#devtoruby

Fixing Silent Filter Drops in GitLab Work Item Saved Views: Unwrapping GraphQL Status IDs

📰

0Read More

Fixing Silent Filter Drops in GitLab Work Item Saved Views: Unwrapping GraphQL Status IDs

DEV Community: ruby·Manish Kumar·about 5 hours ago

#xIYYbGBG

#devtoruby #devto #dev #graphql #status

A deep dive into GraphQL input preparation, GlobalID resolution, Ruby hash normalization, and...

15s

What's New in RubyGems/Bundler 4.1, Part 3: Unifying RubyGems and Bundler, and What gem install No Longer Does

📰

0Read More

What's New in RubyGems/Bundler 4.1, Part 3: Unifying RubyGems and Bundler, and What gem install No Longer Does

DEV Community: ruby·SHIBATA Hiroshi·about 17 hours ago

#OumEWrgE

#devtoruby #devto #dev #request #spec

I'm Hiroshi Shibata (hsbt), a Ruby committer and the lead maintainer of RubyGems and Bundler. ...

15s

🖼️

0Read More

Review of Ruby Static Analysis Tools

DEV Community: ruby·Codacy·about 17 hours ago

#DHZbDUj7

#devtoruby #devto #dev #sayhello #rubocop

An up-to-date review of Ruby static analysis tools: RuboCop and its plugins, Standard, Reek, Brakeman, bundler-audit, and the Sorbet and Steep type checkers.

15s

📰

0Read More

SVG sky map with Ruby and Astronoby

DEV Community: ruby·Rémy Hannequin·1 day ago

#B39jZMaO

#devtoruby #devto #dev #astronoby #horizontal

While I have plenty of ideas for Astronoby before I release v1.0, it is already mature enough for a...

15s

Your URL Check Passed the Second Line and the Browser Ran the First

📰

0Read More

Your URL Check Passed the Second Line and the Browser Ran the First

DEV Community: ruby·Serguey Asael Shinder·1 day ago

#taGyFLen

#devtoruby #devto #dev #line #newline

The profile page let customers add a website. The rule was simple. It had to start with https, then...

15s

Learn Rails 8 by Building Study Flow, Part 2: Authentication with the Built-in Generator

📰

0Read More

Learn Rails 8 by Building Study Flow, Part 2: Authentication with the Built-in Generator

DEV Community: ruby·Shrouk Abozeid·1 day ago

#GG1UMLju

#devtoruby #devto #dev #show #user

In Part 1 we generated a Rails 8 app and followed a request from route to controller. Today Study...

15s

Ruby for Beginners: A Friendly Language That Still Powers the Web

📰

0Read More

Ruby for Beginners: A Friendly Language That Still Powers the Web

DEV Community: ruby·Arhan Khan·1 day ago

#XG4TQidB

#devtoruby #devto #dev #ruby #rails

Ruby is a programming language designed to make developers happy. It was created in Japan in the...

15s

📰

0Read More

Ruby MatchData Documentation Revised

DEV Community: ruby·Burdette Lamar·1 day ago

#mEejFl1Q

#devtoruby #devto #dev #ruby #matchdata

I've revised the official Ruby documentation for class MatchData, which is powerful, but (I think)...

15s

Building DataTeller #0: Why I Don't Let an LLM Write SQL

🖼️

0Read More

Building DataTeller #0: Why I Don't Let an LLM Write SQL

DEV Community: ruby·Seryl Lns·1 day ago

#9NzHIRic

#devtoruby #devto #dev #engine #tenant

I'm building a Rails engine that lets SaaS customers ask questions about their own data in plain...

15s

📰

0Read More

When to Skip Your Gem Cooldown

DEV Community: ruby·christine·2 days ago

#vuxCUAP5

#devtoruby #devto #dev #rails #cooldown

On November 4, Rails shipped fixes for 21 security advisories, and both apps I work on had a 14-day Bundler cooldown telling us to skip brand-new releases.…

15s

What's New in RubyGems/Bundler 4.1, Part 2: Defenses Against Supply Chain Attacks

📰

0Read More

What's New in RubyGems/Bundler 4.1, Part 2: Defenses Against Supply Chain Attacks

DEV Community: ruby·SHIBATA Hiroshi·6 days ago

#t47KWaOB

#devtoruby #devto #dev #sign #cooldown

I'm Hiroshi Shibata (hsbt), a Ruby committer and the lead maintainer of RubyGems and Bundler. ...

15s

Learn Rails 8 by Building Study Flow, Part 1: Your First Rails 8 App

📰

0Read More

Learn Rails 8 by Building Study Flow, Part 1: Your First Rails 8 App

DEV Community: ruby·Shrouk Abozeid·6 days ago

#Xt1HjRby

#devtoruby #devto #dev #show #rails

Reading about Rails concepts is one thing. Using them in a real app is where they finally click. In...

15s

44 Rails advisories broke my CI on a PR that didn't touch a single gem

📰

0Read More

44 Rails advisories broke my CI on a PR that didn't touch a single gem

DEV Community: ruby·Linielson Rosa·6 days ago

#x7RW0P5z

#devtoruby #devto #dev #each_key #rails

New advisories for Rails 8.1, rack and nokogiri turned my build red with no code change. What I found, how I fixed it, and how to make your CI catch it on its own.

15s

GitLab's regex problem: one max-severity bug is exploited and another is waiting

📰

0Read More

GitLab's regex problem: one max-severity bug is exploited and another is waiting

DEV Community: ruby·Suraj Nandan·6 days ago

#h4xaCm6B

#devtoruby #devto #dev #gitlab #ruby

If you run self-managed GitLab, October gave you two emergency upgrades in nine days. If you only did...

15s

How we keep AI agent actions under server side control in rails

🖼️

0Read More

How we keep AI agent actions under server side control in rails

DEV Community: ruby·Oleksandr Sainchuk·6 days ago

#LOsG0Ddr

#devtoruby #devto #dev #action #agent

Here is an endpoint that looks fine in a first agent prototype. def create tool =...

15s

Patch Your Rails: 21 Security Fixes in 8.0.5.2 and 8.1.4.1

🖼️

0Read More

Patch Your Rails: 21 Security Fixes in 8.0.5.2 and 8.1.4.1

DEV Community: ruby·christine·7 days ago

#VL5XS3Dk

#devtoruby #devto #dev #each_key #connect

Rails 8.0.5.2 and 8.1.4.1 fix 21 security issues, including a critical Active Storage bug in apps using ImageMagick. Here's who is affected, what might break when you upgrade, and what to do if you can't upgrade yet.

15s

Psych.safe_load restricts object classes, not the data shape

📰

0Read More

Psych.safe_load restricts object classes, not the data shape

DEV Community: ruby·Ioneyrezende·8 days ago

#hrO9PrIk

#devtoruby #devto #dev #yaml #psych

Why Psych.safe_load needs schema and size controls in addition to a class allowlist.

15s

Serious flaw in Ruby on Rails could give access to server files

📰

0Read More

Serious flaw in Ruby on Rails could give access to server files

DEV Community: ruby·Hacks.gr·8 days ago

#tZiomIhX

#devtoruby #devto #dev #files #issue

A critical 9.8-rated vulnerability in Ruby on Rails (GHSA-f3w6-w445-fwh9) allows unauthenticated attackers to write arbitrary files via ImageMagick file up

15s

Choose an ActiveAdmin Theme with a Reviewable Rails Checklist

📰

0Read More

Choose an ActiveAdmin Theme with a Reviewable Rails Checklist

DEV Community: ruby·Fernando Paladini·8 days ago

#19Hauppt

#devtoruby #devto #dev #activeadmin #theme

Use activeadmin-themes to compare Rails admin themes, apply a documented flash-message patch, and verify the limits before shipping.

15s

Rate Limiting in Rails 8.1: Protect Your APIs Without Rack::Attack

📰

0Read More

Rate Limiting in Rails 8.1: Protect Your APIs Without Rack::Attack

DEV Community: ruby·Yashika Vijayvargiya·9 days ago

#v3ZrJoqu

#devtoruby #devto #dev #rate #rails

Have you ever wondered what happens when someone sends hundreds of requests to your login endpoint...

15s

Menu

Fixing Silent Filter Drops in GitLab Work Item Saved Views: Unwrapping GraphQL Status IDs

What's New in RubyGems/Bundler 4.1, Part 3: Unifying RubyGems and Bundler, and What gem install No Longer Does

Review of Ruby Static Analysis Tools

SVG sky map with Ruby and Astronoby

Your URL Check Passed the Second Line and the Browser Ran the First

Learn Rails 8 by Building Study Flow, Part 2: Authentication with the Built-in Generator

Ruby for Beginners: A Friendly Language That Still Powers the Web

Ruby MatchData Documentation Revised

Building DataTeller #0: Why I Don't Let an LLM Write SQL

When to Skip Your Gem Cooldown

What's New in RubyGems/Bundler 4.1, Part 2: Defenses Against Supply Chain Attacks

Learn Rails 8 by Building Study Flow, Part 1: Your First Rails 8 App

44 Rails advisories broke my CI on a PR that didn't touch a single gem

GitLab's regex problem: one max-severity bug is exploited and another is waiting

How we keep AI agent actions under server side control in rails

Patch Your Rails: 21 Security Fixes in 8.0.5.2 and 8.1.4.1

Psych.safe_load restricts object classes, not the data shape

Serious flaw in Ruby on Rails could give access to server files

Choose an ActiveAdmin Theme with a Reviewable Rails Checklist

Rate Limiting in Rails 8.1: Protect Your APIs Without Rack::Attack