[dependabot]

Bumps the npm group with 4 updates: bplist-parser, plist, ws and electron.

Updates bplist-parser from 0.3.2 to 0.5.0

Release notes

Sourced from bplist-parser's releases.

v0.5.0

Breaking Changes

• Integer values above Number.MAX_SAFE_INTEGER are now returned as a native bigint instead of a big-integer-wrapped instance (#45). If you upgrade from 0.3.2 and serialize parsed results with JSON.stringify, this will now throw (Do not know how to serialize a BigInt) the first time a plist contains a large integer. See the README's Integers section for how to handle this with a replacer function.

What's Changed

• Convert to EcmaScript module by @​hsorbo in joeferner/node-bplist-parser#42
• Cleanups after ESM-conversion by @​hsorbo in joeferner/node-bplist-parser#43
• Fix binary plist integer parsing by @​dnicolson in joeferner/node-bplist-parser#45
• Fix #36: parseFile() throws TypeError on fs error if no callback is p… by @​mvillalba in joeferner/node-bplist-parser#37
• Convert to dual ESM/CJS build with esbuild, vitest, and flat ESLint c… by @​joeferner in joeferner/node-bplist-parser#50
• Convert to TypeScript by @​joeferner in joeferner/node-bplist-parser#51

New Contributors

• @​hsorbo made their first contribution in joeferner/node-bplist-parser#42
• @​mvillalba made their first contribution in joeferner/node-bplist-parser#37
• @​joeferner made their first contribution in joeferner/node-bplist-parser#50

Full Changelog: joeferner/node-bplist-parser@v0.3.2...v0.5.0

Commits

• 3174d14 Fix repository/homepage/bugs URLs to point at the current repo
• be75a59 Merge pull request #51 from joeferner/typescript-conversion
• 958f4a5 Convert to TypeScript
• 39629b6 Merge pull request #50 from joeferner/esm-dual-build
• 6b0628e Merge master into esm-dual-build to pick up CI matrix fix
• aa71e82 Restore package-lock.json for CI
• b34141a Drop Node 18 from CI matrix
• 9dffd8e Convert to dual ESM/CJS build with esbuild, vitest, and flat ESLint config
• e0c2775 github ci/cd
• b3b7e36 Merge pull request #37 from mvillalba/bug-36
• Additional commits viewable in compare view

Updates plist from 3.1.1 to 5.0.0

Release notes

Sourced from plist's releases.

plist@5.0.0

Major Changes

• 982349e: BREAKING: null values are now skipped during build(), matching undefined behavior and aligning with Apple's plist DTD which does not include a <null/> element. Parsing <null/> on read is still supported for backwards compatibility.

Minor Changes

• 592f243: Added binary plist (bplist00) support: parseBinary() and buildBinary() for reading and writing binary plists. parse() now auto-detects binary format.
• 8f0e2cc: Add browser-native implementations using DOMParser and XMLSerializer for parsing, and native DOM APIs for building XML. Bundlers that support the "browser" export condition (Vite, webpack, esbuild) will automatically use these lighter implementations, dramatically reducing bundle size by eliminating the @xmldom/xmldom and xmlbuilder dependencies.
• 754240c: Added OpenStep/ASCII plist parsing support via parseOpenStep(). parse() now auto-detects all three plist formats: XML, binary, and OpenStep.
• 3463937: Rewritten in TypeScript with full type declarations. Switched to vitest for testing and pnpm for package management.

Patch Changes

• 8ce0162: Fixed exponential parse blowup when parsing deeply nested plist files. The dict parser was eagerly evaluating error message arguments, causing every value to be parsed twice.
• f8102c0: Replaced legacy patterns with modern JS equivalents: native toISOString(), Object.hasOwn(), and direct type checks.

Changelog

Sourced from plist's changelog.

5.0.0

Major Changes

• 982349e: BREAKING: null values are now skipped during build(), matching undefined behavior and aligning with Apple's plist DTD which does not include a <null/> element. Parsing <null/> on read is still supported for backwards compatibility.

