Ruby, Rails & AI Daily: September 10, 2026
A critical Rails RCE is under active exploitation, Ruby's JIT gets a garbage-collection speedup, and OpenAI, Anthropic, and Google all raced to ship cybersecurity-grade AI models this week.
Search within posts tagged with zjit using the filters below.
A critical Rails RCE is under active exploitation, Ruby's JIT gets a garbage-collection speedup, and OpenAI, Anthropic, and Google all raced to ship cybersecurity-grade AI models this week.
RubyLLM 2.0.0.rc1 landed on RubyGems today with a full provider and protocol rewrite. Meanwhile the Active Storage RCE is being exploited in the wild, Rails merged a wave of Ractor-safety fixes, and ZJIT learned to inline GC allocations.

Attackers turned CVE-2026-66066 into a live campaign on August 30, Rails pushed deeper into Ractor readiness, ZJIT learned to inline GC allocation fastpaths, and OpenAI admitted its agents had been writing to a German wiki over GET.

Ruby 4.0 (2025) marks a shift to runtime evolution. By 2026, EOL for 3.2 and new CVEs make this upgrade a mandatory security defense.
Ruby e Rails estão entrando em uma nova fase. Com Ruby 4, Rails 8.1, Infraestrutura Zero, Hotwire, Vite, IA integrada e uma abordagem cada vez mais orientada à simplicidade operacional, o ecossistema deixa para trás a cultura da complexidade excessiva e reafirma a força do monolito moderno como uma escolha técnica eficiente, elegante e soberana.
Ruby 4.0.0 was released on December 25, 2025 and marked one of the most relevant updates to the language in recent years. The new version introduced Ruby Box, ZJIT, important performance improvements, advances in Ractor, and changes that directly affect developers building Ruby and Rails applications.