#149 ๐Ÿ˜ต A Few Updates, a Few Surprises, and One Bad Idea

Not really ๐Ÿ˜€

Happy April Fools' Day, {{ subscriber.first_name }}!

Here is issue #149 of our newsletter, bringing you news and the best tools for your current or future Rails projectsโ€ฆ no funny business.

1. ๐Ÿšจ Ruby 3.2 is officially ๐Ÿ˜ต + ๐Ÿ’Ž Ruby 3.3.11 was released: featuring crucial updates like the zlib gem fix for CVE-2026-27820. This release marks the end of normal maintenance for Ruby 3.3 and officially transitions to security maintenance until March 2027.

2. ๐Ÿšจ New security alert! Philipp Burckhardt uncovers a supply chain attack on Trivy Docker images (0.69.4 to 0.69.6) with infostealer IOCs found on Docker Hub, lacking GitHub releases. It highlights how the attack worked and what teams can learn to better protect their CI/CD pipelines. ๐Ÿ”’

3. ๐Ÿข Itโ€™s easy to get caught up in constant output and speed in software development. Mario explores the chaos of agent-driven development and why taking a step back might be your smartest move! See how pacing, focus, and clarity can lead to better outcomes for developers and teams alike.

4. ๐ŸŽถ Deploying Rails apps doesnโ€™t have to be overly complex or fragile. In this post, Marian reflects on using Kamal for Rails deployments, drawing an analogy to the precision of Rega turntables. See how simplicity, reliability, and thoughtful tooling can lead to smoother, more dependable deployments. ๐ŸŽง

5. ๐Ÿš€ Ready to launch your Rails app in record time? In this beginner-friendly guide on the Ruby Forum, Javier shows how to get your app up and running on Fly.io in under 10 minutes. Itโ€™s a quick, practical walkthrough for developers looking to get an app live with minimal friction.

6. ๐Ÿ“ฆ Considering the switch from Sprockets to Propshaft in Rails 8? Ally shares practical tips to help you decide when it's a game-changer and when to stick with what works! Check out the step-by-step instructions, pitfalls, and key differences to help teams modernize their asset pipeline with confidence. โ€‹

7. ๐ŸŒŸ Simplify your app's authentication journey with ease! In this post, Nithin Bekal walks through migrating from Devise to Railsโ€™ built-in authentication. This step-by-step guide covers key differences, trade-offs, and implementation details to help streamline your code and reduce dependencies. Perfect for solo projects or when you need a lightweight solution.

8. ๐Ÿ“‹ Complex forms can quickly become hard to manage as Rails applications grow. Julian Rubisch dives deep into organizing your forms to reduce boilerplate and enhance maintainability. Streamline form input and validation, making your code cleaner, more efficient, and master form complexity without contaminating your ActiveRecord models.

9. ๐Ÿ’ก Tired of flipping through schema.rb to check column names? Say hello to the annotate_models gem, bringing database details directly into your model files, saving you time and hassle. Set it up in 3 easy steps and enjoy automatic updates with every migration. See why Zil says it is a favorite for Rails productivity.

10. ๐Ÿช Bite into GDPR compliance with Biscuit, a smart cookie consent banner for Rails 8 crafted by Gareth! Biscuit simplifies consent management with a customizable banner, interactive Stimulus controller, and i18n support. Best of all, it runs without external dependencies, keeping your Rails app sleek and compliant.

11. ๐Ÿค“ Want to level up your Ruby testing game? Dig into Radan Skoric's exploration of code coverage, from line to path coverage. Discover how AI-generated code shifts the landscape and why understanding the zen of testing can make your suite as robust as your code.

12. ๐Ÿ“Š Comparing test coverage across changes can be difficult to track over time. Introducing the simplecov-compare gem by Kevin Murphy. Born out of necessity to compare coverage without external services, simplecov-compare is your go-to tool for visualizing test result differences. Whether you're eager to track your test coverage over time or curious about changes between runs, this gem offers a sleek, no-fuss solution.

13. ๐Ÿ› ๏ธ Unlock the power of Ruby with C! Jump into German Silva's article exploring the FFI gem and C extensions. Whether boosting performance or integrating complex libraries, this guide reveals how to harness Ruby's full potential with a sprinkle of C magic!

14. ๐Ÿ‹๏ธ Boost your environment variable game with DeeEe! DeeEe lets you manage environment variables effortlessly with '.env' files, even across directories. Perfect for developers looking for a streamlined setup! Check out the full guide by kwstannard and start simplifying your workflow today!

15. Dive into the npm packaging mishap that led to a major code leak at Anthropic! Hacker News blog post uncovers the full story and its cybersecurity ripple effects. A must-read for developers and security enthusiasts eager to learn from real-world incidents!

๐Ÿ“† Upcoming Events:

Check out our other articles on: โ€‹โ€‹โ€‹โ€‹Ruby | Rails | Compatibility | โ€‹โ€‹Upgradesโ€‹โ€‹โ€‹โ€‹ | โ€‹โ€‹โ€‹โ€‹Tech Debtโ€‹โ€‹โ€‹ | AIโ€‹

Bookmark, share, or save them for later. We hope these links are helpful to you.๐Ÿ˜‰

Know anyone who would love to receive this newsletter? Tell them to โ€‹โ€‹โ€‹โ€‹subscribe to the Rails Upgrade News newsletterโ€‹โ€‹โ€‹โ€‹โ€‹โ€‹โ€ฆ

Best,

The โ€‹โ€‹โ€‹โ€‹โ€‹โ€‹FastRuby.ioโ€‹โ€‹โ€‹โ€‹โ€‹โ€‹ Team

Don't wait to bring your Rails application up to date.

We will get on a quick call and recommend a couple of options to start upgrading your Rails app.