FASCINATION.works

@FascinationWorks
5 Followers
2 Following
33 Posts
Software consultancy built on the radical premise that software should, you know, work. Architecture, development, AI integration, engineering leadership, and the occasional infrastructure intervention. Also available for cat herding — distributed teams across time zones count.
websitehttps://fascination.works

💎 I've published and patched high security vulnerabilities for oauth and oauth2 ruby gems! ⚠️

💎 oauth: 7.2/10 https://github.com/ruby-oauth/oauth/security/advisories/GHSA-prq8-7wvh-44qh ⏩ upgrade to v1.1.6

💎 oauth2: 8.6/10 https://github.com/ruby-oauth/oauth2/security/advisories/GHSA-pp92-crg2-gfv9 ⏩ upgrade to v2.0.22

Cross-origin OAuth token-request redirects can expose signed request metadata

# Cross-origin OAuth token-request redirects can expose signed request metadata ## Summary When an application uses `OAuth::Consumer` to request OAuth 1.0 request tokens or access tokens, th...

GitHub

In this post I break down how package managers like Bundler and NPM are implementing a 'cooldown' feature to delay the installation of newly published gems and packages, serving as a proactive defense against increasing supply chain attacks.

https://fascination.works/security/2026/06/06/mitigating-supply-chain-attacks-with-cooldowns-a-practical-guide/

#security #ruby #javascript #devops #blog

Mitigating Supply Chain Attacks with Cooldowns: A Practical Guide

In this post I break down how package managers like Bundler and NPM are implementing a ‘cooldown’ feature to delay the installation of newly published gems and packages, serving as a proactive defense against increasing supply chain attacks.

FASCINATION·works

First leg. Second city. XO Ruby Seattle. August 8th. If you're apart of the Seattle Ruby community or the Seattle dev community at large we wanna hear from you. Tell us what we need to know.

Coworking 💻. Coffee ☕. Spots only Seattle natives know 🤫. Drop it all in the comments 👇

Tell a friend to tell a friend we're coming to town 🚗💨.

#XORuby #XORuby2026 #RubyOnRails #PacificNorthwest #SaltLakeCity #Seattle #Vancouver #RubyCommunity

#RubyDev #SoftwareEngineering #TechConference

Got Sidekiq questions? The Ruby Users forum is the newest place where you can get Sidekiq help anytime. https://www.rubyforum.org/t/get-sidekiq-and-faktory-support-in-the-ruby-users-forum/414
Get Sidekiq and Faktory support in the Ruby Users Forum

Today we’re glad to announce that we’ve partnered with @mperham, so you can ask any question around Ruby, background jobs, threading and Sidekiq in the forum. We’ll also be providing updates on new releases and other important announcements. If you’re not familiar with the projects, Sidekiq provides a simple and efficient background jobs for Ruby, and Faktory aims to bring the best practices developed in Sidekiq to every programming language. You can start today by creating a new topic using t...

Ruby Users Forum

Finally set out to write a couple #ruby #gtk apps with #JRuby for the java-gi examples repository.

Really impressive how easy #JRuby it makes to integrate ruby with java.

We're back for 2026 and we're bringing the campfire to you. 🔥

Jim is packing the van and headed on a full US and Canada road trip with legs across the Pacific Northwest, Midwest, and East Coast.
Our infamous single-day conference is coming to a Ruby community near you.

Keep up with us at👇

xoruby.com

#XORuby #XORuby2026 #RubyCommunity #Rubyists #SoftwareEngineering #TechConference #SingleDayConference #NotYourAverageConference #Sustainability

This week I released lightningcss_rb, found a mitigation for timestamp churn in YARD documentation, benchmarks comparing various runtimes like Crystal and Rust for Rails, yet another new supply chain risk, and new methods for browser spying.

https://fascination.works/fascinating/2026/06/02/fascinating-this-week/

#ruby #css #documentation #performance #security #blog

Fascinating (this week)

This week I released lightningcss_rb, found a mitigation for timestamp churn in YARD documentation, benchmarks comparing various runtimes like Crystal and Rust for Rails, yet another new supply chain risk, and new methods for browser spying.

FASCINATION·works

In about an hour I'll do my first solo JRuby workshop at RubyConf Austria! I've used this opportunity to start assembling a complete JRuby tutorial, and I'd love to include your ideas.

Check it out: https://github.com/headius/tutorial

GitHub - headius/tutorial: Sources and walkthroughs for the JRuby workshop at RubyConf Austria 2026

Sources and walkthroughs for the JRuby workshop at RubyConf Austria 2026 - headius/tutorial

GitHub

I have 2 tickets left to give away for #BrightonRuby.

Let me know if you want one! Would be so good to get them transferred over to their new owners.

Boosts would be very appreciated! 🙇

#brighton #ruby #tech #rails #rubyonrails

Exciting news! We have published 80.0.pre1 gems for JRuby's activerecord-jdbc-adapter for Rails 8.x, as well as a template you can use (thanks to @kares) to `rails new` a fresh app! It bundles and runs just fine!

https://gist.github.com/headius/0e8addffdd42c1157b4ca81508c8adce

JRuby on Rails is BACK and we're excited to see what you do with it!

Example rails new session with JRuby template for JDBC adapters

Example rails new session with JRuby template for JDBC adapters - gist:0e8addffdd42c1157b4ca81508c8adce

Gist