chore(deps): Bump shakapacker from 8.4.0 to 9.3.0

[dependabot]

Bumps shakapacker from 8.4.0 to 9.3.0.

Changelog

Sourced from shakapacker's changelog.

[v9.3.0] - November 2, 2025

Fixed

• Enhanced error handling for better security and debugging. [PR #786](shakacode/shakapacker#786) by justin808.
  • Path validation now properly reports permission errors instead of silently handling them
  • Module loading errors now include original error context for easier troubleshooting
  • Improved security by only catching ENOENT errors in path resolution, rethrowing permission and access errors
  • Better type safety with custom ErrorWithCause interface and optional chaining for error.code checks
• Improved type safety and error handling in configExporter module. [PR #778](shakacode/shakapacker#778) by justin808. Resolves #707.
  • Enhanced type safety across configFile, buildValidator, and yamlSerializer modules
  • Improved error message preservation for webpack/rspack build failures
  • Fixed edge cases in YAML serialization (empty arrays, malformed objects)
  • More robust constructor name detection for object serialization
  • Better handling of Symbol, BigInt, and edge case types
• Default template no longer triggers production warning. [PR #774](shakacode/shakapacker#774) by justin808. Fixes #703.
  • Changed default useContentHash to true in shakapacker.yml template
  • Eliminates confusing warning about useContentHash: false not being allowed in production
  • Development environment now explicitly sets useContentHash: false for faster builds
  • Production no longer needs explicit override since it inherits the correct default
• Fixed Rails constant error when using custom environments like staging. [PR #681](shakacode/shakapacker#681) by justin808. RAILS_ENV=staging no longer causes "uninitialized constant Shakapacker::Instance::Rails" error. Shakapacker now works in non-Rails contexts.
• Fixed TypeScript type definitions to export proper types instead of any. [PR #684](shakacode/shakapacker#684) by justin808. Previously package/index.d.ts was exporting all types as any, breaking IDE autocomplete. Now properly exports typed interfaces.
• Fixed integrity config handling and sass-loader version check. [PR #688](shakacode/shakapacker#688) by justin808. Properly handles subresource integrity configuration and correctly detects sass-loader version for conditional logic.

Added

• HTTP 103 Early Hints support for faster asset loading. [PR #722](shakacode/shakapacker#722) by justin808. Automatically sends early hints when early_hints: enabled: true in shakapacker.yml. Works with append_javascript_pack_tag/append_stylesheet_pack_tag, supports per-controller/action configuration, and includes helpers like configure_pack_early_hints and skip_send_pack_early_hints. Requires Rails 5.2+ and HTTP/2-capable server. See Early Hints Guide.
• --help=verbose flag to display all available webpack/rspack bundler options. [PR #763](shakacode/shakapacker#763) by justin808. Run bin/shakapacker --help=verbose to see complete bundler documentation.
• Support for arbitrary output names in build configurations. [PR #752](shakacode/shakapacker#752) by justin808. The outputs array now accepts any custom names (e.g., client-modern, client-legacy, server-bundle) instead of being limited to only client, server, and all.
• Enhanced error reporting in config exporter. [PR #752](shakacode/shakapacker#752) by justin808. Shows detailed environment variable state when config functions fail and provides actionable suggestions based on error patterns.
• Config count validation for build outputs. [PR #752](shakacode/shakapacker#752) by justin808. Validates webpack/rspack config array length matches outputs array with clear error messages and suggested fixes.
• precompile_hook configuration option to run custom commands during asset precompilation. [PR #678](shakacode/shakapacker#678) by justin808. Configure in shakapacker.yml with precompile_hook: "command to run".
• assets_bundler_config_path configuration option for custom bundler config locations. [PR #710](shakacode/shakapacker#710) by justin808. Allows specifying a custom path for webpack/rspack configuration files.
• YAML output format support for bin/shakapacker-config (formerly bin/export-bundler-config). [PR #704](shakacode/shakapacker#704) by justin808. New --format yaml option exports bundler configuration as YAML.
• Plugin names displayed in YAML config export. [PR #750](shakacode/shakapacker#750) by justin808. Shows plugin constructor names in exported configuration to help identify which plugins are active.
• Custom help messages for bin/shakapacker commands. [PR #702](shakacode/shakapacker#702) by justin808. Improved help output for better command discoverability with clear usage examples.
• HMR client config export in doctor mode. [PR #701](shakacode/shakapacker#701) by justin808. bin/shakapacker-config --doctor now includes HMR client configuration to help debug Hot Module Replacement issues.
• Build timing logs for webpack and rspack. [PR #706](shakacode/shakapacker#706) by justin808. Shows duration of build operations to help identify performance bottlenecks.
• Named build configurations with --build flag. [PR #728](shakacode/shakapacker#728) by justin808. Allows specifying custom build configurations like bin/shakapacker --build=production or bin/shakapacker --build=test.
• Build validation in bin/shakapacker-config. [PR #717](shakacode/shakapacker#717) by justin808. Validates webpack/rspack configuration before export to catch errors early.
• Backward compatibility for rspack config in config/webpack/. [PR #734](shakacode/shakapacker#734) by justin808. Rspack configurations can now be placed in config/webpack/ directory for easier migration.
• Merge option for WebpackAssetsManifestPlugin. [PR #760](shakacode/shakapacker#760) by justin808. Adds merge option to control manifest merging behavior, useful for multi-compiler setups.
• Support for esbuild-loader v5. [PR #758](shakacode/shakapacker#758) by justin808.

Changed

• Generated swc.config.js now uses single quotes and trailing commas. [PR #755](shakacode/shakapacker#755) by justin808. Consistent code style in generated configuration files.
• Updated @​rspack dependencies to 1.5.8. [PR #700](shakacode/shakapacker#700) by justin808.

Improved

... (truncated)

Commits

• 908ee8a Release 9.3.0
• f81f6e5 Fix TypeScript ESLint errors (Phase 1): Auto-fixes and simple manual fixes (#...
• 64eb2f2 Fix simple ESLint issues in TypeScript files (#787)
• c2b2a39 Enhance error handling in pathValidation and requireOrError (#786)
• d1a3d78 Refactor configExporter module for type safety (#707) (#778)
• 128bd07 Remove unused error variables in catch blocks (#785)
• 282b7e9 Phase 1: ESLint Technical Debt Fixes - Non-Breaking Improvements (#784)
• f8972cb Extract constants to improve maintainability (#777)
• 0af3948 Add comprehensive RDoc documentation to core public API (#154) (#779)
• 7b522e8 Update references from export-bundler-config to shakapacker-config (#780)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)