Rails 5.0.0.rc2
We’re happy to announce Rails 5 RC2 has been released. We continue to work torwards the final Rails 5 release. Between RC1 and RC2 Rails got 91 commits! That’s a whole lot of bug fixes and polishing! To view the changes for each gem, please read the changelogs on GitHub: Action Mailer CHANGELOG Action Pack CHANGELOG Action View CHANGELOG Active Model CHANGELOG Active Record CHANGELOG Active Suppor
Rails 4.2: Active Job, Asynchronous Mails, Adequate Record, Web Console, Foreign Keys
Rails 4.2: Active Job, Asynchronous Mails, Adequate Record, Web Console, Foreign Keys We come bearing gifts! It’s Rails 4.2, and the final version is ready just in time for Christmas. It’s full of great toys, useful gizmos, and polished edges, courtesy of a fantastic community of merry elves who’ve been coding away with jolly glee for months. This is probably also the most well-tested new major re
Rails 3.2.22, 4.1.11 and 4.2.2 have been released and more
Rails 3.2.22, 4.1.11 and 4.2.2 have been released and more Hi everyone! Rails 3.2.22, 4.1.11 and 4.2.2 have been released, along with web console and jquery-rails plugins and Rack 1.5.4 and 1.6.2. These releases contain security fixes, so please upgrade as soon as possible! The security fixes for 4.1.11 and 4.2.2 are: CVE-2015-3226 CVE-2015-3227 In order to make upgrading as smooth as possible, we
Senny and Godfrey to Rails core, Yehuda to alumni
The Rails core team has just accepted Yves “Senny” Senn and Godfrey Chan into its ranks. Yves had his first patch committed to Rails back in 2011 and has since racked up 1256 commits of improvements to the framework. He’s a developer with 4teamwork from Bern, Switzerland, and we couldn’t be happier to recognize his great work by admission to Rails core! Godfrey Chan has been on a tear this year to
Maintenance policy for Ruby on Rails
Since the most recent patch releases there has been some confusion about what versions of Ruby on Rails are currently supported, and when people can expect new versions. Our maintenance policy is as follows. Support of the Rails framework is divided into four groups: New features, bug fixes, security issues, and severe security issues. They are handled as follows, all versions in x.y.z format: New
Strong parameters: Dealing with mass assignment in the controller instead of the model
Strong parameters: Dealing with mass assignment in the controller instead of the model We’re exploring a new way to deal with mass-assignment protection in Rails. Or actually, it’s not really a new way, it’s more of an extraction of established practice with some vinegar mixed in for when you forget. This new approach is going to be a part of Rails 4.0 by default, but we’d like your help in testin
[ANN] Rails 3.2.2 has been released!
Rails 3.2.2 has been released. This release contains various bug fixes and two important security fixes. All users are recommended to upgrade as soon as possible. CHANGES For information regarding the possible vulnerabilities, please see the announcements here and here. Some highlights from this release are: Log files are always flushed Failing tests will exit with nonzero status code Elimination
Edge Rails: PATCH is the new primary HTTP method for updates
What is PATCH? The HTTP method PUT means resource creation or replacement at some given URL. Think files, for example. If you upload a file to S3 at some URL, you want either to create the file at that URL or replace an existing file if there’s one. That is PUT. Now let’s say a web application has an Invoice model with a paid flag that indicates whether the invoice has been paid. How do you set th
Rails 3.2 RC1: Faster dev mode & routing, explain queries, tagged logger, store
Rails 3.2 RC1: Faster dev mode & routing, explain queries, tagged logger, store Once you’ve boarded the Rails train, you just know that every stop along the way is going to be a good time. This release candidate is no different and we’ve packed it with loving goodies without making upgrading a hassle. Faster dev mode & routing The most noticeable new feature is that development mode got a ton and
What's new in Edge Rails: EXPLAIN
The result of that method call is a string that carefully imitates the output of database shells. For example, under MySQL you get something similar to EXPLAIN for: SELECT `users`.* FROM `users` INNER JOIN `posts` ON `posts`.`user_id` = `users`.`id` WHERE `users`.`id` = 1 +----+-------------+-------+-------+---------------+---------+---------+-------+------+-------------+ | id | select_type | tabl
Rails 3.1.3 has been released
Rails 3.1.3 has been released. This release mainly contains fixes for regressions that popped up in 3.1.2. Changes Action Pack: Downgrade sprockets to ~> 2.0.3. Using 2.1.0 caused regressions. Fix using translate helper with a html translation which uses the :count option for pluralization. Jon Leighton Active Record: Perf fix: If we’re deleting all records in an association, don’t add a IN(..) cl
Rails 3.1.2 has been released
Rails 3.1.2 has been released. This is a patch-level release containing bug fixes and an important security fix. Possible XSS vulnerability in the translate helper method in Ruby on Rails There is a vulnerability in the translate helper method which may allow an attacker to insert arbitrary code into a page. Versions Affected: 3.0.0 and later, 2.3.X in combination with the rails_xss plugin Not Aff
Rails 3.1.0 has been released!
Hi everybody! It’s been 3 Months since RailsConf, so I think it’s time we released Rails 3.1.0. So, here it is! I’ve released Rails 3.1.0! CHANGES For a much more attractive and easy to read list of changes, please check out the awesome Rails 3.1.0 Release Notes on the Rails Guides site. For a less attractive list of changes, please continue to read! Here are some highlights of the major changes i
Rails now tested on Travis CI
Setting up continuous integration for Rails has been a complicated undertaking in the past. Rails needs to be tested against different Ruby versions and various modes (such as running test cases in isolation/non-isolation, running ActiveRecord with identitymap enabled/disabled). This made the test suite run for an isanely long time (up to 2 hours on 1.9.2 alone) and required regular maintenance by
[ANN] Rails 3.1.0.rc2 has been released!
Security Issues! This release contains fixes for possible XSS problems in your rails application. It is unlikely that your application is vulnerable, but you should take precautions by updating your application. For more information about the XSS issue that was fixed in this release, please read this blog post. WELCOME! Hi everyone! I’ve released Rails version 3.1.0.rc2! Please download our latest
Rails 3.1: Release candidate
As I promised at RailsConf, we’re finally good to go on the Rails 3.1: Release Candidate. This is a fantastically exciting release. We have three new star features and an even greater number of just awesome improvements. First the stars: The Asset Pipeline The star feature of 3.1 is the asset pipeline powered by Sprockets 2.0. It makes CSS and JavaScript first-class code citizens and enables prope
Rails 3.1 beta 1 released
We’ve taken our first release step towards the final version of Rails 3.1 today with the unveiling of beta 1. This is a release mostly for people who’ve already been following along with the development of Rails 3.1 and want to try a version that’s close to feature complete. We do not yet have all the documentation ready, so it’s still a bit of a detective job to figure out how it all fits togethe
Why HTTP Streaming?
Rails 3.1 is going to support HTTP streaming, aka chunked responses, this post explains what’s all about. What Is HTTP Streaming? Ordinary dynamic HTTP responses need a Content-Length header. Their timeline look like this: Those are three serial steps because normally you need to generate the content in order to be able to know its size, and thus fill the Content-Length header of the response. HTT
CSRF Protection Bypass in Ruby on Rails
There is a vulnerability in Ruby on Rails which could allow an attacker to circumvent the CSRF protection provided. This vulnerability has been assigned the CVE Identifier CVE-2011-0447. Versions Affected: 2.1.0 and above Not affected: Applications which don’t use the built in CSRF protection. Fixed Versions: 3.0.4, 2.3.11 Impact Certain combinations of browser plugins and HTTP redirects can be us
New Releases: 2.3.11 and 3.0.4
Two new versions of Ruby On Rails have been released today. As well as including a number of bugfixes they contain fixes for some security issues. The full details of each of the vulnerabilities are available on the rubyonrails-security mailing list. We strongly urge you to update production Rails applications as soon as possible. Rather than post the advisories individually to this blog, I’ll jus
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
