JT Book a call

Blog / Tags

rails

109 posts tagged rails, newest first.

railssecuritycve

Rails 7 End of Life: Pick Your Exit

Rails 7.1 got no patch for CVE-2026-66066, a CVSSv4 9.5 pre-auth RCE. How to find every app of yours on a dead branch and pick between four realistic exits.

· JetThoughts
railssecuritycve

Rails CVE-2026-66066: Patch Isn't Enough

CVE-2026-66066 lets an unauthenticated upload read server files via Active Storage. Patching Rails is not enough - libvips must go to 8.13 and secrets rotate.

· JetThoughts
railskamaldeployment

Kamal 2 Multi-Server Deployment Guide

Deploy Rails across multiple servers with Kamal 2: roles, the load balancing gap, boot limit gotchas, the multi-host SSL error, and when one big box wins.

· JetThoughts
railssolid-queuebackground-jobs

Solid Queue: Retries, Concurrency, Monitoring

Production patterns for Solid Queue: custom retry strategies, concurrency tuning, worker pool sizing, dead letter queues, and monitoring. Working Rails 8 config examples.

railsrubysecurity

Rails CVE-2026-41316: Detection and Patch

CVSS 8.1 universal RCE chain through ERB::DeprecatedInstanceVariableProxy and Marshal.load. Detection, upgrade path, Rails 7.0/7.1 EOL options.

· JetThoughts
railsrubyrails-8

Rails 8.1: Subscribe to Events, Skip Logs

Rails 8.1 replaces log parsing with structured events. Wire ActiveSupport::Notifications to Datadog, New Relic, or Prometheus - no regex required.

· JetThoughts Team
railsrubyrails-8-1

Active Job Continuations in Rails 8.1

Rails 8.1's ActiveJob::Continuable resumes long jobs from their last completed step. How to wire it in, when not to, why Kamal deploys stop losing work.

· JetThoughts
railsrubyrails-8

Solid Trifecta: When to Keep Redis in Rails 8

Rails 8 defaults to Solid Cache, Solid Queue, and Solid Cable. Most apps don't need Redis anymore. Some still do. Here's how we decide which workloads stay.

· JetThoughts
rubyrailsperformance

Ruby on Rails Performance Optimization Patterns for 2026

Concrete benchmarks and patterns for Rails performance in 2026 - YJIT speedups, Rails 8 query optimization, Redis caching, and N+1 elimination.

· JetThoughts
railsrubysecurity

Rails `has_secure_password` with Argon2: Complete Migration Guide

Step-by-step guide to enabling Argon2 with has_secure_password in Rails. Migrate from BCrypt with zero downtime using the Hybrid Verifier pattern in production.

· JetThoughts Team

Tell us what you need built

JetThoughts has been building software since 2008. Book a call, or write to sales@jetthoughts.com. You'll leave the call with a written one-page scope within 2 working days.

#01 Paul Keen
Paul KeenChief Technology Officer & Open Source Contributor

A 30-minute call; pick a time.