Tim Riley
@timriley.info
Reposted by Tim Riley
This is our first release of a new era — courtesy of our patrons and their financial support.
Thank you @mike.contribsys.com, @baweaver.bsky.social, @honeybadger.io, @fastruby.io, & @appsignal.com! Hanami 2.3 couldn’t have happened without you.
We’d love for you to join them. sponsor.hanamirb.org
Thank you @mike.contribsys.com, @baweaver.bsky.social, @honeybadger.io, @fastruby.io, & @appsignal.com! Hanami 2.3 couldn’t have happened without you.
We’d love for you to join them. sponsor.hanamirb.org
Become a Hanami Patron
sponsor.hanamirb.org
November 12, 2025 at 1:40 PM
This is our first release of a new era — courtesy of our patrons and their financial support.
Thank you @mike.contribsys.com, @baweaver.bsky.social, @honeybadger.io, @fastruby.io, & @appsignal.com! Hanami 2.3 couldn’t have happened without you.
We’d love for you to join them. sponsor.hanamirb.org
Thank you @mike.contribsys.com, @baweaver.bsky.social, @honeybadger.io, @fastruby.io, & @appsignal.com! Hanami 2.3 couldn’t have happened without you.
We’d love for you to join them. sponsor.hanamirb.org
Hanami 2.3 is out! This is a fantastic release, with improvements all across the stack, but the thing I’m most proud of is the whopping THIRTY TWO Rubyists who’ve chosen to contribute and make Hanami better. Thank you everyone! 🥰
🌸 Hanami 2.3 is here, and it’s racked and ready!
This is our biggest release yet. Rack 3, resource routes, and so much more.
hanamirb.org/blog/2025/11...
This is our biggest release yet. Rack 3, resource routes, and so much more.
hanamirb.org/blog/2025/11...
Hanami 2.3: Racked and Ready
Our biggest release yet. Rack 3, resource routes, and so much more.
hanamirb.org
November 12, 2025 at 1:31 PM
Hanami 2.3 is out! This is a fantastic release, with improvements all across the stack, but the thing I’m most proud of is the whopping THIRTY TWO Rubyists who’ve chosen to contribute and make Hanami better. Thank you everyone! 🥰
Reposted by Tim Riley
🌸 Hanami 2.3 is here, and it’s racked and ready!
This is our biggest release yet. Rack 3, resource routes, and so much more.
hanamirb.org/blog/2025/11...
This is our biggest release yet. Rack 3, resource routes, and so much more.
hanamirb.org/blog/2025/11...
Hanami 2.3: Racked and Ready
Our biggest release yet. Rack 3, resource routes, and so much more.
hanamirb.org
November 12, 2025 at 1:20 PM
🌸 Hanami 2.3 is here, and it’s racked and ready!
This is our biggest release yet. Rack 3, resource routes, and so much more.
hanamirb.org/blog/2025/11...
This is our biggest release yet. Rack 3, resource routes, and so much more.
hanamirb.org/blog/2025/11...
Reposted by Tim Riley
Weeknotes, Releasemas Eve edition.
Dry Logger improvements, final code changes, a whole lotta docs, and an explanation of why my timing estimates need slack.
timriley.info/posts/contin...
Dry Logger improvements, final code changes, a whole lotta docs, and an explanation of why my timing estimates need slack.
timriley.info/posts/contin...
Continuations, 2025/44: Releasemas eve - Tim Riley
• I ran out of time to write this last night. Here’s a brief weeknotes to make sure I don’t break the streak. • This week was all about final...
timriley.info
November 10, 2025 at 2:46 AM
Weeknotes, Releasemas Eve edition.
Dry Logger improvements, final code changes, a whole lotta docs, and an explanation of why my timing estimates need slack.
timriley.info/posts/contin...
Dry Logger improvements, final code changes, a whole lotta docs, and an explanation of why my timing estimates need slack.
timriley.info/posts/contin...
Reposted by Tim Riley
where my rubyists (old people) at??
November 9, 2025 at 7:10 AM
where my rubyists (old people) at??
Also today: entering the home stretch before Hanami 2.3. All the code is done. Just guide updates, upgrade notes, and the announcement post, and we’ll be ready to go.
Probably not next week (I still need to sleep). But *definitely* the week after.
Probably not next week (I still need to sleep). But *definitely* the week after.
November 7, 2025 at 1:18 PM
Also today: entering the home stretch before Hanami 2.3. All the code is done. Just guide updates, upgrade notes, and the announcement post, and we’ll be ready to go.
Probably not next week (I still need to sleep). But *definitely* the week after.
Probably not next week (I still need to sleep). But *definitely* the week after.
I substantially improved the docs for Dry Logger today. This is the logger you get in Hanami apps, but you can also use it anywhere you like!
It’s a pretty nice logger. Check it out!
dry-rb.org/gems/dry-log...
It’s a pretty nice logger. Check it out!
dry-rb.org/gems/dry-log...
dry-rb - dry-logger v1.2 - Introduction
Logging for Ruby applications
dry-rb.org
November 7, 2025 at 1:17 PM
I substantially improved the docs for Dry Logger today. This is the logger you get in Hanami apps, but you can also use it anywhere you like!
