Bump shelljs, cordova-android and cordova-ios

[dependabot]

Bumps shelljs to 0.8.5 and updates ancestor dependencies shelljs, cordova-android and cordova-ios. These dependencies need to be updated together.

Updates shelljs from 0.2.6 to 0.8.5

Release notes

Sourced from shelljs's releases.

v0.8.5

This was a small security fix for #1058.

v0.8.4

Small patch release to fix a circular dependency warning in node v14. See #973.

v0.8.3

Closed issues:

• Shelljs print stderr to console even if exec-only "silent" is true #905
• refactor: remove common.state.tempDir #902
• Can't suppress stdout for echo #899
• exec() doesn't apply the arguments correctly #895
• shell.exec('npm pack') painfully slow #885
• shelljs.exec cannot find app.asar/node_modules/shelljs/src/exec-child.js #881
• test infra: mocks and skipOnWin conflict #862
• Support for shell function completion on IDE #859
• echo command shows options in stdout #855
• silent does not always work #851
• Appveyor installs the latest npm, instead of the latest compatible npm #844
• Force symbolic link (ln -sf) does not overwrite/recreate existing destination #830
• inconsistent result when trying to echo to a file #798
• Prevent require()ing executable-only files #789
• Cannot set property to of [object String] which has only a getter #752
• which() should check executability before returning a value #657
• Bad encoding experience #456
• phpcs very slow #440
• Error shown when triggering a sigint during shelljs.exec if process.on sigint is defined #254
• .to\(file\) does not mute STDIO output #146
• Escaping shell arguments to exec() #143
• Allow multiple string arguments for exec() #103
• cp does not recursively copy from readonly location #98
• Handling permissions errors on file I/O #64

Merged pull requests:

• Add test case for sed on empty file #904 (wyardley)
• refactor: don't expose tempdir in common.state #903 (nfischer)
• chore(ci): fix codecov on travis #897 (nfischer)
• chore(npm): add ci-or-install script #896 (nfischer)
• Fix silent exec #892 (nfischer)
• chore(appveyor): run entire test matrix #886 (nfischer)
• docs: remove gitter badge #880 (nfischer)
• grep includes the i flag #876 (ppsleep)
• Fix(which): match only executable files (#657) #874 (termosa)
• chore: rename some tests #871 (nfischer)
• Fix cp from readonly source #870 (nfischer)
• chore: bump dev dependencies and add package-lock #864 (nfischer)
• fix(mocks): fix conflict between mocks and skip #863 (nfischer)
• chore: output npm version in travis #850 (nfischer)

... (truncated)

Changelog

Sourced from shelljs's changelog.

Change Log

Unreleased

Full Changelog

Closed issues:

• find returns empty array even though directory has files #922
• exec() should support node v10 (maxbuffer change) #915
• grep exit status and extra newlines #900
• Travis CI currently broken #893
• Drop node v4 support #873
• cp -Ru respects the -R but not the -u #808

Merged pull requests:

• feat(options): initial support for long options #926 (nfischer)
• test(touch): add coverage for -d option #925 (nfischer)
• chore(node): add v10 and v11 to CI #921 (nfischer)
• chore(test): no coverage by default #920 (nfischer)
• fix(exec): consistent error message for maxBuffer #919 (nfischer)
• chore(node): drop node v4 and v5 #917 (nfischer)
• chore: script to bump supported node versions #913 (nfischer)
• chore(npm): remove lockfile #911 (nfischer)
• ci: change language to node_js and remove obsolete scripts #910 (DanielRuf)
• chore: remove gitter integration #907 (nfischer)
• fix: Exit 1 with empty string if no match #901 (wyardley)
• feat(cp): support update flag when recursing #889 (joshi-sh)

v0.8.3 (2018-11-13)

Full Changelog

Closed issues:

• Shelljs print stderr to console even if exec-only "silent" is true #905
• refactor: remove common.state.tempDir #902
• Can't suppress stdout for echo #899
• exec() doesn't apply the arguments correctly #895
• shell.exec('npm pack') painfully slow #885
• shelljs.exec cannot find app.asar/node_modules/shelljs/src/exec-child.js #881
• test infra: mocks and skipOnWin conflict #862
• Support for shell function completion on IDE #859
• echo command shows options in stdout #855
• silent does not always work #851
• Appveyor installs the latest npm, instead of the latest compatible npm #844
• Force symbolic link (ln -sf) does not overwrite/recreate existing destination #830
• inconsistent result when trying to echo to a file #798
• Prevent require()ing executable-only files #789
• Cannot set property to of [object String] which has only a getter #752

