chore(deps): bump which from 6.0.1 to 7.0.0

Bumps [which](https://github.com/npm/node-which) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/npm/node-which/releases)
- [Changelog](https://github.com/npm/node-which/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-which/compare/v6.0.1...v7.0.0)

---
updated-dependencies:
- dependency-name: which
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

framework/src/org/apache/cordova/CordovaPreferences.java

@@ -74,10 +74,7 @@ public class CordovaPreferences {
         name = name.toLowerCase(Locale.ENGLISH);
         String value = prefs.get(name);
         if (value != null) {
-            // Some 32-bit hex values (for example, 0x80000000) are valid int bit patterns
-            // but exceed Integer.MAX_VALUE when read as positive numbers. Integer.decode()
-            // rejects such values with NumberFormatException, so decode as long first and
-            // cast to int to preserve the intended 32-bit value.
+            // Use Integer.decode() can't handle it if the highest bit is set.
             return (int)(long)Long.decode(value);
         }
         return defaultValue;

package-lock.json

@@ -20,7 +20,7 @@
         "semver": "^7.7.4",
         "string-argv": "^0.3.2",
         "untildify": "^4.0.0",
-        "which": "^6.0.1"
+        "which": "^7.0.0"
       },
       "devDependencies": {
         "@cordova/eslint-config": "^6.0.1",
@@ -4139,9 +4139,9 @@
       }
     },
     "node_modules/tmp": {
-      "version": "0.2.6",
-      "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.6.tgz",
-      "integrity": "sha512-5sJPdPjfI5Kx+qbrDesxkglRBxW//g7hCsqspEjwkewGvBMGIKMOTKzLt1hFVJzyadba3lDUN20O9qhvbQUSTA==",
+      "version": "0.2.5",
+      "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.5.tgz",
+      "integrity": "sha512-voyz6MApa1rQGUxT3E+BK7/ROe8itEx7vD8/HEvt4xwXucvQ5G5oeEiHkmHZJuBO21RpOf+YYm9MOivj709jow==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -4379,9 +4379,9 @@
       }
     },
     "node_modules/which": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/which/-/which-6.0.1.tgz",
-      "integrity": "sha512-oGLe46MIrCRqX7ytPUf66EAYvdeMIZYn3WaocqqKZAxrBpkqHfL/qvTyJ/bTk5+AqHCjXmrv3CEWgy368zhRUg==",
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/which/-/which-7.0.0.tgz",
+      "integrity": "sha512-RancgH2dmbLdHl6LRhEqvklWMgl/Hdnun0Y90KhBOLkMefg8Qa7/Zel8Sm+8HEcP6DEjzsWzpkuBQEZok58isA==",
       "license": "ISC",
       "dependencies": {
         "isexe": "^4.0.0"
@@ -4390,7 +4390,7 @@
         "node-which": "bin/which.js"
       },
       "engines": {
-        "node": "^20.17.0 || >=22.9.0"
+        "node": "^22.22.2 || ^24.15.0 || >=26.0.0"
       }
     },
     "node_modules/which-boxed-primitive": {

package.json

@@ -35,7 +35,7 @@
     "semver": "^7.7.4",
     "string-argv": "^0.3.2",
     "untildify": "^4.0.0",
-    "which": "^6.0.1"
+    "which": "^7.0.0"
   },
   "devDependencies": {
     "@cordova/eslint-config": "^6.0.1",