Rails 8.1.4.1 patches roughly a dozen security advisories across Action View, Action Pack, and Active Support, including XSS in strip_tags and highlight, a Strong Parameters bypass, and a cluster of session-cookie fixes. Here's what's in it and why every Rails team should upgrade now.
Nokogiri 1.19.5 patches three low-severity security advisories, including a mutation XSS that matters to anyone sanitizing HTML, plus a long run of GC-compaction crash fixes. Here's what Ruby and Rails teams should know.
Resque 3.2 rejects cross-site requests to resque-web and makes single-job Retry and Remove POST-only. What was exposed, what breaks, and what to check.
GoodJob 4.22 deprecates concurrency keys and max_threads ahead of v5. How to migrate to labels, a deploy gotcha, and what throttling looks like in APM.
A Rails bug makes every exception, including routing errors from vulnerability scanners, copy every view resolver's template cache. Here's the cost, the fix in progress, and what to do today.
Mongoid 7.6.2 looks like a routine patch but closes four real security gaps, from NoSQL injection to ReDoS.
A Rails-specific comparison of the best error monitoring tools in 2026. Covers Scout Monitoring, Sentry, Honeybadger, AppSignal, New Relic, and Skylight with honest tradeoffs for each.
How to find, fix, and prevent N+1 queries in Rails applications. Covers ActiveRecord includes, preload, eager_load, the Bullet gem, Sidekiq jobs, and automatic detection with Scout.
A look at APM tools for Ruby on Rails as of March 2026.
In this final part, the Scout team continues our talk with Freedom Dumalo, former CTO at Flexcar and current CTO at Vestmark. We discuss some essential questions about architecture, touch on Rails, Turbo, and Stimulus, and the key considerations for those starting off before they lock in an architecture or tech decision.
As Rails apps scale, slow SQL can start to become an issue. Database logs can help, but don't show the location of the problem code. Read this post for an understanding of where the problems can start, and how Scout can send slowness packing.
Learn how to boost Ruby on Rails app performance and reduce server load in this second part by understanding Rails cache stores: their configuration and memory stores.
Learn how to boost Ruby on Rails app performance and reduce server load with cache strategies like page, action, and Russian Doll caching, cache stores, and more.
What N+1 queries are, why they slow down your application, and how to detect and fix them in Rails, Django, and Elixir. Includes code examples, detection tools, and monitoring strategies.
Finding profilers that reliably work proves to be a bigger challenge than most devs think. Here's a summary of the Rails profiler ecosystem: what works, what doesn't, and each profiler's niche.
The last 3,650 days of my professional life have been focused on making Rails apps faster. Below are five lessons I've learned the hard way. 1. Facts alone won't convince the business folk to care about performance The typical pitch to prioritize making an app faster & more reliable goes ...
Learn how to use counter cache in your rails app, parent-child associations, counter cache best practice.
If you are using Ruby on Rails, caching might be one of the best tools on your belt to build a better application. The idea behind caching in Rails is to serve thousands of concurrent users on a single server with a single database attached. Let’s take a look at some of the benefits caching can provide.
With the official release of Rails 6 just around the corner, we round up all the major new features coming your way. It is an exciting release due to some big features coming upstream from the Basecamp and GitHub projects. Amongst the many minor updates, useful tweaks and bug fixes, Rails 6 will ship with two completely new frameworks: ActionText and ActionMailbox, and two big scalable-by-default features: parallel testing and multiple database support. So set your Gemfile to get Rails 6.0.0.rc1 and let’s get started!
Like a pair of jumper cables, ActiveRecord's joins , includes , preload , and eager_load methods are incredibly useful, but also very dangerous when used incorrectly. Knowing when and where to use each approach - and even when to combine them - can save you considerable trouble.
If you are a Rails developer, you have probably used Rails Logger. Here is how to get the most out of it.
Richard Schneeman (better known as Schneems) recently wrote about how he reduced his database server load by 80% ...with one simple trick . In the Hacker News discussion that followed, much of the debate was on the merits of using an ORM like ActiveRecord...or not: In every case I can ...
When I do a code review, one of the scariest things I see is logic like this: if Rails.env.production? do_additional_work end Why? Your beautiful tests and tightly integrated CI system won't execute that code. You won't see that code execute as you refresh your browser in development. From syntax errors ...
Once your Rails app begins seeing consistent traffic, slow SQL queries will likely rear their ugly head, but how can you easily tell where your app is slowing down?
If you've followed along with our previous episodes, we've covered many different aspects of setting up a production service. We've used many different products to simplify the day-to-day operations of running and maintaining an application. We've used Scout for monitoring our application, LogDNA for aggregating our logs, HoneyBadger for our ...
Looking for a fresh, 2018 approach to deploying a Rails app to AWS? We've partnered with DailyDrip on a series of videos to guide you through the process. We'll be covering how to Dockerize a Rails app, AWS Fargate, logging, monitoring, and CDN support. In our last video , we ...
DevTrace is a performance widget for your Rails applications in development. It sits unobtrusively in the corner of your page, just waiting to drop insight on your application: See stack traces, SQL timings, and more with just a click! This kind of insight is powerful. You can see how your ...
Teaser for a soon-to-be released capability: Overview metrics for all your background jobs Chart throughput, latency, error rate, and more. Detailed drill-down on slow jobs See what's making the job slow, identify N+1 queries, and more. Tech preview - want in? Background job monitoring currently supports sidekiq, and is tech ...
Photo by mollypop My how you’ve grown! A couple of years ago your little Rails app was on a single server. Now you’re on a whole cluster – you’ve got web servers, database servers, HAProxy servers, and more. I’m so proud of you! Monitoring your Rails cluster has gotten more ...