Public list by ~rubyweekly

Issue 810 - Why RubyGems just revoked every legacy API key

Security advisory: Possible leak of legacy API keys via improper cache configuration

https://blog.rubygems.org/2026/07/22/security-advisory-legacy-api-key-leak.html

🔒 RubyGems Revokes Legacy API Keys After Possible Cache Leak — A CDN caching bug, which has existed for years, could have served accounts' legacy API keys to other users. There's no evidence of malicious use, but it's worth affected owners checking their gems over nonetheless.

28 days ago

Ruby performance monitoring and error tracking

https://www.appsignal.com/ruby

All-in-One Ruby & Rails Monitoring — Errors + Performance — Track errors, N+1 queries, slow SQL, Sidekiq jobs, and host metrics — all in one Ruby gem. AppSignal gives Rails teams every feature on every plan, with predictable pricing and real engineers on support. 30-day free trial, no credit card.

28 days ago

Beyond Enumerable: Testing Membership with Bloom Filters

https://baweaver.com/writing/2026/07/20/beyond-enumerable-testing-membership-with-bloom-filters/

Beyond Enumerable: Testing Membership with Bloom Filters — When include? over a huge collection gets expensive, a Bloom filter can answer 'definitely not present' with fixed memory and constant-time lookups. Brandon builds one in Ruby, covering all the details.

28 days ago

RuboCop 2.0: Where Do We Go Now? — Bozhidar Batsov | RubyConf Austria 2026

https://www.youtube.com/watch?index=9&list=PLfo_lSts5dBhAdoXZH9Akq0cUCF6L8Bm2&v=h_NazJbUBPA

▶  RuboCop 2.0: Where Do We Go Now? — At RubyConf Austria (all the videos are here) the creator of RuboCop gave a dense state of the union update on the project and how it's continuing to improve.

#people & blogs

28 days ago

How I Stopped Running out of Tokens

https://danielabaron.me/blog/how-i-stopped-running-out-of-tokens/

🤖 How I Stopped Running out of Tokens — A Rubyist whose company uses Claude Enterprise shares numerous tools you can use (such as rtk) to get the most out of assigned limits.

28 days ago

Using OpenSpec in Rails applications

https://sinaptia.dev/posts/using-openspec-in-rails-applications/

Using OpenSpec in Rails Applications — See how OpenSpec is reshaping our Rails workflow. What paid off, what failed, and what we’d do differently.

28 days ago

JRuby 10.1.1.0 Released — JRuby.org

https://www.jruby.org/2026/07/22/jruby-10-1-1-0.html

JRuby 10.1.1.0: Faster Number Parsing and Security Fixes — The Ruby 4.0-targeting JVM implementation gains faster number parsing, OpenBSD support, and OpenSSL and ERB security fixes.

28 days ago

Need To Scale Your Engineering Team? Staff Augmentation by FastRuby.io

https://go.fastruby.io/veh

Need More Rails Capacity? Speed Up Your Product Roadmap Next Week 🚀 — Rails devs who integrate fast, ship quality code & help your team deliver more each sprint. We vet them, you ship more.

#rails upgrade #ruby on rails upgrade #upgrade rails #legacy rails #technical debt #rails maintenance

28 days ago

GitHub - yaroslav/audition: Auditions Ruby scripts, gems, Rack apps, and Rails applications for the ability to run under Ractors: static analysis of Ractor-isolation violations plus dynamic in-Ractor probing, with explanations and fixes.

https://github.com/yaroslav/audition

Audition: See if a Ruby Program Can Run Inside Ractors — A tool you can point at a Ruby script, gem, Rack or Rails app, and it tells you if it can run within Ractors, Ruby's experimental actor-based parallel execution mechanism. And if not, it explains why.

28 days ago

Rigor

https://rigor.typedduck.fail/

Rigor: Type-Aware Ruby Static Analyzer and Bug Finder — Unlike Sorbet or Steep, no annotations are required. Rigor infers types from the values your code produces, while treating any RBS you have as authoritative.

28 days ago