LWN.net Logo

This Week's Ruby News - Issue 127

From:  Ruby Weekly <rw-AT-peterc.org>
To:  <lwn-AT-lwn.net>
Subject:  This Week's Ruby News - Issue 127
Date:  Thu, 10 Jan 2013 13:47:05 +0000
Message-ID:  <0618f6a79d6bb9675f313ceb29659df23b6.20130110134650@mail259.us2.mcsv.net>
Archive-link:  Article, Thread

Ruby Weekly - A Weekly Ruby Newsletter
Issue #127 - January 10, 2013
================================================================================


Featured
--------

Ruby 2.0.0 Release Candidate 1 Released
http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-co...

  The latest step on the road to Ruby 2.0's final release in late February.
  The default encoding for Ruby scripts is now UTF-8.

Rails 3.2.11, 3.1.10, 3.0.19, and 2.3.15 Released Due to Security Flaws
http://weblog.rubyonrails.org/2013/1/8/Rails-3-2-11-3-1-1...

  A couple of significant security vulnerabilities have been found in Rails
  3.2, 3.1, 3.0, and 2.3, resulting in rapid point releases each of each.
  These are billed as "extremely critical" upgrades.

MountainWestRubyConf 2013 (Salt Lake City, April 3-5)
http://mtnwestrubyconf.org/


  The <a
  href="https://groups.google.com/forum/m/?fromgroups#!topic/ruby...">CFP
  is open</a> until January 19.

RubyConf Uruguay 2013 (March 22-23)
http://rubyconfuruguay.org/


  The CFP is open until the end of January.


From Our Sponsor
----------------

Are You Ready For Better CI?
https://semaphoreapp.com/


  Treat yourself with fast, amazingly easy to use continuous integration. Use
  coupon code RWHAPPY2013 in January and save 50% in your first month.


Reading
-------

Multiple Vulnerabilities in Parameter Parsing in Action Pack
https://groups.google.com/forum/#!topic/rubyonrails-secur...

  Billed as CVE-2013-0156 in the National Vulnerability Database, this is one
  of the two rather bad security vulnerabilities in many versions of Rails
  and could allow attackers to bypass authentication systems, inject
  arbitrary SQL, inject and execute arbitrary code, and more. If you want to
  be convinced to do an upgrade or disable features as a workaround, read
  this.

Dependency Injection Is Not A Virtue in Ruby
http://david.heinemeierhansson.com/2012/dependency-inject...

  David Heinemeier Hansson's latest opinion piece.

Constant and Global Optimization in JRuby 1.7.1 and 1.7.2
http://blog.headius.com/2013/01/constant-and-global-optim...

  Charles Nutter shares some interesting implementation practicalities in
  JRuby and how they affect performance.

RubyFlux: Statically Compiling Ruby to Java
http://spin.atomicobject.com/2013/01/06/rubyflux-statical...

  Last week we linked to a Ruby-to-Java static compiler project by JRuby's
  Charles Nutter. This post by Shawn Anderson explains more and shows off a
  simple benchmark.

Why I Love DATA
http://caiustheory.com/why-i-love-data


  Caius Durling shows off Ruby's DATA variable/constant, why it's useful, and
  some ways you can use it.

'A letter to my daughter, Augusta, in Ruby'
http://jpfuentes2.tumblr.com/post/39935683274/a-letter-to...

  In which a Ruby developer creatively expresses his affection for his
  daughter.

mruby-browser Is Now Called WebRuby
http://qiezi.me/2012/12/11/mruby-browser-is-now-called-we...

  Xuejie Xiao's project to bring mruby to the Web using JavaScript and
  Emscripten now has an official name and some ideas for progression.

Cleaner Specs With Custom RSpec Example Groups
http://benediktdeicke.com/2013/01/custom-rspec-example-gr...

Know Your Closures: Blocks, Procs, and Lambdas
http://www.dev.gd/20130107-know-your-closures-blocks-proc...

  John Biesnecker shares some basics.


Watching and Listening
----------------------

What's New in Rails 4 (RailsCasts Episode #400)
http://railscasts.com/episodes/400-what-s-new-in-rails-4


  Rails 4.0 still isn't finished and released but it nonetheless shaping up
  to become a great release. In this 20 minute episode of RailsCasts, Ryan
  Bates shows how to set up a new Rails 4.0 (edge) application and walks
  through many of the new features.


Libraries and Code
------------------

rbenv 0.4.0 Released
https://github.com/sstephenson/rbenv/tree/c56f727#version...

  ruby-local-exec deprecated. Now prefers .ruby-version files to
  .rbenv-version files (for added cross version manager support). And lots
  more.

DismissibleHelpers: Dismissible Help Text Helpers for Rails
http://reefpoints.dockyard.com/ruby/2013/01/04/dismissibl...

  Have an application where you want to add some help text for the user, but
  they really only need to see it once? With the dismissible_helpers gem, you
  can quickly add dismissible help text to your application. Demo visible
  online.

RubyOnRuby: Ruby Compiled to JavaScript Running on V8 under Ruby (Whoa..)
https://github.com/cantino/ruby_on_ruby


  Describes itself as an 'unholy amalgam' of therubyracer's V8 engine and
  emscripted-ruby which provides a truly sandboxed Ruby-on-Ruby environment.
  An interesting experiment, at least.

μLithp: A Lisp in 27 Lines of Ruby
http://fogus.github.com/ulithp/


Ruboto 0.10.1 Released: Ruby App Development on Android
https://github.com/ruboto/ruboto/wiki/Ruboto-0.10.1-relea...

  Updates JRuby to 1.7.1, changes the stdlib location to one that meets new
  Google Play Store restrictions, and more.

JewelryBox 1.4 Released: The Official OS X RVM GUI
http://jewelrybox.unfiniti.com/



Jobs
----

Senior Software Developer at State [London, United Kingdom]
http://jobs.rubyinside.com/a/jbb/job-details/781325


Full Stack Software Engineer at FreeAgent [Edinburgh, United Kingdom]
http://jobs.rubyinside.com/a/jbb/job-details/781911


Post a full job listing here in Ruby Weekly
https://cooperpress.com/jobs



Last but not least..
--------------------

Why The Lucky Stiff's Site is Back?
http://news.ycombinator.com/item?id=5015087


  The folks at Hacker News noticed that 'whytheluckystiff.net', a domain
  belonging to Why The Lucky Stiff, has been resurrected. Why, commonly known
  as _why, was an enigmatic and whimsical character in the Ruby world for
  many years before he went 'missing' in 2009.



================================================================================

You opted in for Ruby Weekly at http://rubyweekly.com/ to get weekly e-mails
about the Ruby programming language.


Our mailing address is: Office 30, Lincoln Way, Fairfield Enterprise Centre,
Louth, Lincs, UK, LN11 9EJ.

You can e-mail the list maintainer directly at rw@peterc.org in case of
problems/questions.

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds