Add v9.7.0 release notes to CHANGELOG

[justin808]

Summary

Adds the v9.7.0 changelog section with release notes for all user-visible changes since v9.6.1:

• Added: rspack v2 support (PR Add rspack v2 support #975)
• Fixed: Config exporter path traversal and annotation format validation (PR Supersede #905: all-builds validation fix with lint unblock #914)
• Fixed: webpack-subresource-integrity v5 named export handling (PR Fix webpack-subresource-integrity v5 named export handling #978, fixes webpack-subresource-integrity v5.2 incompatibility #972)

Version diff links at the bottom of the file are updated accordingly.

Pull Request checklist

• Add/update test to cover these changes
• Update documentation
• Update CHANGELOG file

Other Information

Non-user-visible PRs (#920, #965, #970, #971, #977, #979, #981, #982) were intentionally excluded per changelog policy.

---

Note

Low Risk
Documentation-only change updating CHANGELOG.md; no runtime code or dependency changes are introduced in this PR.

Overview
Adds a new v9.7.0 section to CHANGELOG.md documenting user-visible changes (rspack v2 support and two fixes around config export security/validation and webpack-subresource-integrity v5 exports).

Updates the compare links at the bottom so [Unreleased] now compares from v9.7.0, and adds the new [v9.7.0] tag link.

^{Written by Cursor Bugbot for commit 8942a43. Configure here.}

Summary by CodeRabbit

• New Features

  • Added rspack v2 support

• Bug Fixes

  • Improved security and validation handling

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 35c1bf4a-2200-48f0-8c97-2a149fee3e1d

📥 Commits

Reviewing files that changed from the base of the PR and between 55af8b9 and 8942a43.

📒 Files selected for processing (1)

• CHANGELOG.md

---

Walkthrough

Documentation update to CHANGELOG.md introducing v9.7.0 release notes covering rspack v2 support and security/validation improvements, with updated reference links for version navigation.

Changes

Cohort / File(s)	Summary
Changelog Update CHANGELOG.md	Added v9.7.0 release section documenting rspack v2 support and security/validation fixes; updated unreleased version links from v9.6.1 to v9.7.0.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🐰 A changelog hops with v9.7 cheer,
rspack support appears so clear,
Security fixes tucked inside,
With version links we swiftly glide. ✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change in the PR—adding v9.7.0 release notes to the CHANGELOG file.
Linked Issues check	✅ Passed	The PR documents the fix for issue #972 (webpack-subresource-integrity v5 named export handling) in the CHANGELOG as part of v9.7.0 release notes.
Out of Scope Changes check	✅ Passed	All changes in the PR are limited to the CHANGELOG file and relate directly to documenting the v9.7.0 release, which is in scope.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch jg/changelog-v9.7.0

📝 Coding Plan

• Generate coding plan for human review comments

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[claude]

Review: Add v9.7.0 release notes to CHANGELOG

The changelog entries are well-written, properly formatted, and consistent with the existing style. One thing to verify before merging:

Version files not updated

Both lib/shakapacker/version.rb and package.json still report 9.6.1. If this PR is the release preparation step, those files need to be bumped to 9.7.0 as well (version.rb even includes the reminder: "Change the version in package.json too, please!").

If the version bump is intentionally a separate step in your release workflow, that's fine — but the diff links added in this PR ([v9.7.0]: .../compare/v9.6.1...v9.7.0 and [Unreleased]: .../compare/v9.7.0...main) will return 404s until the v9.7.0 tag is pushed. Consider merging the version bump first (or together with this PR) so the links are valid immediately on merge.

Content looks good

• Section placement, date format (March 15, 2026), and heading structure all match existing entries.
• PR link format ([PR #NNN](...)) is correct per project style.
• The [Unreleased] comparison base is correctly updated from v9.6.1 to v9.7.0.
• Non-user-visible PRs are correctly excluded per changelog policy.

[claude]

Both lib/shakapacker/version.rb and package.json still show 9.6.1 — they'll need to be bumped to 9.7.0 before (or alongside) merging this. The diff links added below (v9.6.1...v9.7.0, v9.7.0...main) will 404 until the tag exists.

[greptile-apps]

Greptile Summary

This PR adds the v9.7.0 release notes section to CHANGELOG.md ahead of the formal release (the version bump in package.json and lib/shakapacker/version.rb is handled separately by the bundle exec rake create_release task, per the documented release process in docs/releasing.md).

Key changes:

• Added ## [v9.7.0] - March 15, 2026 section with Added (rspack v2 peer-dep support) and Fixed (path traversal security fix, webpack-subresource-integrity v5 named-export handling) entries.
• Updated the [Unreleased] diff link to compare against v9.7.0 instead of v9.6.1.
• Added the new [v9.7.0] comparison link pointing to v9.6.1...v9.7.0.
• Date format, heading style, PR link format, and attribution are all consistent with existing entries.
• The minor version bump (9.6.1 → 9.7.0) is correct because the section contains an Added heading, which maps to a minor bump per the project's version policy.

Confidence Score: 5/5

• This is a documentation-only CHANGELOG update with no code changes; safe to merge.
• All links and formatting are correct and consistent with the project's existing changelog style. The version number, date, diff links, and PR attributions are accurate. The package.json/version.rb still reflecting 9.6.1 is intentional — the release process reads the version from CHANGELOG.md and bumps those files automatically.
• No files require special attention.

Important Files Changed

Filename	Overview
CHANGELOG.md	Adds v9.7.0 release notes section with correct formatting, accurate PR links, version ordering, and properly updated diff links at the bottom of the file.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["Merge feature PRs to main\n(#914, #975, #978)"] --> B["Run /update-changelog release\nor manually write CHANGELOG.md section"]
    B --> C["PR #985: Add v9.7.0 section\nto CHANGELOG.md"]
    C --> D["Merge CHANGELOG PR to main"]
    D --> E["bundle exec rake create_release\n(reads v9.7.0 from CHANGELOG.md)"]
    E --> F["Bump package.json → 9.7.0\nBump version.rb → 9.7.0"]
    F --> G["Publish to npm + RubyGems"]
    G --> H["Create GitHub Release\nfrom CHANGELOG section"]

Loading

_{Last reviewed commit: 8942a43}