[Snyk] Security upgrade @capacitor/cli from 3.1.2 to 4.8.0

[sippejw]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

✨ Snyk has automatically assigned this pull request, set who gets assigned.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Prototype Pollution SNYK-JS-XML2JS-5414874	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @capacitor/cli

The new version differs by 250 commits.

• b43c69d Release 4.8.0
• dd2d617 fix(cli): Pin @ ionic dependencies for node 12 support (#6527)
• c714408 fix(cli): Pin @ ionic/utils-subprocess version for node 12 support (#6524)
• 4000b02 fix(cookies): init cookie manager after server url is set
• b9e345a feat(ios): add webContentsDebuggingEnabled configuration (#6500)
• 6028ff4 fix(android): launching intents without host (#6493)
• 88e8635 chore(deps): Update xml2js dependency (#6492)
• 24a28cb fix(cookies): check isEnabled before setting cookieHandler
• 42d2eb3 fix(http): copy native response url to fetch response
• aa52296 Release 4.7.3
• 8fa2d1c fix(android): remove stored references to bridge that holds it in memory (#6448) (#6455)
• f17e582 Release 4.7.2
• 5ce68bb fix(cli): Fix cordova plugin config checker over checking on 4.x (#6443)
• 6f8d1ad fix(android): proper app url check for launching intents (#6451)
• 5dc164d Release 4.7.1
• 831a305 chore: Update package.json
• 2f67f3e chore: Update publish-npm-latest.yml
• 1902b77 fix(iOS): Separate cookies by ; rather than ; when accessing through document.cookie (Cap 4.x) (#6380)
• 0502521 chore: fix CI token passed in forks (#6399)
• 36fe162 chore: fix lerna config and clean workflows on 4.x (#6376)
• 81af12a fix(cli): point build to proper workspace name (#6373)
• e50f17a chore: ci bug with node types
• 6c1dd28 chore: ci checks on 4.x
• 59639e2 chore: change CI for 4.x branch

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution