[codex] finish dependency consolidation and restore CI (#1402)

* chore(deps): consolidate all dependabot dependency updates

Combines all 12 open dependabot PRs into a single update:

Root (yarn.lock):
- bump serialize-javascript from 6.0.1 to 6.0.2
- bump nanoid from 3.3.6 to 3.3.11
- bump postcss from 8.4.25 to 8.5.6
- bump webpack from 5.83.1 to 5.104.1

test/dummy:
- bump js-yaml from 4.1.0 to 4.1.1
- bump node-forge from 1.3.1 to 1.3.3
- bump brace-expansion from 1.1.11 to 1.1.12
- bump webpack-dev-server from 4.13.1 to 5.2.1
- bump shakapacker from 7.2.0 to 9.5.0
- bump webpack from 5.76.3 to 5.104.1

react-builds:
- bump webpack from 5.85.0 to 5.104.1
- bump qs from 6.11.2 to 6.14.2

Consolidates PRs: #1370, #1371, #1372, #1373, #1374, #1375, #1376, #1379, #1381, #1382, #1383, #1384

https://claude.ai/code/session_01VRfTFW5v4wn4nwMyyyxLYv

* chore: regenerate build artifacts after dependency updates

Rebuild react and ujs assets with updated webpack to ensure
built files match the updated dependencies.

https://claude.ai/code/session_01VRfTFW5v4wn4nwMyyyxLYv

* Regenerate the React development bundle

* Normalize the dummy app Yarn lockfile

* Update react-builds polyfills for CI

* Restore process polyfill in server bundle

---------

Co-authored-by: Claude <noreply@anthropic.com>

Author: justin808

lib/assets/react-source/development/react-server.js

@@ -10,11 +10,11 @@
     "create-react-class": "^15.6.2",
     "fast-text-encoding": "^1.0.6",
     "immutability-helper": "^2.4.0",
-    "node-polyfill-webpack-plugin": "^2.0.1",
+    "node-polyfill-webpack-plugin": "^4.1.0",
     "prop-types": "^15.6.0",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
-    "webpack": "^5.74.0"
+    "webpack": "^5.105.4"
   },
   "packageManager": "yarn@1.22.21"
 }

lib/assets/react-source/production/react-server.js

@@ -15,6 +15,7 @@ module.exports = {
   plugins: [
     new NodePolyfillPlugin({
       excludeAliases: ['console', 'Buffer'],
+      additionalAliases: ['process'],
     }),
   ],
 };

react-builds/package.json

@@ -5,6 +5,8 @@ default: &default
   source_entry_path: packs
   public_output_path: packs
   cache_path: tmp/cache/shakapacker
+  assets_bundler: webpack
+  javascript_transpiler: babel
 
   # Additional paths webpack should lookup modules
   # ['app/assets', 'engine/foo/app/assets']

react-builds/webpack.config.js

@@ -15,26 +15,26 @@
     "babel-plugin-macros": "^3.1.0",
     "compression-webpack-plugin": "^9.2.0",
     "create-react-class": "^15.6.2",
-    "css-loader": "^5.2.7",
+    "css-loader": "^7.1.4",
     "css-minimizer-webpack-plugin": "^2.0.0",
-    "mini-css-extract-plugin": "^1.6.2",
+    "mini-css-extract-plugin": "^2.10.2",
     "pnp-webpack-plugin": "^1.7.0",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
     "react_ujs": "file:.yalc/react_ujs",
-    "shakapacker": "7.2.0",
+    "shakapacker": "9.7.0",
     "style-loader": "^3.3.1",
     "terser-webpack-plugin": "^5.3.3",
-    "webpack": "^5.73.0",
+    "webpack": "^5.105.4",
     "webpack-assets-manifest": "^5.1.0",
     "webpack-cli": "^4.9.2",
     "webpack-merge": "^5.8.0",
     "webpack-sources": "^3.2.3"
   },
   "devDependencies": {
-    "@pmmmwh/react-refresh-webpack-plugin": "^0.5.7",
+    "@pmmmwh/react-refresh-webpack-plugin": "^0.6.2",
     "babel-plugin-transform-react-remove-prop-types": "^0.4.24",
     "react-refresh": "^0.13.0",
-    "webpack-dev-server": "^4.9.2"
+    "webpack-dev-server": "^5.2.3"
   }
 }