build(deps-dev): bump rubocop-rails from 2.34.3 to 2.36.0

[dependabot]

Bumps rubocop-rails from 2.34.3 to 2.36.0.

Release notes

Sourced from rubocop-rails's releases.

RuboCop Rails v2.36.0

Bug fixes

• #1647: Fix a false negative for Rails/EagerEvaluationLogMessage when the interpolated string is passed to Rails.logger.debug as the sole body of an enclosing block such as each or tap. (@​conwayje)
• #1646: Fix a false negative for Rails/ReversibleMigration when using remove_index without a column inside a change_table block. (@​ilianah)
• #1642: Fix a false negative for Rails/SafeNavigation when using try/try! with a symbol to proc such as foo.try(&:bar). (@​koic)
• #1599: Fix an incorrect autocorrect for Rails/LinkToBlank when Style/TrailingCommaInArguments with EnforcedStyleForMultiline: consistent_comma adds a trailing comma, which produced a duplicate comma. (@​koic)
• #1619: Fix MigratedSchemaVersion setting so it works for all cops. (@​lovro-bikic)

Changes

• #1641: Fix false negatives in Rails/SafeNavigation when using try/try! with operator methods such as [], []=, and ==. (@​koic)

RuboCop Rails v2.35.5

Bug fixes

• #1379: Fix an incorrect offense for Rails/SaveBang when a persist method is the last expression in a multiline method or block. (@​aki77)

Changes

• #1617: Allow Rails.env.local? in Rails/Env. (@​corsonknowles)

RuboCop Rails v2.35.4

Bug fixes

• #1418: Fix a false positive for Rails/StrongParametersExpect when require is given an array literal, such as params.require([:foo, :bar]).permit(:baz). (@​koic)
• #1574: Fix an invalid autocorrection for Rails/StrongParametersExpect when permit receives a single dynamic argument, such as params.require(:user).permit(permitted_attributes). (@​koic)
• #1635: Fix Rails/StrongParametersExpect to allow params[:foo].inspect. (@​jdelStrother)

RuboCop Rails v2.35.3

Bug fixes

• #1630: Fix a false positive in Rails/StrongParametersExpect when negating params[:key] with !, such as !params[:key]. (@​koic)
• #1629: Fix false positives in Rails/StrongParametersExpect when using the safe navigation operator (&.) on params[:key]. Autocorrecting params[:key]&.downcase to params.expect(:key).downcase silently changes behavior — a missing param goes from returning nil to raising ActionController::ParameterMissing. (@​lucasmazza)

RuboCop Rails v2.35.2

... (truncated)

Changelog

Sourced from rubocop-rails's changelog.

2.36.0 (2026-07-11)

Bug fixes

• #1647: Fix a false negative for Rails/EagerEvaluationLogMessage when the interpolated string is passed to Rails.logger.debug as the sole body of an enclosing block such as each or tap. ([@​conwayje][])
• #1646: Fix a false negative for Rails/ReversibleMigration when using remove_index without a column inside a change_table block. ([@​ilianah][])
• #1642: Fix a false negative for Rails/SafeNavigation when using try/try! with a symbol to proc such as foo.try(&:bar). ([@​koic][])
• #1599: Fix an incorrect autocorrect for Rails/LinkToBlank when Style/TrailingCommaInArguments with EnforcedStyleForMultiline: consistent_comma adds a trailing comma, which produced a duplicate comma. ([@​koic][])
• #1619: Fix MigratedSchemaVersion setting so it works for all cops. ([@​lovro-bikic][])

Changes

• #1641: Fix false negatives in Rails/SafeNavigation when using try/try! with operator methods such as [], []=, and ==. ([@​koic][])

2.35.5 (2026-06-21)

Bug fixes

• #1379: Fix an incorrect offense for Rails/SaveBang when a persist method is the last expression in a multiline method or block. ([@​aki77][])

Changes

• #1617: Allow Rails.env.local? in Rails/Env. ([@​corsonknowles][])

2.35.4 (2026-06-07)

Bug fixes

• #1418: Fix a false positive for Rails/StrongParametersExpect when require is given an array literal, such as params.require([:foo, :bar]).permit(:baz). ([@​koic][])
• #1574: Fix an invalid autocorrection for Rails/StrongParametersExpect when permit receives a single dynamic argument, such as params.require(:user).permit(permitted_attributes). ([@​koic][])
• #1635: Fix Rails/StrongParametersExpect to allow params[:foo].inspect. ([@​jdelStrother][])

2.35.3 (2026-05-27)

Bug fixes

• #1630: Fix a false positive in Rails/StrongParametersExpect when negating params[:key] with !, such as !params[:key]. ([@​koic][])
• #1629: Fix false positives in Rails/StrongParametersExpect when using the safe navigation operator (&.) on params[:key]. Autocorrecting params[:key]&.downcase to params.expect(:key).downcase silently changes behavior — a missing param goes from returning nil to raising ActionController::ParameterMissing. ([@​lucasmazza][])

2.35.2 (2026-05-19)

Bug fixes

• #1625: Fix false positives in Rails/StrongParametersExpect when using collection methods (such as delete, keys, merge, slice, dig, fetch, or transform_values) on params[:key], as well as block-style calls such as params[:key].each { ... } or params[:key].map(&:to_s). ([@​koic][])
• #1627: Fix false positives in Rails/StrongParametersExpect for usages like params[:key].try(:method) and params[:key].try!(:method). ([@​nicholasdower][])

2.35.1 (2026-05-17)

Bug fixes

... (truncated)

Commits

• b49bdd2 Cut 2.36.0
• c38ff7c Update Changelog
• 4a723b4 Merge pull request #1619 from lovro-bikic/fix-migration-file-skippable
• 7900fa6 Merge pull request #1647 from conwayje/fix-eager-evaluation-log-message-in-block
• 5409363 [Fix #1647] Fix a false negative for Rails/EagerEvaluationLogMessage
• e55944e Merge pull request #1646 from ilianah/fix-remove-index-reversible-migration-d...
• 08663a3 Fix a false negative for Rails/ReversibleMigration with remove_index oper...
• 1d3c824 Merge pull request #1644 from koic/fix_an_incorrect_autocorrect_for_rails_lin...
• 0a41e88 [Fix #1599] Fix an incorrect autocorrect for Rails/LinkToBlank
• 5b46a5d Merge pull request #1645 from koic/fix_jruby_ci_failure_caused_by_rbs_native_...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)