Skip to content

build(deps): bump shakapacker from 8.4.0 to 9.3.0 #2233

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

build(deps): bump shakapacker from 8.4.0 to 9.3.0 #2233

wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 3, 2025 •
edited
Loading

Bumps shakapacker from 8.4.0 to 9.3.0.

Changelog

Sourced from shakapacker's changelog.

[v9.3.0] - November 2, 2025

Fixed

  • Enhanced error handling for better security and debugging. [PR #786](shakacode/shakapacker#786) by justin808.
    • Path validation now properly reports permission errors instead of silently handling them
    • Module loading errors now include original error context for easier troubleshooting
    • Improved security by only catching ENOENT errors in path resolution, rethrowing permission and access errors
    • Better type safety with custom ErrorWithCause interface and optional chaining for error.code checks
  • Improved type safety and error handling in configExporter module. [PR #778](shakacode/shakapacker#778) by justin808. Resolves #707.
    • Enhanced type safety across configFile, buildValidator, and yamlSerializer modules
    • Improved error message preservation for webpack/rspack build failures
    • Fixed edge cases in YAML serialization (empty arrays, malformed objects)
    • More robust constructor name detection for object serialization
    • Better handling of Symbol, BigInt, and edge case types
  • Default template no longer triggers production warning. [PR #774](shakacode/shakapacker#774) by justin808. Fixes #703.
    • Changed default useContentHash to true in shakapacker.yml template
    • Eliminates confusing warning about useContentHash: false not being allowed in production
    • Development environment now explicitly sets useContentHash: false for faster builds
    • Production no longer needs explicit override since it inherits the correct default
  • Fixed Rails constant error when using custom environments like staging. [PR #681](shakacode/shakapacker#681) by justin808. RAILS_ENV=staging no longer causes "uninitialized constant Shakapacker::Instance::Rails" error. Shakapacker now works in non-Rails contexts.
  • Fixed TypeScript type definitions to export proper types instead of any. [PR #684](shakacode/shakapacker#684) by justin808. Previously package/index.d.ts was exporting all types as any, breaking IDE autocomplete. Now properly exports typed interfaces.
  • Fixed integrity config handling and sass-loader version check. [PR #688](shakacode/shakapacker#688) by justin808. Properly handles subresource integrity configuration and correctly detects sass-loader version for conditional logic.

Added

  • HTTP 103 Early Hints support for faster asset loading. [PR #722](shakacode/shakapacker#722) by justin808. Automatically sends early hints when early_hints: enabled: true in shakapacker.yml. Works with append_javascript_pack_tag/append_stylesheet_pack_tag, supports per-controller/action configuration, and includes helpers like configure_pack_early_hints and skip_send_pack_early_hints. Requires Rails 5.2+ and HTTP/2-capable server. See Early Hints Guide.
  • --help=verbose flag to display all available webpack/rspack bundler options. [PR #763](shakacode/shakapacker#763) by justin808. Run bin/shakapacker --help=verbose to see complete bundler documentation.
  • Support for arbitrary output names in build configurations. [PR #752](shakacode/shakapacker#752) by justin808. The outputs array now accepts any custom names (e.g., client-modern, client-legacy, server-bundle) instead of being limited to only client, server, and all.
  • Enhanced error reporting in config exporter. [PR #752](shakacode/shakapacker#752) by justin808. Shows detailed environment variable state when config functions fail and provides actionable suggestions based on error patterns.
  • Config count validation for build outputs. [PR #752](shakacode/shakapacker#752) by justin808. Validates webpack/rspack config array length matches outputs array with clear error messages and suggested fixes.
  • precompile_hook configuration option to run custom commands during asset precompilation. [PR #678](shakacode/shakapacker#678) by justin808. Configure in shakapacker.yml with precompile_hook: "command to run".
  • assets_bundler_config_path configuration option for custom bundler config locations. [PR #710](shakacode/shakapacker#710) by justin808. Allows specifying a custom path for webpack/rspack configuration files.
  • YAML output format support for bin/shakapacker-config (formerly bin/export-bundler-config). [PR #704](shakacode/shakapacker#704) by justin808. New --format yaml option exports bundler configuration as YAML.
  • Plugin names displayed in YAML config export. [PR #750](shakacode/shakapacker#750) by justin808. Shows plugin constructor names in exported configuration to help identify which plugins are active.
  • Custom help messages for bin/shakapacker commands. [PR #702](shakacode/shakapacker#702) by justin808. Improved help output for better command discoverability with clear usage examples.
  • HMR client config export in doctor mode. [PR #701](shakacode/shakapacker#701) by justin808. bin/shakapacker-config --doctor now includes HMR client configuration to help debug Hot Module Replacement issues.
  • Build timing logs for webpack and rspack. [PR #706](shakacode/shakapacker#706) by justin808. Shows duration of build operations to help identify performance bottlenecks.
  • Named build configurations with --build flag. [PR #728](shakacode/shakapacker#728) by justin808. Allows specifying custom build configurations like bin/shakapacker --build=production or bin/shakapacker --build=test.
  • Build validation in bin/shakapacker-config. [PR #717](shakacode/shakapacker#717) by justin808. Validates webpack/rspack configuration before export to catch errors early.
  • Backward compatibility for rspack config in config/webpack/. [PR #734](shakacode/shakapacker#734) by justin808. Rspack configurations can now be placed in config/webpack/ directory for easier migration.
  • Merge option for WebpackAssetsManifestPlugin. [PR #760](shakacode/shakapacker#760) by justin808. Adds merge option to control manifest merging behavior, useful for multi-compiler setups.
  • Support for esbuild-loader v5. [PR #758](shakacode/shakapacker#758) by justin808.

Changed

Improved

... (truncated)

Commits
  • 908ee8a Release 9.3.0
  • f81f6e5 Fix TypeScript ESLint errors (Phase 1): Auto-fixes and simple manual fixes (#...
  • 64eb2f2 Fix simple ESLint issues in TypeScript files (#787)
  • c2b2a39 Enhance error handling in pathValidation and requireOrError (#786)
  • d1a3d78 Refactor configExporter module for type safety (#707) (#778)
  • 128bd07 Remove unused error variables in catch blocks (#785)
  • 282b7e9 Phase 1: ESLint Technical Debt Fixes - Non-Breaking Improvements (#784)
  • f8972cb Extract constants to improve maintainability (#777)
  • 0af3948 Add comprehensive RDoc documentation to core public API (#154) (#779)
  • 7b522e8 Update references from export-bundler-config to shakapacker-config (#780)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Nov 3, 2025
@dependabot dependabot bot mentioned this pull request Nov 3, 2025
Closed
@dependabot
build(deps): bump shakapacker from 8.4.0 to 9.3.0
43ea315 
Bumps [shakapacker](https://github.com/shakacode/shakapacker) from 8.4.0 to 9.3.0.
- [Changelog](https://github.com/shakacode/shakapacker/blob/main/CHANGELOG.md)
- [Commits](shakacode/shakapacker@v8.4.0...v9.3.0)

---
updated-dependencies:
- dependency-name: shakapacker
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/bundler/shakapacker-9.3.0 branch from 6505519 to 43ea315 Compare November 5, 2025 03:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant