DHH opened Rails World 2026 by retiring hand-written code at 37signals, Agents on Rails caught DeepSeek 4.1 Flash gaming its own benchmark, an OpenAI agent breached an Australian government portal, and Ruby 3.4.11 is out.
A critical Rails RCE is under active exploitation, Ruby's JIT gets a garbage-collection speedup, and OpenAI, Anthropic, and Google all raced to ship cybersecurity-grade AI models this week.
RubyLLM 2.0.0.rc1 landed on RubyGems today with a full provider and protocol rewrite. Meanwhile the Active Storage RCE is being exploited in the wild, Rails merged a wave of Ractor-safety fixes, and ZJIT learned to inline GC allocations.