chore: Release 5.3.11

[onesignal-deploy]

Channels: Current

🛠️ Native Dependency Updates

• Update Android SDK from 5.9.2 to 5.9.3
  • fix: [SDK-4732] track activity lifecycle from process start to fix late-init focus (#2655)
  • fix: [SDK-4735] route requestPermission fallbackToSettings to settings when permanently denied (#2656)

[claude]

LGTM, straightforward release bump to 5.3.11 with Android SDK update to 5.9.3.

Extended reasoning...

Overview

This is a routine release PR bumping the plugin version from 5.3.10 to 5.3.11. Changes are limited to four files: package.json and plugin.xml get the version string updated, plugin.xml also bumps the Android SDK framework dependency from 5.9.2 to 5.9.3, and the SDK version constants in OneSignalPush.java and OneSignalPush.m are updated from "050310" to "050311". No logic changes.

Security risks

None. All changes are mechanical version string updates and a minor patch-level native dependency bump. The Android SDK update brings in two upstream fixes (activity lifecycle tracking and requestPermission fallbackToSettings routing) — both bug fixes, no new attack surface.

Level of scrutiny

Low. This matches the exact pattern of every prior release PR in this repo (cf. commit 92bcb5c chore: Release 5.3.10 and cfa4e97 Update Android SDK to 5.9.3). The version strings are consistent across all four files (package.json, plugin.xml, and both native SDK version constants).

Other factors

No bugs flagged by the bug hunting system. The PR description correctly references the underlying Android SDK changelog entries. Timeline is clean with no outstanding reviewer comments.