[Snyk] Upgrade vue from 2.5.13 to 2.6.10

[snyk-bot]

Snyk have raised this PR to upgrade vue from 2.5.13 to 2.6.10.

• The recommended version is 25 versions ahead of your current version.
• The recommended version was released 5 months ago, on 2019-03-20.

The recommended version fixes:

Severity	Title	Issue ID
	Cross-site Scripting (XSS)	npm:vue:20180802
	Regular Expression Denial of Service (ReDoS)	npm:vue:20180222

Release notes

• 2.6.10 - 2019-03-20

  Bug Fixes

  • codegen: support named function expression in v-on (#9709) 3433ba5, closes #9709 #9707
  • core: cleanup timeouts for async components (#9649) 02d21c2, closes #9649 #9648
  • core: only unset dom prop when not present f11449d, closes #9650
  • core: use window.performance for compatibility in JSDOM (#9700) 653c74e, closes #9700 #9698
  • scheduler: revert timeStamp check 22790b2, closes #9729 #9632
  • slots: fix slots not updating when passing down normal slots as $scopedSlots ebc1893, closes #9699
  • types: allow using functions on the PropTypes (#9733) df4af4b, closes #9733 #9692
  • types: support string type for style in VNode data (#9728) 982d5a4, closes #9728 #9727
• 2.6.9 - 2019-03-14

  Bug Fixes

  • event timeStamp check for Qt 7591b9d, closes #9681
  • should consider presence of normal slots when caching normalized scoped slots 9313cf9, closes #9644
  • should not swallow user catch on rejected promise in methods 7186940, closes #9694
  • should use fallback for scoped slots with single falsy v-if 781c705, closes #9658
  • ssr: not push non-async css files into map (#9677) d282400, closes #9677
  • v-bind object should be overridable by single bindings (#9653) 0b57380, closes #9653 #9641
  • compiler: whitespace: 'condense' should honor pre tag as well (#9660) f1bdd7f, closes #9660
  • scheduler: fix getNow check in IE9 (#9647) da77d6a, closes #9647 #9632
  • scheduler: getNow detection can randomly fail (#9667) ef2a380, closes #9667
  • ssr: fix nested async functional componet rendering (#9673) 8082d2f, closes #9673 #9643
  • transition: fix appear check for transition wrapper components (#9668) 4de4649, closes #9668
• 2.6.8 - 2019-03-01

  Bug Fixes

  • avoid compression of unicode sequences by using regexps (#9595) 7912f75, closes #9595 #9456
  • fix modifier parsing for dynamic argument with deep path (#9585) 060c3b9, closes #9585 #9577
  • further adjust max stack size 571a488, closes #9562
  • handle async component when parent is toggled before resolve (#9572) ed34113, closes #9572 #9571
  • scoped slots dynamic check should include v-for on element itself 2277b23, closes #9596
  • compiler: set end location for incomplete elements (#9598) cbad54a, closes #9598
  • types: allow scoped slots to return a single VNode (#9563) 241eea1, closes #9563
  • types: update this for nextTick api (#9541) f333016, closes #9541
• 2.6.7 - 2019-02-21

  Bug Fixes

  • avoid errors thrown during dom props update 8a80a23, closes #9459
  • avoid possible infinite loop by accessing observables in error handler (#9489) ee29e41, closes #9489
  • ensure generated scoped slot code is compatible with 2.5 7ec4627, closes #9545
  • ensure scoped slots update in conditional branches d9b27a9, closes #9534
  • scoped slots should update when inside v-for 8f004ea, closes #9506
  • #9511: avoid promise catch multiple times (#9526) 2f3020e, closes #9511 #9526 #9511 #9511 #9511
  • compiler: handle negative length in codeframe repeat 7a8de91
• 2.6.6 - 2019-02-12

  Bug Fixes

  • ensure scoped slot containing passed down slot content updates properly 21fca2f
  • fix keyCode check for Chrome autofill fake key events 29c348f, closes #9441
• 2.6.5 - 2019-02-11

  Bug Fixes

  • allow passing multiple arguments to scoped slot e7d49cd, closes #9468
  • bail out of event blocking for iOS bug 0bad7e2, closes #9462
  • do not cache scoped slots when mixed with normal slots 060686d
• 2.6.4 - 2019-02-08

  Performance Improvements

  • cache result from functional ctx.slots() calls 7a0dfd0
  • skip scoped slots normalization when possible 099f3ba

  Bug Fixes

  • avoid breaking avoriaz edge case 9011b83
  • avoid logging same error twice when thrown by user in global handler ca57920, closes #9445
  • empty scoped slot should return undefined 57bc80a, closes #9452
  • expose v-slot slots without scope on this.$slots 0e8560d, closes #9421 #9458
  • new syntax slots without scope should also be exposed on functional slots() 8a80086
• 2.6.3 - 2019-02-06

  Bug Fixes

  • async component should use render owner as force update context b9de23b, closes #9432
  • avoid exposing internal flags on $scopedSlots 24b4640, closes #9443
  • bail out scoped slot optimization when there are nested scopes 4d4d22a, closes #9438
  • compiler: fix v-bind dynamic arguments on slot outlets 96a09aa, closes #9444
  • types: add Vue.version to types (#9431) 54e6a12, closes #9431
  • skip microtask fix if event is fired from different document dae7e41, closes #9448
  • skip microtask fix in Firefix <= 53 7bc88f3, closes #9446

  Reverts

  • revert: expose all scoped slots on this.$slots d5ade28
• 2.6.2 - 2019-02-05

  Improvements

  • Reverted in 2.6.3 expose all scoped slots on this.$slots. 0129b0e, closes #9421

  Bug Fixes

  • always set transformed model value on attrs b034abf (Fixes v-select issue in Vuetify)
  • restore slot-scope + v-if behavior 44a4ca3, closes #9422
• 2.6.1 - 2019-02-04

  Bug Fixes

  • regression: avoid isPromise check when handler return value is Vue instance b6b42ca, closes #9418
  • compiler: fix inline-template crashing (#9365) 55bfb94, closes #9365 #9361
  • compiler: allow comments on the root node in templates (#9408) 1922e7d, closes #9408 #9407
  • compiler: decode single quotes in html attributes (#9341) c27fe24, closes #9341
  • v-model: add value to $attrs if not defined in props (#9331) 66fd3c8, closes #9331 #9330
  • ie: avoid blocking first input event in IE when it shouldn't (#9297) 0fb03b7, closes #9297 #7138 #9042 #9383
• 2.6.0 - 2019-02-04
• 2.6.0-beta.3 - 2019-01-30
• 2.6.0-beta.2 - 2019-01-26
• 2.6.0-beta.1 - 2019-01-16
• 2.5.22 - 2019-01-11
• 2.5.21 - 2018-12-11
• 2.5.20 - 2018-12-10
• 2.5.19 - 2018-12-09
• 2.5.18 - 2018-12-07
• 2.5.18-beta.0 - 2018-12-02
• 2.5.17 - 2018-08-01
• 2.5.17-beta.0 - 2018-03-23
• 2.5.16 - 2018-03-13
• 2.5.15 - 2018-03-10
• 2.5.14 - 2018-03-09
• 2.5.13 - 2017-12-19

from vue GitHub Release Notes

---

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs