Apache Cordova

File Transfer Plugin 2.0.1 Released!

Mon, 10 Aug 2026 00:00:00 +0000

We are happy to announce that we have just released an update for cordova-plugin-file-transfer!

cordova-plugin-file-transfer@2.0.1

To upgrade:

cordova plugin remove cordova-plugin-file-transfer
cordova plugin add cordova-plugin-file-transfer@2.0.1

Release Highlights

This is a patch release which resolves a build error with Xcode and cordova-ios 8.0.0.

Fixes

fix(ios): cast to CDVFile when getting the plugin by getCommandInstance (#385) [7b869a2]
fix(ios): Set minimum XCode version in GitHub Action to 15 (#386) [41b0605]

Others

chore: update linter (#396) [e7a7a1f]
chore: sync workflows with paramedic, add release audit & missing license headers (#390) [86ad889]
chore: add asf config (#375) [f12b73e]
chore: bump version 2.0.1-dev [2c15ad2]
chore(ci): draft release (#395) [02dd05e]
chore(deps-dev): bump flatted from 3.2.7 to 3.4.3 (#393) [485ae29]
chore(deps-dev): bump minimatch from 3.1.2 to 3.1.5 (#392) [c20f683]
chore(deps-dev): bump js-yaml from 4.1.0 to 4.3.0 (#394) [33f34e0]
chore(deps): bump brace-expansion from 1.1.11 to 1.1.12 in /tests/server (#382) [345c6cf]
chore(INFRA): Set up default protection ruleset for default and release branches (#389) [c8d6b90]
ci: sync workflow w/ paramedic (#379) [24e2e99]
doc(readme): update badges, update license header (#391) [8793e51]

Cordova Android 15.1.0 Released!

Wed, 22 Jul 2026 00:00:00 +0000

We are happy to announce that we have just released Cordova Android 15.1.0! This is one of Cordova's supported platforms for building Android applications.

cordova-android@15.1.0

To upgrade:

cordova platform remove android
cordova platform add android@15.1.0

To install:

cordova platform add android@15.1.0

Release Highlights

Features

Deprecation of PermissionHelper

The PermissionHelper class has been deprecated.

Plugin developers that relied on the PermissionHelper class should migrate their plugins to use the permission APIs available through the CordovaInterface of the CordovaPlugin.

Before:

  // Requesting a Permission
  PermissionHelper.requestPermission(this, requestCode, Manifest.permission.READ_MEDIA_IMAGES);

  // Requesting a Collection of Permissions
  PermissionHelper.requestPermissions(this, requestCode, new String[]{ Manifest.permission.READ_MEDIA_IMAGES });
    
  // Checking if the App has a Permission
  PermissionHelper.hasPermission(this, Manifest.permission.READ_MEDIA_IMAGES);

After:

  // Requesting a Permission
  cordova.requestPermission(this, requestCode, Manifest.permission.READ_MEDIA_IMAGES);

  // Requesting a Collection of Permissions
  cordova.requestPermissions(this, requestCode, new String[]{ Manifest.permission.READ_MEDIA_IMAGES });
    
  // Checking if the App has a Permission
  cordova.hasPermission(Manifest.permission.READ_MEDIA_IMAGES);

Calling of CordovaPlugin.onRequestPermissionsResult

Updated CordovaInterfaceImpl.onRequestPermissionsResult to call the new CordovaPlugin.onRequestPermissionsResult method in addition to the exisiting CordovaPlugin.onRequestPermissionResult.

Fixes

Keyboard Layout and Page Scrolling when Input Fields Receive Focus

Fixes a UI layout and scrolling bug, that was introduced in cordova-android@15.0.0, where focusing on an input field while the soft keyboard was open could cause the WebView to shift upwards, leaving an unrendered space at the bottom of the Activity, and prevent the page from scrolling. This update restores the expected layout and scrolling behavior when interacting with input fields.
Handle Permissions for getUserMedia

Fixes getUserMedia() permission handling to correctly check for and request the required native camera and microphone permissions before proceeding. This aligns the WebView permission flow with the native platform, improving compatibility and ensuring media requests behave as expected.
Back Button Handling After App Launch

Fixes an issue where the back button would not respond immediately after the app launched. Back button events are now handled consistently from startup, including on devices that support the Android back gesture, ensuring expected navigation behavior throughout the app.
Properly Handle CSS Color with Alpha

Fixes an issue where window.statusbar.setBackgroundColor() incorrectly interpreted 8-digit hexadecimal CSS color values, which could result in the wrong status bar color being applied.
Status Bar Appearance Styling for Edge-to-Edge

When Edge-to-Edge was enabled, apps could not adjust the status bar text and icon appearance, which could make them difficult to see against certain backgrounds.

This release exposes the exisiting window.statusbar.setBackgroundColor() JS API for Edge-to-Edge layouts. Although the API is used to set the status bar background color, it also determines the appropriate status bar text and icon appearance, allowing apps to maintain proper contrast. In Edge-to-Edge layouts, the background color itself is not applied as there is no status bar, but the calculated appearance is still applied.
Fix Status Bar Background Color Handling for Opaque White

Fixes an issue where the valid color #FFFFFFFF was incorrectly treated as an invalid status bar color, preventing fully opaque white from being applied. This restores support for all valid status bar background colors.

Changes include:

Features:

feat: call new method CordovaPlugin.onRequestPermissionsResult (#1855) [b66f0f33]
feat: deprecate PermissionHelper (#1857) [8c839764]
feat: remove unused private Method PermissionHelper.deliverPermissionResult (#1858) [9c3d8268]

Fixes:

fix: webview loses scrollability and creates empty bottom space (#1924) [b91144c0]
fix: handle permissions for getUserMedia (#1895) [24502178]
fix: overwritten backbutton not firing on first time by hardware button and never on back gesture (#1910) [0bfbc20b]
fix(android): use AndroidX OnBackPressedCallback instead of OnBackInvokedCallback (#1903) [9064bc07]
fix(gradle-9): unable to resolve class XmlParser for Groovy 4.x (#1896) [9ae489bd]
fix(statusbar.js): remove trailing whitespace in comment for lint (#1970) [cdbeb603]
fix(statusbar): Properly handle CSS colours (#1955) [dd3fd357]
fix(SystemBarPlugin): remove canEdgeToEdge check for execute method (#1971) [61ebdcde]
fix(SystemBarPlugin): remove sentinel value INVALID_COLOR, use null instead (#1939) [f4ecf997]

Others

chore: cleanup PermissionHelper (#1925) [7dd7f504]
chore: bump package 15.1.0-dev.0 & update package-lock (#1964) [929f2054]
chore: remove redundant Hello World template files (#1926) [56e263fe]
chore: simplify edge-to-edge preference logic in CordovaActivity and SystemBarPlugin (#1902) [190076ba]
chore: ignore gradle build artificat problems-report.html (#1912) [b1705d83]
chore: more license header updates (#1909) [1f70d396]
chore: update package-lock (#1905) [af56a003]
chore(ci): update & clean workflow (#1966) [654b03a3]
chore(ci): improve workflows & dependabot (#1928) [08c4fd1e]
chore(deps-dev): bump js-yaml from 4.1.1 to 4.2.0 (#1960) [ebccedf6]
chore(deps-dev): bump tmp from 0.2.6 to 0.2.7 (#1956) [d90eeecb]
chore(deps-dev): bump tmp from 0.2.5 to 0.2.6 (#1945) [a63c1e18]
chore(deps-dev): bump c8 from 10.1.3 to 11.0.0 (#1941) [74fbbdce]
chore(deps-dev): bump jasmine from 6.1.0 to 6.2.0 (#1932) [90b4b057]
chore(deps): bump github/codeql-action/analyze from 4.36.3 to 4.37.0 (#1973) [80658ea4]
chore(deps): bump github/codeql-action/init from 4.36.3 to 4.37.0 (#1972) [89771e64]
chore(deps): bump actions/setup-java from 5.4.0 to 5.5.0 (#1974) [065a99d8]
chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.36.3 (#1969) [d830222e]
chore(deps): bump github/codeql-action/init from 4.36.2 to 4.36.3 (#1968) [1e2f0ca6]
chore(deps): bump codecov/codecov-action from 4.6.0 to 7.0.0 (#1954) [acbc5b48]
chore(deps): bump actions/setup-java from 5.3.0 to 5.4.0 (#1965) [cb52fb8d]
chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#1959) [79771499]
chore(deps): bump actions/setup-java from 5.2.0 to 5.3.0 (#1958) [e53dc373]
chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#1952) [703ebeae]
chore(deps): bump github/codeql-action from 4.36.0 to 4.36.2 (#1953) [363a9a77]
chore(deps): bump github/codeql-action from 4.35.5 to 4.36.0 (#1944) [a1f75a3e]
chore(deps): bump erisu/apache-rat-action from 2.0.0 to 3.0.0 (#1937) [4ce731da]
chore(deps): bump semver from 7.7.4 to 7.8.0 (#1934) [c636f8bb]
chore(deps): bump erisu/license-checker-action from 2.0.1 to 2.1.0 (#1930) [0baa901d]
chore(deps): bump @xmldom/xmldom from 0.8.12 to 0.8.13 (#1918) [0d6fdd17]
chore(deps): bump lodash from 4.17.23 to 4.18.1 (#1914) [7b33c5dd]
chore(deps): bump @xmldom/xmldom from 0.8.11 to 0.8.12 (#1911) [c44a4627]
chore(deps): bump picomatch (#1908) [2868f93a]
chore(deps): bump minimatch (#1898) [31f3d57c]
chore(gh-action): improve draft-release workflow (#1906) [340eade2]
chore(INFRA): Set up default protection ruleset for default and release branches (#1927) [f490531d]
chore(post-release): bump v15.0.1-dev.0 (#1899) [c02d1b03]
doc: improve documentation of onRequestPermissionResult and onRequestPermissionsResult (#1920) [1d01ea1f]
doc(CordovaPreferences): Improve documentation for using Long.decode instead of Integer.decode (#1943) [661fadd0]
doc(statusbar.js): document visible property and setBackgroundColor method (#1961) [50ee09e4]
refactor: address warnings in SystemWebChromeClient.java (#1951) [80491e9a]

Cordova iOS 8.1.1 Released!

