Skip to content

Bump rubocop-rails from 2.34.3 to 2.35.3#840

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/rubocop-rails-2.35.2
Closed

Bump rubocop-rails from 2.34.3 to 2.35.3#840
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/rubocop-rails-2.35.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 29, 2026

Copy link
Copy Markdown
Contributor

Bumps rubocop-rails from 2.34.3 to 2.35.3.

Release notes

Sourced from rubocop-rails's releases.

RuboCop Rails v2.35.3

Bug fixes

  • #1630: Fix a false positive in Rails/StrongParametersExpect when negating params[:key] with !, such as !params[:key]. (@​koic)
  • #1629: Fix false positives in Rails/StrongParametersExpect when using the safe navigation operator (&.) on params[:key]. Autocorrecting params[:key]&.downcase to params.expect(:key).downcase silently changes behavior — a missing param goes from returning nil to raising ActionController::ParameterMissing. (@​lucasmazza)

RuboCop Rails v2.35.2

Bug fixes

  • #1625: Fix false positives in Rails/StrongParametersExpect when using collection methods (such as delete, keys, merge, slice, dig, fetch, or transform_values) on params[:key], as well as block-style calls such as params[:key].each { ... } or params[:key].map(&:to_s). (@​koic)
  • #1627: Fix false positives in Rails/StrongParametersExpect for usages like params[:key].try(:method) and params[:key].try!(:method). (@​nicholasdower)

RuboCop Rails v2.35.1

Bug fixes

  • #1616: Fix false positives in Rails/StrongParametersExpect when using nil-safe conversion methods such as to_i, to_s, to_a, to_f, and to_h on params[:key]. (@​koic)
  • #1622: Fix false positives in Rails/StrongParametersExpect when using key-check methods such as key?, has_key?, include?, and member? on params[:key]. (@​koic)
  • #1620: Fix false positives in Rails/StrongParametersExpect when using type-check methods such as is_a?, kind_of?, and instance_of? on params[:key]. (@​koic)

RuboCop Rails v2.35.0

Bug fixes

  • #1595: Fix a false negative for Rails/I18nLocaleTexts when using redirect_back_or_to with a flash message. (@​55728)
  • #1587: Fix false positives for Rails/Presence with operator methods like <<, =~, and others. (@​eugeneius)
  • #1586: Don't add unnecessary parentheses in Rails/Presence. (@​eugeneius)
  • #1602: Fix an error in Rails/SelectMap when .select appears inside a subquery in an argument. (@​koic)
  • #1604: Allow DatabaseTypeResolvable to fall back to an adapter configuration specified in a shared key. (@​codergeek121)
  • #1582: Fix a false negative where local was incorrectly treated as a known environment name when using == comparison in Rails/UnknownEnv. (@​lovro-bikic)

Changes

  • #1571: Add more detection patterns on Rails/ResponseParsedBody. ([@​r7kamura][])
  • #1583: Extend Rails/StrongParametersExpect to detect params[:key] in method calls and raising finder methods. (@​koic)
  • #1584: Add support for case statements to Rails/UnknownEnv. (@​lovro-bikic)
  • #1592: Fix false negative for != comparison in Rails/UnknownEnv. (@​lovro-bikic)
  • #1598: Use glob patterns compatible with Engine or Packwerk for cops targeting spec/ and test/ directories. ([@​y-yagi][])

... (truncated)

Changelog

Sourced from rubocop-rails's changelog.

2.35.3 (2026-05-27)

Bug fixes

  • #1630: Fix a false positive in Rails/StrongParametersExpect when negating params[:key] with !, such as !params[:key]. ([@​koic][])
  • #1629: Fix false positives in Rails/StrongParametersExpect when using the safe navigation operator (&.) on params[:key]. Autocorrecting params[:key]&.downcase to params.expect(:key).downcase silently changes behavior — a missing param goes from returning nil to raising ActionController::ParameterMissing. ([@​lucasmazza][])

2.35.2 (2026-05-19)

Bug fixes

  • #1625: Fix false positives in Rails/StrongParametersExpect when using collection methods (such as delete, keys, merge, slice, dig, fetch, or transform_values) on params[:key], as well as block-style calls such as params[:key].each { ... } or params[:key].map(&:to_s). ([@​koic][])
  • #1627: Fix false positives in Rails/StrongParametersExpect for usages like params[:key].try(:method) and params[:key].try!(:method). ([@​nicholasdower][])

2.35.1 (2026-05-17)

Bug fixes

  • #1616: Fix false positives in Rails/StrongParametersExpect when using nil-safe conversion methods such as to_i, to_s, to_a, to_f, and to_h on params[:key]. ([@​koic][])
  • #1622: Fix false positives in Rails/StrongParametersExpect when using key-check methods such as key?, has_key?, include?, and member? on params[:key]. ([@​koic][])
  • #1620: Fix false positives in Rails/StrongParametersExpect when using type-check methods such as is_a?, kind_of?, and instance_of? on params[:key]. ([@​koic][])

2.35.0 (2026-05-09)

Bug fixes

  • #1595: Fix a false negative for Rails/I18nLocaleTexts when using redirect_back_or_to with a flash message. ([@​55728][])
  • #1587: Fix false positives for Rails/Presence with operator methods like <<, =~, and others. ([@​eugeneius][])
  • #1586: Don't add unnecessary parentheses in Rails/Presence. ([@​eugeneius][])
  • #1602: Fix an error in Rails/SelectMap when .select appears inside a subquery in an argument. ([@​koic][])
  • #1604: Allow DatabaseTypeResolvable to fall back to an adapter configuration specified in a shared key. ([@​codergeek121][])
  • #1582: Fix a false negative where local was incorrectly treated as a known environment name when using == comparison in Rails/UnknownEnv. ([@​lovro-bikic][])

Changes

  • #1571: Add more detection patterns on Rails/ResponseParsedBody. ([@​r7kamura][])
  • #1583: Extend Rails/StrongParametersExpect to detect params[:key] in method calls and raising finder methods. ([@​koic][])
  • #1584: Add support for case statements to Rails/UnknownEnv. ([@​lovro-bikic][])
  • #1592: Fix false negative for != comparison in Rails/UnknownEnv. ([@​lovro-bikic][])
  • #1598: Use glob patterns compatible with Engine or Packwerk for cops targeting spec/ and test/ directories. ([@​y-yagi][])
Commits
  • 944f6f5 Cut 2.35.3
  • 7f93b76 Update Changelog
  • 3e9d4a5 Merge pull request #1631 from koic/fix_false_positive_for_rails_strong_parame...
  • 3529b8d [Fix #1630] Fix a false positive in Rails/StrongParametersExpect
  • dbb2e27 Merge pull request #1629 from lucasmazza/fix/strong-parameters-expect-safe-na...
  • 0ea9fbc Fix Rails/StrongParametersExpect to allow safe navigation operator on optiona...
  • 5d4154d Reset the docs version
  • 26f1034 Cut 2.35.2
  • 65841f0 Update Changelog
  • e89ab8e Merge pull request #1626 from koic/fix_false_positives_for_rails_strong_param...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 29, 2026
Copilot AI review requested due to automatic review settings May 29, 2026 10:10
@dependabot dependabot Bot added ruby Pull requests that update ruby code dependencies Pull requests that update a dependency file labels May 29, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@github-actions

github-actions Bot commented May 29, 2026

Copy link
Copy Markdown

Test coverage

91.38% line coverage reported by SimpleCov.
Run: https://github.com/RaspberryPiFoundation/editor-api/actions/runs/27149899324

Bumps [rubocop-rails](https://github.com/rubocop/rubocop-rails) from 2.34.3 to 2.35.3.
- [Release notes](https://github.com/rubocop/rubocop-rails/releases)
- [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop-rails@v2.34.3...v2.35.3)

---
updated-dependencies:
- dependency-name: rubocop-rails
  dependency-version: 2.35.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump rubocop-rails from 2.34.3 to 2.35.2 Bump rubocop-rails from 2.34.3 to 2.35.3 Jun 8, 2026
@dependabot dependabot Bot force-pushed the dependabot/bundler/rubocop-rails-2.35.2 branch from 30f6f11 to 6541550 Compare June 8, 2026 15:54
@dependabot @github

dependabot Bot commented on behalf of github Jun 9, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #861.

@dependabot dependabot Bot closed this Jun 9, 2026
@dependabot dependabot Bot deleted the dependabot/bundler/rubocop-rails-2.35.2 branch June 9, 2026 09:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla-signed dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant