Sourced from rubocop-rails's releases.

RuboCop Rails v2.35.3

Bug fixes

• #1630: Fix a false positive in Rails/StrongParametersExpect when negating params[:key] with !, such as !params[:key]. (@​koic)
• #1629: Fix false positives in Rails/StrongParametersExpect when using the safe navigation operator (&.) on params[:key]. Autocorrecting params[:key]&.downcase to params.expect(:key).downcase silently changes behavior — a missing param goes from returning nil to raising ActionController::ParameterMissing. (@​lucasmazza)

RuboCop Rails v2.35.2

Bug fixes

• #1625: Fix false positives in Rails/StrongParametersExpect when using collection methods (such as delete, keys, merge, slice, dig, fetch, or transform_values) on params[:key], as well as block-style calls such as params[:key].each { ... } or params[:key].map(&:to_s). (@​koic)
• #1627: Fix false positives in Rails/StrongParametersExpect for usages like params[:key].try(:method) and params[:key].try!(:method). (@​nicholasdower)

RuboCop Rails v2.35.1

Bug fixes

• #1616: Fix false positives in Rails/StrongParametersExpect when using nil-safe conversion methods such as to_i, to_s, to_a, to_f, and to_h on params[:key]. (@​koic)
• #1622: Fix false positives in Rails/StrongParametersExpect when using key-check methods such as key?, has_key?, include?, and member? on params[:key]. (@​koic)
• #1620: Fix false positives in Rails/StrongParametersExpect when using type-check methods such as is_a?, kind_of?, and instance_of? on params[:key]. (@​koic)

RuboCop Rails v2.35.0

Bug fixes

• #1595: Fix a false negative for Rails/I18nLocaleTexts when using redirect_back_or_to with a flash message. (@​55728)
• #1587: Fix false positives for Rails/Presence with operator methods like <<, =~, and others. (@​eugeneius)
• #1586: Don't add unnecessary parentheses in Rails/Presence. (@​eugeneius)
• #1602: Fix an error in Rails/SelectMap when .select appears inside a subquery in an argument. (@​koic)
• #1604: Allow DatabaseTypeResolvable to fall back to an adapter configuration specified in a shared key. (@​codergeek121)
• #1582: Fix a false negative where local was incorrectly treated as a known environment name when using == comparison in Rails/UnknownEnv. (@​lovro-bikic)

Changes

• #1571: Add more detection patterns on Rails/ResponseParsedBody. ([@​r7kamura][])
• #1583: Extend Rails/StrongParametersExpect to detect params[:key] in method calls and raising finder methods. (@​koic)
• #1584: Add support for case statements to Rails/UnknownEnv. (@​lovro-bikic)
• #1592: Fix false negative for != comparison in Rails/UnknownEnv. (@​lovro-bikic)
• #1598: Use glob patterns compatible with Engine or Packwerk for cops targeting spec/ and test/ directories. ([@​y-yagi][])

... (truncated)

Sourced from rubocop-rails's changelog.

2.35.3 (2026-05-27)

Bug fixes

• #1630: Fix a false positive in Rails/StrongParametersExpect when negating params[:key] with !, such as !params[:key]. ([@​koic][])
• #1629: Fix false positives in Rails/StrongParametersExpect when using the safe navigation operator (&.) on params[:key]. Autocorrecting params[:key]&.downcase to params.expect(:key).downcase silently changes behavior — a missing param goes from returning nil to raising ActionController::ParameterMissing. ([@​lucasmazza][])

2.35.2 (2026-05-19)

Bug fixes

• #1625: Fix false positives in Rails/StrongParametersExpect when using collection methods (such as delete, keys, merge, slice, dig, fetch, or transform_values) on params[:key], as well as block-style calls such as params[:key].each { ... } or params[:key].map(&:to_s). ([@​koic][])
• #1627: Fix false positives in Rails/StrongParametersExpect for usages like params[:key].try(:method) and params[:key].try!(:method). ([@​nicholasdower][])

2.35.1 (2026-05-17)

Bug fixes

• #1616: Fix false positives in Rails/StrongParametersExpect when using nil-safe conversion methods such as to_i, to_s, to_a, to_f, and to_h on params[:key]. ([@​koic][])
• #1622: Fix false positives in Rails/StrongParametersExpect when using key-check methods such as key?, has_key?, include?, and member? on params[:key]. ([@​koic][])
• #1620: Fix false positives in Rails/StrongParametersExpect when using type-check methods such as is_a?, kind_of?, and instance_of? on params[:key]. ([@​koic][])

2.35.0 (2026-05-09)

Bug fixes

• #1595: Fix a false negative for Rails/I18nLocaleTexts when using redirect_back_or_to with a flash message. ([@​55728][])
• #1587: Fix false positives for Rails/Presence with operator methods like <<, =~, and others. ([@​eugeneius][])
• #1586: Don't add unnecessary parentheses in Rails/Presence. ([@​eugeneius][])
• #1602: Fix an error in Rails/SelectMap when .select appears inside a subquery in an argument. ([@​koic][])
• #1604: Allow DatabaseTypeResolvable to fall back to an adapter configuration specified in a shared key. ([@​codergeek121][])
• #1582: Fix a false negative where local was incorrectly treated as a known environment name when using == comparison in Rails/UnknownEnv. ([@​lovro-bikic][])

Changes

• #1571: Add more detection patterns on Rails/ResponseParsedBody. ([@​r7kamura][])
• #1583: Extend Rails/StrongParametersExpect to detect params[:key] in method calls and raising finder methods. ([@​koic][])
• #1584: Add support for case statements to Rails/UnknownEnv. ([@​lovro-bikic][])
• #1592: Fix false negative for != comparison in Rails/UnknownEnv. ([@​lovro-bikic][])
• #1598: Use glob patterns compatible with Engine or Packwerk for cops targeting spec/ and test/ directories. ([@​y-yagi][])

• 944f6f5 Cut 2.35.3
• 7f93b76 Update Changelog
• 3e9d4a5 Merge pull request #1631 from koic/fix_false_positive_for_rails_strong_parame...
• 3529b8d [Fix #1630] Fix a false positive in Rails/StrongParametersExpect
• dbb2e27 Merge pull request #1629 from lucasmazza/fix/strong-parameters-expect-safe-na...
• 0ea9fbc Fix Rails/StrongParametersExpect to allow safe navigation operator on optiona...
• 5d4154d Reset the docs version
• 26f1034 Cut 2.35.2
• 65841f0 Update Changelog
• e89ab8e Merge pull request #1626 from koic/fix_false_positives_for_rails_strong_param...
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)