Tue, 07 Jul 2026 00:00:00 +0000

We are happy to announce that we have just released Cordova iOS 8.1.1! This is one of Cordova's supported platforms for building iOS applications.

This release includes general improvements and fixes for several bugs.

cordova-ios@8.1.1

To upgrade:

cordova platform remove ios
cordova platform add ios@8.1.1

To install:

cordova platform add ios@8.1.1

Release Highlights

Updated the status bar's setBackgroundColor JS API to support alpha.
Fixed a CordovaLib build issue that prevented compilation for visionOS by removing status bar related incompatibilities.
Fixed WKWebView to avoid registering the plugin as the script message handler when the ViewController already implements WKScriptMessageHandler.
Added missing CordovaLib version availability macros and tests to ensure future releases include the required version definitions.

Changes include:

Fixes:

fix: dont call nativeFetchMessages if not implemented (#1643) [355f39be]
fix: proper macro check for TARGET_OS_VISION (#1667) [fefb9316]
fix(statusbar): Support setting alpha from the JS API (#1661) [410ada64]
fix(visionOS): Fix CordovaLib visionOS errors (#1665) [25486db2]
fix(wkwebview): fix ViewController being the ScriptMessageHandler (#1664) [5669c2c9]
fix: add missing availability macros and add tests to ensure it's set (#1662) [49230b01]

Others:

chore: ignore SPM dependency resolution Package.resolved (#1666) [0f404b10]
chore: release notes for 8.1.0 [3d52d7b3]
chore: bump version to 8.1.1-dev.0 [a2f0cc54]
chore(ci): update & clean workflow (#1673) [4994749e]
chore(deps-dev): bump js-yaml from 4.1.1 to 4.3.0 (#1672) [bd0c99b4]
chore(deps-dev): bump tmp from 0.2.6 to 0.2.7 (#1668) [c20cdc93]
chore(deps-dev): bump tmp from 0.2.5 to 0.2.6 (#1657) [7db38623]
chore(workflow): more refactoring (#1674) [eb65a51e]

Cordova Plugin InAppBrowser 7.0.0 Released!

Tue, 16 Jun 2026 00:00:00 +0000

We are happy to announce that we have just released an update to cordova-plugin-inappbrowser!

cordova-plugin-inappbrowser@7.0.0

Release Highlights

This major update makes the plugin compatible with cordova-ios 8.0.0, fixes layout issues with XCode 26 compiling for iOS 26, layout issues regarding not respecting the safe areas of the iPhone X and newer (iPhone 11, 12, etc.) and layout issues on Android when the footer is used.

Some other relvant changes:

Make zoom on-screen controls configurable on Android
Fixes issues ragarding the beforeload event on Android and iOS
Cookies or data were not properly cleared when the options cleardata, clearcache or clearsessioncache were set on Android and iOS
The callback context will only be changed for non-whitelisted urls (Android) or target _blank (Android/iOS)
Fix XCode deprecations warnings
In-app browser did not show when using cordova-ios 8.0.0

Please report any issues you find on GitHub!

Changes include

Breaking Changes

chore(ios)!: Remove unused private method (#1113) [b7ab3d0]
refactor(ios)!: remove property instance and getter method getInstance (#1116) [c5a0979]

Features

feat(android): make zoom on-screen controls configurable (#1023) [24c6738]
feat(ios): use UIBarButtonSystemItemClose since iOS 26 (#1138) [5cf7c2d]
feat(ios): Support custom scheme event for iOS (#1112) [03831d7]
feat(ios): correct code formatting (#1100) [fb5b469]

Fixes

fix: add data property for InAppBrowserEvnet type (#1118) [18ef50d]
fix: defer navigation until async cookie or data clearing completes (#1150) [1b0be4a]
fix(android): change callback context only on non-whitelisted urls or target _blank (#1147) [694adb0]
fix(android): beforeload event fires only once (#1146) [160e414]
fix(android): place footer below WebView instead of overlaying content (#1148) [56fb083]
fix(ios): fix white screen on iOS 13+ when in-app browser window scene is nil (#1131) [c1c6544]
fix(ios): render in-app browser underneath the status bar (#1158) [40ff663]
fix(ios): replace macro kCloseButtonSystemItem with static function to fix XCode warning (#1153) [60a5c73]
fix(ios): check callbackId with regex (#1152) [e0bd9dc]
fix(ios): suppress expected cancellation errors when beforeload is set (#1145) [0cea6cc]
fix(ios): Don't call beforeload on POST and beforeload=yes (#1144) [f71de8f]
fix(ios): set callbackId only on target=_blank, update readme (#1143) [6106897]
fix(ios): constraint warnings in iOS 18 and older (#1123) [bad3830]
fix(ios): add custom toolbar background (#1132) [c140eaf]
fix(ios): constrain address label horizontal to safe area for landscape (#1126) [de95bb2]
fix(ios): full width WebView on landscape (#1120) [22ebb87]
fix(ios): suppress deprecation warning for processPool fordeployment-target greater than 14 (#1119) [105b0ae]
fix(ios): remove use of deprecated CDVWebViewProcessPoolFactory (#1115) [f76988e]
fix(ios): simplify using CDVSettingsDictionary in older cordova-ios versions (#1105) [f67412f]
fix(ios): use cordovaSettingForKey: instead of objectForKey: (#1106) [540bfe3]
fix(ios): set minimum cordova-ios to 6.2.0 (#1107) [15714f4]
fix(ios): Use CDVSettingsDictionary since cordova-ios 8 [b52242a]
fix(ios): deprecation of UIActivityIndicatorViewStyleGray (#1104) [6f413e0]
fix(ios): replace UIBarStyleBlackOpaque with UIBarStyleBlack (#1103) [d4ae06d]
fix(ios): remove use of CDVScreenOrientationDelegate (#1101) [246f2a0]
fix(ios): use auto layout to respect safe areas (#1099) [375c02b]
fix(iOS): IAB not showing up in apps using UIScenes (#1067) [e2d8429]
fix(types): support beforeload listener signature in TypeScript defs (#1149) [e28ca69]

Others

doc(readme): improve addEventListener examples (#1142) [7a90dde]
doc(readme): update badges (#1140) [d922047]
chore(ios): remove pre ios 11 code in show:withNoAnimate: (#1135) [8d2845b]
chore(ios): resolve variable safeArea (#1121) [89cd5fe]
chore(ios): Cleanup code (#1117) [6b28d2d]
refactor(ios): refactor code for clearing data (#1137) [f40f41b]
refactor(ios): adding toolbar items (#1124) [b83a9b7]
refactor(ios): handle constraints in cases (#1125) [ddab657]
refactor(ios): remove unused method invertFrameIfNeeded (#1102) [dfce3c7]
doc(ios): constraint warnings on iOS 26 and using initWithBarButtonSystemItem (#1127) [42e12dd]
chore: Remove unused inappbrowser.css file (#1038) [eac7303]
chore: bump to major 7.0.0-dev (#1156) [cc727aa]
chore: bump version to 6.1.0-dev (#1108) [322182a]
chore: incremented plugin version 6.0.1-dev [f27c663]
chore: add changelog from 6.0.1 (#1159) [92a53a9]
chore: update npm package (#1134) [4f9d07d]
chore: gh-action workflow, license header formatting & cleanups (#1095) [1e4ab4b]
chore(ci): add/update release workflows (#1157) [e1cb106]
chore(deps-dev): bump @cordova/eslint-config to 6.0.0 w/ lint fixes (#1096) [4cf5c24]
chore(gitattributes): normalize line endings and binary detection (#1139) [675002f]
chore(INFRA): Set up default protection ruleset for default and release branches (#1151) [efd32a9]
chore(workflow): update workflows to the latest one of cordova-paramedic (#1141) [3fdfc96]
ci: remove osx (#1111) [c1eaf3b]
ci: sync workflow w/ paramedic (#1068) [dfde59d]

Cordova Plugin InAppBrowser 6.0.1 With Fix For CVE-2026-47430 Released!

Sun, 07 Jun 2026 00:00:00 +0000

We are happy to announce that we have just released an update to cordova-plugin-inappbrowser!

cordova-plugin-inappbrowser@6.0.1

Release Highlights

This is a small patch release that addresses the recently published vulnerability CVE-2026-47430: Cordova Plugin InAppBrowser: iOS: Arbitrary Cordova callback IDs can be dispatched without validation from InAppBrowser WebViews. Full details:

Severity: important

Affected versions:

Cordova Plugin InAppBrowser (cordova-plugin-inappbrowser) 3.1.0 through 6.0.0

Description:

Summary

The iOS implementation of cordova-plugin-inappbrowser passes the id field from a WKScriptMessage body to commandDelegate sendPluginResult:callbackId: with no format validation (CDVWKInAppBrowser.m:560–574). Any web content loaded inside the InAppBrowser can fire any pending Cordova callback in the host app by posting a message whose id field is a guessable or enumerated callback identifier. An attack abusing this weakness must be tailored to the specific plugins and callback IDs the host app uses. Though an attacker with knowledge of common Cordova plugin configurations could craft reusable payloads targeting widely-adopted plugins.

Impact

An unauthenticated remote attacker who controls content displayed in the InAppBrowser — via a URL the app opens (OAuth redirect, marketing link, deep-link target) or a network interception — can call window.webkit.messageHandlers.cordova_iab.postMessage({id: '<victim-callback-id>', d: '...'}) to fire callbacks belonging to any other installed Cordova plugin (Camera, Contacts, File, Geolocation). Cordova callback IDs follow the predictable format <PluginName><sequential-integer>, making enumeration feasible. Successful exploitation allows the attacker to spoof plugin results across trust boundaries — for example, injecting a forged camera approval, a fabricated contacts list, or a crafted file-read response.

This issue affects Cordova Plugin InAppBrowser: from 3.1.0 through 6.0.0.

Users are recommended to upgrade to version 6.0.1, which fixes the issue.

References:

https://www.cve.org/CVERecord?id=CVE-2026-47430

Please report any issues you find on GitHub!

Changes include:

GH-1152 fix(ios): check callbackId with regex
GH-1095 chore: gh-action workflow, license header formatting & cleanups
Fix npm audit issues

Cordova iOS 8.1.0 is now available!

Sun, 31 May 2026 00:00:00 +0000

We are happy to announce that we have just released Cordova iOS 8.1.0! This is one of Cordova's supported platforms for building iOS applications.

This release contains fixes for several bugs that were reported against the 8.0.1 version.

cordova-ios@8.1.0

To upgrade:

cordova platform remove ios
cordova platform add ios@8.1.0

To install:

cordova platform add ios@8.1.0

Release Highlights

Fix for Ionic WebView plugin

Re-add an implementation of the deprecated shouldOverrideLoadWithRequest:navigationType: selector because the Ionic WebView plugin relies on it.
Fix /_app_file_/ URLs not working

During refactoring of the URLSchemeTask handler for cordova-ios 8, an error was introduced where /_app_file_ URLs were treated as being relative to the resources directory rather than as filesystem paths.
Fixes various build issues

Changes include:

Fixes:

GH-1653 fix(actions): fix CDVURLSchemeHandlerTest warnings
GH-1652 fix(actions): IPhone 16e not found on macOS 26 for latest OS
GH-1640 fix: NSInternalInconsistencyException: "No response has been sent for this task" - second attempt
GH-1637 fix(build): Target a generic iOS simulator for building
GH-1632 fix(ionic): Add workaround for Ionic WebView plugin
GH-1618 fix(xcode): Fix library search paths for target
GH-1621 fix(xcode): Ensure we do NFD normalization on PRODUCT_NAME
GH-1616 fix(spm): Ensure the deployment target always gets set
GH-1606 fix(webview): Ensure scheme task is always finished
GH-1610 fix(scheme): Fix /app_file/ URLs not working
GH-1612 fix(spm): Set deployment target in Package.swift
GH-1597 fix: ignore spm build artifacts

Others:

GH-1650 chore: remove redundant Hello World template files
GH-1647 chore(deps): bump @xmldom/xmldom from 0.8.12 to 0.8.13
GH-1634 doc: keepCallback and setKeepCallbackAsBool: of CDVPluginResult
GH-1646 chore(deps): bump lodash from 4.17.23 to 4.18.1
GH-1644 chore(deps): bump @xmldom/xmldom from 0.8.11 to 0.8.12
GH-1642 chore(deps): bump picomatch
GH-1639 chore: update package-lock
GH-1635 chore: Fix improperly ignored deprecation warning
GH-1633 chore: Bump patch level for ongoing dev work
GH-1628 chore: Fix missing licence headers
GH-1627 release(8.0.1): Update release notes and version
GH-1623 chore(ci): draft release
GH-1624 chore: cleanup license headers
GH-1625 chore: add DEVELOPMENT.md & cleanup README.md
GH-1622 refactor(versions): Refactor version code for test reliability
GH-1619 chore(deps): Update to latest jasmine & c8 versions
GH-1614 doc(readme): improve badges
GH-1601 chore: Remove compileBitcode from export options
GH-1611 chore: set swift-tools-version to 5.9
GH-1599 chore(deps): bump lodash from 4.17.21 to 4.17.23
GH-1598 Add missing trailing new line
GH-1592 doc(readme): add minimum iOS version
GH-1591 doc(readme): add Link to iOS Platform Guide
GH-1588 chore: update release audit workflow & license headers

Network Information Plugin 3.1.0 Released!

Sat, 16 May 2026 00:00:00 +0000

We are happy to announce that we have just released an update for cordova-plugin-network-information!

cordova-plugin-network-information@3.1.0

To upgrade:

cordova plugin remove cordova-plugin-network-information
cordova plugin add cordova-plugin-network-information@3.1.0

Release Highlights

Features

feat(android): add 5G check and test (#172)
feat(ios): add 5G check (#159)

Fixes

fix(ios): fix deprecation warnings for iOS 12+ (#169)
fix(ios): Remove redundant #import <netinet6/in6.h> for Xcode 26.4 compatibility (#166)

Other

chore: various updates (#177)
chore: update asf config (#161)
chore(dev-dep): bump @cordova/eslint-config to 6.0.1 w/ fixes (#171) [952bd51]

For a full list of changes, see the release notes.

Please report any issues you find at GitHub!

Cordova iOS 8.0.1 is now available!

Thu, 12 Mar 2026 00:00:00 +0000

We are happy to announce that we have just released Cordova iOS 8.0.1! This is one of Cordova's supported platforms for building iOS applications.

