What Happened to Ruby on Rails?
Ruby on Rails, a server-side web application framework, continues to be a robust and evolving choice for web development in 2026, powering major platforms like GitHub and Shopify. Despite debates about its relevance, recent versions like Rails 8 have introduced significant innovations, including the 'Solid Trifecta' for simplified infrastructure and enhanced AI integration capabilities, reinforcing its position as a mature and productive framework. It maintains a strong community and a focus on developer happiness, adapting to modern web demands while emphasizing rapid development and maintainability.
Quick Answer
Ruby on Rails remains a highly relevant and actively developed web framework in 2026, continuously evolving to meet modern web development needs. Recent advancements, particularly with Rails 8, have focused on simplifying infrastructure with features like Solid Queue, Solid Cache, and Solid Cable, reducing external dependencies. It continues to be the backend for major companies like Shopify and GitHub, and discussions at Rails World 2026 highlight its integration with AI and ongoing performance improvements, making it a pragmatic choice for building scalable and maintainable applications.
📊Key Facts
📅Complete Timeline13 events
Initial Release of Ruby on Rails
David Heinemeier Hansson released Ruby on Rails, introducing a new paradigm for web development with its 'convention over configuration' philosophy. It quickly gained traction for enabling rapid application development.
Rails 5.0 Released with Action Cable and API Mode
Rails 5.0 introduced Action Cable for integrating WebSockets seamlessly into applications, enabling real-time features. It also added API mode, allowing developers to build API-only backends more efficiently.
Rails 7.0 Released with Hotwire and Import Maps
Rails 7.0 marked a significant shift by making Hotwire (Turbo and Stimulus) the default for dynamic frontends, reducing reliance on heavy JavaScript frameworks. It also replaced Node.js and Webpack with import maps for JavaScript management.
Rails 7.1 Released with Dockerfile Support and Kamal Integration
Rails 7.1 introduced built-in Dockerfile support and integration with Kamal for simplified application deployment. It also added support for Bun, a fast JavaScript runtime and bundler.
Rails 7.2 Final Release
Rails 7.2 was released with better production defaults, including YJIT (Just-In-Time compiler) enabled by default for Ruby 3.3+ for performance improvements, and a redesigned guides interface.
Ruby on Rails 8.0.0 Released with 'No PaaS Required' Philosophy
Rails 8.0 introduced a major shift with its 'No PaaS Required' philosophy, preconfigured with Kamal 2 for simplified deployment. It also brought the 'Solid Trifecta' (Solid Queue, Solid Cache, Solid Cable) to reduce external dependencies.
Ruby on Rails 8.1.0 Released
Rails 8.1.0 was released, featuring Active Job Continuations for improved background job reliability, Structured Event Reporting, Local CI integration, and native Markdown rendering capabilities.
Rails 7.0 and 7.1 Reach End-of-Life
The Rails core team announced that Rails 7.0 and 7.1 reached their end-of-life, meaning they would no longer receive security fixes or bug fixes. Rails 8.0's support was extended due to the timing of 8.1's release.
Rails World 2026 Discussions Highlight Rails 8 Innovations
Anticipation for Rails World 2026 (held in late 2026) included discussions around Rails 8 and its 'Solid Trifecta' (Solid Queue, Solid Cache, Solid Cable), emphasizing simplified deployment and infrastructure.
Ruby 3.2 Reaches End-of-Life, Creating Dual EOL Risk
Ruby 3.2 reached its end-of-life, creating a 'dual EOL' problem for enterprises still running older Rails versions on unsupported Ruby runtimes, posing significant security risks.
Security Patches Released for Rails 8.1.3.1, 8.0.5.1, and 7.2.3.2
Security patches were released for multiple active Rails versions, including 8.1.3.1, 8.0.5.1, and 7.2.3.2, addressing various security issues and ensuring ongoing stability.
Rails 7.2.x Security Support Ends
According to the official maintenance policy, the Rails 7.2.x series reached its end of security support, meaning it no longer receives official security updates or patches.
Critical Flaws in Ruby on Rails Exploited by Threat Actors
Threat actors were reported to be exploiting critical vulnerabilities in Ruby on Rails (CVE-2026-66066, also known as KindaRails2Shell) and Langflow, highlighting the ongoing importance of timely security updates.
Follow this story
Get an email when this timeline gets a major update.
🔍Deep Dive Analysis
Ruby on Rails (often shortened to Rails) emerged in July 2004, quickly revolutionizing web application development with its 'convention over configuration' (CoC) and 'Don't Repeat Yourself' (DRY) principles. This model-view-controller (MVC) framework, written in Ruby, emphasized developer productivity and happiness, leading to rapid application development and a vibrant ecosystem of 'gems' (plugins). Its early success led to widespread adoption by startups and established companies alike, influencing the design of many other web frameworks across different programming languages.
While Rails faced periods of skepticism regarding its scalability, particularly after high-profile migrations like Twitter's, the framework has consistently evolved to address these concerns. Key turning points include the introduction of Action Cable and API mode in Rails 5.0 (June 2016), which facilitated real-time features and API-only applications. Rails 7.0, released in December 2021, marked a significant shift by replacing Node.js and Webpack with import maps for JavaScript management and integrating Hotwire (Turbo and Stimulus) for building reactive UIs with minimal JavaScript. This move aimed to simplify the frontend stack and enhance developer experience.
The framework's commitment to innovation continued with Rails 8.0, released in November 2024, which introduced a 'No PaaS Required' philosophy, preconfigured with Kamal 2 for simplified deployment, and the 'Solid Trifecta' (Solid Queue, Solid Cache, Solid Cable). These 'Solid' adapters allow Rails applications to handle background jobs, caching, and real-time WebSocket connections using only a database, significantly reducing the need for external dependencies like Redis and simplifying operational overhead. Rails 8.1.0, released in October 2025, further enhanced the framework with Active Job Continuations, Structured Event Reporting, and native Markdown rendering.
As of September 2, 2026, Ruby on Rails remains a powerful and relevant choice for web development. Major companies such as GitHub, Shopify, Intercom, Siemens AG, Bank of America, Oracle, AT&T, Nokia, Salesforce, Johnson & Johnson, American Express, Costco, and the United States Navy continue to utilize Rails for critical systems and new product development. While market share estimates vary, with some analyses placing it around 4.6% among web frameworks and others suggesting figures as high as 21.99%, its consistent use by large-scale applications demonstrates its proven capability to handle high traffic and complex business logic. The demand for skilled Ruby on Rails developers remains strong, with a vibrant community actively contributing to its ongoing development and security. Discussions at Rails World 2026 highlight a focus on AI integration, performance improvements, and further simplification of deployment, indicating a forward-looking trajectory for the framework. However, enterprises running older versions face a 'dual EOL' risk as Ruby 3.2 reached end-of-life on March 31, 2026, coinciding with the end of support for older Rails versions, necessitating timely upgrades to maintain security. Recent security patches were released on July 29, 2026, for versions including 8.1.3.1, 8.0.5.1, and 7.2.3.2, and critical flaws impacting Ruby on Rails were exploited by threat actors as recently as September 1, 2026, underscoring the importance of staying updated.
What If...?
Explore alternate histories. What if Ruby on Rails made different choices?