Address review comments

Author: justin808

packages/react-on-rails/tests/webpackHelpers.test.ts

@@ -8,7 +8,7 @@ describe('webpackHelpers', () => {
       expect(reactDomClientWarning.test(message)).toBe(true);
     });
 
-    it('matches the webpack 4 "Module not found" warning for react-dom/client', () => {
+    it('matches the "Module not found" warning regardless of file path', () => {
       const message =
         "Module not found: Error: Can't resolve 'react-dom/client' in '/app/node_modules/react-on-rails/src'";
       expect(reactDomClientWarning.test(message)).toBe(true);

react_on_rails_pro/react_on_rails_pro.gemspec

@@ -44,6 +44,9 @@ Gem::Specification.new do |s|
   #   https://github.com/HoneyryderChuck/httpx/issues/118
   s.add_runtime_dependency "http-2", ">= 1.1.1"
   s.add_runtime_dependency "httpx", "~> 1.5"
+  # jwt >= 2.7 is sufficient: decode_license validates RS256 (asymmetric) only,
+  # so the empty-key HMAC advisory fixed in jwt 3.2.0 does not apply here.
+  # algorithms: ["RS256"] is honored by both jwt 2.x and 3.x; see license_validator.rb.
   s.add_runtime_dependency "jwt", ">= 2.7"
   s.add_runtime_dependency "rainbow"
   s.add_runtime_dependency "react_on_rails", ReactOnRails::VERSION