Ruby on Rails / update detail

8.1.4.1

Official Ruby on Rails changelog summary with source attribution, release tags and upgrade verdicts.

Track this Ruby on Rails release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

Ruby on Rails·Nov 4, 2026, 02:46 AMFixSecurity-relevantAI-assisted summary

Summary

Multiple security fixes (GHSA) address unsafe MessagePack deserialization, Inflector regex injection, HTML sanitizer handling, RemoteIp spoof detection, ImageMagick policy enforcement, and stricter Google Cloud Storage upload validation.
Behavioral changes: SameSite attribute now applied to all session stores; Vary header extended to include Accept and X-Requested-With; shipped ImageMagick security policy applied to all MiniMagick processes; GCS direct uploads require ma...
Bug fixes: strip_tags now escapes quotes, highlight escapes matched phrases, tag helpers skip blank attribute names, and various minor fixes around cookies, session writes, and filename handling.

securityfeaturebugfixsource healthy

Official source Last checked Nov 11, 2026, 5:00 AM

Loading follow options…

keep exploring

Continue with Ruby on Rails

Compare this release with the product timeline and keep the tools you use in one place.

official source

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked Nov 11, 2026, 5:00 AM

digest settings

Already following Ruby on Rails? Add related tools without starting a new digest.