Skip to content

Add v9.7.0 release notes to CHANGELOG #985

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
justin808 merged 2 commits into from
Mar 17, 2026
+13 −1
Merged

Add v9.7.0 release notes to CHANGELOG #985

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
60a4a70
Add v9.7.0-rc.0 release notes to CHANGELOG
justin808 Mar 16, 2026
8942a43
Update CHANGELOG for v9.7.0 release
justin808 Mar 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 13 additions & 1 deletion CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,17 @@

## [Unreleased]

## [v9.7.0] - March 15, 2026
Copy link
Copy Markdown
Contributor

@claude claude Bot Mar 17, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Both lib/shakapacker/version.rb and package.json still show 9.6.1 — they'll need to be bumped to 9.7.0 before (or alongside) merging this. The diff links added below (v9.6.1...v9.7.0, v9.7.0...main) will 404 until the tag exists.


### Added

- **Added rspack v2 support**. [PR #975](https://github.com/shakacode/shakapacker/pull/975) by [justin808](https://github.com/justin808). Peer dependencies now accept both rspack v1 and v2 (`^1.0.0 || ^2.0.0-0`). No source code changes were needed — all existing APIs work identically in v2. Note that rspack v2 requires Node.js 20.19.0+.

### Fixed

- **Fixed config exporter path traversal and annotation format validation**. [PR #914](https://github.com/shakacode/shakapacker/pull/914) by [justin808](https://github.com/justin808). Added `safeResolvePath` security check to prevent path traversal in export save paths, and enforced YAML format when using annotations with build exports.
- **Fixed `webpack-subresource-integrity` v5 named export handling**. [PR #978](https://github.com/shakacode/shakapacker/pull/978) by [justin808](https://github.com/justin808). Supports both the default export (older versions) and the named `SubresourceIntegrityPlugin` export (v5.1+), preventing runtime breakage when upgrading the plugin. Fixes [#972](https://github.com/shakacode/shakapacker/issues/972).

## [v9.6.1] - March 8, 2026

### Fixed
Expand Down Expand Up @@ -876,7 +887,8 @@ Note: [Rubygem is 6.3.0.pre.rc.1](https://rubygems.org/gems/shakapacker/versions

See [CHANGELOG.md in rails/webpacker (up to v5.4.3)](https://github.com/rails/webpacker/blob/master/CHANGELOG.md)

[Unreleased]: https://github.com/shakacode/shakapacker/compare/v9.6.1...main
[Unreleased]: https://github.com/shakacode/shakapacker/compare/v9.7.0...main
[v9.7.0]: https://github.com/shakacode/shakapacker/compare/v9.6.1...v9.7.0
[v9.6.1]: https://github.com/shakacode/shakapacker/compare/v9.6.0...v9.6.1
[v9.6.0]: https://github.com/shakacode/shakapacker/compare/v9.5.0...v9.6.0
[v9.5.0]: https://github.com/shakacode/shakapacker/compare/v9.4.0...v9.5.0
Expand Down
Loading