Bump plist, cordova-android and cordova-ios

[dependabot]

Bumps plist to 3.0.6 and updates ancestor dependencies plist, cordova-android and cordova-ios. These dependencies need to be updated together.

Updates plist from 1.2.0 to 3.0.6

Changelog

Sourced from plist's changelog.

3.0.5 / 2022-03-23

• [96e2303d05] Prototype Pollution using .parse() #114 (mario-canva)
• update browserify from 16 to 17

3.0.4 / 2021-08-27

• inline xmldom@0.6.0 to eliminate security warning false positive (Mike Reinstein)

3.0.3 / 2021-08-04

• update xmldom to 0.6.0 to patch critical vulnerability (Mike Reinstein)
• remove flaky saucelabs teseting badge (Mike Reinstein)

3.0.2 / 2021-03-25

• update xmldom to 0.5.0 to patch critical vulnerability (Mike Reinstein)
• update saucelab credentials to point at mreinstein's saucelabs account (Mike Reinstein)
• remove a bunch of test versions from the matrix because they weren't working in zuul + sauce (Mike Reinstein)

3.0.1 / 2018-03-21

• avoid using Buffer constructor nodejs/node#19079

3.0.0 / 2018-03-18

• [cb0d8f1bc6] update Makefile, rebuild dist/ (Mike Reinstein)
• [9dfeffe73f] remove unsupported browser versions from travis (Mike Reinstein)
• [c962bfe1ea] update module deps, remove support for node < 6 (Mike Reinstein)

2.1.0 / 2017-05-04

• [e4f06669bb] - update license (extend copyright term) (Mike Reinstein)
• [edc6e41035] - update module deps (Mike Reinstein)
• [85d11c48ef] - Harden test-cases and implementation to align with other implementations (Björn Brauer)
• [7619537eaa] review feedback: early returns and constants for nodeTypes (Björn Brauer)

2.0.1 / 2016-08-16

• [de136c8388] - bad npm release… (Nathan Rajlich)

... (truncated)

Commits

• See full diff in compare view

Updates cordova-android from 7.0.0 to 11.0.0

Changelog

Sourced from cordova-android's changelog.

11.0.0 (Jul 04, 2022)

Breaking:

• GH-1441 feat!: Android 12 splash screen
• GH-1427 feat!: API 32 support
• GH-1410 feat!: API 31 support
• GH-1444 fix!: set & use ANDROID_HOME as default
• GH-1411 chore!: Drop Node 12 support

Features:

• GH-1448 feat: Update androidx.appcompat version
• GH-1446 feat: Update gradle plugin version
• GH-1447 feat: Update google services pluging
• GH-1431 feat: support custom compileSdk setting
• GH-1311 feat: added support for BoM imports

Fixes:

• GH-1455 fix(prepare): destFile path separator
• GH-1453 fix: support installing platfrom from local git checkout
• GH-1449 fix: accept file cookies only if AndroidInsecureFileModeEnabled
• GH-1443 fix: force hostname to lowercase
• GH-1434 fix: restore checkReqs in prepare.js
• GH-1154 fix: move MainActivity.java to folder that tracks the app package name (widget id)

Chores, Dependencies & CI:

• GH-1451 chore: display warning on deprecated <splash> tag usage
• GH-1430 chore: remove unneeded deprecated annotation
• GH-1421 chore(npm): bump @cordova/eslint-config@^4.0.0
• GH-1420 chore(npm): bump dependencies
• GH-1452 dep: bump jasmine@4.2.1 w/ package-lock rebuild
• GH-1439 ci: update github action workflow
• GH-1424 ci: Added Node 18 to test matrix

10.1.2 (Apr 11, 2022)

Fixes:

• GH-1372 fix(AndroidManifest): explicitly define the activity attribute android:exported
• GH-1406 fix: detect JAVA_HOME with Java 11
• GH-1401 fix(GH-1391): Reword minimum build tools version to make it more clear what is actually required.
• GH-1384 fix: escape strings.xml app name

Chores:

• GH-1413 chore: update package-lock to satisfy npm audit
• GH-1348 chore: npmrc

... (truncated)

Commits

• d828785 release(android-v11.0.0): updated version and RELEASENOTES.md (2)
• e5b7e8a fix(prepare): destFile path separator (#1455)
• f38e8eb chore: bump version 11.0.1-dev
• 98895f7 release(android-v11.0.0): updated version and RELEASENOTES.md
• e968cac fix: support installing platfrom from local git checkout (#1453)
• 861fec2 dep: bump jasmine@4.2.1 w/ package-lock rebuild (#1452)
• 273d1bd chore: display warning on deprecated <splash> tag usage (#1451)
• 606e9c4 feat!: android 12 splash screen (#1441)
• 2d2ad4c fix: accept file cookies only if AndroidInsecureFileModeEnabled (#1449)
• 26b2121 feat: Update androidx.appcompat version (#1448)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by erisu, a new releaser for cordova-android since your current version.

