorino] Ensure default_asset_host_protocol is respected, closes #2980. [José Valim] Changing rake db:schema:dump to run :e