Update changelog for v16.1.0: Consolidate RC versions and organize release notes

[justin808]

Summary

This PR consolidates the React on Rails changelog by removing all 16.0.1-rc.X references and organizing them into a clean 16.1.0 release with proper categorization and complete attribution.

Key Changes

• Version bump to 16.1.0: Changed from 16.0.1 due to new server bundle security feature (private bundle location)
• Consolidated RC versions: Merged 16.0.1-rc.0, 16.0.1-rc.2, and 16.0.1-rc.4 into single 16.1.0 release
• Complete attribution: Added proper PR numbers and author credits to all changelog entries
• Improved organization: Structured release notes into clear, logical categories

Release Categories

New Features

• Server bundle security with server_bundle_output_path and enforce_private_server_bundles configuration options
• New react_on_rails:doctor rake task for setup diagnostics

Deprecations

• generated_assets_dirs configuration now shows deprecation warning (corrected from breaking change)

Security Enhancements

• Private server bundle enforcement
• Fixed command injection vulnerabilities in generators
• Hardened DOM selectors with XSS protection

Pro License Features

• Core/Pro separation with clear licensing boundaries
• Runtime license validation with graceful fallback
• Enhanced immediate hydration functionality

Generator Improvements

• Modern TypeScript patterns with improved type inference
• Optimized tsconfig.json with bundler module resolution
• Enhanced Redux TypeScript integration

Bug Fixes

• Fixed LoadError in doctor rake task
• Fixed packs generator for empty server bundle configuration
• Fixed Shakapacker version requirement inconsistencies

Code Improvements

• Removed PackerUtils abstraction
• Centralized Pro utilities architecture

Attribution Complete

All entries now include proper attribution following the existing changelog format:

• [PR 1798] by [justin808]
• [PR 1791] by [AbanoubGhadban]
• [PR 1786] by [justin808]
• [PR 1795], [PR 1802] by [justin808]

This creates a clean, professional release that accurately reflects the scope of changes and provides proper credit to all contributors.

🤖 Generated with Claude Code

---

This change is 

[coderabbitai]

Warning

Rate limit exceeded

@justin808 has exceeded the limit for the number of commits or files that can be reviewed per hour. Please wait 0 minutes and 19 seconds before requesting another review.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

📥 Commits

Reviewing files that changed from the base of the PR and between a0b336b and 6d38d76.

📒 Files selected for processing (1)

• CHANGELOG.md (1 hunks)

✨ Finishing touches

🧪 Generate unit tests

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch changelog

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}