Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 7, 2025

Bumps shakapacker from 8.4.0 to 9.0.0.

Changelog

Sourced from shakapacker's changelog.

[v9.0.0] - October 5, 2025

See the v9 Upgrade Guide for detailed migration instructions.

⚠️ Breaking Changes

  1. SWC is now the default JavaScript transpiler instead of Babel (PR 603 by justin808)

    • Babel dependencies are no longer included as peer dependencies
    • Improves compilation speed by 20x
    • Migration for existing projects:
      • Option 1 (Recommended): Switch to SWC - Run rake shakapacker:migrate_to_swc or manually:
        # config/shakapacker.yml
        javascript_transpiler: "swc"
        Then install: npm install @swc/core swc-loader
      • Option 2: Keep using Babel:
        # config/shakapacker.yml
        javascript_transpiler: "babel"
  2. CSS Modules now use named exports by default (PR 599)

    • JavaScript: Use named imports: import { className } from './styles.module.css'
    • TypeScript: Use namespace imports: import * as styles from './styles.module.css'
    • To keep the old behavior with default imports, see CSS Modules Export Mode documentation for configuration instructions
  3. Configuration option renamed from webpack_loader to javascript_transpiler

    • Better reflects its purpose of configuring JavaScript transpilation
    • Old webpack_loader option deprecated but still supported with warning

Added

  • Rspack support as an alternative assets bundler to webpack (PR 589, PR 590)
    • Configure assets_bundler: 'rspack' in shakapacker.yml
    • Faster Rust-based bundling with webpack-compatible APIs
    • Built-in SWC loader and CSS extraction
    • Automatic bundler detection in bin/shakapacker
  • TypeScript type definitions for improved IDE support and autocomplete (PR 602)
    • Types available via import type { WebpackConfig, RspackConfig, EnvironmentConfig } from "shakapacker/types"
    • Installer automatically creates TypeScript config files when tsconfig.json is detected (PR 633)
    • See TypeScript Documentation for migration and usage instructions
  • Optional peer dependencies - All peer dependencies now marked as optional, preventing installation warnings while maintaining version compatibility tracking (PR 603)
  • Private output path for server-side rendering bundles (PR 592)
    • Configure private_output_path for private server bundles separate from public assets
  • rake shakapacker:doctor diagnostic command to check for configuration issues and missing dependencies (PR 609)
  • rake shakapacker:migrate_to_swc migration helper to assist with switching from Babel to SWC (PR 613, PR 635)

... (truncated)

Commits
  • 1d6dc5a Release 9.0.0
  • 8f17234 Add TypeScript config support to installer (#633)
  • b81a885 Update spec/dummy Gemfile.lock after release
  • 7347394 Release 9.0.0-beta.11
  • 57d7aa0 Fix SWC migration to use config/swc.config.js instead of .swcrc (#634) (#635)
  • 4fe4c30 Update spec/dummy Gemfile.lock after release
  • 35e6171 Release 9.0.0-beta.10
  • 9425c01 Fix NODE_ENV defaulting to production breaking dev server (#631) (#632)
  • 55b05bc Update spec/dummy Gemfile.lock after release
  • 5152cd5 Release 9.0.0-beta.9
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 7, 2025
Bumps [shakapacker](https://github.com/shakacode/shakapacker) from 8.4.0 to 9.0.0.
- [Changelog](https://github.com/shakacode/shakapacker/blob/main/CHANGELOG.md)
- [Commits](shakacode/shakapacker@v8.4.0...v9.0.0)

---
updated-dependencies:
- dependency-name: shakapacker
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/shakapacker-9.0.0 branch from 290447e to 09f29e3 Compare October 8, 2025 03:11
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 9, 2025

Superseded by #2204.

@dependabot dependabot bot closed this Oct 9, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/shakapacker-9.0.0 branch October 9, 2025 03:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants