chore(deps): bump the minor-updates group across 1 directory with 7 updates

[dependabot]

Bumps the minor-updates group with 7 updates in the / directory:

Package	From	To
@capacitor-community/bluetooth-le	8.1.3	8.2.0
@capacitor/local-notifications	8.0.2	8.2.0
@capacitor/push-notifications	8.0.3	8.1.1
@capgo/capacitor-wifi	8.2.0	8.3.1
appsflyer-capacitor-plugin	6.17.91	6.18.0
cordova-plugin-purchase	13.15.4	13.16.1
swiper	12.1.4	12.2.0

Updates @capacitor-community/bluetooth-le from 8.1.3 to 8.2.0

Changelog

Sourced from @​capacitor-community/bluetooth-le's changelog.

8.2.0 (2026-05-25)

Bug Fixes

• android: Support AGP 9+ (a8daed4), closes #815

Commits

• 4b03c6a chore(release): 8.2.0
• a8daed4 fix(android): Support AGP 9+
• See full diff in compare view

Updates @capacitor/local-notifications from 8.0.2 to 8.2.0

Release notes

Sourced from @​capacitor/local-notifications's releases.

@​capacitor/local-notifications@​8.2.0

8.2.0 (2026-05-15)

Features

• local-notifications: add presentationOptions config support for iOS (#2530) (78bea4c)

@​capacitor/local-notifications@​8.1.0

8.1.0 (2026-05-07)

Bug Fixes

• add Importance 0 for notification channels (#2507) (b98c4f9)

Features

• local-notifications: deprecate summaryArgument and add relevanceScore and interruptionLevel (#2521) (fcff6f1)

Commits

• 84131ae chore(release): publish [skip ci]
• f266d2e feat(push-notifications): add banner and list presentation options for iOS (#...
• 78bea4c feat(local-notifications): add presentationOptions config support for iOS (#2...
• 6b9b1a2 chore(release): publish [skip ci]
• fcff6f1 feat(local-notifications): deprecate summaryArgument and add relevanceScore a...
• 5d9c1fe chore(ci): Check every maven central version for android publish (#2512)
• 94af35d chore: do not publish camera to CocoaPods (#2513)
• d0f3bd7 docs(camera): plugin migration to separate repository (#2509)
• b98c4f9 fix: add Importance 0 for notification channels (#2507)
• a677603 chore: direct Feature Requests to canny (#2502)
• Additional commits viewable in compare view

Updates @capacitor/push-notifications from 8.0.3 to 8.1.1

Release notes

Sourced from @​capacitor/push-notifications's releases.

@​capacitor/push-notifications@​8.1.1

8.1.1 (2026-05-15)

Note: Version bump only for package @​capacitor/push-notifications

@​capacitor/push-notifications@​8.1.0

8.1.0 (2026-05-15)

Features

• push-notifications: add banner and list presentation options for iOS (#2529) (f266d2e)

@​capacitor/push-notifications@​8.0.4

8.0.4 (2026-05-07)

Bug Fixes

• add Importance 0 for notification channels (#2507) (b98c4f9)

Commits

• 63c874c chore(release): publish [skip ci]
• 8ec56cb docs(push-notifications): update README to reflect banner and list Android be...
• 84131ae chore(release): publish [skip ci]
• f266d2e feat(push-notifications): add banner and list presentation options for iOS (#...
• 78bea4c feat(local-notifications): add presentationOptions config support for iOS (#2...
• 6b9b1a2 chore(release): publish [skip ci]
• fcff6f1 feat(local-notifications): deprecate summaryArgument and add relevanceScore a...
• 5d9c1fe chore(ci): Check every maven central version for android publish (#2512)
• 94af35d chore: do not publish camera to CocoaPods (#2513)
• d0f3bd7 docs(camera): plugin migration to separate repository (#2509)
• Additional commits viewable in compare view

Updates @capgo/capacitor-wifi from 8.2.0 to 8.3.1

Release notes

Sourced from @​capgo/capacitor-wifi's releases.

8.3.1

🆕 Changelog

Changed

• Updated README banner to use dynamic SVG banner instead of static PNG image

---

🔗 Full Changelog: Cap-go/capacitor-wifi@8.3.0...8.3.1

8.3.0

🆕 Changelog

Added

• Request location permission automatically when checking if location services are enabled on iOS
• Await and process results from modern Wi-Fi network addition activity on Android
• Prioritize WifiInfo for more reliable Wi-Fi IP address retrieval on Android

Fixed

• Ensure iOS permission requests are handled on the main thread to prevent crashes and UI issues

---

🔗 Full Changelog: Cap-go/capacitor-wifi@8.2.0...8.3.0

Commits

• 73568f4 chore(release): 8.3.1
• 8bc88dd docs: use dynamic readme banner
• fb70b82 chore(release): 8.3.0
• 02b0fda Merge pull request #11 from Ismaele-silla/ios-requestPermissions
• b5465d2 fix: Ensure iOS permission calls are handled on the main thread
• 1bfa3e9 feat: request location permission in checkLocationEnabled on iOS
• e2aed38 Merge pull request #9 from Ismaele-silla/android-getIpAddress
• fdb8fce Merge pull request #10 from Ismaele-silla/android-addNetwork-await
• 4f509d8 feat: Await and process result from modern add network activity
• 2209cde feat: Prioritize WifiInfo for Wi-Fi IP address retrieval
• See full diff in compare view

Updates appsflyer-capacitor-plugin from 6.17.91 to 6.18.0

Release notes

Sourced from appsflyer-capacitor-plugin's releases.

6.18.0

No release notes provided.

v6.18.0-rc2

Release candidate v6.18.0-rc2 published to npm under the QA dist-tag. Awaiting smoke + promote.

v6.18.0-rc1

Release candidate v6.18.0-rc1 published to npm under the QA dist-tag. Awaiting smoke + promote.

Commits

• ba31962 Merge pull request #200 from AppsFlyerSDK/releases/6.x.x/6.18.x/6.18.0-rc2
• 1cae237 Add PR-visible RC smoke gate
• e385ddf chore: promote 6.18.0-rc2 -> 6.18.0
• d2475e7 chore: bump plugin to 6.18.0-rc2 (CI)
• a173d22 Ship SwiftPM manifest in npm package
• e531be1 Dispatch RC smoke from release workflow
• 147c2f8 Fix Slack release payload JSON
• b0f2374 chore: bump plugin to 6.18.0-rc1 (CI)
• 92a8eee Merge pull request #198 from AppsFlyerSDK/develop
• d96c3ba Harden npm OIDC publishing workflow
• Additional commits viewable in compare view

Updates cordova-plugin-purchase from 13.15.4 to 13.16.1

Release notes

Sourced from cordova-plugin-purchase's releases.

v13.16.1

Fix: canPurchase returns false for pending and unfinished transactions (#1705)

LocalReceipts.canPurchase previously returned true whenever a matching transaction existed for a product but was neither consumed nor expired — letting the app start a second purchase while a previous one was still in flight.

Two related corrections:

• Deferred Google Play payments now block repurchase. A transaction in the PENDING state (e.g. waiting for cash/family approval) reports canPurchase = false until the platform clears it.
• Unfinished non-expiring transactions block repurchase. The default for a matching, non-expiring transaction flipped from true to false, so an unconsumed entitlement blocks order() until finish() is called.

Behavioral change to be aware of: integrations that relied on canPurchase always being true for a product after purchase (and used another signal to gate the UI) will see canPurchase flip to false once a transaction exists for that product. Make sure consumables call transaction.finish() after granting the item — that returns canPurchase to true.

Build: Capacitor dist/index.js rebuilt by make capacitor-package

make capacitor-package now runs cd capacitor && npm run build so capacitor/dist/index.js — the file Capacitor apps actually load — stays in sync with www/store.js. Previously the Rollup bundle could silently go stale and ship outdated plugin code in the npm package. The harmless THIS_IS_UNDEFINED Rollup warning on the inlined store.js virtual module is now silenced.

npm packages

• Cordova: cordova-plugin-purchase@13.16.1
• Capacitor: capacitor-plugin-cdv-purchase@13.16.1

---

Full changelog: see RELEASE_NOTES.md.

Changelog

Sourced from cordova-plugin-purchase's changelog.

13.16.1

(fix) canPurchase returns false for pending and unfinished transactions

LocalReceipts.canPurchase previously returned true whenever a matching transaction existed for a product but was neither consumed nor expired — letting the app start a second purchase while a previous one was still in flight (#1705).

Two related corrections:

• Deferred Google Play payments now block repurchase. A transaction in the PENDING state (e.g. waiting for cash/family approval) reports canPurchase = false until the platform clears it.
• Unfinished non-expiring transactions block repurchase. The default for a matching, non-expiring transaction flipped from true to false, so an unconsumed entitlement blocks order() until finish() is called.

Behavioral change to be aware of: integrations that relied on canPurchase always being true for a product after purchase (and used another signal to gate the UI) will see canPurchase flip to false once a transaction exists for that product. Make sure consumables call transaction.finish() after granting the item — that returns canPurchase to true.

(build) Capacitor dist/index.js rebuilt by make capacitor-package

make capacitor-package now runs cd capacitor && npm run build so capacitor/dist/index.js — the file Capacitor apps actually load — stays in sync with www/store.js. Previously the Rollup bundle could silently go stale and ship outdated plugin code in the npm package. The harmless THIS_IS_UNDEFINED Rollup warning on the inlined store.js virtual module is now silenced.

13.16.0

Configurable applicationUsername obfuscation via store.obfuscator

The plugin now exposes store.obfuscator to control how applicationUsername is transformed before being passed to the native store. Pick 'uuid' for new integrations — the value is hashed to a deterministic UUIDv3, which is a valid input for both Apple's appAccountToken (StoreKit 2) and Google Play's obfuscatedAccountId (#1660).

store.applicationUsername = 'user-42';
store.obfuscator = 'uuid'; // recommended for new integrations

Available modes:

Mode	Google Play	Apple SK1 (deprecated)	Apple SK2
'uuid' (recommended)	UUIDv3	UUIDv3	UUIDv3
'legacy' (default)	MD5 hash (32 hex)	raw value	UUIDv3
'disabled'	raw value	raw value	raw value (must be a UUID)
(username, platform) => string	custom	custom → must be a UUID	custom → must be a UUID

The default stays at 'legacy' so existing integrations that already correlate the 32-hex MD5 value server-side keep working without changes.

(ios) Fix appAccountToken being randomized on StoreKit 2

When applicationUsername was not already a UUID string, the Capacitor StoreKit 2 bridge was falling back to a freshly generated UUID() — meaning every purchase carried a random appAccountToken instead of a value tied to the user (#1665). The bridge now skips appAccountToken entirely when the value is not a valid UUID; with store.obfuscator = 'uuid', the value is always a valid UUIDv3, so appAccountToken is reliably set and stable across purchases by the same user.

Deprecation: additionalData.applicationUsername

Passing applicationUsername per-transaction via order(..., { applicationUsername }) is now deprecated and ignored. Set store.applicationUsername (or a () => string getter) once instead — this guarantees the value used at the native call site matches the value sent to the validator. Calls that still pass additionalData.applicationUsername emit a one-shot warning.

Companion plugin compatibility

• StoreKit 2 Plugin (cordova-plugin-purchase-storekit2) — no version bump required. Its purchase bridge already validates applicationUsername as a UUID and skips appAccountToken when it isn't, matching the new Capacitor behavior.

... (truncated)

Commits

• 4c8841e release: 13.16.1
• 3086aa8 Merge pull request #1706 from j3k0/fix/canpurchase-pending
• 54ffc5b fix: canPurchase returns false for pending and unfinished transactions (#1705)
• d36da30 build: rebuild capacitor dist bundle in make capacitor-package
• 40e4424 release: 13.16.0
• 48d802b Merge pull request #1704 from j3k0/feature/store-obfuscator
• 22b5fcc refactor: deprecate additionalData.applicationUsername, recommend 'uuid' obfu...
• a406c53 fix: add obfuscateUsername to ValidatorController mock in validator-response-...
• 7eb4e00 fix: remove random UUID fallback in Capacitor iOS, skip appAccountToken if in...
• 017c5fa feat: use store.obfuscator for applicationUsername on Apple, fix per-transact...
• Additional commits viewable in compare view

Updates swiper from 12.1.4 to 12.2.0

Release notes

Sourced from swiper's releases.

v12.2.0

Bug Fixes

• avoid duplicate css type resolutions (aaf6014)
• core: guard against stale event listeners in onTouchEnd and onTouchMove (00fe610)
• core: guard all event handlers against stale invocations on destroyed swiper (3b2b85f)
• types: support boolean as controller type (b10f9e0)

Changelog

Sourced from swiper's changelog.

12.2.0 (2026-05-27)

Bug Fixes

• avoid duplicate css type resolutions (aaf6014)
• core: guard against stale event listeners in onTouchEnd and onTouchMove (00fe610)
• core: guard all event handlers against stale invocations on destroyed swiper (3b2b85f)
• types: support boolean as controller type (b10f9e0)

Commits

• 929c014 12.2.0
• 157784e chore: sponsors
• 0348bc9 chore: remove lock/stale
• edf0984 chore: delete workflows
• 3b2b85f fix(core): guard all event handlers against stale invocations on destroyed sw...
• b986149 Merge pull request #8183 from arturovt/fix/guard-stale-listener
• 43c24f1 Clean up comment in onTouchMove function
• ac272bf Remove stale listener comment in onTouchEnd
• 7a5ae86 Merge pull request #8186 from Stanzilla/fix/css-types-no-duplicates
• 832b84b Merge pull request #8188 from evanclan/fix/controller-boolean-type
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions