We're launching a complete Hotwire course! ⚡️ Turbo, Stimulus, and Hotwire Native are in a great spot with many patterns and approaches sorted out. We've teamed up with @_williamkennedy to cover as much as we can in one course. Link below👇

Want to delete an association but not sure what still uses it? Rails 8.1 can tell you. Add deprecated: true and every use is reported, including preloads, joins and post_ids. Pick :warn, :raise or :notify (an Active Support notification you can send to your error tracker).

New Rails 8.1 apps come with bin/ci. Your CI steps live in config/ci.rb: setup, RuboCop, bundler-audit, Brakeman, tests and seeds. Run it on your laptop before you push. With gh signoff, a passing run puts a green check on the PR.

Ruby's turn to get security fixes. I've precompiled the new versions for @hatchboxio users. hatchbox.io/announcements/12…

some of PlanetScale’s fastest growing customers are rails and laravel apps btw

PlanetScale uses rails and we have out-shipped our competitors every year for the last 6 years

Deploys restart your job workers. In Rails 8.1, a long job doesn't have to start over. Include ActiveJob::Continuable, split the work into steps, and save a cursor as you go. When the job restarts, finished steps are skipped and the current one picks up from its cursor.

Ruby 4.0.8 Released ruby-lang.org/en/news/2026/1… This is a routine update that includes bugfixes. We recommend upgrading your Ruby version at your earliest convenience.

If you noticed your @hatchboxio auto-deploys not running, GitHub's having issues with webhooks again. 🤷‍♂️

Start Active Search on Postgres, move to Typesense when you outgrow it, with no downtime. Add a second store and index, and every save writes to both. Backfill, compare side by side, then move default: true. Your search calls never change.

[ENG] Big news: Tropical on Rails 2027 has its home confirmed! 🌴💎 We're back at Auditorium Pullman Grand Mercure, in São Paulo, the venue where the Ruby community already feels at home. 📍 Venue: Auditorium Pullman Grand Mercure, Vila Olímpia | São Paulo - Brazil 📆 Date: March 18–19, 2027 Tickets and program details are on the way. Stay tuned! 🚀 [PT-BR] Novidade importante: o Tropical on Rails 2027 já tem casa confirmada! 🌴💎 Voltamos ao Auditório Pullman Grand Mercure, em São Paulo, o espaço onde a comunidade Ruby já se sente em casa. 📍 Local: Auditório Pullman Grand Mercure, Vila Olímpia | São Paulo - Brasil 📆 Data: 18 e 19 de março de 2027 Ingressos e programação chegam em breve. Fique ligado! 🚀 [ES] Gran noticia: ¡Tropical on Rails 2027 ya tiene casa confirmada! 🌴💎 Volvemos al Auditorio Pullman Grand Mercure, en São Paulo, el lugar donde la comunidad Ruby ya se siente en casa. 📍 Sede: Auditorio Pullman Grand Mercure, Vila Olímpia | São Paulo - Brasil 📆 Fecha: 18 y 19 de marzo de 2027 Entradas y programación muy pronto. ¡Mantente atento! 🚀 #RubyOnRails #TropicalOnRails

Solid Cache and Solid Queue run lots of small queries on their own databases. Rails 8.2 lets you turn off SQL instrumentation per connection: sql_notifications: false in database.yml. No SQL notification events, no SQL log lines. Your main database keeps full instrumentation.

Rails 8.2 supports the HTTP QUERY method (RFC 10008): safe and idempotent like GET, but the query goes in the request body. Good for searches too big or structured for a URL. Routes, request.query? and test helpers are included, and replica routing treats QUERY as a read.

Thanks for the support everyone! 💖

Moving from Devise to Rails 8.2's built-in auth? Your users keep their passwords. Devise stores BCrypt hashes, optionally with a pepper. Register a pepper-aware algorithm, alias encrypted_password, and has_secure_password verifies every existing hash. No reset emails.

has_secure_password now supports Argon2 out of the box in Rails 8.2. Add the gem, pass algorithm: :argon2, done. Unlike BCrypt, there's no 72-byte password limit, so long passphrases just work.

Rails 8.2 apps can drop authenticity tokens. CSRF protection now checks the Sec-Fetch-Site header modern browsers send, the default for new apps. OAuth callbacks? Add trusted_origins:. Old browsers? Use :header_or_legacy_token. "Old" = Safari before 16.4 (March 2023).

We have a bit of a problem with @sfrubyconf 2026: 40% of ticket holders are founders, C-levels and founding engineers 😱 😱😱 Really, it's what makes it so special!

Active Search is Basecamp's new gem: one search API for Rails across backends. Define an index, add has_search, then chain search, filter and highlight. Start on SQLite, Postgres or MySQL, move to Elasticsearch, Meilisearch or Typesense without rewriting queries. Still alpha.

Got a test that only passes because the database happens to return rows in insert order? Rails 8.2 can catch it. Turn on shuffle_unordered_selects in your test config and every SELECT without an ORDER BY comes back shuffled.