Skip to content

chore(deps-dev): bump plist from 3.1.0 to 5.0.0#278

Open
dependabot[bot] wants to merge 1 commit into
canaryfrom
dependabot/npm_and_yarn/canary/plist-5.0.0
Open

chore(deps-dev): bump plist from 3.1.0 to 5.0.0#278
dependabot[bot] wants to merge 1 commit into
canaryfrom
dependabot/npm_and_yarn/canary/plist-5.0.0

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 3, 2026

Bumps plist from 3.1.0 to 5.0.0.

Release notes

Sourced from plist's releases.

plist@5.0.0

Major Changes

  • 982349e: BREAKING: null values are now skipped during build(), matching undefined behavior and aligning with Apple's plist DTD which does not include a <null/> element. Parsing <null/> on read is still supported for backwards compatibility.

Minor Changes

  • 592f243: Added binary plist (bplist00) support: parseBinary() and buildBinary() for reading and writing binary plists. parse() now auto-detects binary format.
  • 8f0e2cc: Add browser-native implementations using DOMParser and XMLSerializer for parsing, and native DOM APIs for building XML. Bundlers that support the "browser" export condition (Vite, webpack, esbuild) will automatically use these lighter implementations, dramatically reducing bundle size by eliminating the @xmldom/xmldom and xmlbuilder dependencies.
  • 754240c: Added OpenStep/ASCII plist parsing support via parseOpenStep(). parse() now auto-detects all three plist formats: XML, binary, and OpenStep.
  • 3463937: Rewritten in TypeScript with full type declarations. Switched to vitest for testing and pnpm for package management.

Patch Changes

  • 8ce0162: Fixed exponential parse blowup when parsing deeply nested plist files. The dict parser was eagerly evaluating error message arguments, causing every value to be parsed twice.
  • f8102c0: Replaced legacy patterns with modern JS equivalents: native toISOString(), Object.hasOwn(), and direct type checks.
Changelog

Sourced from plist's changelog.

5.0.0

Major Changes

  • 982349e: BREAKING: null values are now skipped during build(), matching undefined behavior and aligning with Apple's plist DTD which does not include a <null/> element. Parsing <null/> on read is still supported for backwards compatibility.

Minor Changes

  • 592f243: Added binary plist (bplist00) support: parseBinary() and buildBinary() for reading and writing binary plists. parse() now auto-detects binary format.
  • 8f0e2cc: Add browser-native implementations using DOMParser and XMLSerializer for parsing, and native DOM APIs for building XML. Bundlers that support the "browser" export condition (Vite, webpack, esbuild) will automatically use these lighter implementations, dramatically reducing bundle size by eliminating the @xmldom/xmldom and xmlbuilder dependencies.
  • 754240c: Added OpenStep/ASCII plist parsing support via parseOpenStep(). parse() now auto-detects all three plist formats: XML, binary, and OpenStep.
  • 3463937: Rewritten in TypeScript with full type declarations. Switched to vitest for testing and pnpm for package management.

Patch Changes

  • 8ce0162: Fixed exponential parse blowup when parsing deeply nested plist files. The dict parser was eagerly evaluating error message arguments, causing every value to be parsed twice.
  • f8102c0: Replaced legacy patterns with modern JS equivalents: native toISOString(), Object.hasOwn(), and direct type checks.
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for plist since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 3, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/canary/plist-5.0.0 branch from d9e3da1 to d32eaf2 Compare May 3, 2026 15:27
@philip-peterson
Copy link
Copy Markdown

@dependabot recreate

Bumps [plist](https://github.com/TooTallNate/plist.js) from 3.1.0 to 5.0.0.
- [Release notes](https://github.com/TooTallNate/plist.js/releases)
- [Changelog](https://github.com/TooTallNate/plist.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/TooTallNate/plist.js/commits/plist@5.0.0)

---
updated-dependencies:
- dependency-name: plist
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/canary/plist-5.0.0 branch from d32eaf2 to a27fb08 Compare May 6, 2026 00:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant