Originally posted on the Ruby on Rails Blog

Daniel here, holed up in my apartment in New York City trying to stay healthy. Overwhelmed by all the latest pandemic news? Why not take a break with some exciting Rails news?

Security Fixes

Rails 6.0.2.2 and 5.2.4.2 were recently released to fix a XSS vulnerability in Action View. If you are not running one of these versions, it is time to upgrade. While you are at it, it is also time to upgrade to Ruby 2.5.8, 2.6.6, or 2.7.1.

Ruby on Rails on Discourse

The Ruby on Rails mailing list has migrated to https://discuss.rubyonrails.org/. If you would like to suggest changes or new features, discuss documentation, or ask questions about Rails, this is the place to be.

Annotate HTML output with template names

If you have ever opened your HTML source in the browser and wondered which templates were rendering which part of the page, this feature is for you. config.action_view.annotate_template_file_names adds HTML comments to the rendered output indicating where each template begins and ends. I am a fan of this feature, and I also like the clear problem statement in the commit message and PR description.

Quickly generate a Rails app pointing to master

If you are anything like me, you want to try out new Rails features the moment they are merged. Why wait? Now generating a new Rails app pointing to master is as simple as rails new <app_name> --master.

Just simply improve the documentation

Removing words like “just” and “simple” from the documentation might seem like a small change, but removing these superfluous words can make for a significantly more welcoming experience to folks who are struggling. 😍

Use index_by and index_with wherever possible

I haven’t used index_by and index_with before, but seeing this PR makes me want to try them out. It certainly looks nicer than map { ... }.to_h. And if you really like these methods you can enforce that with a new rubocop-rails cop.

And plenty of refactoring

Eileen refactored invert_predicate and fetch_attribute to get rid of some case statements in factor of a more object oriented approach. Aaron refactored the PartialRenderer, splitting out classes for rendering single objects and collections. John improved some things by making ActionView rendering instrumentation less DRY (sometimes WET code is better!).

106 people contributed since our last issue. Check out the full list of changes and Stay healthy out there!