build(deps): bump the vue group with 2 updates

[dependabot]

Bumps the vue group with 2 updates: vue and vue-router.

Updates vue from 3.5.40 to 3.5.43

Release notes

Sourced from vue's releases.

v3.5.43

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.42

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.41

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.43 (2026-09-17)

Bug Fixes

• compiler-sfc: ignore comment delimiters inside strings and url() when parsing css vars (#15548) (2fde323)
• compiler-sfc: prepend semicolon for await in switch case (#15498) (9a1df69), closes #15495
• compiler-sfc: restore await scope when leaving nested blocks (5409708), closes #15465
• compiler-sfc: reuse parsed parent configs across tsconfig walks (fix #15478) (#15480) (d6febaa)
• hydration: run leave hooks for hydration placeholders (#15431) (5dda192)
• reactivity: preserve readonly wrappers in array copy methods (#15469) (599f35b)
• runtime-core: unmount v-once children after parent rerenders (#15435) (d720338)
• shared: handle circular references in looseEqual (#15499) (718f782), closes #15496
• shared: preserve comment-like text in style values (#15471) (b9456cb)
• suspense: don't drop nested suspense patches during hydration (#15429) (76d42dc)
• suspense: keep the boundary pending while its branch is patched (#15411) (bfcfe9e), closes #7506
• suspense: patch a hydrating boundary's pending branch in place (#15432) (2cde6f7)
• suspense: unmount the DOM an interrupted async component claimed (#15430) (fb9b45c)
• types: keep optional props when a runtime prop uses a generic PropType (#15523) (243aabc), closes #9546

3.5.42 (2026-08-27)

Bug Fixes

• hydration: handle async component unmount before lazy hydration (#15252) (6e1814a)
• hydration: handle moving unresolved async fragment (#15263) (a72036f)
• runtime-core: avoid caching unmounted suspense children (#15291) (b535917), closes #15288
• runtime-core: keep .trim result when combined with .number v-model modifier (#15346) (f8d42e1)
• runtime-core: resolve $el for dev root comment fragment (#15313) (8654f35), closes #12680
• runtime-dom: support !important on CSS custom properties in style binding (#15348) (31da934)
• server-renderer: reject CR in attribute names (#15266) (a2b40db)
• shared: correctly compare Map and Set values (#15328) (ef82a26), closes #15320
• suspense: don't treat the leaving branch as the fallback while its mount is pending (#15333) (cd19745), closes #15332
• v-model: re-sync select when model is overridden in change handler (#15298) (6eaecc1), closes #10505

3.5.41 (2026-08-05)

Bug Fixes

• compiler-core: preserve vnode lifecycle in stable v-for (#11682) (02421cd), closes #9239 #12569
• compiler-sfc: handle transformed template AST after cache invalidation (#15136) (a4440c0), closes #15126 #15128
• custom-element: preserve nested async mount order (#15154) (71f9ff5), closes #15153
• custom-element: warn when props override native properties (#12125) (22b53ea), closes #12124
• runtime-core: avoid re-fetching resource props with unchanged values (#15105) (a7513a1)
• runtime-core: restore SSR setup state when handling async setup result (#15114) (b6191cb), closes #15113
• scheduler: avoid stack overflow when flushing very large post cb arrays (#15143) (c04a45d), closes #15142
• slots: handle nullish v-bind slot props (#15177) (2506700)
• ssr: normalize hidden states during hydration (#13125) (4e467d7)
• transition: support transition to teleport component child (#11959) (77061fe), closes #11910
• types: preserve defineModel inference with factory defaults (#15097) (0516c43), closes #15096

... (truncated)

Commits

• 5be58b4 release: v3.5.43
• a0b61aa chore: remove and ignore generated git hooks
• 2fde323 fix(compiler-sfc): ignore comment delimiters inside strings and url() when pa...
• 599f35b fix(reactivity): preserve readonly wrappers in array copy methods (#15469)
• 55a2b45 chore(deps): update pnpm to v12 (#15439)
• 243aabc fix(types): keep optional props when a runtime prop uses a generic PropType (...
• 718f782 fix(shared): handle circular references in looseEqual (#15499)
• 9a1df69 fix(compiler-sfc): prepend semicolon for await in switch case (#15498)
• d6febaa fix(compiler-sfc): reuse parsed parent configs across tsconfig walks (fix #15...
• b9456cb fix(shared): preserve comment-like text in style values (#15471)
• Additional commits viewable in compare view

Updates vue-router from 5.2.0 to 5.4.0

Release notes

Sourced from vue-router's releases.

v5.4.0

   🚨 Breaking Changes

• experimental: Normalize query values to arrays  -  by @​posva in vuejs/router#2824 (f1fbc)

   🚀 Features

• Accept a prebuilt matcher in createRouter  -  by @​danielroe in vuejs/router#2804 (9de96)
• UseScrollRestoration and onRouteRendered  -  by @​posva in vuejs/router#2805 (e3dde)
• Diagnose experimental beforeEnter migration  -  by @​posva (b695c)
• experimental:
  • Warn about legacy optional param removal  -  by @​posva in vuejs/router#2818 (c2f92)
  • Extract hash params with definePage  -  by @​posva (dbf2d)
  • Configure required and default hash params  -  by @​posva (cef5c)
  • Never decode the hash, protect-only encoding  -  by @​posva in vuejs/router#2760 (aca2c)
  • Allow custom regexp for path params in definePage  -  by @​posva in vuejs/router#2822 (3a192)
• router:
  • Restore hashes and top by default  -  by @​posva (7c385)

   🐞 Bug Fixes

• Resolve experimental guard redirects against target on history navigation  -  by @​posva (2c5fb)
• experimental:
  • Keep declared case of static prefix in MatcherPatternPathStar.build()  -  by @​contactjawad in vuejs/router#2798 (4dc6b)
  • Make hash params optional and nullable  -  by @​posva (d9a4c)
  • Exclude defaults from required hash params  -  by @​posva (346e2)
  • Align hash parameter parsing with queries  -  by @​posva (cf251)
  • Keep last hash param instead of throwing  -  by @​posva (d1e8a)
  • Disallow required with a default for query params  -  by @​posva (f60e9)
  • Make query params with a default optional on push  -  by @​posva (fb604)
  • Do not inherit params, query, or hash on redirects  -  by @​posva (02a92)
• history:
  • Invalidate obsolete scroll positions  -  by @​posva and @​liuly0322 in vuejs/router#2814 (071f1)
• unplugin:
  • Sanitize named view in definePage import  -  by @​giaBaoJS in vuejs/router#2809 (0711d)
  • Keep hex character codes in param segments regexp  -  by @​kwy404 in vuejs/router#2811 (07663)

   🏎 Performance

• unplugin: Cache merged route overrides  -  by @​posva in vuejs/router#2821 (732b7)

    View changes on GitHub

v5.3.1

   🐞 Bug Fixes

• experimental: Handle non-string params for isActive  -  by @​posva (92cfd)

    View changes on GitHub

... (truncated)

Commits

• 596d481 release: vue-router@5.4.0
• 2970e8e chore: fix back extends
• 16a62f8 chore(deps): upgrade dependencies (#2828)
• b810a7e chore: remove unused types
• a0efbde docs: adapt
• 2c5fbd6 fix: resolve experimental guard redirects against target on history navigation
• 6ef3163 refactor: allow undefined on optional param
• 8e89a60 chore: comment
• 72ceb99 refactor: absolute position
• 57dd1d6 refactor: allow guards to return relative location
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.