- Active Storage now disables libvips "unfuzzed" image loaders/savers, raising Vips::Error for BMP, ICO, PSD, SVG, JPEG XL, JPEG 2000, Netpbm, FITS and similar formats – a breaking change for image‑processing applications.
- Minimum supported versions bumped: libvips 8.13 and ruby‑vips 2.2.1; boot will raise a RuntimeError if these versions are not met.
- Security update addressing CVE‑2026‑66066 (GHSA‑xr9x‑r78c‑5hrm).