Pretty sure the bulk of the security updates were part of the 3.0.4 update, unless you mean this one which I didn't think was that big of a deal. https://github.com/rails/rails/commit/90aede67711476f0a63fdc...