Rails Daily: API-Only Support and Security Fixes

Rails saw 12 merged pull requests on May 8th, with key improvements for API-only applications, security enhancements for Action Mailbox, and several database adapter fixes. Notable changes include configurable Active Storage controllers and PostgreSQL UUID validation improvements.

Duration: PT2M17S

Episode overview

This episode is a short developer briefing from Rails Daily.

It explains recent repository work in plain language.

  • Show: Rails Daily
  • Published: 2026-05-09T10:01:37Z
  • Audio duration: PT2M17S

Transcript excerpt

This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.

Good morning, it's May 9th, 2026. This is Rails Daily with yesterday's development activity.

Twelve pull requests were merged on May 8th, led by significant infrastructure improvements. Zzak merged PR 54189, enabling configurable parent classes for Active Storage base controllers. This allows API-only applications to inherit from ActionController::API instead of the default ActionController::Base,…

Bernie Chiu enhanced ActionController::Parameters in PR 56575, adding support for multiple arguments in the merge method to match Ruby's Hash behavior. Joshua merged two ActiveRecord fixes: PR 51244 resolving prepend option issues with transaction callbacks, and PR 55134 improving prevent_writes parameter handling…

Security received attention with PR 57316 by afurm, which properly rejects malformed timestamps in the Mailgun Action Mailbox ingress, preventing server errors from becoming authentication bypasses. Bogdan fixed a user-facing bug in PR 57091 where the "Copy as text" feature in error pages was incorrectly escaping…

Database adapters saw improvements with yoLotus's PR 57136 tightening PostgreSQL UUID validation to reject trailing dashes, and byroot fixing BigDecimal rendering in…

Te…

Nearby episodes from Rails Daily

  1. Rendering System Updates and Date Helper Improvements
  2. Rendering Improvements and Active Storage Fixes
  3. Format Freezing Fixes and Security Patches
  4. Code Quality and Test Suite Cleanup
  5. Cache Enhancements and Ractor Safety
  6. Image Analysis Fixes and Form Helpers
  7. Deployment Tools and Testing Enhancements
  8. Testing Enhancements and Generator Improvements