State of Ruby 2026

February 9, 2026

Ruby 4.0.0 launched on Christmas Day 2025, marking Ruby's 30th anniversary with two experimental features that signal the language's future direction: ZJIT (a new JIT compiler designed for aggressive optimization) and Ruby::Box (in-process isolation for definitions and loaded libraries). Rails 8.0 embraced a "No PaaS Required" philosophy with the Solid Trifecta (Solid Queue, Solid Cache, and Solid Cable), replacing Redis dependencies with database-backed alternatives, while Kamal 2.0 and Thruster simplified deployment to any Docker host. The community marked its milestone year with monthly RubyGems.org downloads surpassing 4 billion for the first time in April 2025 (4.15B), but a governance crisis over RubyGems control led to Yukihiro Matsumoto's (Matz) direct intervention, while polarizing statements from David Heinemeier Hansson (DHH) fractured the "MINASWAN" ethos.

Infographic showing Ruby's 2025 milestones: Ruby 4.0 with ZJIT for aggressive optimization and Ruby::Box for in-process isolation, YJIT 3.4 delivering 92 percent benchmark speedup over the interpreter, the Solid Trifecta replacing Redis with Solid Queue, Solid Cable, and Solid Cache, 4.15 billion monthly gem downloads in April 2025, Matz resuming core stewardship after governance crisis, and 134,000 dollar average Ruby developer salary
State of Ruby 2026: 30 Years of Innovation

The tooling landscape improved across the board in 2025, with Shopify's Ruby LSP maturing rapidly as a full-featured IDE experience, Sorbet gaining RBS comments support for gradual type migration, and RubyMine 2025.3 integrating native AI assistants. Performance kept climbing as YJIT 3.4 posted major benchmark gains (production gains vary by workload), Hotwire continued to evolve with Turbo 8.x releases, and Puma 7.x reintroduced optimized keep-alive handling for high-concurrency workloads. Existing security infrastructure (MFA requirements for top gem maintainers and Trusted Publishing via OIDC; see Watchlist #4 for full details) faced a stress test when supply-chain attacks exposed 60+ malicious gems downloaded over 275,000 times since 2023. RubyGems responded by flagging and yanking offending packages and improving detection systems. The rise of AI coding agents created a "vibe shift": Rails' convention-over-configuration philosophy means many developers report AI tools work particularly well with Rails, and most professional developers now use AI assistants (84% are using or planning to use AI tools per Stack Overflow 2025; no Ruby-specific breakdown is available). Despite dropping to #24 on TIOBE (and GitHub Octoverse 2025 showing new repositories dominated by Python, JavaScript, TypeScript, Java, C++, and C#), Shopify continues to invest heavily in Ruby infrastructure and GitHub's platform remains a Rails monolith with nearly two million lines of Ruby, while salaries average around $134,000 (ZipRecruiter, early 2026) and Rails jobs remain widely available in the US, the ecosystem prioritizes production stability over popularity metrics.

Actions for 2026: Upgrade to Ruby 3.4+ with YJIT enabled for immediate performance gains (Ruby 4.0's ZJIT is experimental; YJIT remains the production choice). Migrate from Redis to Solid Queue/Cache/Cable if running Rails 8+ to simplify infrastructure. Enable MFA on RubyGems.org and configure Trusted Publishing for your gems.


Ruby 2025 Timeline

Ruby 2025 executive summary showing a year of contrast: Ruby 4.0 released December 25 with ZJIT and Ruby::Box, Rails 8 No PaaS philosophy with Solid Trifecta and Kamal 2.0 enabling one-person teams to ship SaaS, governance fracture from September RubyGems takeover and polarizing rhetoric testing MINASWAN ethos, and growth reaching 4.15 billion monthly gem downloads with salaries holding at 134,000 dollars
Ruby 2025: A Year of Contrast

January 2025

January 10
release

YJIT 3.4 Performance Deep-Dive

The YJIT 3.4 deep-dive described compressed metadata/context storage and reported ~92% speedup over the interpreter on headline x86-64 benchmarks. New optimizations included register allocation for local variables, inlining of trivial methods, and core methods like Array#each rewritten in Ruby for better JIT optimization. Benchmarks showed 5-7% speedups over version 3.3.6.
January 15
release

Ruby 3.3.7 Released

Ruby 3.3.7 shipped with bug fixes and stability patches, maintaining the Ruby 3.x series while the core team looked toward version 4.0. Ruby 3.2.7 followed on February 4.

February 2025

February 10
security

net-imap Memory Exhaustion

CVE-2025-25186 patched a memory exhaustion vulnerability in net-imap where a malicious IMAP server could cause high resource usage.
February 14
release

Ruby 3.4.2 Released

Ruby 3.4.2 continued to refine features introduced in Ruby 3.4. Ruby 3.1.7 and 3.2.8 shipped on March 26 with security fixes.
February 26
security

Ruby Security Advisory Batch

The Ruby team patched CVEs including CVE-2025-27219 (CGI::Cookie.parse DoS), CVE-2025-27220 (CGI ReDoS), and CVE-2025-27221 (URI credential leakage when switching hosts).

