Bump xmldom, plist and plugman

[dependabot]

Removes xmldom. It's no longer used after updating ancestor dependencies xmldom, plist and plugman. These dependencies need to be updated together.

Removes xmldom

Updates plist from 3.0.1 to 3.0.6

Changelog

Sourced from plist's changelog.

3.0.5 / 2022-03-23

• [96e2303d05] Prototype Pollution using .parse() #114 (mario-canva)
• update browserify from 16 to 17

3.0.4 / 2021-08-27

• inline [email protected] to eliminate security warning false positive (Mike Reinstein)

3.0.3 / 2021-08-04

• update xmldom to 0.6.0 to patch critical vulnerability (Mike Reinstein)
• remove flaky saucelabs teseting badge (Mike Reinstein)

3.0.2 / 2021-03-25

• update xmldom to 0.5.0 to patch critical vulnerability (Mike Reinstein)
• update saucelab credentials to point at mreinstein's saucelabs account (Mike Reinstein)
• remove a bunch of test versions from the matrix because they weren't working in zuul + sauce (Mike Reinstein)

Commits

• See full diff in compare view

Updates plugman from 2.0.0 to 3.0.1

Changelog

Sourced from plugman's changelog.

3.0.1 (Apr 11, 2019)

• GH-117 chore: remove deprecated engineStrict
• GH-113 Bug Fixes
  • Register uncaughtException handler as early as possible
  • Make unhandled promise rejections fail loudly
  • Split up docs by command and add a short summary
  • Remove documentation for obsolete commands
  • Fix known options for plugman create
  • Set positive exit code if we don't know what to do
  • Set process.exitCode instead of calling process.exit
  • Provide helpful error message and code on failure
  • Properly install multiple plugins in series
  • Properly return Promises from commands
  • Factor out duplicated code
  • Improve readability of commands module
  • Remove commands from CLI that do not exist in the lib anymore
  • Remove errors about unsupported publish/unpublish commands
  • Move CLI interface plugman.commands from cordova-lib to plugman
• GH-112 Fix platform_name option

3.0.0 (Mar 20, 2019)

• GH-108 Cordova Plugman Release Preparation (Cordova 9)
  • Bumped Dependencies
    • cordova-lib@^9.0.0
    • nopt@^4.0.1
  • Bumped Dev Dependencies
    • jasmine@^3.3.1
    • eslint-plugin-standard@^4.0.0
    • eslint-plugin-promise@^4.0.1
    • eslint-plugin-node@^8.0.1
    • eslint-plugin-import@^2.16.0
    • eslint-config-standard@^12.0.0
    • eslint-config-semistandard@^13.0.0
    • eslint@^5.15.3
  • Update to support nopt@^4.0.1
• Add or update GitHub pull request and issue template
• GH-96 Remove fetch option
• GH-95 Remove browserify option
• GH-94 CB-14164 Use native Promises instead of Q
• GH-88 CB-12018 Use jasmine instead of jasmine-node
• GH-93 Code Refactor and Cleanup
• GH-92 Update link to plugin.xml specification in README.md
• GH-91 Drop support for Node.js < 6

Commits

• 247122d Updated version and RELEASENOTES.md for release 3.0.1
• 4311213 chore: remove deprecated engineStrict (#117)
• 8d1cd21 Merge pull request #113 from raphinesse/fix-orgy
• 2550497 Register uncaughtException handler as early as possible
• cdecd13 Make unhandled promise rejections fail loudly
• f434d50 Split up docs by command and add a short summary
• e40da2c Remove documentation for obsolete commands
• 04cc98f Fix known options for plugman create
• 6dc057f Set positive exit code if we don't know what to do
• ef359cd Set process.exitCode instead of calling process.exit
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by erisu, a new releaser for plugman since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.