Ruby on Rails·Nov 4, 2026, 02:31 AMFixSecurity-relevantAI-assisted summary

Summary

Fixed multiple security issues: safe_constantize regex injection, highlight XSS, required newer html sanitizer, added ImageMagick security policy, enforced content‑length and V2 signatures for GCS uploads, and restricted ffmpeg/ffprobe f...
Improved session and cookie handling: SameSite applied to all session stores, skipped writes for deleted CacheStore sessions, prevented cookie upgrades on skipped sessions, and enhanced Vary header logic for content negotiation.
Various bugfixes and enhancements: Action View now skips blank attribute names, strip_tags now escapes quotes, ActionController::Live streams no longer block on closed buffers, ActiveStorage sanitizes filenames and preserves proxy respon...

securitybugfixfeatureminorsource healthy

Official source Last checked Nov 11, 2026, 10:00 PM

Ruby on Rails / update detail

8.0.5.2

Official Ruby on Rails changelog summary with source attribution, release tags and upgrade verdicts.

Track this Ruby on Rails release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

Ruby on Rails·Nov 4, 2026, 02:31 AMFixSecurity-relevantAI-assisted summary

Summary

Fixed multiple security issues: safe_constantize regex injection, highlight XSS, required newer html sanitizer, added ImageMagick security policy, enforced content‑length and V2 signatures for GCS uploads, and restricted ffmpeg/ffprobe f...
Improved session and cookie handling: SameSite applied to all session stores, skipped writes for deleted CacheStore sessions, prevented cookie upgrades on skipped sessions, and enhanced Vary header logic for content negotiation.
Various bugfixes and enhancements: Action View now skips blank attribute names, strip_tags now escapes quotes, ActionController::Live streams no longer block on closed buffers, ActiveStorage sanitizes filenames and preserves proxy respon...

securitybugfixfeatureminorsource healthy

Official source Last checked Nov 11, 2026, 10:00 PM

DiscussionUsing this release? Share breakages, migration notes or workarounds.

Loading follow options…

keep exploring

Continue with Ruby on Rails

Compare this release with the product timeline and keep the tools you use in one place.

official source

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked Nov 11, 2026, 10:00 PM

digest settings

Already following Ruby on Rails? Add related tools without starting a new digest.