It’s a pretty nice logger. Check it out!
dry-rb.org/gems/dry-log...
It’s a pretty nice logger. Check it out!
dry-rb.org/gems/dry-log...
Weeknotes: resourceful routes, another batch of contributions (including a new bin/setup, plus a little something just for our friends at gem.coop), speaking at open summit, and a cool new open source Hanami app!
timriley.info/posts/contin...
timriley.info/posts/contin...
Continuations, 2025/44: Resourceful return - Tim Riley
• I was a bit sick this week, but still managed to get some useful things done. • My big achievement was landing the return of resourceful routes into Hanami! This...
timriley.info
November 2, 2025 at 11:30 AM
Weeknotes: resourceful routes, another batch of contributions (including a new bin/setup, plus a little something just for our friends at gem.coop), speaking at open summit, and a cool new open source Hanami app!
timriley.info/posts/contin...
timriley.info/posts/contin...
Reposted by Tim Riley
You know… Ruby Central’s takeover of rubygems GitHub org ONLY worked because it could be executed within seconds, and by doing so, prevent the possibility of revert.
If the ownership change was a PR it would never have been approved.
If RC is “right”, why did they need the atomic switch?
If the ownership change was a PR it would never have been approved.
If RC is “right”, why did they need the atomic switch?
November 1, 2025 at 4:09 PM
You know… Ruby Central’s takeover of rubygems GitHub org ONLY worked because it could be executed within seconds, and by doing so, prevent the possibility of revert.
If the ownership change was a PR it would never have been approved.
If RC is “right”, why did they need the atomic switch?
If the ownership change was a PR it would never have been approved.
If RC is “right”, why did they need the atomic switch?
thoughtbot’s Open Summit has started and I’ll be speaking on Hanami in 20 minutes! Here’s the link if you just want to drop in: us02web.zoom.us/j/87946598627
October 31, 2025 at 9:41 AM
thoughtbot’s Open Summit has started and I’ll be speaking on Hanami in 20 minutes! Here’s the link if you just want to drop in: us02web.zoom.us/j/87946598627
Continuations: more work getting Hanami 2.3 into shape, a year of Dry Operation, resourceful routes getting close, and finding the positives in a grant rejection.
timriley.info/posts/contin...
timriley.info/posts/contin...
Continuations, 2025/43: Countdown continues - Tim Riley
• The countdown to Hanami 2.3 continues. This week I reviewed and merged a bunch of nice contributions: binstubs in new Hanami apps (thanks Jared!), a console --boot flag (thanks...
timriley.info
October 26, 2025 at 12:31 PM
Continuations: more work getting Hanami 2.3 into shape, a year of Dry Operation, resourceful routes getting close, and finding the positives in a grant rejection.
timriley.info/posts/contin...
timriley.info/posts/contin...
Reposted by Tim Riley
I wrote my most personal blog post to date.
It summarizes some of my personal feelings and experiences in the Ruby/Rails community.
afomera.dev/posts/2025-1...
It summarizes some of my personal feelings and experiences in the Ruby/Rails community.
afomera.dev/posts/2025-1...
Stop Giving Harm a Microphone
afomera.dev
October 26, 2025 at 4:38 AM
I wrote my most personal blog post to date.
It summarizes some of my personal feelings and experiences in the Ruby/Rails community.
afomera.dev/posts/2025-1...
It summarizes some of my personal feelings and experiences in the Ruby/Rails community.
afomera.dev/posts/2025-1...
Reposted by Tim Riley
the former maintainers of Bundler and RubyGems have a proposal: we want to move Ruby forward andre.arko.net/2025/10/26/w...
We want to move Ruby forward
On September 9, without warning, Ruby Central kicked out the maintainers who have cared for Bundler and RubyGems for over a decade. Ruby Central made these changes against the established project poli...
andre.arko.net
October 26, 2025 at 4:45 AM
the former maintainers of Bundler and RubyGems have a proposal: we want to move Ruby forward andre.arko.net/2025/10/26/w...
Reposted by Tim Riley
Let's move Ruby forward. martinemde.com/2025/10/25/m...
We want Ruby to move forward - Martin Emde
martinemde.com
October 26, 2025 at 5:34 AM
Let's move Ruby forward. martinemde.com/2025/10/25/m...
Martin is experienced, insightful and inspiring. Someone should find a way for him to work on Ruby’s package management toolchain!
One takeaway is that the open source world is an amazing place! It's marvelous how well this usually works. This is distributed trust at scale via education and support (rather than control). All the work to help people learn security and provide best practices mostly seems to work. Wonderful!
October 26, 2025 at 12:11 AM
Martin is experienced, insightful and inspiring. Someone should find a way for him to work on Ruby’s package management toolchain!
Reposted by Tim Riley
One takeaway is that the open source world is an amazing place! It's marvelous how well this usually works. This is distributed trust at scale via education and support (rather than control). All the work to help people learn security and provide best practices mostly seems to work. Wonderful!
October 26, 2025 at 12:03 AM
One takeaway is that the open source world is an amazing place! It's marvelous how well this usually works. This is distributed trust at scale via education and support (rather than control). All the work to help people learn security and provide best practices mostly seems to work. Wonderful!
Reposted by Tim Riley
Companies should scan their open source. Full adoption of trusted publishing could have foiled NPM’s Shai Halud. Fighting about shared ownership models is horribly destructive when it makes the people leave that understand these problems. That’s the real security vulnerability.
October 25, 2025 at 11:49 PM
Companies should scan their open source. Full adoption of trusted publishing could have foiled NPM’s Shai Halud. Fighting about shared ownership models is horribly destructive when it makes the people leave that understand these problems. That’s the real security vulnerability.
Reposted by Tim Riley
If all you need to make your supply chain secure is CLAs for devs and a non-profit administrative staff holding keys to the world, remember that most package managers still run untrusted code on install, packages go live with minimal scanning, and best practice publishing security adoption is low.
October 25, 2025 at 11:45 PM
If all you need to make your supply chain secure is CLAs for devs and a non-profit administrative staff holding keys to the world, remember that most package managers still run untrusted code on install, packages go live with minimal scanning, and best practice publishing security adoption is low.
Reposted by Tim Riley
You might wonder, “how can a group of friends be sufficient for global enterprise software supply chain security?” The answer for me is that these people were there BECAUSE it was so important. RubyGems.org has had no major outage in 14 years. This is not a fluke.
October 25, 2025 at 11:38 PM
You might wonder, “how can a group of friends be sufficient for global enterprise software supply chain security?” The answer for me is that these people were there BECAUSE it was so important. RubyGems.org has had no major outage in 14 years. This is not a fluke.
Reposted by Tim Riley
The team that managed rubygems was formed by building social connections with people that cared enough to work on rubygems in their free time. It is at its core a trust based team of equals. This is why corporate takeovers that take advantage of that trust hurt so much. Trust is all we had.
October 25, 2025 at 2:47 PM
The team that managed rubygems was formed by building social connections with people that cared enough to work on rubygems in their free time. It is at its core a trust based team of equals. This is why corporate takeovers that take advantage of that trust hurt so much. Trust is all we had.
Reposted by Tim Riley
We spun up this feature petition with GitHub that I think would genuinely help a lot of projects and companies, open source or not. github.com/orgs/communi...
Petition for Multi-Approval Organization Ownership Controls on GitHub · community · Discussion #177729
Select Topic Area Product Feedback Body Summary We are requesting that GitHub implement a mandatory multi-person approval system for top-level organization ownership changes consistent with their a...
github.com
October 22, 2025 at 8:20 PM
We spun up this feature petition with GitHub that I think would genuinely help a lot of projects and companies, open source or not. github.com/orgs/communi...
Reposted by Tim Riley
I wrote a couple of articles juxtaposing my experiences as a Ruby developer with my life as a Ukrainian surviving the war (still trying to find insights for development practices in it).
Got a fair bunch of "why politics again :roll-eye-emoji:" comments (not all of them, thankfully).
Got a fair bunch of "why politics again :roll-eye-emoji:" comments (not all of them, thankfully).
"The better Ruby Discord. Ruby is about developer joy, not divisive political views. The sooner we purge politics from FOSS the better."
Saw this quote tweet today, For some of us, our lives and ability to exist _are_ those divisive political views mentioned.
Saw this quote tweet today, For some of us, our lives and ability to exist _are_ those divisive political views mentioned.
October 22, 2025 at 11:00 AM
I wrote a couple of articles juxtaposing my experiences as a Ruby developer with my life as a Ukrainian surviving the war (still trying to find insights for development practices in it).
Got a fair bunch of "why politics again :roll-eye-emoji:" comments (not all of them, thankfully).
Got a fair bunch of "why politics again :roll-eye-emoji:" comments (not all of them, thankfully).
Reposted by Tim Riley
"The better Ruby Discord. Ruby is about developer joy, not divisive political views. The sooner we purge politics from FOSS the better."
Saw this quote tweet today, For some of us, our lives and ability to exist _are_ those divisive political views mentioned.
Saw this quote tweet today, For some of us, our lives and ability to exist _are_ those divisive political views mentioned.
October 21, 2025 at 9:51 PM
"The better Ruby Discord. Ruby is about developer joy, not divisive political views. The sooner we purge politics from FOSS the better."
Saw this quote tweet today, For some of us, our lives and ability to exist _are_ those divisive political views mentioned.
Saw this quote tweet today, For some of us, our lives and ability to exist _are_ those divisive political views mentioned.
Reposted by Tim Riley
I've just released Papercraft 3.0: a new rendering API, improved support for XML templates and more.
noteflakes.com/articles/202...
#ruby #papercraft
noteflakes.com/articles/202...
#ruby #papercraft
Papercraft 3.0 Released - Noteflakes
Papercraft 3.0 Released - Noteflakes
noteflakes.com
October 20, 2025 at 7:30 AM
I've just released Papercraft 3.0: a new rendering API, improved support for XML templates and more.
noteflakes.com/articles/202...
#ruby #papercraft
noteflakes.com/articles/202...
#ruby #papercraft