This release contains fixes for several bugs that were reported against the 8.0.0 version.

cordova-ios@8.0.1

To upgrade:

cordova platform remove ios
cordova platform add ios@8.0.1

To install:

cordova platform add ios@8.0.1

Release Highlights

Fixed search paths for plugin libraries/frameworks

Plugins that included frameworks as embedded libraries were causing app builds to fail due to Xcode using the wrong path when trying to link the framework bundle. Xcode should now look for these frameworks at the correct path.
Fix for local file /_app_file_/ URLs not loading

URLs returned by window.WkWebView.convertFilePath() and the File plugin's FileEntry.getUrl() were not being handled properly by the WebView to return file contents from the device filesystem. This should now work as expected, matching the behaviour from earlier cordova-ios versions.
Fix crash on cancelled WebView requests

When serving content from a custom scheme, if a request was started and cancelled before it finished loading, there was a chance the app could crash. We now ensure that scheme requests are properly closed when cancelled and avoid race conditions.
Ensure Swift package deployment targets are set

If a custom deployment target was set and a plugin relied on that deployment target, it was possible for Xcode to report errors due to the Swift package manager not reflecting that updated deployment target. We now propagate the <preference name="deployment-target"> value to the Package.swift file that references plugins.
Ensure consistent normalization of the app name

If an app name contained non-ASCII characters, Xcode could produce an app bundle that failed App Store validation checks. By ensuring the app product name is consistently normalized, apps should pass validation regardless of the characters in their name.

Changes include:

Fixes:

GH-1618 fix(xcode): Fix library search paths for target
GH-1621 fix(xcode): Ensure we do NFD normalization on PRODUCT_NAME
GH-1616 fix(spm): Ensure the deployment target always gets set
GH-1606 fix(webview): Ensure scheme task is always finished
GH-1610 fix(scheme): Fix /_app_file_/ URLs not working
GH-1612 fix(spm): Set deployment target in Package.swift
GH-1597 fix(spm): git-ignore Swift Package Manager build artifacts

Others:

GH-1614 doc(readme): improve badges
GH-1622 refactor(versions): Refactor version code for test reliability
GH-1619 chore(deps): Update to latest jasmine & c8 versions
GH-1623 chore(ci): draft release
GH-1624 chore: cleanup license headers
GH-1625 chore: add DEVELOPMENT.md & cleanup README.md
GH-1598 Add missing trailing new line
GH-1601 chore: Remove compileBitcode from export options
GH-1611 chore: set swift-tools-version to 5.9
GH-1599 chore(deps): bump lodash from 4.17.21 to 4.17.23
GH-1592 doc(readme): add minimum iOS version
GH-1591 doc(readme): add Link to iOS Platform Guide
GH-1588 chore: update release audit workflow & license headers

Cordova Android 15.0.0 Released!

Fri, 06 Mar 2026 00:00:00 +0000

We are happy to announce that we have just released Cordova Android 15.0.0! This is one of Cordova's supported platforms for building Android applications.

cordova-android@15.0.0

To upgrade:

cordova platform remove android
cordova platform add android@15.0.0

To install:

cordova platform add android@15.0.0

Release Highlights

BREAKING CHANGES

Increased Target SDK

This release has increased the target SDK to 36 (Android 15).

Project Dependencies

The following Gradle dependencies were bumpped:

Gradle: 8.14.2
Android Gradle Plugin (AGP): 8.10.1

Additionally, the following libraries have been upgraded:

AndroidX App Compat - 1.7.1
AndroidX WebKit - 1.14.0

If you or a plugin has made changes to any of the following configuration preferences, the build results might not match the expected outcomes with this release:

Preference	Default Value
`android-minSdkVersion`	24
`android-maxSdkVersion`	Not set
`android-targetSdkVersion`	36
`android-compileSdkVersion`	android-targetSdkVersion configured value
`android-buildToolsVersion`	36.0.0
`GradleVersion`	8.14.2
`AndroidGradlePluginVersion`	8.10.1
`GradlePluginKotlinVersion`	2.1.21
`AndroidXAppCompatVersion`	1.7.1
`AndroidXWebKitVersion`	1.14.0
`GradlePluginGoogleServicesVersion`	4.4.2

Please take note of the versions that have been updated in this release. If you have manually modified any of these values, it is recommended to review and update the preference values accordingly.

Increased Android Studio Requirement

With the increase of Android Gradle Plugin, "Android Studio Meerkat Feature Drop" is the minimum required version for building and running projects in Android Studio. This aligns with the Android Gradle plugin and Android Studio compatibility documentation.

Newer version of Android Studio are available but comes with untested version of Gradle. It is recommended to run cordova build android after adding the platform and before opening the project in Android Studio to ensure that the project sets up a supported version of Gradle.
Required Build Tools

To use cordova-android@15.0.0, SDK Platform 36 and SDK Build Tools 36.0.0 must be installed. Older build tools version can be uninstalled if older versions of cordova-android is no longer used in any of your projects.

Upgrade with Command-line tools:

The recommended way to install SDK Platform 36 and SDK Build Tools 36.0.0 is by using sdkmanager, which is part of Android's Command-line tools package. The command-line tools is useful as it does not require Android Studio.

At the time of writing, version 20 of the Command-line tools was downloaded from Android Studio's SDK Manager and used. It can also be downloaded from the Android Developers website.
```
  sdkmanager 'build-tools;36.0.0' 'platforms;android-36'
```
You may need to run the update flag first:
```
  sdkmanager --update
```
Upgrade with Android Studio:

To install SDK Platform 36:
1. Open Android Studio's SDK Manager:
2. Click on SDK Platforms tab
3. Check Android 16.0 ("Baklava") which has the API Level of 36
4. Click Apply
To install SDK Build Tools 36.0.0:
1. Open Android Studio's SDK Manager:
2. Click on SDK Tools tab
3. Check Show Package Details
4. Expand Android SDK Build-Tools
5. Check 36.0.0
6. Click Apply
Increased Node.js Engine Requirement

The Node.js engine requirement in this release has been increased to version 20.17.0 or later.
Support Previous Non-Edge-to-Edge Functionality

By default, Android 16 enforces Edge-to-Edge with no way to disable it.

In this major release, Apache Cordova has improved the system bar functionality to mimic the previous non-Edge-to-Edge behavior, allowing app developers to continue supporting a status bar.

Users can still opt in to the Edge-to-Edge feature by using the AndroidEdgeToEdge preference flag introduced in Cordova-Android 14.

IMPORTANT NOTE: The StatusBar plugin is no longer required. Status bar functionality has been integrated as an internal plugin to maintain the original behavior. The StatusBar JavaScript API is available:
- window.statusbar.visible — A property that controls the visibility of the status bar. It accepts a boolean value (true or false).
- window.statusbar.setBackgroundColor('#AARRGGBB') — A method that changes the background color of the status bar. It accepts a hexadecimal color string.
Previous status bar preferences are reused. Preferences are read in the following priority order:
- StatusBarBackgroundColor
- BackgroundColor
  - Depending on the OS version, the BackgroundColor preference may also change the navigation/gesture bar.
Support Night & Day Theme

Added partial support for automatically switching between night and day themes based on system settings when SplashScreen, StatusBar, or background-related preferences are not set.

Fixes

Back button override on API 36+

Resolved an issue where Android API 36 crashes when the hardware back button is pressed.
Apply repositories.gradle for cordova.gradle dependencies

Resolved an issue where users were unable to override repository settings for build-related Gradle dependencies.
Handle uninstalling multiple plugin assets

Resolved an issue where plugins with multiple defined <assets> were not removed properly during uninstall.

Changes include:

Breaking Changes:

feat!: support previous non-E2E (#1817) [76aa9380]
feat!: add partial night & day theme support (#1818) [60d28420]
feat!: bump kotlin@2.1.21 (#1814) [72e71488]
feat!: bump Gradle@8.14.2 & AGP@8.10.1 (#1811) [c25ed278]
feat!: bump sdk & build tools to 36 (#1810) [d8f6f377]
feat!: remove unused getASPath.bat file (#1808) [7a47fe01]
chore!: bump dependencies & update node engine requirement (#1887) [b4eadcce]
chore!: update dependencies (#1843) [488c4987]
chore!: update template defaults (#1837) [e4457f7f]
chore(npm)!: bump cordova-common@6.0.0 w/ rebuilt package-lock.json (#1835) [8742cfe4]

Features:

feat: Allows additional settings to be included on settings.gradle (#1819) [5bca218e]
feat: replace nyc with c8 (#1844) [7d7f5110]
feat: allow disabling splash screen for embedded Cordova (#1824) [c2cf589d]
feat: AndroidShowDeprecations preference flag (#1822) [0190d2e3]
feat: androidx.appcompat:appcompat@1.7.1 (#1813) [36bee664]
feat: androidx.webkit:webkit@1.14.0 (#1812) [4dcfc361]
feat(CallbackContext): add success method for boolean (#1864) [6b76757c]

Fixes:

fix: Potential NPE when handling generic exceptions (#1878) [7a353fe8]
fix: opaque navigation bar in edge to edge (#1867) [eaca570c]
fix: cordova requirements command and SDK lookup based on tools (#1877) [76bac55f]
fix: re-expose and support pollOnce (#1854) [655aa0a5]
fix: edge to edge/fullscreen margins (#1847) [360be21e]
fix: Deprecation warning in PluginManager for using Class.newInstance (#1823) [eb5fe4fb]
fix: Back button override on API 36+ (#1831) [46af3114]
fix: gradle deprecation warnings about property assignment (#1821) [df36c7a2]
fix: replace deprecated fs.F_OK with fs.constants.F_OK (#1820) [b7923261]
fix: apply repositories.gradle for cordova.gradle dependencies (#1816) [cab5c5b7]
fix(plugins): remove from platformWWW by default (#1807) [f0e88856]
fix(plugins): rename & match removeFileF logic with other platforms (#1806) [5dc9c728]
fix(plugins): handle uninstalling multiple plugin assets (#1805) [08b8a954]
fix(statusbar): inject script block to compute color & replace padStart w/ logic supported on SDK 24 (#1853) [52578ae7]
fix(windows): Escape back-slashes for gradle config jdk path (#1876) [fb562f4e]

Chores:

chore: add license header to template gitignore (#1893) [ffa77cad]
chore: update RELEASENOTES.md (#1892) [5003275b]
chore: license, license headers & CI & draft workflow improvements (#1891) [d426e0ff]
chore: update changelog (#1890) [aaf46bb2]
chore(ci): get npm package filename from json output (#1889) [7fbdee1e]
chore: minor changes to DEVELOPMENT.md (#1884) [edf34400]
chore: add DEVELOPMENT.md & cleanup README.md (#1883) [31364a97]
chore: update release audit workflow & license headers (#1870) [d7afba0a]
chore: bump 15.0.0-dev (#1803) [00744c4f]
chore: bump version 14.0.2-dev [872d9887]
chore(ci): draft release (#1882) [347e2add]
chore(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (#1869) [ebe6890d]
chore(deps-dev): bump tmp from 0.2.3 to 0.2.4 (#1834) [af1ae68a]
chore(deps): bump lodash from 4.17.21 to 4.17.23 (#1879) [2ea3a731]
chore(deps): bump glob from 10.4.5 to 10.5.0 (#1868) [172b8448]
chore(readme): added nightly build section (#1873) [eaf875b0]

Other:

ci: use macos-15 (#1829) [1204a793]
ci: update workflow - added node 24, permission scoping & codecov pinning (#1804) [60244658]
ci(release-audit): use latest apache-rat-action (#1809) [6b8e819f]
ci(workflow): update release-audit & license config (#1828) [bf0ba3dd]
dep(npm): bump @cordova/eslint-config@6.0.0 (#1830) [56afb708]
doc(readme): update github and npm version badges (#1872) [8c8fbc9a]
test(plugins): remove old deprecated android_studio option (#1815) [484c60e4]

Cordova CLI 13.0.0 Released!

Tue, 25 Nov 2025 00:00:00 +0000

We are happy to announce that cordova@13.0.0 has been released! This is the latest version of the Cordova command-line interface (CLI) used for creating and building Cordova apps.

cordova@13.0.0 on npm

To upgrade a global installation:

npm uninstall -g cordova
npm install -g cordova@latest

Note: If you are installing Cordova locally in a project (not globally), simply omit the -g flag.

Release Highlights

The most notable changes in this major release include:

Updated npm dependencies.
Increased Node.js engine requirement to >=20.17.0 || >=22.9.0.
Removed telemetry.

One of the main dependencies that was updated is cordova-lib, which for provides the core CLI functionality for managing platforms and plugins, including adding and removing them. Among the breaking changes in this release, the cordova serve command has been removed.

We recommend checking out the following blog posts for updates on related packages that also apply to Cordova CLI:

Please report any issues you find by following the How to File a Bug guide!

Changes include:

Breaking Changes:

GH-678 feat!: bump dependencies & node engine requirement
GH-633 feat!: remove telemetry feature
GH-672 chore(npm)!: bump various npm packages
GH-666 chore!: bump node requirement & npm dependencies
GH-642 chore!: Prepare for next major

Fixes:

GH-662 fix: bump @babel/helpers
GH-640 fix: remove potential error when setting exit code

Others:

GH-679 chore: update release audit workflow & license headers
GH-677 chore(deps-dev): bump js-yaml from 4.1.0 to 4.1.1
GH-676 chore(deps): bump glob from 10.4.5 to 10.5.0
GH-673 chore: license headers
GH-671 chore(deps): bump tmp from 0.2.3 to 0.2.4
GH-668 chore(coverage): Move from nyc to c8 for code coverage
GH-667 chore(deps): bump on-headers and compression
GH-665 chore(deps-dev): bump brace-expansion from 1.1.11 to 1.1.12
GH-658 chore(deps): bump systeminformation from 5.22.11 to 5.23.8
GH-657 chore(deps): bump path-to-regexp and express
GH-654 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6
GH-655 chore(ci): Add code scanning & fix dependabot failures
GH-646 chore(deps): bump micromatch from 4.0.7 to 4.0.8
GH-652 chore(deps): bump cookie and express
GH-643 chore: Update dependencies
GH-637 chore(deps): bump express from 4.18.2 to 4.19.2
GH-639 chore(deps): bump tar from 6.2.0 to 6.2.1
GH-641 chore(deps): bump braces from 3.0.2 to 3.0.3
GH-635 chore(deps): bump ip from 2.0.0 to 2.0.1
GH-631 chore: Rolled dependencies to the latest non-breaking versions
GH-670 ci: various workflow improvements
GH-669 ci(workflow): update release-audit & license config
GH-656 ci: use apache-rat-action@v1 (tag)
GH-638 ci: update codecov@v4 w/ token
GH-636 ci: update release audit workflow
GH-630 ci(gh-action): add Apache RAT & package license checker workflow
GH-554 doc(create): update default values
GH-428 doc: update README.md
GH-616 doc: update & refactor cli reference