Bump shakapacker from 9.2.0 to 9.3.2

[dependabot]

Bumps shakapacker from 9.2.0 to 9.3.2.

Changelog

Sourced from shakapacker's changelog.

[v9.3.2] - November 10, 2025

Fixed

• Fixed TypeScript import error in public types when webpack is not installed. [PR #828](shakacode/shakapacker#828) by G-Rath. Uses @ts-ignore instead of @ts-expect-error to suppress potential import error when webpack is not installed.
• Fixed bundler switch task to add missing assets_bundler config. [PR #833](shakacode/shakapacker#833) by justin808. The rake shakapacker:switch_bundler task now automatically adds the assets_bundler key to shakapacker.yml if it's missing, preventing silent failures when switching bundlers.
• Fixed rake tasks to use bundle exec rake instead of bundle exec rails. [PR #830](shakacode/shakapacker#830) by Judahmeek. Rake tasks should be invoked with bundle exec rake to support command-line flags properly, as Rails commands don't support flags.

Added

• Support for esbuild 0.26 and 0.27. [PR #832](shakacode/shakapacker#832) by justin808. Extended peer dependency range to support newer esbuild versions.

Changed

• Simplified switch_bundler task to only support rake command. [PR #831](shakacode/shakapacker#831) by justin808. The rake shakapacker:switch_bundler task now only works with bundle exec rake, not bundle exec rails. Use bundle exec rake shakapacker:switch_bundler [bundler] -- [options] for clearer command-line flag support.

[v9.3.1] - November 9, 2025

Fixed

• Fixed NODE_ENV not being set when running shakapacker-dev-server. [PR #823](shakacode/shakapacker#823) by Seifeldin7. Resolves #802. The dev server now properly initializes NODE_ENV to match RAILS_ENV (or "production" by default), fixing webpack configurations that dynamically load environment-specific files.
• Extended manifest merging for multiple client configurations to all environments. [PR #800](shakacode/shakapacker#800) by Judahmeek.

Added

• Support for css_modules_export_mode configuration option. [PR #817](shakacode/shakapacker#817) by justin808. Adds css_modules_export_mode setting in shakapacker.yml to control CSS Modules export style. Set to "named" (default, v9+ behavior with true named exports) or "default" (v8 behavior with default export object). Allows teams to opt into v8-style exports for easier migration from v8 or when using TypeScript with strict type checking.
• Configuration#data public API method with enhanced documentation and safety. [PR #818](shakacode/shakapacker#818) by justin808. The Configuration#data method is now part of the public Ruby API, providing stable access to raw configuration data. Returns a frozen hash with symbolized keys to prevent accidental mutations. Includes comprehensive test coverage and detailed RDoc documentation.
• Support for javascript_transpiler: 'none' for completely custom webpack configurations. [PR #799](shakacode/shakapacker#799) by justin808. Allows users with custom webpack configs to skip Shakapacker's transpiler setup and validation by setting javascript_transpiler: 'none' in shakapacker.yml. Useful when managing transpilation entirely outside of Shakapacker's defaults.

[v9.3.0] - November 2, 2025

Fixed

• Enhanced error handling for better security and debugging. [PR #786](shakacode/shakapacker#786) by justin808.
  • Path validation now properly reports permission errors instead of silently handling them
  • Module loading errors now include original error context for easier troubleshooting
  • Improved security by only catching ENOENT errors in path resolution, rethrowing permission and access errors
  • Better type safety with custom ErrorWithCause interface and optional chaining for error.code checks
• Improved type safety and error handling in configExporter module. [PR #778](shakacode/shakapacker#778) by justin808. Resolves #707.
  • Enhanced type safety across configFile, buildValidator, and yamlSerializer modules
  • Improved error message preservation for webpack/rspack build failures
  • Fixed edge cases in YAML serialization (empty arrays, malformed objects)
  • More robust constructor name detection for object serialization
  • Better handling of Symbol, BigInt, and edge case types
• Default template no longer triggers production warning. [PR #774](shakacode/shakapacker#774) by justin808. Fixes #703.
  • Changed default useContentHash to true in shakapacker.yml template
  • Eliminates confusing warning about useContentHash: false not being allowed in production
  • Development environment now explicitly sets useContentHash: false for faster builds
  • Production no longer needs explicit override since it inherits the correct default
• Fixed Rails constant error when using custom environments like staging. [PR #681](shakacode/shakapacker#681) by justin808. RAILS_ENV=staging no longer causes "uninitialized constant Shakapacker::Instance::Rails" error. Shakapacker now works in non-Rails contexts.

... (truncated)

Commits

• e29fabc Release 9.3.2
• c7af518 Add assets_bundler to config if missing during bundler switch (#833)
• b737dbb Simplify switch_bundler task to only support rake command (#831)
• e888599 Update Prettier to 3.6.2 and fix formatting (#834)
• c2da472 Add support for esbuild 0.26 and 0.27 (#832)
• 7e3e062 Rake tasks should be called with rake, instead of rails (#830)
• 2f7978e Add CodeRabbit as Supporter (#829)
• 787d9f2 fix: use @ts-ignore instead of @ts-expect-error in public types (#828)
• 9af7271 Improve CSS Modules backward compatibility documentation (#809) (#810)
• 1c13a1a Update CHANGELOG.md for 9.3.1 (#824)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[dependabot]

Looks like shakapacker is up-to-date now, so this is no longer needed.