Skip to content

Bump plist from 3.1.1 to 5.0.0 in /src/textmate#19587

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/textmate/plist-5.0.0
Open

Bump plist from 3.1.1 to 5.0.0 in /src/textmate#19587
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/textmate/plist-5.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 3, 2026

Bumps plist from 3.1.1 to 5.0.0.

Release notes

Sourced from plist's releases.

plist@5.0.0

Major Changes

  • 982349e: BREAKING: null values are now skipped during build(), matching undefined behavior and aligning with Apple's plist DTD which does not include a <null/> element. Parsing <null/> on read is still supported for backwards compatibility.

Minor Changes

  • 592f243: Added binary plist (bplist00) support: parseBinary() and buildBinary() for reading and writing binary plists. parse() now auto-detects binary format.
  • 8f0e2cc: Add browser-native implementations using DOMParser and XMLSerializer for parsing, and native DOM APIs for building XML. Bundlers that support the "browser" export condition (Vite, webpack, esbuild) will automatically use these lighter implementations, dramatically reducing bundle size by eliminating the @xmldom/xmldom and xmlbuilder dependencies.
  • 754240c: Added OpenStep/ASCII plist parsing support via parseOpenStep(). parse() now auto-detects all three plist formats: XML, binary, and OpenStep.
  • 3463937: Rewritten in TypeScript with full type declarations. Switched to vitest for testing and pnpm for package management.

Patch Changes

  • 8ce0162: Fixed exponential parse blowup when parsing deeply nested plist files. The dict parser was eagerly evaluating error message arguments, causing every value to be parsed twice.
  • f8102c0: Replaced legacy patterns with modern JS equivalents: native toISOString(), Object.hasOwn(), and direct type checks.
Changelog

Sourced from plist's changelog.

5.0.0

Major Changes

  • 982349e: BREAKING: null values are now skipped during build(), matching undefined behavior and aligning with Apple's plist DTD which does not include a <null/> element. Parsing <null/> on read is still supported for backwards compatibility.

Minor Changes

  • 592f243: Added binary plist (bplist00) support: parseBinary() and buildBinary() for reading and writing binary plists. parse() now auto-detects binary format.
  • 8f0e2cc: Add browser-native implementations using DOMParser and XMLSerializer for parsing, and native DOM APIs for building XML. Bundlers that support the "browser" export condition (Vite, webpack, esbuild) will automatically use these lighter implementations, dramatically reducing bundle size by eliminating the @xmldom/xmldom and xmlbuilder dependencies.
  • 754240c: Added OpenStep/ASCII plist parsing support via parseOpenStep(). parse() now auto-detects all three plist formats: XML, binary, and OpenStep.
  • 3463937: Rewritten in TypeScript with full type declarations. Switched to vitest for testing and pnpm for package management.

Patch Changes

  • 8ce0162: Fixed exponential parse blowup when parsing deeply nested plist files. The dict parser was eagerly evaluating error message arguments, causing every value to be parsed twice.
  • f8102c0: Replaced legacy patterns with modern JS equivalents: native toISOString(), Object.hasOwn(), and direct type checks.
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for plist since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 3, 2026
@microsoft-github-policy-service microsoft-github-policy-service Bot enabled auto-merge (squash) May 3, 2026 23:34
Copy link
Copy Markdown
Contributor

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

@microsoft-github-policy-service microsoft-github-policy-service Bot added the auto-merge Automatically merge this PR label May 3, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 3, 2026

Test this change out locally with the following install scripts (Action run 26007606715)

VSCode
  • Mac/Linux
    bash <(curl -Ls https://aka.ms/bicep/nightly-vsix.sh) --run-id 26007606715
  • Windows
    iex "& { $(irm https://aka.ms/bicep/nightly-vsix.ps1) } -RunId 26007606715"
Azure CLI
  • Mac/Linux
    bash <(curl -Ls https://aka.ms/bicep/nightly-cli.sh) --run-id 26007606715
  • Windows
    iex "& { $(irm https://aka.ms/bicep/nightly-cli.ps1) } -RunId 26007606715"

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/src/textmate/plist-5.0.0 branch 5 times, most recently from 30b3711 to 5fb586f Compare May 10, 2026 23:49
Copy link
Copy Markdown
Contributor

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

@dependabot dependabot Bot changed the title Bump plist from 3.1.0 to 5.0.0 in /src/textmate Bump plist from 3.1.1 to 5.0.0 in /src/textmate May 11, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/src/textmate/plist-5.0.0 branch from 5fb586f to e9ba1b7 Compare May 11, 2026 16:49
Copy link
Copy Markdown
Contributor

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

Copy link
Copy Markdown
Contributor

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

Copy link
Copy Markdown
Contributor

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

Copy link
Copy Markdown
Contributor

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/src/textmate/plist-5.0.0 branch from e9ba1b7 to 54a1b52 Compare May 17, 2026 23:49
Copy link
Copy Markdown
Contributor

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

Copy link
Copy Markdown
Contributor

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

Copy link
Copy Markdown
Contributor

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

Copy link
Copy Markdown
Contributor

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/src/textmate/plist-5.0.0 branch from 54a1b52 to 2fe0cff Compare May 18, 2026 00:09
Copy link
Copy Markdown
Contributor

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

Copy link
Copy Markdown
Contributor

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

Copy link
Copy Markdown
Contributor

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

Copy link
Copy Markdown
Contributor

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

Bumps [plist](https://github.com/TooTallNate/plist.js) from 3.1.1 to 5.0.0.
- [Release notes](https://github.com/TooTallNate/plist.js/releases)
- [Changelog](https://github.com/TooTallNate/plist.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/TooTallNate/plist.js/commits/plist@5.0.0)

---
updated-dependencies:
- dependency-name: plist
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/src/textmate/plist-5.0.0 branch from 2fe0cff to f6e1fb9 Compare May 18, 2026 00:45
Copy link
Copy Markdown
Contributor

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

Copy link
Copy Markdown
Contributor

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

Copy link
Copy Markdown
Contributor

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merge Automatically merge this PR dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants