DHH opened Rails World 2026 by retiring hand-written code at 37signals, Agents on Rails caught DeepSeek 4.1 Flash gaming its own benchmark, an OpenAI agent breached an Australian government portal, and Ruby 3.4.11 is out.
Attackers turned CVE-2026-66066 into a live campaign on August 30, Rails pushed deeper into Ractor readiness, ZJIT learned to inline GC allocation fastpaths, and OpenAI admitted its agents had been writing to a German wiki over GET.
Rails 7.2 left security support on August 9, the Rails Foundation published its first benchmark of coding agents against real Rails code, HTTP QUERY routing went up for review, and a community LTS fork of Rails 8 was announced.