[dependabot]

Bumps the gems group with 2 updates: rubocop-rails and standard.

Updates rubocop-rails from 2.36.0 to 2.38.0

Release notes

Sourced from rubocop-rails's releases.

RuboCop Rails v2.38.0

Bug fixes

• #1662: Fix an error for Rails/ReadWriteAttribute when a read_attribute call is nested inside another attribute call. (@​viralpraxis)
• #1660: Fix an incorrect autocorrect for Rails/RakeEnvironment when a task declares its arguments without an array literal, or declares an empty dependency list. (@​viralpraxis)
• #1657: Fix version-gated cops using minimum_target_rails_version to respect AllCops: TargetRailsVersion so that an explicitly configured version takes precedence over the lockfile and enables these cops in projects without a lockfile. (@​koic)

Changes

• #1655: Resolve AllCops: TargetRailsVersion within RuboCop Rails itself instead of relying on RuboCop core, in preparation for the removal of TargetRailsVersion support from RuboCop core in RuboCop 2.0. (@​koic)

RuboCop Rails v2.37.0

Changes

• #1649: Allow frozen array/hash literal (e.g. [].freeze, {}.freeze) as :default value in Rails/AttributeDefaultBlockValue. (@​kuboon)
• #1652: Improve Rails/HttpPositionalArguments performance by checking for include Rack::Test::Methods once per file instead of once per HTTP call. (@​moberegger)
• #1650: Speed up loading rubocop-rails by lazily loading only the cops and mixins needed for a run. This requires RuboCop 1.89.0+. (@​koic)

Changelog

Sourced from rubocop-rails's changelog.

2.38.0 (2026-09-20)

Bug fixes

• #1662: Fix an error for Rails/ReadWriteAttribute when a read_attribute call is nested inside another attribute call. ([@​viralpraxis][])
• #1660: Fix an incorrect autocorrect for Rails/RakeEnvironment when a task declares its arguments without an array literal, or declares an empty dependency list. ([@​viralpraxis][])
• #1657: Fix version-gated cops using minimum_target_rails_version to respect AllCops: TargetRailsVersion so that an explicitly configured version takes precedence over the lockfile and enables these cops in projects without a lockfile. ([@​koic][])

Changes

• #1655: Resolve AllCops: TargetRailsVersion within RuboCop Rails itself instead of relying on RuboCop core, in preparation for the removal of TargetRailsVersion support from RuboCop core in RuboCop 2.0. ([@​koic][])

2.37.0 (2026-08-16)

Changes

• #1649: Allow frozen array/hash literal (e.g. [].freeze, {}.freeze) as :default value in Rails/AttributeDefaultBlockValue. ([@​kuboon][])
• #1652: Improve Rails/HttpPositionalArguments performance by checking for include Rack::Test::Methods once per file instead of once per HTTP call. ([@​moberegger][])
• #1650: Speed up loading rubocop-rails by lazily loading only the cops and mixins needed for a run. This requires RuboCop 1.89.0+. ([@​koic][])

Commits

• 9b25387 Cut 2.38.0
• 3bf4e62 Update Changelog
• e3df883 Merge pull request #1662 from viralpraxis/fix-an-error-for-rails-read-write-a...
• 74464cd Fix an error for Rails/ReadWriteAttribute cop
• 38949cd Merge pull request #1660 from viralpraxis/fix-an-incorrect-autocorrect-for-ra...
• f504da1 Fix an incorrect autocorrect for Rails/RakeEnvironment cop
• 5e2998e Merge pull request #1657 from koic/fix_version_gated_cops_to_respect_target_r...
• 72dfac3 Fix version-gated cops to respect AllCops: TargetRailsVersion
• a4655cb Merge pull request #1655 from koic/extract_target_rails_version_resolution
• fd01923 Resolve TargetRailsVersion within RuboCop Rails itself
• Additional commits viewable in compare view

Updates standard from 1.56.0 to 1.57.0

Changelog

Sourced from standard's changelog.

1.57.0

• Updates rubocop to 1.91.0

Commits

• 9b457c4 ❤️ v1.57.0
• 1b0cf75 Merge pull request #836 from standardrb/dependabot/github_actions/step-securi...
• a67a061 Bump step-security/harden-runner from 2.21.0 to 2.21.1
• ec152fa Merge pull request #832 from standardrb/rubocop-1-90-upgrade
• 79509c3 Updates rubocop to 1.91
• a743b7f Updates rubocop to 1.90
• c278703 Merge pull request #831 from standardrb/dependabot/github_actions/step-securi...
• dc2b6be Bump step-security/harden-runner from 2.20.0 to 2.21.0
• 521d3bf Merge pull request #827 from standardrb/dependabot/bundler/ruby-lsp-0.26.11
• 8986a51 Bump ruby-lsp from 0.26.10 to 0.26.11
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.