Sorta surprised I don't see people complaining that this release contained other changes besides the security fix.

Lots of folks complained about that (unintended) ActiveRecord change in Rails during the last security update.