March 2025

March 5
release

Sidekiq 8.0 Released

Sidekiq 8.0 launched with production job profiling via Vernier and a Web UI overhaul achieving 10x smaller CSS and page renders dropping from 50-100ms to 1-3ms.
March 12
release

Rails 8.0.2 Released

Rails 8.0.2 shipped with bug fixes since 8.0.1.
security

graphql-ruby Remote Code Execution

CVE-2025-27407 (CVSS ~9.0 Critical) revealed a severe vulnerability in graphql-ruby allowing remote code execution through malicious JSON schemas. Patches shipped in v1.13.24, v2.0.32, v2.1.15, v2.2.17, v2.3.21, and v2.4.13.
March 20
announcement

RubyGems.org New Security Policies

RubyGems.org introduced new legal/policy pages including Terms of Service, Privacy Policy, and Acceptable Use Policy with language against package name squatting and trading.

April 2025

April 7
milestone

Ruby Drops to TIOBE #24

Ruby dropped to approximately #24 on the TIOBE index, with coverage attributing the decline primarily to Python's dominance and Ruby's narrower use-cases. TIOBE noted: "Since Python has become the lingua franca of the programming world, there is not much room left for Ruby." (TIOBE measures search-engine mentions, not production usage; see the Jobs section for demand data.)
April 16-18
event

RubyKaigi 2025 in Matsuyama

RubyKaigi 2025 drew over 1,500 attendees to Matsuyama, featuring Matz's keynote on Ruby's direction, Shopify's ZJIT deep-dive by Maxime Chevalier-Boisvert explaining method-based JIT optimizing larger chunks of code than YJIT, parser-related talks including "Make Parsers Compatible Using Automata Learning," a humorous "ChatGPT vs. Matz" lightning talk testing whether AI could answer Ruby questions better than Matz, and demonstrations of Ruby::Box namespace isolation. Ruby 3.3.8 (April 9) and 3.4.3 (April 14) shipped in the days leading up to RubyKaigi.
April 18
release

Ruby 3.5.0-preview1 Released

Ruby 3.5.0-preview1 gave developers an early look at upcoming features. The core team later decided to bump the version to 4.0 to mark Ruby's 30th anniversary and the significance of ZJIT and Ruby::Box; no 3.5 final was ever released.
April 23
release

Sorbet Gains RBS Support

Shopify announced Sorbet support for inline RBS comments on April 23, following a RubyKaigi presentation, allowing gradual migration from Sorbet's proprietary sig {} syntax to Ruby's official type annotation format.
April 25
security

Rack Path Traversal Vulnerability

CVE-2025-27610, a Rack path traversal vulnerability that could expose sensitive files, was publicly disclosed in March 2025 and was widely reported again on April 25.
April 28
security

net-imap DoS Vulnerability

CVE-2025-43857 patched another net-imap DoS where a malicious server could force excessive memory allocation.
April 30
milestone

Record Gem Downloads

Ruby Central reported that April 2025 saw the first 4+ billion monthly downloads (4.15B, up 51% year-over-year). By June, Ruby 3.4 adoption reached nearly 11% and single-day peaks hit 221 million downloads.

May 2025

May 19
release

Ecosystem Updates

Sinatra 4.0.1 shipped, Ruby 3.4.4 released, and RubyGems 3.6.x updates (3.6.5, 3.6.6, 3.6.9) shipped Bundler 2.6.5, 2.6.6, and 2.6.9. Ruby Central named Shan Cureton as Executive Director.

June 2025

June 18
milestone

RedMonk Q1 Rankings Released

RedMonk Q1 2025 language rankings placed Ruby at #9, stable in the top 10 with the least movement in the top 20 ever recorded. (RedMonk ranks by GitHub + Stack Overflow activity rather than search-engine mentions, which explains the gap with TIOBE's #24.)

July 2025

July 8
security

resolv Gem DoS Vulnerability

CVE-2025-24294 (CVSS 6.6 in GitHub advisory; 7.5 in NVD) fixed a DNS name decompression DoS in the resolv gem where malicious DNS responses could trigger excessive CPU usage. Ruby 3.4.5 released July 15, followed by Ruby 3.3.9 and 3.2.9 on July 24 with security fixes in default gems and build fixes.
July 8-10
event

RailsConf 2025 (Final Edition)

The final RailsConf took place in Philadelphia after nearly 20 years, marking the end of Ruby Central's flagship Rails event. DHH delivered a keynote, while the Rails team announced 8.1 beta on September 4 at Rails World with Job Continuations, Structured Logging/Events, and built-in Local CI mode. Ruby Central announced RubyConf would become the combined flagship event going forward.
July 17
release