Minor Changes

• 592f243: Added binary plist (bplist00) support: parseBinary() and buildBinary() for reading and writing binary plists. parse() now auto-detects binary format.
• 8f0e2cc: Add browser-native implementations using DOMParser and XMLSerializer for parsing, and native DOM APIs for building XML. Bundlers that support the "browser" export condition (Vite, webpack, esbuild) will automatically use these lighter implementations, dramatically reducing bundle size by eliminating the @xmldom/xmldom and xmlbuilder dependencies.
• 754240c: Added OpenStep/ASCII plist parsing support via parseOpenStep(). parse() now auto-detects all three plist formats: XML, binary, and OpenStep.
• 3463937: Rewritten in TypeScript with full type declarations. Switched to vitest for testing and pnpm for package management.

Patch Changes

• 8ce0162: Fixed exponential parse blowup when parsing deeply nested plist files. The dict parser was eagerly evaluating error message arguments, causing every value to be parsed twice.
• f8102c0: Replaced legacy patterns with modern JS equivalents: native toISOString(), Object.hasOwn(), and direct type checks.

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for plist since your current version.

Updates ws from 8.21.3 to 8.22.0

Release notes

Sourced from ws's releases.

8.22.0

Features

• Introduced the protocols option (8b918b01).

Bug fixes

• Calling websocket.close() with invalid arguments no longer transitions the state to WebSocket.CLOSING (#2337).

Commits

• 297202c [dist] 8.22.0
• 8b918b0 [feature] Introduce the protocols option
• 73e03eb [ci] Update actions/setup-node action to v7
• d9b8954 [fix] Change the ready state after validating the arguments (#2337)
• See full diff in compare view

Updates electron from 33.4.11 to 44.4.5

Release notes

Sourced from electron's releases.

electron v44.4.5

Release Notes for v44.4.5

Other Changes

• Backported fixes from upstream ANGLE, Chromium, Dawn, PDFium and V8. #54222

electron v44.4.4

Release Notes for v44.4.4

Fixes

• Fixed a Cannot read properties of undefined (reading 'startTime') error thrown in pages while the DevTools Performance panel's live metrics were active. #54162
• Fixed a crash when calling setIgnoreMenuShortcuts() on DevTools. #54116 (Also in 43, 45)
• Fixed a spurious "sandboxed_renderer.bundle.js script failed to run" console error when DevTools attached to a sandboxed frame before its first navigation. #54155 (Also in 42, 43)
• Fixed alignment of the text label and popup menu in the macOS save dialog. #54143 (Also in 45)
• Fixed an "Invalid guestInstanceId" error when removing a loaded <webview> from the DOM. #54099 (Also in 42, 43, 45)
• Fixed GPU shaders compiled by Skia not being cached between launches. #54161 (Also in 45)
• Fixed ready-to-show never firing for some hidden windows on Windows and Linux. #54118 (Also in 43, 45)
• Fixed the tray context menu not working for snap-confined apps because AppArmor blocked the /org/chromium/DbusMenu path. #54103 (Also in 45)

electron v44.4.3

Release Notes for v44.4.3

Fixes

• Fixed net.fetch() / net.request() spending seconds of main-process time buffering large streamed request bodies. #54061 (Also in 45)

Performance Improvements

• Improved the performance of fs operations and require() on files inside asar archives. #54051 (Also in 45)

Other Changes

• Backported fixes from upstream Chromium, PDFium, Skia and V8. #54081

electron v44.4.2

Release Notes for v44.4.2

Fixes

• Fixed a potential UAF when a select-usb-device handler destroys the requesting webContents. #54009 (Also in 43, 45)

Other Changes

• Backported fixes from upstream ANGLE, Chromium, Skia and V8. #53985
• Updated Chromium to 152.0.7977.130. #53778

electron v44.4.1

Release Notes for v44.4.1

... (truncated)

Commits

• 694f458 chore: cherry-pick 35 changes from angle, chromium, dawn, pdfium and v8 (#54222)
• b200482 build: remove ts-node and load specs as native ESM (44-x-y) (#54194)
• ee593ac build: fail the PGO collect attempt on renderer death and relaunch (#54185)
• 0925610 build: update @​electron/lint-roller to 4.0.0 and check docs code blocks with ...
• af6e064 fix: skip the sandbox bundle on documents without startup data (#54155)
• aee8d2d chore: cherry-pick 6a47f93393a7 from devtools-frontend (#54162)
• 98b15d3 fix: persist GPU shaders compiled by Skia between launches (44-x-y) (#54161)
• 906e18f fix: keep hidden windows rendering when they navigate (44-x-y) (#54118)
• 02f814b build: update PGO profiles (#54145)
• 1996b13 fix: vertically align "format" row of macOS save dialog elements (#54143)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions