chore: Release 1.0.6

[onesignal-deploy]

Channels: Current

🛠️ Native Dependency Updates

• Update Android SDK from 5.9.2 to 5.9.3
  • fix: [SDK-4732] track activity lifecycle from process start to fix late-init focus (#2655)
  • fix: [SDK-4735] route requestPermission fallbackToSettings to settings when permanently denied (#2656)
• Update iOS SDK from 5.5.1 to 5.5.2
  • fix: Preserve user identity across iOS prewarm launches (OneSignal-iOS-SDK#1669)

[claude]

LGTM — straightforward 1.0.6 release: Android SDK bump 5.9.2→5.9.3, matching sdkVersion constant updates, and regenerated docs.

Extended reasoning...

Overview

This is a release PR for version 1.0.6. The substantive change is bumping the Android OneSignal SDK from 5.9.2 to 5.9.3 in android/gradle/libs.versions.toml. Supporting changes update the OneSignalWrapper.sdkVersion constant from "010005" to "010006" in both the Android (OneSignalCapacitorPlugin.kt) and iOS (OneSignalCapacitorPlugin.swift) plugins, bump the package.json version, and regenerate the README docgen output (which produces purely cosmetic diff churn — list markers - → *, separator length, etc.).

Security risks

None. No auth, crypto, permission, or input-handling code is touched. The bundled Android SDK changes (per the PR description) are upstream fixes for activity lifecycle tracking and fallbackToSettings routing — neither expands the plugin's surface area or capabilities.

Level of scrutiny

Low. This is a mechanical, version-bump-only release with no logic changes in this repo. The native code edits are limited to a single string constant. The README diff is fully mechanical docgen output. The Android SDK version bump is a patch release on the same minor line (5.9.x).

Other factors

No prior reviewer comments or open discussion threads. The bug hunting system reported no findings. Release PRs of this exact shape (version + SDK bump + docgen) are the canonical low-risk approval case.