Bundler 2.7 Released

Bundler 2.7 shipped with template customization, network-error handling, lockfile robustness, improved auto-switch behavior, and a Rails git-source unlock fix.
July 29
event

Stack Overflow 2025 Survey Results

The 2025 Stack Overflow Developer Survey showed 6.4% of all respondents and 6.9% of professional developers using Ruby, with 44.3% admiration but only 5.1% listing Ruby as "desired." Ruby dropped in the "most loved" rankings and ranked high in "most dreaded" by developers who don't want to use it, likely reflecting that many newer devs see Ruby as dated or have only experienced messy legacy Rails code. The community acknowledges this image issue and there were talks at RubyConf on "How to sell Ruby on its merits today."

August 2025

August 4
release

RubyMine 2025.2 Released

JetBrains RubyMine 2025.2 shipped with Junie AI assistant upgrades, faster Rails project startup, and enhanced Bundler management.
August 7
security

Supply Chain Attacks on RubyGems

Security researcher Kirill Boychenko discovered 60+ malicious gems in a targeted credential theft campaign active since 2023, collectively downloaded over 275,000 times. The gems posed as automation tools for social media and messaging but stole credentials, targeting Windows users with stolen credentials sold on Russian Market web forums. Other malicious packages and separate typosquatting attacks targeting Fastlane plugins exfiltrating Telegram API credentials were also discovered. RubyGems responded by flagging and yanking offending packages and improving detection systems (the MFA policy predates these incidents; RubyGems rolled it out starting in 2022).
August 13
security

Rails Security Patches

Rails 8.0.2.1, 7.2.2.2, and 7.1.5.2 shipped, addressing security vulnerabilities including Active Storage CVE-2025-24293 (CVSS 9.8 Critical, command injection via ImageMagick disclosed by Shahar Madar of OPSWAT) and CVE-2025-55193 (ANSI escape sequence injection in Active Record logs).

September 2025

September 4-5
event

Rails World 2025 in Amsterdam

Rails World 2025 took place in Amsterdam with sold-out attendance of 814 developers from 62 countries. DHH's opening "CRUD Monkeys" keynote was a rallying cry against the "Merchants of Complexity" and modern DevOps complexity, announcing Rails 8.1 beta and promoting his "Omarchy" philosophy: that a single developer should be able to build and ship a SaaS product without dedicated DevOps. The event also featured deep dives on Solid Trifecta components and Kamal 2.0 deployment strategies.
September 9
announcement

RubyGems Governance Crisis Begins

Governance changed when Hiroshi Shibata added Marty Haught as owner and Ruby Central took temporary admin control of RubyGems and Bundler GitHub repositories. Long-standing volunteer maintainers found their permissions revoked. By September 18, all external admins had been fully removed. Ellen Dash, a 10-year maintainer, called it a "hostile takeover" and resigned. Ruby Central posted a statement citing "fiduciary duty" to secure Ruby's supply chain.
September 15
announcement

"As I remember London"

DHH published "As I remember London" on his HEY.com blog, discussing immigration, demographic changes, and national identity in Britain. The post expressed sympathy for a Tommy Robinson march and criticized UK immigration policy. The article prompted significant community response in the following days.
September 16
release

TruffleRuby 25.0 Parallel Native Extensions

TruffleRuby 25.0 announced the ability to run native extensions in parallel, matching the parallel execution already available for pure Ruby code and offering significant performance advantages over CRuby for suitable workloads.
September 16-18
security

Security Updates

Ruby 3.4.6 released September 16. CVE-2025-58767 patched a REXML DoS where malformed XML can increase execution time and memory usage (NVD CVSS 5.3).
September 21
announcement

"The Ruby community has a DHH problem"

Tekin Suleyman published "The Ruby community has a DHH problem" responding to DHH's recent blog posts. The Plan Vert open letter called for cutting ties with DHH and hard-forking Rails, signed by notable figures including Eugen Rochko (Mastodon creator), Tim Bray (XML co-author), and Jeff Atwood (Stack Overflow co-founder).
September 22
release

Rails 8.0.3 Released

Rails 8.0.3 shipped with minor fixes and stability improvements.
September 25
announcement

Mike Perham Withdraws Ruby Central Funding

Mike Perham (Sidekiq creator) withdrew his annual Sidekiq sponsorship from Ruby Central, citing objections to DHH's keynote at the final RailsConf two months earlier.
September 26
announcement

DHH Responds to Critics

DHH published "We've all had enough of this nonsense", dismissing critics as "a sad contingent of Ruby malcontents" and celebrating that "RailsConf is dead, Rails World is thriving." Shopify CEO Tobias Lütke publicly sided with DHH.

October 2025

October 5
announcement

gem.coop Mirror Launches

Former maintainers launched gem.coop, a full RubyGems.org mirror with Homebrew-inspired governance, as an alternative to centralized control. The Spinel cooperative also began developing "rv," a unified Ruby toolchain.
October 16
release

Puma 7.1.0 Released

Puma 7.1.0 released October 16 with reintroduced optimized keep-alive handling.
October 17
announcement

Matz Intervenes in Governance Crisis

Matz announced Ruby Core would assume stewardship of RubyGems and Bundler in collaboration with Ruby Central. The move put Ruby Core in charge of both projects, splitting the difference between Ruby Central's security concerns and the volunteers it locked out.
October 21
milestone

JetBrains Survey Results

The JetBrains Developer Ecosystem 2025 survey classified Ruby among languages in long-term decline, though existing codebases and jobs persist strongly, with high retention rates and competitive salary bands.
October 22
release

Rails 8.1 Released

Rails 8.1 shipped with Active Job Continuations for long-running jobs that resume from their last checkpoint (critical for Kamal's 30-second container shutdown), native markdown rendering, Local CI DSL, and deprecated-association warnings. Over 500 contributors made 2,500 commits. Rails 7.0.10, 7.1.6, 7.2.3, 8.0.4, and 8.1.1 patches also released.
October 23
announcement

Ruby 3.3.10 and Security Fix

Ruby 3.3.10 addressed CVE-2025-61594, which patched a bypass of the earlier URI credential leakage fix.
October 26
announcement

Governance Aftermath

André Arko published "We want to move Ruby forward", criticizing Ruby Central's actions while affirming commitment to the community. He had registered the Bundler trademark to protect community interests; Ruby Central later said it received a cease-and-desist letter from Arko's lawyer. Ruby Central board member Freedom Dumlao apologized for the turmoil.
October 29
announcement

Rails EOL Announcements

November 2025

November 12
release

Hanami 2.3.0 Released

Hanami 2.3 "Racked and Ready" shipped with full Rack 3 support, resource routes, and dozens of quality-of-life improvements, the biggest Hanami release yet, with 32 contributors.
November 17
release

Ruby 4.0 Previews

Ruby 4.0.0-preview2 released November 17 with updated Unicode 17.0 support, followed by Ruby 4.0.0-preview3 on December 18 showcasing Ruby::Box and ZJIT as headline features.
November 20
release

RubyGems 4.0.0 Betas

RubyGems 4.0.0.beta1 shipped November 20, followed by beta2 on November 26.

December 2025

December 3
release

RubyGems/Bundler 4.0

RubyGems 4.0.0 and Bundler 4.0.0 released December 3, dropping support for old Ruby versions and removing legacy APIs. Bundler 4 introduced stricter source pinning and lockfile/output behavior changes, with up to 70% faster installs and broader performance improvements highlighted in a December 26 summary post. RubyGems published an "Upgrading to RubyGems/Bundler 4" guide on December 3.
December 8
release

RubyMine 2025.3 Released

RubyMine 2025.3 shipped with multi-agent AI chat support, the Junie AI coding assistant, and a Rails-aware MCP server for AI-assisted code exploration. RubyMine already supported RBS; 2025.3 focused on AI agent features, Rails-aware MCP, and startup/performance updates.
December 11-17
release

Ecosystem Updates

Sidekiq 8.1.0 shipped December 11. RuboCop 1.82.0 released December 17 with experimental Ruby 4.0 support, followed by 1.82.1 on December 24. RuboCop continued expanding autocorrection, though RuboCop introduced many performance cops like Performance/Detect well before 1.50.
December 22
announcement

Ruby Website Redesign

A complete redesign of Ruby's official website with fresh new logo and styling by designer Taeko Akatsuka, followed December 23 by a new look for Ruby's documentation using "Aliki," a modern theme for RDoc.
December 25
release

Ruby 4.0.0 Released

Ruby 4.0.0 launched on Christmas Day, marking Ruby's 30th anniversary. Key features include: - ZJIT: A new experimental compiler aimed at larger compilation units and SSA-style IR, available via --zjit flag (requires Rust 1.85+). Faster than the interpreter but not yet as fast as YJIT on typical workloads, not yet production-ready, but designed to allow much more aggressive optimization long-term. The core team explicitly said "stay tuned for Ruby 4.1 ZJIT." ZJIT YouTube presentation by Takashi Kokubun provides deep technical context - Ruby::Box: In-process isolation of definitions and loaded libraries (opt-in via RUBY_BOX=1) creating segregated object spaces. Calling Ruby::Box.new creates a clean execution context. A gem loaded inside can patch core classes without changes leaking to other boxes. Useful for running different parts of a system (or even different gem versions) in the same process without them stepping on each other. Lays groundwork for a future high-level "package" system - Ractor improvements: New Ractor::Port class for safer message passing, reduced lock contention - Language changes: *nil no longer invokes nil.to_a, &&/|| allowed at line start as continuations - Core additions: Array#rfind, Set and Pathname promoted to core classes, --rjit support removed

January 2026

January 12
release

Resque 3.0.0 Released

Resque 3.0.0 shipped with modernized internals, dropping support for older Ruby versions and aligning with current ecosystem standards.
January 13
release

Ruby 4.0.1 and TruffleRuby 33.0

Ruby 4.0.1 shipped as the first patch release for the 4.0 series, with the core team announcing a new 2-month patch cadence. On the same day, TruffleRuby 33.0 adopted a simplified versioning scheme (dropping the "graal-" prefix) and eliminated system dependency requirements for installation.
January 14
release

Ruby 3.2.10 Released

Ruby 3.2.10 shipped with OpenSSL 3.6.0 compatibility fixes. The core team confirmed Ruby 3.2 reaches end-of-life in March 2026.
January 21
release

Puma 7.2.0 Released

Puma 7.2.0 delivered 17% faster HTTP request parsing through optimized header handling and reduced memory allocations.
January 22
release

Rails 8.1.2 Released

Rails 8.1.2 shipped with bug fixes and stability improvements for the 8.1 series.
January 23
release

Devise 5.0.0 Released

Devise 5.0.0 launched with full Rails 8 support, modernized defaults, and dropped compatibility with older Rails versions.
January 27
release

RuboCop 1.84.0 and Ruby 4.0 on Microsoft Store

RuboCop 1.84.0 shipped with expanded Ruby 4.0 support. Separately, Ruby 4.0 became available on the Microsoft Store via RubyInstaller, simplifying Windows installation.
January 29
release

Brakeman 8.0 Released

Brakeman 8.0 shipped with updated vulnerability detection patterns and Rails 8.1 support, expanding static analysis coverage for modern Rails applications.
January 31
event

RubyConf Thailand and FOSDEM RubyGems Postmortem

RubyConf Thailand 2026 drew attendees from across Asia-Pacific on January 31-February 1. At FOSDEM 2026 on the same weekend, a public postmortem on the September 2025 RubyGems governance crisis detailed lessons learned and the path forward under Ruby Core stewardship.
February 2
release

JRuby 10.0.3.0 Released

JRuby 10.0.3.0 shipped with continued improvements to Ruby 3.x compatibility on the JVM platform.
February 5
announcement

gem.coop Cooldown Feature and Gem Fellowship Grants

gem.coop introduced a cooldown feature allowing maintainers to delay gem releases for security review. Separately, the 2026 Gem Fellowship program announced $100,000 in grants for open-source Ruby infrastructure maintainers.
February 6
release

37signals Open-Sources Fizzy

37signals open-sourced Fizzy, a lightweight full-text search library for Rails applications backed by SQLite, aligning with the Solid Trifecta philosophy of reducing external dependencies.

Community Governance (2025)

Governance crisis timeline showing the month the Ruby community broke and fixed itself: September 9 takeover with Ruby Central controlling RubyGems repo and maintainers removed, September 15 DHH controversy with London blog post sparking backlash, September 25 funding cut with Sidekiq withdrawing 250,000 dollars from Ruby Central, October 5 rebellion with gem.coop mirror launching, and October 17 resolution with Matz intervening and Ruby Core assuming stewardship
Ruby Governance Crisis Timeline

The Ruby community faced its most significant governance crisis in September 2025. Ruby Central secured funding from Shopify and restructured RubyGems/Bundler repository ownership on September 9 without maintainer consensus. Long-standing volunteers found their permissions revoked; Ellen Dash, a 10-year maintainer, called it a "hostile takeover" and resigned. Separately, Mike Perham withdrew a six-figure Sidekiq sponsorship (widely reported as about $250,000/year) from Ruby Central on September 25, citing objections to DHH's keynote at the final RailsConf in July. Matz intervened on October 17, placing Ruby Core as steward, while former maintainers launched gem.coop as an alternative mirror.

Simultaneously, DHH's polarizing blog posts sparked community backlash. The Plan Vert open letter, signed by Eugen Rochko (Mastodon), Tim Bray (XML co-author), and Jeff Atwood (Stack Overflow)—called for cutting ties with Rails' creator. No fork materialized, but the controversies split the community between "institutionalists" prioritizing corporate-backed stability and "independents" who saw these events as dangerous precedents for corporate capture.


Rails 8 and the Solid Stack

The Omarchy No PaaS Required philosophy: DHH quote that a single developer should be able to build and ship a SaaS product without dedicated DevOps, featuring Kamal 2.0 for deploying to any Docker host with 30-second shutdown handling, Thruster as SSL and HTTP/2 proxy, Propshaft as modern asset pipeline replacing Sprockets, and Rails 8.1 new capabilities including Active Job Continuations and Local CI DSL
Rails 8: The Omarchy Vision

Rails 8.0 and 8.1 delivered on the Omarchy vision. Kamal 2 became the default deployment tool, Propshaft replaced Sprockets as the asset pipeline, and the Solid Trifecta eliminated Redis as a hard dependency: Solid Queue for background jobs, Solid Cache for caching, and Solid Cable for WebSockets, all database-backed via SQLite or Postgres.

