Ruby on Rails: Ractor Readiness for Jobs Plus CSRF Fixes
Most activity focused on making Active Job, time zones, and notifications work safely in non-main Ractors, alongside CSRF logging and origin-check hardening. Merged fixes covered time zones and subscription snapshots, while broader job compatibility remains open for review.
Duration: PT2M15S
Episode overview
This episode is a short developer briefing from Ruby on Rails.
It explains recent repository work in plain language.
- Show: Ruby on Rails
- Published: 2026-10-08T13:17:09Z
- Audio duration: PT2M15S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good morning, it's Thursday, October 8th, 2026.
The clear signal today is Ractor compatibility. Most of the activity is about making core framework behavior work safely outside the main Ractor, especially for background jobs.
First, Active Job is getting a systematic hardening. Open proposals would make the queue adapter name, queue name prefix, and logger readable from non-main Ractors, and make exception handling with rescue from, retry on, and discard on actually function there. Related work covers argument serialization for times,…
Second, a security and observability cluster around request forgery protection. One proposal would restore warning-level logging for blocked requests so those alerts aren't dropped when log level is set to warn. Another would tighten the plain HTTP fallback to require a missing origin header or a matching origin…
Finally, smaller quality-of-life items: new apps would ship with an agents file to guide AI coding tools, job test helpers would return the block result to avoid temporary variables, and a Windows fix would launch test preparation with the current Ruby.
What's next to watch is whether the open Active Job Ractor proposals merge, since together…
Nearby episodes from Ruby on Rails
- Composite Key Fixes and Test Resilience
- Batch Broadcasts and Clearer Failures
- Hot-Path Performance Push
- Request Overhead Cuts and Query Correctness
- Request-Path Speedups and Ractor Hardening
- Migration Compatibility Push
- Postgres Operations and S3 Upload Modernization
- Weekly Recap - Security Hardening, Postgres Fixes and 8.2 Cleanup