... (truncated)

Commits

• 70668a4 0.8.5
• d919d22 fix(exec): lockdown file permissions (#1060)
• fcf1651 0.8.4
• a1111ee Silence potentially upcoming circular dependency warning (#973)
• d4d1317 0.8.3
• db317bf Add test case for sed on empty file (#904)
• 0d5ecb6 docs(changelog): updated by Nate Fischer [ci skip]
• 6b3c7b1 refactor: don't expose tempdir in common.state (#903)
• 4bd22e7 chore(ci): fix codecov on travis (#897)
• 2b3b781 fix: silent exec (#892)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by nfischer, a new releaser for shelljs since your current version.

Updates cordova-android from 7.0.0 to 11.0.0

Changelog

Sourced from cordova-android's changelog.

11.0.0 (Jul 04, 2022)

Breaking:

• GH-1441 feat!: Android 12 splash screen
• GH-1427 feat!: API 32 support
• GH-1410 feat!: API 31 support
• GH-1444 fix!: set & use ANDROID_HOME as default
• GH-1411 chore!: Drop Node 12 support

Features:

• GH-1448 feat: Update androidx.appcompat version
• GH-1446 feat: Update gradle plugin version
• GH-1447 feat: Update google services pluging
• GH-1431 feat: support custom compileSdk setting
• GH-1311 feat: added support for BoM imports

Fixes:

• GH-1455 fix(prepare): destFile path separator
• GH-1453 fix: support installing platfrom from local git checkout
• GH-1449 fix: accept file cookies only if AndroidInsecureFileModeEnabled
• GH-1443 fix: force hostname to lowercase
• GH-1434 fix: restore checkReqs in prepare.js
• GH-1154 fix: move MainActivity.java to folder that tracks the app package name (widget id)

Chores, Dependencies & CI:

• GH-1451 chore: display warning on deprecated <splash> tag usage
• GH-1430 chore: remove unneeded deprecated annotation
• GH-1421 chore(npm): bump @cordova/eslint-config@^4.0.0
• GH-1420 chore(npm): bump dependencies
• GH-1452 dep: bump jasmine@4.2.1 w/ package-lock rebuild
• GH-1439 ci: update github action workflow
• GH-1424 ci: Added Node 18 to test matrix

10.1.2 (Apr 11, 2022)

Fixes:

• GH-1372 fix(AndroidManifest): explicitly define the activity attribute android:exported
• GH-1406 fix: detect JAVA_HOME with Java 11
• GH-1401 fix(GH-1391): Reword minimum build tools version to make it more clear what is actually required.
• GH-1384 fix: escape strings.xml app name

Chores:

• GH-1413 chore: update package-lock to satisfy npm audit
• GH-1348 chore: npmrc

... (truncated)

Commits

• d828785 release(android-v11.0.0): updated version and RELEASENOTES.md (2)
• e5b7e8a fix(prepare): destFile path separator (#1455)
• f38e8eb chore: bump version 11.0.1-dev
• 98895f7 release(android-v11.0.0): updated version and RELEASENOTES.md
• e968cac fix: support installing platfrom from local git checkout (#1453)
• 861fec2 dep: bump jasmine@4.2.1 w/ package-lock rebuild (#1452)
• 273d1bd chore: display warning on deprecated <splash> tag usage (#1451)
• 606e9c4 feat!: android 12 splash screen (#1441)
• 2d2ad4c fix: accept file cookies only if AndroidInsecureFileModeEnabled (#1449)
• 26b2121 feat: Update androidx.appcompat version (#1448)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by erisu, a new releaser for cordova-android since your current version.

Updates cordova-ios from 4.5.4 to 6.3.0

Release notes

Sourced from cordova-ios's releases.

6.3.0

Release announcement: https://cordova.apache.org/announcements/2023/04/15/cordova-ios-release-6.3.0.html

Full Changelog: apache/cordova-ios@rel/6.2.0...6.3.0

Changelog

Sourced from cordova-ios's changelog.

6.3.0 (Apr 13, 2023)

• chore: npm audit fix
• GH-1302 URL parsing for ATS in node 18
• GH-1258 workaround for DisallowOverscroll on iOS 16
• GH-1300 set webView.inspectable to true for Debug builds on iOS >= 16.4

6.2.0 (Feb 01, 2021)

• GH-1069 (chore): update dependencies for minor release
• GH-1067 fix: plugin podspec with no config elements
• GH-1014 fix(splashscreen): Don't show splashscreen when used as a lib
• GH-1030 Allow plugins to hook into the WKURLSchemeHandler
• GH-1036 (ios): add console output for simulator selectio
• GH-1060 GH-1059: Add VALIDATE_WORKSPACE setting to XcodeProj
• GH-1031 Set CDVWebViewProcessPoolFactory to public
• GH-1041 Document breaking changes in 4.3.0 & 4.4.0
• GH-1035 (ios): nil check in didReceiveData in schemehandler
• GH-1023 Reinstate verification of main navigation in case of navigationType other
• GH-1018 (iOS) Skip Cocoapods checkTool on non-darwin platform
• GH-1015 Project changes to allow consuming cordova as submodule
• GH-1006 Hide splash sceen immediately on .hide()
• GH-1005 Fix BackgroundColor parsing for lowercase letters
• GH-1002 chore(asf): Update GitHub repo metadata
• Add release notes from version 6.1.1
• GH-976 chore: Update npm dependencies
• GH-973 fix: Append startURL to the initial url loaded
• GH-936 (ios) issue-912: fix deployment to device
• GH-932 ci: add node 14 to workflow

6.1.1 (Aug 28, 2020)

• GH-976 Update npm dependencies to pull in cordova-common@4.0.2
  • This should resolve several issues affecting Info.plist files, including #764 and #775
• GH-973 Append startURL to the initial url loaded
• GH-912 fix deployment to device (#936)
• GH-932 add node 14 to CI workflow

6.1.0 (Jun 21, 2020)

• GH-910 Set $PROJECT_NAME properly when installing plugins
• GH-885 Don't silently ignore creation of new windows
• GH-889 Revert "(ios) Don't pre-fill orientation" (#901)
• GH-902 chore: fix eslint failure
• GH-808 Dark mode splashscreen storyboard images
• GH-886 Add PreferredContentMode preference
• GH-890 Fix SplashScreen issues & refactor BackgroundColor (#896)
• GH-888 fix: author and tag podspec errors
• GH-882 fix: Properly get version from package.json

6.0.0 (May 28, 2020)

• GH-875 fix: remove q leftover
• chore(audit-license-headers): add & correct license

... (truncated)

Commits

• 827760a chore: manually update versions
• 67aa601 chore: release notes 6.3.0
• acf6159 chore: set version to 6.3.0
• aab7aaa chore: npm audit fix
• bf49a10 fix: URL parsing for ATS in node 18 (#1302)
• 6cfcbf8 (ios) fix: workaround for DisallowOverscroll on iOS 16 (#1258)
• e6e4fa1 feat: set webView.inspectable to true for Debug builds on iOS >= 16.4 (#1300)
• 87c6d53 Update JS snapshot to version 6.2.0 (via coho)
• 0b1e37b Added 6.2.0 to CDVAvailability.h (via coho).
• 5950cf2 Update RELEASENOTES & version for release 6.2.0
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by niklasmerz, a new releaser for cordova-ios since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[socket-security]

New dependency changes detected. Learn more about Socket for GitHub ↗︎

---

👍 No new dependency issues detected in pull request

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

Pull request alert summary

Issue	Status
Install scripts	✅ 0 issues
Native code	✅ 0 issues
Bin script shell injection	✅ 0 issues
Unresolved require	✅ 0 issues
Invalid package.json	✅ 0 issues
HTTP dependency	✅ 0 issues
Git dependency	✅ 0 issues
Potential typo squat	✅ 0 issues
Known Malware	✅ 0 issues
Telemetry	✅ 0 issues
Protestware/Troll package	✅ 0 issues

---

📊 Modified Dependency Overview:

⬆️ Updated Package	Version Diff	Added Capability Access	+/- Transitive Count	Publisher
cordova-android@11.0.0	7.0.0...11.0.0	eval, shell	+69/-0	erisu
cordova-ios@6.3.0	4.5.4...6.3.0	eval, shell	+67/-0	niklasmerz