Rails 8.1 introduced Active Job Continuations allowing long-running jobs to resume from checkpoints after interruption (critical for Kamal's 30-second container shutdown), plus native markdown rendering and a Local CI DSL. Hotwire continued to evolve with Turbo 8.x releases.


Performance Evolution

Ruby 4.0 speed and isolation architecture released December 25 2025: Ruby::Box providing true in-process isolation with segregated object spaces for legacy gems and app versions preventing monkey-patches from leaking between boxes, ZJIT experimental JIT compiler targeting aggressive optimization with SSA-style IR requiring Rust 1.85 or newer, and use cases including running conflicting gem versions or isolated multi-tenant apps within a single process
Ruby 4.0: Speed and Isolation

YJIT in Ruby 3.4 delivered significant speedups (see January timeline for benchmark details) through compressed metadata/context representation and improved register allocation. Ruby 3.3 optimized defined?(@ivar) with Object Shapes, and YJIT changes improved copy-on-write behavior for servers reforking with Pitchfork. Puma remained an HTTP/1.1 server with continued performance improvements through the 7.x series.

Ruby 4.0 introduced experimental ZJIT, a method-based JIT designed for aggressive optimization (not yet production-ready), and Ruby::Box for namespace isolation. Alternative implementations continued advancing: TruffleRuby 25.0 runs native extensions in parallel, JRuby 9.4 leverages JVM optimizations, and Artichoke compiles Ruby to WebAssembly.


Ruby 2026 Watchlist

2026 Watchlist highlighting four key areas: Hanami 2.4 as the lightweight alternative with Racked and Ready full Rack 3 support, WASM with Ruby in the browser via Artichoke and ruby.wasm compiling to WebAssembly, Types with Sorbet supporting inline RBS and Typed Ruby discussions active in Ruby Core, and Events with Rails World 2026 in Austin Texas and RubyConf as unified flagship
Ruby 2026 Strategic Watchlist

1. Ruby 4.1 and ZJIT Production Readiness

When: Late 2026 (timing TBD)
Context: ZJIT in Ruby 4.0 is experimental, faster than the interpreter but not yet as fast as YJIT. It targets larger compilation units and SSA-style IR, aiming for a higher long-term performance ceiling than YJIT's basic-block approach. Ruby 4.0.1 shipped January 13 as the first patch, with the core team confirming a 2-month release cadence. Ruby 4.1 may also remove Ractor's "experimental" tag, signaling production readiness for parallel execution.
Action: Track ZJIT benchmarks on the Rails at Scale blog. Test Ruby 4.0.1+ with ZJIT in non-production environments to prepare for 4.1 adoption.


2. Solid Trifecta Migration from Redis

When: Now
Context: Rails 8's Solid Queue, Solid Cache, and Solid Cable replace Redis with database-backed alternatives (SQLite for simplicity, Postgres/MySQL for scale), reducing infrastructure complexity. Solid Queue runs 20 million jobs per day for HEY, and Solid Cache is in production at Basecamp handling 10TB with 60-day retention, cutting P95 render times in half.
Action: Test Solid components on new Rails 8 projects. For existing applications, benchmark against current Redis usage before migrating.


3. RubyGems/Bundler Stewardship Resolution

When: Mid-2026
Context: Matz's intervention placed Ruby Core as steward, but the practical governance structure is still forming. gem.coop operates as an alternative mirror and added a cooldown feature in February 2026 allowing maintainers to delay gem releases for security review. A FOSDEM 2026 postmortem on January 31 detailed lessons learned from the September crisis and outlined the path forward under Ruby Core stewardship.
Action: Follow official Ruby announcements for the new RubyGems/Bundler core team structure. Consider whether your organization should mirror gems via gem.coop as backup infrastructure.


4. RubyGems MFA and Trusted Publishing

When: Now

Context: By mid-2025, RubyGems' MFA requirement (rolled out starting 2022) applied to owners of the top 100 gems and any gem with >180 million downloads. researchers found 60+ malicious gems in 2025 supply-chain attacks. Trusted Publishing (announced late 2023) via OIDC enables passwordless gem releases from CI. Work began on Sigstore integration for cryptographic signing of gems. RubyGems.org completed a security audit by Trail of Bits in late 2024, with Ruby Central reporting that it had begun fixing critical findings. Germany's Sovereign Tech Agency funded a third-party security review of Rails 8 features through OSTIF (with GitLab's help). Ruby Shield is Ruby Central's separate funding partnership with Shopify for Ruby infrastructure investment.
Action: Enable MFA on your RubyGems.org account immediately. Configure Trusted Publishing for gems published via GitHub Actions.


5. Rails World 2026 in Austin, Texas

When: September 2026
Context: Rails World has become the Rails Foundation's flagship event following RailsConf's discontinuation. The 2025 Amsterdam event drew 814 attendees from 62 countries and featured major announcements including Rails 8.1 beta.
Action: Watch for registration announcements in early 2026. Submit talk proposals if you have production Rails 8 experience to share.


6. RubyConf 2026 and Regional Events

When: Throughout 2026
Context: With RailsConf discontinued, RubyConf becomes Ruby Central's single flagship event with a dedicated Rails track. RubyKaigi 2026 runs April 22-24 in Hakodate, Hokkaido. RubyConf Thailand 2026 kicked off the year on January 31-February 1, drawing attendees from across Asia-Pacific. Other events include RubyConf AU 2026, Euruko 2026 (Warsaw), and Rails SaaS 2026. Ruby Central launched micro-grants for regional events and Rails Girls/RailsBridge workshops continue globally.
Action: Follow Ruby Central announcements for dates and CFP. Consider hosting or sponsoring local Ruby meetups through the micro-grant program.


7. Ruby::Box Namespace Isolation

When: Ongoing through 2026
Context: Ruby 4.0's experimental Ruby::Box provides in-process isolation of definitions and loaded libraries, particularly valuable for test isolation/parallelization and for running isolated web app boxes in parallel (for example, blue-green deployment and dependency-update evaluation). Watch for stabilization in Ruby 4.1.
Action: Experiment with Ruby::Box in isolated test environments. Watch the ruby-core mailing list for API stabilization announcements.


8. Shopify Ruby LSP Maturity

When: Now
Context: Ruby LSP reached version 0.26.x with full IDE feature parity including code completion, go-to definition, find references, and inline documentation. The ruby-lsp-rails and ruby-lsp-rspec extensions enable enhanced navigation and debugging. The debug gem, Ruby's bundled debugger since Ruby 3.1 (with features like record/replay), became the default in Rails 7; pry remains a separate REPL/debugging workflow. StandardRB provides opinionated zero-config linting/formatting. The irb-tools gem loads useful IRB extensions by default, and IRB gained experimental autocomplete using RBS or Sorbet types. A GitHub Actions RuboCop action became widely used, annotating pull requests with suggested fixes. Rails 7.1 and 8.x include built-in parallel testing using worker processes by default, with optional thread mode. As one developer noted: "With VSCode + Ruby LSP + Copilot, writing Rails code in 2025 feels like I have superpowers compared to 5 years ago."
Action: Install Ruby LSP in your editor. Add ruby-lsp-rails and ruby-lsp-rspec extensions for enhanced Rails development.


9. Type Annotation Convergence

When: Ongoing through 2026
Context: Sorbet now supports RBS inline comments, enabling gradual migration to Ruby's official type format. Large codebases (Shopify, Nx) run Sorbet, the Ruby static type checker by Stripe, though its momentum slowed after Stripe reorganized the Sorbet team in 2022, leading to interest in lighter-weight alternatives. Steep provides lightweight RBS type-checking and gained interest. There was talk at RubyKaigi of possibly integrating a gradual typing mode in a future Ruby version. A possible "Typed Ruby" mode with interpreter warnings on type violations is under discussion. If Ruby core signals moves toward types, 2026 could see an uptick in adoption.
Action: For Sorbet users, explore RBS migration path. For new projects, consider starting with RBS signatures and Steep for lighter-weight type checking.


Ruby in the age of AI agents: convention over configuration equals lower context window usage with Rails patterns highly predictable for LLMs, RubyMine 2025.3 with native multi-agent AI, Shopify Ruby LSP reaching full IDE parity, Cursor with superpowers via cursor-rails-rules, and 84 percent of professional developers now using AI assistants according to Stack Overflow
Ruby in the Age of AI Agents

10. AI Coding Assistant Integration

When: Now
Context: Most professional developers now use AI assistants (84% are using or planning to use AI tools per Stack Overflow 2025; no Ruby-specific breakdown available). Rails' convention-over-configuration arguably means AI can generate features with fewer tokens and less context window usage than in more verbose frameworks. Cursor gained significant Rails adoption with community-maintained cursor-rails-rules. Shopify developed AI Dev Ex tools that can take a failing test and ask an LLM to explain what might be wrong. Gems like ruby-openai enable Rails apps to integrate AI features. One blogging platform added an "AI assist button" for authors using this pattern. A ChatGPT plugin for Ruby on Rails emerged that allows asking questions about your Rails app's codebase. For calling AI APIs, Ruby 3.2+'s async Fiber scheduler allows writing non-blocking HTTP calls easily, and the new Faraday-nethttp gem achieves better throughput for parallel requests via Fibers.
Action: Configure your AI assistant with Rails-specific rules. Try cursor-rails-rules for Cursor or explore RubyMine 2025.3's built-in AI assistants.


11. Hanami 2.4

When: 2026
Context: With Hanami 2.2 shipped in 2024 and 2.3 in November 2025, the next milestone is Hanami 2.4. The framework continues development as a lighter Rails alternative focused on performance and modularity, a good fit for developers who prefer explicit architecture over Rails' conventions.
Action: Try Hanami for new projects where Rails' conventions feel excessive. Watch the Hanami blog for 2.4 release announcements.


12. WebAssembly (WASM) Support

When: Ongoing
Context: There's growing interest in compiling Ruby to WASM. ruby.wasm (the official CRuby WebAssembly port under the Ruby organization) exists, and Artichoke (Ruby in Rust) can compile to WebAssembly. An official WASM build could allow Ruby scripts to run in browsers or Cloudflare Workers.
Action: Watch ruby-core discussions for official WASM support. Experiment with Artichoke for WebAssembly use cases.


13. Performance: YJIT and TruffleRuby

When: Now
Context: YJIT 3.4 is ~92% faster than the Ruby interpreter on Shopify's x86-64 benchmark suite; production gains are smaller and workload-dependent. Ruby 4.0 release notes state ZJIT is generally faster than the interpreter but does not yet match YJIT. Shopify reported Ruby 3.3 GC improvements including 33% and 19% reductions in average GC time per request from two GC changes. TruffleRuby 33.0 (January 2026) adopted simplified versioning and eliminated system dependency requirements, building on 25.0's ability to run native extensions in parallel. JRuby 10.0.3.0 (February 2026) continued improving Ruby 3.x compatibility on the JVM.
Action: Enable YJIT in production (--yjit flag or RUBY_YJIT_ENABLE=1). Try TruffleRuby for parallel-heavy workloads.


14. Job Market Dynamics

When: Ongoing

Context: Despite survey ranking declines, Ruby developer salaries average around $134,000 (ZipRecruiter, early 2026; aggregator estimate; actual ranges vary) and Rails jobs remain widely available in the US, concentrated in fintech, SaaS, and e-commerce with a shortage of senior engineers. Monterail's analysis found demand "largely stable" with tens of thousands of positions globally.

Shopify continues investing in YJIT and Sorbet rather than rewriting, and GitHub's platform remains a Rails monolith using techniques like backgroundable IO for performance. Migration trends show some companies introducing Kotlin/Go microservices, but counter-trends emerged: a startup wrote about switching from Node.js services back to Rails 7 and saw developer happiness improve. The big question: will Ruby's decline in rankings reverse or stabilize due to renewed interest from Rails 8+ and Ruby 4? The 2026 Stack Overflow survey will be telling. Ruby might slip a bit more unless the influx of new devs increases. But demand for experienced Ruby devs likely stays high, possibly even increasing if fewer people enter the field.

Action: For job seekers, emphasize Ruby/Rails expertise in fintech, SaaS, and e-commerce sectors. For hiring managers, expect competition for senior Ruby talent and consider upskilling junior developers.


15. Community Health and Events

When: Ongoing
Context: Ruby Central pivoted to supporting local and regional events with a micro-grant program. Regional conferences like RubyKaigi (Japan), Rails SaaS (virtual), RubyConf AU, and RailsConf Taiwan had strong attendance. The 2026 Gem Fellowship program announced $100,000 in grants for open-source Ruby infrastructure maintainers, providing direct funding for the ecosystem's critical dependencies. The Rails Foundation, launched in 2022 by Core members including Shopify and GitHub, funds Rails ecosystem work such as documentation, education, events, and marketing; Shopify maintains Ruby LSP. The Ruby Association in Japan continues its annual grant program. Initiatives like Rails Girls and RailsBridge workshops persist globally. The Foundation plans a guides.rubyonrails.org revamp for 2026, and the Foundation has signaled interest in funding junior developer outreach, possibly a Rails Fellowship or grants.
Action: Consider hosting or sponsoring local Ruby meetups. Apply for Ruby Association grants for Ruby projects. Volunteer with Rails Girls or RailsBridge workshops.


16. Beyond Rails: Alternative Ruby Frameworks and Libraries

When: 2026
Context: Beyond Hanami (see Watchlist #11), Bridgetown is gaining traction as a Ruby-based JAMstack static site generator. 37signals open-sourced Fizzy in February 2026, a lightweight full-text search library for Rails backed by SQLite, continuing the Solid Trifecta philosophy of reducing external dependencies. Dry-rb and ROM continue pushing Ruby's functional and data library capabilities. Package security is evolving; watch for possible signed gems and eventual 2FA requirements for all gem pushes.
Action: Consider Bridgetown for static sites and Fizzy for SQLite-backed search. Explore Dry-rb for domain logic that benefits from functional patterns.

Enjoyed this article?

Subscribe to get more deep-dives in your inbox.

Continue Reading

Stay ahead of the curve

Weekly deep-dives into programming languages, frameworks, and the tools shaping software engineering.