January 12, 2026
Good morning, this is Rails Daily for January 13th, 2026. Six pull requests were merged yesterday with several important fixes and improvements. Rosa merged CSRF header-only protection compatibility for local HTTP…
Duration: PT2M2S
Episode overview
This episode is a short developer briefing from Rails Daily.
It explains recent repository work in plain language.
- Show: Rails Daily
- Published: 2026-01-12T00:00:00Z
- Audio duration: PT2M2S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good morning, this is Rails Daily for January 13th, 2026.
Six pull requests were merged yesterday with several important fixes and improvements.
Rosa merged CSRF header-only protection compatibility for local HTTP installations. This addresses a problem where non-HTTPS local network requests were failing CSRF protection because browsers don't send the Sec-Fetch-Site header from insecure contexts. The fix allows these requests when running over HTTP without…
Adrianna Chang from Shopify merged a change wrapping ActionController::Live config in a load hook. This prevents ActionController::Live from loading unnecessarily when ActionController is loaded, improving performance for applications that don't use Live features.
Fatkodima merged a fix for reverting change_table bulk operations with indexes. This resolves migration reversal issues when using the bulk option with index changes.
Yujiteshima merged a fix for the "invalid option: --trace" error when running railties tests. The issue occurred because Minitest was trying to parse ARGV containing trace options at exit.