christine
Author ProfileClaim This Author Profile
Prove ownership by publishing #HashtagPLUS and this profile link on your author page or an article under your byline. A moderator or admin will review the request before it merges into your real HashtagPLUS username.
🌐 dev.toSource
On November 4, Rails shipped fixes for 21 security advisories, and both apps I work on had a 14-day Bundler cooldown telling us to skip brand-new releases. Here's how we patched the same day, where the security bypass leaks, and why Dependabot never opened a Rails PR.
🌐 dev.toSource
Trilogy 2.13.2 fixes a critical SQL injection in Trilogy#escape, and upgrading Rails to 8.0.5.2 or 8.1.4.1 doesn't pull it in. Here's who is affected, how to update, and what changes for apps on multibyte connection encodings.
🌐 dev.toSource
Rails 8.0.5.2 and 8.1.4.1 fix 21 security issues, including a critical Active Storage bug in apps using ImageMagick. Here's who is affected, what might break when you upgrade, and what to do if you can't upgrade yet.
🌐 dev.toSource
GitLab found memory corruption bugs in Ruby's regular expression engine that could lead to remote code execution. Here's who is affected, which Ruby versions fix it, and how to check your app.
🌐 dev.toSource
Two critical PHP runtime bugs allow unauthenticated remote code execution. Updating WordPress won't fix them. Here's how to check your PHP version and what to patch to.
🌐 dev.toSource
From Dev Community: Blue Ridge Ruby 2026: A Conference About the Long Game