Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 3, 2025

Bumps shakapacker from 9.0.0.beta.3 to 9.3.0.

Changelog

Sourced from shakapacker's changelog.

[v9.3.0] - November 2, 2025

Fixed

  • Enhanced error handling for better security and debugging. [PR #786](shakacode/shakapacker#786) by justin808.
    • Path validation now properly reports permission errors instead of silently handling them
    • Module loading errors now include original error context for easier troubleshooting
    • Improved security by only catching ENOENT errors in path resolution, rethrowing permission and access errors
    • Better type safety with custom ErrorWithCause interface and optional chaining for error.code checks
  • Improved type safety and error handling in configExporter module. [PR #778](shakacode/shakapacker#778) by justin808. Resolves #707.
    • Enhanced type safety across configFile, buildValidator, and yamlSerializer modules
    • Improved error message preservation for webpack/rspack build failures
    • Fixed edge cases in YAML serialization (empty arrays, malformed objects)
    • More robust constructor name detection for object serialization
    • Better handling of Symbol, BigInt, and edge case types
  • Default template no longer triggers production warning. [PR #774](shakacode/shakapacker#774) by justin808. Fixes #703.
    • Changed default useContentHash to true in shakapacker.yml template
    • Eliminates confusing warning about useContentHash: false not being allowed in production
    • Development environment now explicitly sets useContentHash: false for faster builds
    • Production no longer needs explicit override since it inherits the correct default
  • Fixed Rails constant error when using custom environments like staging. [PR #681](shakacode/shakapacker#681) by justin808. RAILS_ENV=staging no longer causes "uninitialized constant Shakapacker::Instance::Rails" error. Shakapacker now works in non-Rails contexts.
  • Fixed TypeScript type definitions to export proper types instead of any. [PR #684](shakacode/shakapacker#684) by justin808. Previously package/index.d.ts was exporting all types as any, breaking IDE autocomplete. Now properly exports typed interfaces.
  • Fixed integrity config handling and sass-loader version check. [PR #688](shakacode/shakapacker#688) by justin808. Properly handles subresource integrity configuration and correctly detects sass-loader version for conditional logic.

Added

  • HTTP 103 Early Hints support for faster asset loading. [PR #722](shakacode/shakapacker#722) by justin808. Automatically sends early hints when early_hints: enabled: true in shakapacker.yml. Works with append_javascript_pack_tag/append_stylesheet_pack_tag, supports per-controller/action configuration, and includes helpers like configure_pack_early_hints and skip_send_pack_early_hints. Requires Rails 5.2+ and HTTP/2-capable server. See Early Hints Guide.
  • --help=verbose flag to display all available webpack/rspack bundler options. [PR #763](shakacode/shakapacker#763) by justin808. Run bin/shakapacker --help=verbose to see complete bundler documentation.
  • Support for arbitrary output names in build configurations. [PR #752](shakacode/shakapacker#752) by justin808. The outputs array now accepts any custom names (e.g., client-modern, client-legacy, server-bundle) instead of being limited to only client, server, and all.
  • Enhanced error reporting in config exporter. [PR #752](shakacode/shakapacker#752) by justin808. Shows detailed environment variable state when config functions fail and provides actionable suggestions based on error patterns.
  • Config count validation for build outputs. [PR #752](shakacode/shakapacker#752) by justin808. Validates webpack/rspack config array length matches outputs array with clear error messages and suggested fixes.
  • precompile_hook configuration option to run custom commands during asset precompilation. [PR #678](shakacode/shakapacker#678) by justin808. Configure in shakapacker.yml with precompile_hook: "command to run".
  • assets_bundler_config_path configuration option for custom bundler config locations. [PR #710](shakacode/shakapacker#710) by justin808. Allows specifying a custom path for webpack/rspack configuration files.
  • YAML output format support for bin/shakapacker-config (formerly bin/export-bundler-config). [PR #704](shakacode/shakapacker#704) by justin808. New --format yaml option exports bundler configuration as YAML.
  • Plugin names displayed in YAML config export. [PR #750](shakacode/shakapacker#750) by justin808. Shows plugin constructor names in exported configuration to help identify which plugins are active.
  • Custom help messages for bin/shakapacker commands. [PR #702](shakacode/shakapacker#702) by justin808. Improved help output for better command discoverability with clear usage examples.
  • HMR client config export in doctor mode. [PR #701](shakacode/shakapacker#701) by justin808. bin/shakapacker-config --doctor now includes HMR client configuration to help debug Hot Module Replacement issues.
  • Build timing logs for webpack and rspack. [PR #706](shakacode/shakapacker#706) by justin808. Shows duration of build operations to help identify performance bottlenecks.
  • Named build configurations with --build flag. [PR #728](shakacode/shakapacker#728) by justin808. Allows specifying custom build configurations like bin/shakapacker --build=production or bin/shakapacker --build=test.
  • Build validation in bin/shakapacker-config. [PR #717](shakacode/shakapacker#717) by justin808. Validates webpack/rspack configuration before export to catch errors early.
  • Backward compatibility for rspack config in config/webpack/. [PR #734](shakacode/shakapacker#734) by justin808. Rspack configurations can now be placed in config/webpack/ directory for easier migration.
  • Merge option for WebpackAssetsManifestPlugin. [PR #760](shakacode/shakapacker#760) by justin808. Adds merge option to control manifest merging behavior, useful for multi-compiler setups.
  • Support for esbuild-loader v5. [PR #758](shakacode/shakapacker#758) by justin808.

Changed

Improved

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [shakapacker](https://github.com/shakacode/shakapacker) from 9.0.0.beta.3 to 9.3.0.
- [Changelog](https://github.com/shakacode/shakapacker/blob/main/CHANGELOG.md)
- [Commits](https://github.com/shakacode/shakapacker/commits/v9.3.0)

---
updated-dependencies:
- dependency-name: shakapacker
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Nov 3, 2025
@coderabbitai
Copy link

coderabbitai bot commented Nov 3, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 10, 2025

Superseded by #21.

@dependabot dependabot bot closed this Nov 10, 2025
@dependabot dependabot bot deleted the dependabot/bundler/shakapacker-9.3.0 branch November 10, 2025 15:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant