build(deps-dev): bump rubocop-rails from 2.34.3 to 2.37.0

[dependabot]

Bumps rubocop-rails from 2.34.3 to 2.37.0.

Release notes

Sourced from rubocop-rails's releases.

RuboCop Rails v2.37.0

Changes

• #1649: Allow frozen array/hash literal (e.g. [].freeze, {}.freeze) as :default value in Rails/AttributeDefaultBlockValue. (@​kuboon)
• #1652: Improve Rails/HttpPositionalArguments performance by checking for include Rack::Test::Methods once per file instead of once per HTTP call. (@​moberegger)
• #1650: Speed up loading rubocop-rails by lazily loading only the cops and mixins needed for a run. This requires RuboCop 1.89.0+. (@​koic)

RuboCop Rails v2.36.0

Bug fixes

• #1647: Fix a false negative for Rails/EagerEvaluationLogMessage when the interpolated string is passed to Rails.logger.debug as the sole body of an enclosing block such as each or tap. (@​conwayje)
• #1646: Fix a false negative for Rails/ReversibleMigration when using remove_index without a column inside a change_table block. (@​ilianah)
• #1642: Fix a false negative for Rails/SafeNavigation when using try/try! with a symbol to proc such as foo.try(&:bar). (@​koic)
• #1599: Fix an incorrect autocorrect for Rails/LinkToBlank when Style/TrailingCommaInArguments with EnforcedStyleForMultiline: consistent_comma adds a trailing comma, which produced a duplicate comma. (@​koic)
• #1619: Fix MigratedSchemaVersion setting so it works for all cops. (@​lovro-bikic)

Changes

• #1641: Fix false negatives in Rails/SafeNavigation when using try/try! with operator methods such as [], []=, and ==. (@​koic)

RuboCop Rails v2.35.5

Bug fixes

• #1379: Fix an incorrect offense for Rails/SaveBang when a persist method is the last expression in a multiline method or block. (@​aki77)

Changes

• #1617: Allow Rails.env.local? in Rails/Env. (@​corsonknowles)

RuboCop Rails v2.35.4

Bug fixes

• #1418: Fix a false positive for Rails/StrongParametersExpect when require is given an array literal, such as params.require([:foo, :bar]).permit(:baz). (@​koic)
• #1574: Fix an invalid autocorrection for Rails/StrongParametersExpect when permit receives a single dynamic argument, such as params.require(:user).permit(permitted_attributes). (@​koic)
• #1635: Fix Rails/StrongParametersExpect to allow params[:foo].inspect. (@​jdelStrother)

... (truncated)

Changelog

Sourced from rubocop-rails's changelog.

2.37.0 (2026-08-16)

Changes

• #1649: Allow frozen array/hash literal (e.g. [].freeze, {}.freeze) as :default value in Rails/AttributeDefaultBlockValue. ([@​kuboon][])
• #1652: Improve Rails/HttpPositionalArguments performance by checking for include Rack::Test::Methods once per file instead of once per HTTP call. ([@​moberegger][])
• #1650: Speed up loading rubocop-rails by lazily loading only the cops and mixins needed for a run. This requires RuboCop 1.89.0+. ([@​koic][])

2.36.0 (2026-07-11)

Bug fixes

• #1647: Fix a false negative for Rails/EagerEvaluationLogMessage when the interpolated string is passed to Rails.logger.debug as the sole body of an enclosing block such as each or tap. ([@​conwayje][])
• #1646: Fix a false negative for Rails/ReversibleMigration when using remove_index without a column inside a change_table block. ([@​ilianah][])
• #1642: Fix a false negative for Rails/SafeNavigation when using try/try! with a symbol to proc such as foo.try(&:bar). ([@​koic][])
• #1599: Fix an incorrect autocorrect for Rails/LinkToBlank when Style/TrailingCommaInArguments with EnforcedStyleForMultiline: consistent_comma adds a trailing comma, which produced a duplicate comma. ([@​koic][])
• #1619: Fix MigratedSchemaVersion setting so it works for all cops. ([@​lovro-bikic][])

Changes

• #1641: Fix false negatives in Rails/SafeNavigation when using try/try! with operator methods such as [], []=, and ==. ([@​koic][])

2.35.5 (2026-06-21)

Bug fixes

• #1379: Fix an incorrect offense for Rails/SaveBang when a persist method is the last expression in a multiline method or block. ([@​aki77][])

Changes

• #1617: Allow Rails.env.local? in Rails/Env. ([@​corsonknowles][])

2.35.4 (2026-06-07)

Bug fixes

• #1418: Fix a false positive for Rails/StrongParametersExpect when require is given an array literal, such as params.require([:foo, :bar]).permit(:baz). ([@​koic][])
• #1574: Fix an invalid autocorrection for Rails/StrongParametersExpect when permit receives a single dynamic argument, such as params.require(:user).permit(permitted_attributes). ([@​koic][])
• #1635: Fix Rails/StrongParametersExpect to allow params[:foo].inspect. ([@​jdelStrother][])

2.35.3 (2026-05-27)

Bug fixes

• #1630: Fix a false positive in Rails/StrongParametersExpect when negating params[:key] with !, such as !params[:key]. ([@​koic][])
• #1629: Fix false positives in Rails/StrongParametersExpect when using the safe navigation operator (&.) on params[:key]. Autocorrecting params[:key]&.downcase to params.expect(:key).downcase silently changes behavior — a missing param goes from returning nil to raising ActionController::ParameterMissing. ([@​lucasmazza][])

2.35.2 (2026-05-19)

Bug fixes

... (truncated)

Commits

• 2ccba59 Cut 2.37.0
• 597f352 Update Changelog
• a400494 Merge pull request #1652 from moberegger/moberegger/optimize-HttpPositionalAr...
• cbc6157 Optimize HttpPositionalArguments cop
• cb023b9 Suppress RuboCop offenses
• 166cfc6 Merge pull request #1650 from koic/lazy_load_cops
• 3dd6378 Load cops lazily
• 0b20dad Merge pull request #1649 from kuboon/copilot/attribute-default-block-value
• 7c76696 Allow frozen literal defaults in AttributeDefaultBlockValue
• 84fef55 Reset the docs version
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)