Bump rubocop-rails from 2.34.3 to 2.35.2

[dependabot]

Bumps rubocop-rails from 2.34.3 to 2.35.2.

Release notes

Sourced from rubocop-rails's releases.

RuboCop Rails v2.35.2

Bug fixes

• #1625: Fix false positives in Rails/StrongParametersExpect when using collection methods (such as delete, keys, merge, slice, dig, fetch, or transform_values) on params[:key], as well as block-style calls such as params[:key].each { ... } or params[:key].map(&:to_s). (@​koic)
• #1627: Fix false positives in Rails/StrongParametersExpect for usages like params[:key].try(:method) and params[:key].try!(:method). (@​nicholasdower)

RuboCop Rails v2.35.1

Bug fixes

• #1616: Fix false positives in Rails/StrongParametersExpect when using nil-safe conversion methods such as to_i, to_s, to_a, to_f, and to_h on params[:key]. (@​koic)
• #1622: Fix false positives in Rails/StrongParametersExpect when using key-check methods such as key?, has_key?, include?, and member? on params[:key]. (@​koic)
• #1620: Fix false positives in Rails/StrongParametersExpect when using type-check methods such as is_a?, kind_of?, and instance_of? on params[:key]. (@​koic)

RuboCop Rails v2.35.0

Bug fixes

• #1595: Fix a false negative for Rails/I18nLocaleTexts when using redirect_back_or_to with a flash message. (@​55728)
• #1587: Fix false positives for Rails/Presence with operator methods like <<, =~, and others. (@​eugeneius)
• #1586: Don't add unnecessary parentheses in Rails/Presence. (@​eugeneius)
• #1602: Fix an error in Rails/SelectMap when .select appears inside a subquery in an argument. (@​koic)
• #1604: Allow DatabaseTypeResolvable to fall back to an adapter configuration specified in a shared key. (@​codergeek121)
• #1582: Fix a false negative where local was incorrectly treated as a known environment name when using == comparison in Rails/UnknownEnv. (@​lovro-bikic)

Changes

• #1571: Add more detection patterns on Rails/ResponseParsedBody. (@​r7kamura)
• #1583: Extend Rails/StrongParametersExpect to detect params[:key] in method calls and raising finder methods. (@​koic)
• #1584: Add support for case statements to Rails/UnknownEnv. (@​lovro-bikic)
• #1592: Fix false negative for != comparison in Rails/UnknownEnv. (@​lovro-bikic)
• #1598: Use glob patterns compatible with Engine or Packwerk for cops targeting spec/ and test/ directories. (@​y-yagi)

Changelog

Sourced from rubocop-rails's changelog.

2.35.2 (2026-05-19)

Bug fixes

• #1625: Fix false positives in Rails/StrongParametersExpect when using collection methods (such as delete, keys, merge, slice, dig, fetch, or transform_values) on params[:key], as well as block-style calls such as params[:key].each { ... } or params[:key].map(&:to_s). ([@​koic][])
• #1627: Fix false positives in Rails/StrongParametersExpect for usages like params[:key].try(:method) and params[:key].try!(:method). ([@​nicholasdower][])

2.35.1 (2026-05-17)

Bug fixes

• #1616: Fix false positives in Rails/StrongParametersExpect when using nil-safe conversion methods such as to_i, to_s, to_a, to_f, and to_h on params[:key]. ([@​koic][])
• #1622: Fix false positives in Rails/StrongParametersExpect when using key-check methods such as key?, has_key?, include?, and member? on params[:key]. ([@​koic][])
• #1620: Fix false positives in Rails/StrongParametersExpect when using type-check methods such as is_a?, kind_of?, and instance_of? on params[:key]. ([@​koic][])

2.35.0 (2026-05-09)

Bug fixes

• #1595: Fix a false negative for Rails/I18nLocaleTexts when using redirect_back_or_to with a flash message. ([@​55728][])
• #1587: Fix false positives for Rails/Presence with operator methods like <<, =~, and others. ([@​eugeneius][])
• #1586: Don't add unnecessary parentheses in Rails/Presence. ([@​eugeneius][])
• #1602: Fix an error in Rails/SelectMap when .select appears inside a subquery in an argument. ([@​koic][])
• #1604: Allow DatabaseTypeResolvable to fall back to an adapter configuration specified in a shared key. ([@​codergeek121][])
• #1582: Fix a false negative where local was incorrectly treated as a known environment name when using == comparison in Rails/UnknownEnv. ([@​lovro-bikic][])

Changes

• #1571: Add more detection patterns on Rails/ResponseParsedBody. ([@​r7kamura][])
• #1583: Extend Rails/StrongParametersExpect to detect params[:key] in method calls and raising finder methods. ([@​koic][])
• #1584: Add support for case statements to Rails/UnknownEnv. ([@​lovro-bikic][])
• #1592: Fix false negative for != comparison in Rails/UnknownEnv. ([@​lovro-bikic][])
• #1598: Use glob patterns compatible with Engine or Packwerk for cops targeting spec/ and test/ directories. ([@​y-yagi][])

Commits

• 26f1034 Cut 2.35.2
• 65841f0 Update Changelog
• e89ab8e Merge pull request #1626 from koic/fix_false_positives_for_rails_strong_param...
• e977fb9 [Fix #1625] Fix false positives in Rails/StrongParametersExpect
• d56c5d7 Merge pull request #1627 from nicholasdower/try
• 9bb461b Fix false positives for try and try! in Rails/StrongParametersExpect
• 9585950 Reset the docs version
• 8bfc91e Cut 2.35.1
• 90f8242 Update Changelog
• 1346310 Merge pull request #1624 from koic/fix_false_positives_for_rails_strong_param...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)