Blog

Browse through our blog page filled with updated information and the latest tips to help you achieve your goals.

Rails `has_secure_password` with Argon2: Complete Migration Guide

#rails #ruby #security #authentication #argon2 #has_secure_password

Step-by-step guide to enabling Argon2 with has_secure_password in Rails. Migrate from BCrypt with zero downtime using the Hybrid Verifier pattern in production.

Ruby on Rails Performance Optimization Patterns for 2026

#ruby #rails #performance #optimization #yjit #rails-8 #caching

Concrete benchmarks and patterns for Rails performance in 2026 - YJIT speedups, Rails 8 query optimization, Redis caching, and N+1 elimination.

Solid Trifecta: When to Keep Redis in Rails 8

#rails #ruby #rails-8 #performance #caching #solid-queue #deployment

Rails 8 defaults to Solid Cache, Solid Queue, and Solid Cable. Most apps don't need Redis anymore. Some still do. Here's how we decide which workloads stay.

Active Job Continuations in Rails 8.1

#rails #ruby #rails-8-1 #active-job #background-jobs #kamal #solid-queue #sidekiq

Rails 8.1's ActiveJob::Continuable resumes long jobs from their last completed step. How to wire it in, when not to, why Kamal deploys stop losing work.

Rails 8.1: Subscribe to Events, Skip Logs

#rails #ruby #rails-8 #observability #logging

Rails 8.1 replaces log parsing with structured events. Wire ActiveSupport::Notifications to Datadog, New Relic, or Prometheus - no regex required.

Rails CVE-2026-41316: Detection and Patch

#rails #ruby #security #cve

CVSS 8.1 universal RCE chain through ERB::DeprecatedInstanceVariableProxy and Marshal.load. Detection, upgrade path, Rails 7.0/7.1 EOL options.

Solid Queue: Retries, Concurrency, Monitoring

#rails #solid-queue #background-jobs #performance #production #monitoring

Production patterns for Solid Queue: custom retry strategies, concurrency tuning, worker pool sizing, dead letter queues, and monitoring. Working Rails 8 config examples.

Kamal 2 Multi-Server Deployment Guide

#rails #kamal #deployment #devops #production #multi-server

Deploy Rails across multiple servers with Kamal 2: roles, the load balancing gap, boot limit gotchas, the multi-host SSL error, and when one big box wins.

Rails CVE-2026-66066: Patch Isn't Enough

#rails #security #cve #active-storage #devops

CVE-2026-66066 lets an unauthenticated upload read server files via Active Storage. Patching Rails is not enough - libvips must go to 8.13 and secrets rotate.

Rails 7 End of Life: Pick Your Exit

#rails #security #cve #upgrade

Rails 7.1 got no patch for CVE-2026-66066, a CVSSv4 9.5 pre-auth RCE. How to find every app of yours on a dead branch and pick between four realistic exits.