Bump shakapacker from 9.5.0 to 9.6.1 in /ruby-gem/spec/dummy

[dependabot]

Bumps shakapacker from 9.5.0 to 9.6.1.

Release notes

Sourced from shakapacker's releases.

v9.6.1

[v9.6.1] - March 8, 2026

Fixed

• Fixed Env#current crashing when Rails is not loaded. [PR #963](shakacode/shakapacker#963) by ihabadham. Added defined?(Rails) guard to Shakapacker::Env#current so it falls back to RAILS_ENV/RACK_ENV environment variables when called from non-Rails Ruby processes (e.g., bin/dev scripts). Previously, this would raise a NameError and silently fall back to "production".

Documentation

• Added Node package API documentation. [PR #900](shakacode/shakapacker#900) by justin808. New guide (docs/node_package_api.md) documenting the JavaScript API exports, configuration objects, import entrypoints for webpack and rspack, and built-in third-party support resources.

v9.6.0

[v9.6.0] - March 7, 2026

Security

• Removed default Access-Control-Allow-Origin: * header from dev server configuration. This header allowed any website to access dev server resources. If your setup runs webpack-dev-server on a different port from your Rails server, uncomment the headers section in config/shakapacker.yml to restore cross-origin asset loading. [PR #936](shakacode/shakapacker#936) by justin808. Fixes #935.

Added

• Added SKIP=true installer mode to preserve existing files. [PR #926](shakacode/shakapacker#926) by justin808. Running rails shakapacker:install SKIP=true now skips conflicting files instead of overwriting them. This is useful for CI/CD pipelines and automated setups where you want to install only missing files without touching existing configuration.

• Export bundler utility functions for Webpack/Rspack compatibility. [PR #922](shakacode/shakapacker#922) by justin808. New utility functions that make it easier to write bundler-agnostic configuration code: isRspack, isWebpack, getBundler(), getCssExtractPlugin(), getCssExtractPluginLoader(), getDefinePlugin(), getEnvironmentPlugin(), and getProvidePlugin(). Users no longer need to write conditional logic to handle differences between Webpack and Rspack.

  // Before: manual conditional logic
  const { config } = require("shakapacker")
  const CssPlugin =
    config.assets_bundler === "rspack"
      ? require("@rspack/core").CssExtractRspackPlugin
      : require("mini-css-extract-plugin")
  // After: use bundler utilities
  const { getCssExtractPlugin } = require("shakapacker")
  const CssPlugin = getCssExtractPlugin()

Changed

• Changed default file rule type from asset/resource to asset. [PR #901](shakacode/shakapacker#901) by justin808. Static assets (images, fonts, SVGs) now use webpack/rspack's asset type instead of asset/resource, allowing the bundler to automatically inline small files as data URIs for better performance.

• Allow compression-webpack-plugin v12. [PR #937](shakacode/shakapacker#937) by G-Rath.

• BREAKING: sass-loader now defaults to modern Sass API. [PR #879](shakacode/shakapacker#879) by justin808. The sass-loader configuration now uses api: "modern" instead of the deprecated legacy API. This improves compatibility with plugins like sass-resources-loader that require the modern API. If you experience issues after upgrading, you can revert to the legacy API by customizing your webpack config:

  // config/webpack/webpack.config.js
  const { generateWebpackConfig } = require("shakapacker")
  const config = generateWebpackConfig()
  // Find and modify sass-loader options
  config.module.rules.forEach((rule) => {
  if (rule.use) {

... (truncated)

Changelog

Sourced from shakapacker's changelog.

[v9.6.1] - March 8, 2026

Fixed

• Fixed Env#current crashing when Rails is not loaded. [PR #963](shakacode/shakapacker#963) by ihabadham. Added defined?(Rails) guard to Shakapacker::Env#current so it falls back to RAILS_ENV/RACK_ENV environment variables when called from non-Rails Ruby processes (e.g., bin/dev scripts). Previously, this would raise a NameError and silently fall back to "production".

Documentation

• Added Node package API documentation. [PR #900](shakacode/shakapacker#900) by justin808. New guide (docs/node_package_api.md) documenting the JavaScript API exports, configuration objects, import entrypoints for webpack and rspack, and built-in third-party support resources.

[v9.6.0] - March 7, 2026

Security

• Removed default Access-Control-Allow-Origin: * header from dev server configuration. This header allowed any website to access dev server resources. If your setup runs webpack-dev-server on a different port from your Rails server, uncomment the headers section in config/shakapacker.yml to restore cross-origin asset loading. [PR #936](shakacode/shakapacker#936) by justin808. Fixes #935.

Added

• Added SKIP=true installer mode to preserve existing files. [PR #926](shakacode/shakapacker#926) by justin808. Running rails shakapacker:install SKIP=true now skips conflicting files instead of overwriting them. This is useful for CI/CD pipelines and automated setups where you want to install only missing files without touching existing configuration.

• Export bundler utility functions for Webpack/Rspack compatibility. [PR #922](shakacode/shakapacker#922) by justin808. New utility functions that make it easier to write bundler-agnostic configuration code: isRspack, isWebpack, getBundler(), getCssExtractPlugin(), getCssExtractPluginLoader(), getDefinePlugin(), getEnvironmentPlugin(), and getProvidePlugin(). Users no longer need to write conditional logic to handle differences between Webpack and Rspack.

  // Before: manual conditional logic
  const { config } = require("shakapacker")
  const CssPlugin =
    config.assets_bundler === "rspack"
      ? require("@rspack/core").CssExtractRspackPlugin
      : require("mini-css-extract-plugin")
  // After: use bundler utilities
  const { getCssExtractPlugin } = require("shakapacker")
  const CssPlugin = getCssExtractPlugin()

Changed

• Changed default file rule type from asset/resource to asset. [PR #901](shakacode/shakapacker#901) by justin808. Static assets (images, fonts, SVGs) now use webpack/rspack's asset type instead of asset/resource, allowing the bundler to automatically inline small files as data URIs for better performance.

• Allow compression-webpack-plugin v12. [PR #937](shakacode/shakapacker#937) by G-Rath.

• BREAKING: sass-loader now defaults to modern Sass API. [PR #879](shakacode/shakapacker#879) by justin808. The sass-loader configuration now uses api: "modern" instead of the deprecated legacy API. This improves compatibility with plugins like sass-resources-loader that require the modern API. If you experience issues after upgrading, you can revert to the legacy API by customizing your webpack config:

  // config/webpack/webpack.config.js
  const { generateWebpackConfig } = require("shakapacker")
  const config = generateWebpackConfig()
  // Find and modify sass-loader options
  config.module.rules.forEach((rule) => {
  if (rule.use) {
  rule.use.forEach((loader) => {
  if (loader.loader?.includes("sass-loader")) {

... (truncated)

Commits

• d30aece Release 9.6.1
• 5672e46 Add changelog entries for PRs #963 and #900 (#964)
• 7c95c45 Fix Env#current Rails.env call without defined?(Rails) guard (#963)
• 7a08a6d Add Node package API documentation (#900)
• 02456e1 Update dummy app lockfile to shakapacker 9.6.0 (#958)
• 7ef71ac Fix release script: update spec/dummy lockfile before release-it (#957)
• 11c0ba9 Add address-review command (#959)
• d67309a Release 9.6.0
• 3edb784 Update spec/dummy lockfiles to fix stale peer dependency warnings (#956)
• f48722a Release 9.6.0-rc.3
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)