Bump rubocop-rails from 2.35.3 to 2.35.4

[dependabot]

Bumps rubocop-rails from 2.35.3 to 2.35.4.

Release notes

Sourced from rubocop-rails's releases.

RuboCop Rails v2.35.4

Bug fixes

• #1418: Fix a false positive for Rails/StrongParametersExpect when require is given an array literal, such as params.require([:foo, :bar]).permit(:baz). (@​koic)
• #1574: Fix an invalid autocorrection for Rails/StrongParametersExpect when permit receives a single dynamic argument, such as params.require(:user).permit(permitted_attributes). (@​koic)
• #1635: Fix Rails/StrongParametersExpect to allow params[:foo].inspect. (@​jdelStrother)

Changelog

Sourced from rubocop-rails's changelog.

2.35.4 (2026-06-07)

Bug fixes

• #1418: Fix a false positive for Rails/StrongParametersExpect when require is given an array literal, such as params.require([:foo, :bar]).permit(:baz). ([@​koic][])
• #1574: Fix an invalid autocorrection for Rails/StrongParametersExpect when permit receives a single dynamic argument, such as params.require(:user).permit(permitted_attributes). ([@​koic][])
• #1635: Fix Rails/StrongParametersExpect to allow params[:foo].inspect. ([@​jdelStrother][])

Commits

• a4d53a5 Cut 2.35.4
• e9e592d Update Changelog
• 84eb5fe [Doc] Update the doc for Rails/StrongParametersExpect
• 5490e3e Merge pull request #1636 from koic/fix_strong_parameters_expect_dynamic_permi...
• cfe75e9 [Fix #1574] Fix an invalid autocorrection for Rails/StrongParametersExpect
• 4817d57 Merge pull request #1633 from koic/doc_strong_parameters_expect_safety
• d9824c6 Merge pull request #1634 from koic/fix_strong_parameters_expect_array_require
• e30a80b Merge pull request #1635 from jdelStrother/params-inspect
• 70651a0 Allow inspect in Rails/StrongParametersExpect
• a8f6e0c [Doc] Document additional unsafety of Rails/StrongParametersExpect
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)