cordova-plugin-nativeview
cordova-plugin-nativeview copied to clipboard
Bump xmldom, plist and plugman
Removes xmldom. It's no longer used after updating ancestor dependencies xmldom, plist and plugman. These dependencies need to be updated together.
Removes xmldom
Updates plist from 3.0.1 to 3.0.6
Changelog
Sourced from plist's changelog.
3.0.5 / 2022-03-23
- [
96e2303d05] Prototype Pollution using .parse() #114 (mario-canva)- update browserify from 16 to 17
3.0.4 / 2021-08-27
- inline [email protected] to eliminate security warning false positive (Mike Reinstein)
3.0.3 / 2021-08-04
- update xmldom to 0.6.0 to patch critical vulnerability (Mike Reinstein)
- remove flaky saucelabs teseting badge (Mike Reinstein)
3.0.2 / 2021-03-25
- update xmldom to 0.5.0 to patch critical vulnerability (Mike Reinstein)
- update saucelab credentials to point at mreinstein's saucelabs account (Mike Reinstein)
- remove a bunch of test versions from the matrix because they weren't working in zuul + sauce (Mike Reinstein)
Commits
- See full diff in compare view
Updates plugman from 2.0.0 to 3.0.1
Changelog
Sourced from plugman's changelog.
3.0.1 (Apr 11, 2019)
- GH-117 chore: remove deprecated
engineStrict- GH-113 Bug Fixes
- Register uncaughtException handler as early as possible
- Make unhandled promise rejections fail loudly
- Split up docs by command and add a short summary
- Remove documentation for obsolete commands
- Fix known options for plugman create
- Set positive exit code if we don't know what to do
- Set process.exitCode instead of calling process.exit
- Provide helpful error message and code on failure
- Properly install multiple plugins in series
- Properly return Promises from commands
- Factor out duplicated code
- Improve readability of commands module
- Remove commands from CLI that do not exist in the lib anymore
- Remove errors about unsupported publish/unpublish commands
- Move CLI interface plugman.commands from cordova-lib to plugman
- GH-112 Fix platform_name option
3.0.0 (Mar 20, 2019)
- GH-108 Cordova Plugman Release Preparation (Cordova 9)
- Bumped Dependencies
cordova-lib@^9.0.0nopt@^4.0.1- Bumped Dev Dependencies
jasmine@^3.3.1eslint-plugin-standard@^4.0.0eslint-plugin-promise@^4.0.1eslint-plugin-node@^8.0.1eslint-plugin-import@^2.16.0eslint-config-standard@^12.0.0eslint-config-semistandard@^13.0.0eslint@^5.15.3- Update to support nopt@^4.0.1
- Add or update GitHub pull request and issue template
- GH-96 Remove
fetchoption- GH-95 Remove
browserifyoption- GH-94 CB-14164 Use native Promises instead of
Q- GH-88 CB-12018 Use
jasmineinstead ofjasmine-node- GH-93 Code Refactor and Cleanup
- GH-92 Update link to
plugin.xmlspecification inREADME.md- GH-91 Drop support for Node.js < 6
Commits
247122dUpdated version and RELEASENOTES.md for release 3.0.14311213chore: remove deprecatedengineStrict(#117)8d1cd21Merge pull request #113 from raphinesse/fix-orgy2550497Register uncaughtException handler as early as possiblecdecd13Make unhandled promise rejections fail loudlyf434d50Split up docs by command and add a short summarye40da2cRemove documentation for obsolete commands04cc98fFix known options for plugman create6dc057fSet positive exit code if we don't know what to doef359cdSet process.exitCode instead of calling process.exit- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by erisu, a new releaser for plugman since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.