Updates cordova-ios from 4.5.4 to 6.3.0

Release notes

Sourced from cordova-ios's releases.

6.3.0

Release announcement: https://cordova.apache.org/announcements/2023/04/15/cordova-ios-release-6.3.0.html

Full Changelog: apache/cordova-ios@rel/6.2.0...6.3.0

Changelog

Sourced from cordova-ios's changelog.

6.3.0 (Apr 13, 2023)

• chore: npm audit fix
• GH-1302 URL parsing for ATS in node 18
• GH-1258 workaround for DisallowOverscroll on iOS 16
• GH-1300 set webView.inspectable to true for Debug builds on iOS >= 16.4

6.2.0 (Feb 01, 2021)

• GH-1069 (chore): update dependencies for minor release
• GH-1067 fix: plugin podspec with no config elements
• GH-1014 fix(splashscreen): Don't show splashscreen when used as a lib
• GH-1030 Allow plugins to hook into the WKURLSchemeHandler
• GH-1036 (ios): add console output for simulator selectio
• GH-1060 GH-1059: Add VALIDATE_WORKSPACE setting to XcodeProj
• GH-1031 Set CDVWebViewProcessPoolFactory to public
• GH-1041 Document breaking changes in 4.3.0 & 4.4.0
• GH-1035 (ios): nil check in didReceiveData in schemehandler
• GH-1023 Reinstate verification of main navigation in case of navigationType other
• GH-1018 (iOS) Skip Cocoapods checkTool on non-darwin platform
• GH-1015 Project changes to allow consuming cordova as submodule
• GH-1006 Hide splash sceen immediately on .hide()
• GH-1005 Fix BackgroundColor parsing for lowercase letters
• GH-1002 chore(asf): Update GitHub repo metadata
• Add release notes from version 6.1.1
• GH-976 chore: Update npm dependencies
• GH-973 fix: Append startURL to the initial url loaded
• GH-936 (ios) issue-912: fix deployment to device
• GH-932 ci: add node 14 to workflow

6.1.1 (Aug 28, 2020)

• GH-976 Update npm dependencies to pull in cordova-common@4.0.2
  • This should resolve several issues affecting Info.plist files, including #764 and #775
• GH-973 Append startURL to the initial url loaded
• GH-912 fix deployment to device (#936)
• GH-932 add node 14 to CI workflow

6.1.0 (Jun 21, 2020)

• GH-910 Set $PROJECT_NAME properly when installing plugins
• GH-885 Don't silently ignore creation of new windows
• GH-889 Revert "(ios) Don't pre-fill orientation" (#901)
• GH-902 chore: fix eslint failure
• GH-808 Dark mode splashscreen storyboard images
• GH-886 Add PreferredContentMode preference
• GH-890 Fix SplashScreen issues & refactor BackgroundColor (#896)
• GH-888 fix: author and tag podspec errors
• GH-882 fix: Properly get version from package.json

6.0.0 (May 28, 2020)

• GH-875 fix: remove q leftover
• chore(audit-license-headers): add & correct license

... (truncated)

Commits

• 827760a chore: manually update versions
• 67aa601 chore: release notes 6.3.0
• acf6159 chore: set version to 6.3.0
• aab7aaa chore: npm audit fix
• bf49a10 fix: URL parsing for ATS in node 18 (#1302)
• 6cfcbf8 (ios) fix: workaround for DisallowOverscroll on iOS 16 (#1258)
• e6e4fa1 feat: set webView.inspectable to true for Debug builds on iOS >= 16.4 (#1300)
• 87c6d53 Update JS snapshot to version 6.2.0 (via coho)
• 0b1e37b Added 6.2.0 to CDVAvailability.h (via coho).
• 5950cf2 Update RELEASENOTES & version for release 6.2.0
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by niklasmerz, a new releaser for cordova-ios since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[socket-security]

New dependency changes detected. Learn more about Socket for GitHub ↗︎

---

👍 No new dependency issues detected in pull request

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

Pull request alert summary

Issue	Status
Install scripts	✅ 0 issues
Native code	✅ 0 issues
Bin script shell injection	✅ 0 issues
Unresolved require	✅ 0 issues
Invalid package.json	✅ 0 issues
HTTP dependency	✅ 0 issues
Git dependency	✅ 0 issues
Potential typo squat	✅ 0 issues
Known Malware	✅ 0 issues
Telemetry	✅ 0 issues
Protestware/Troll package	✅ 0 issues

---

📊 Modified Dependency Overview:

⬆️ Updated Package	Version Diff	Added Capability Access	+/- Transitive Count	Publisher
cordova-android@11.0.0	7.0.0...11.0.0	eval, shell	+69/-0	erisu
cordova-ios@6.3.0	4.5.4...6.3.0	eval, shell	+67/-0	niklasmerz

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.