Bump vue from 3.4.21 to 3.4.23

[dependabot]

Bumps vue from 3.4.21 to 3.4.23.

Release notes

Sourced from vue's releases.

v3.4.23

Please refer to CHANGELOG.md for details.

v3.4.22

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vue's changelog.

3.4.23 (2024-04-16)

Bug Fixes

• runtime-core: fix regression for $attrs tracking in slots (6930e60), closes #10710
• runtime-core: use same internal object mechanism for slots (6df53d8), closes #10709

3.4.22 (2024-04-15)

Bug Fixes

• compat: fix $options mutation + adjust private API initialization (d58d133), closes #10626 #10636
• compile-sfc: analyze v-bind shorthand usage in template (#10518) (e5919d4), closes #10515
• compiler-core: fix loc.source for end tags with whitespace before > (16174da), closes #10694 #10695
• compiler-core: fix v-bind shorthand for component :is (04af950), closes #10469 #10471
• compiler-sfc: :is() and :where() in compound selectors (#10522) (660cadc), closes #10511
• compiler-sfc: also search for .tsx when type import's extension is omitted (#10637) (34106bc), closes #10635
• compiler-sfc: fix defineModel coercion for boolean + string union types (#9603) (0cef65c), closes #9587 #10676
• compiler-sfc: fix universal selector scope (#10551) (54a6afa), closes #10548
• compiler-sfc: use options module name if options provide runtimeModuleName options (#10457) (e76d743), closes #10454
• custom-element: avoid setting attr to null if it is removed (#9012) (b49306a), closes #9006 #10324
• hydration: properly handle optimized mode during hydrate node (#10638) (2ec06fd), closes #10607
• reactivity: computed should not be detected as true by isProxy (#10401) (9da34d7)
• reactivity: fix hasOwnProperty key coercion edge cases (969c5fb)
• reactivity: fix tracking when hasOwnProperty is called with non-string value (c3c5dc9), closes #10455 #10464
• runtime-core: fix errorHandler causes an infinite loop during execution (#9575) (ab59bed)
• runtime-core: handle invalid values in callWithAsyncErrorHandling (53d15d3)
• runtime-core: show hydration mismatch details for non-rectified mismatches too when PROD_HYDRATION_MISMATCH_DETAILS is set (#10599) (0dea7f9)
• runtime-dom: v-model string/number coercion for multiselect options (#10576) (db374e5)
• runtime-dom: fix css v-bind for suspensed components (#8523) (67722ba), closes #8520
• runtime-dom: force update v-model number with leading 0 (#10506) (15ffe8f), closes #10503 #10615
• runtime-dom: sanitize wrongly passed string value as event handler (#8953) (7ccd453), closes #8818
• ssr: don't render v-if comments in TransitionGroup (#6732) (5a96267), closes #6715
• Transition: ensure the KeepAlive children unmount w/ out-in mode (#10632) (fc99e4d), closes #10620
• TransitionGroup: avoid set transition hooks for comment nodes and text nodes (#9421) (140a768), closes #4621 #4622 #5153 #5168 #7898 #9067
• types: avoid merging object union types when using withDefaults (#10596) (37ba93c), closes #10594

Performance Improvements

• add __NO_SIDE_EFFECTS__ comments (#9053) (d46df6b)
• optimize component props/slots internal object checks (6af733d)
• ssr: avoid calling markRaw on component instance proxy (4bc9f39)
• ssr: optimize setup context creation for ssr in v8 (ca84316)

Commits

• 46c2b63 release: v3.4.23
• 6df53d8 fix(runtime-core): use same internal object mechanism for slots
• 6930e60 fix(runtime-core): fix regression for $attrs tracking in slots
• 97716ae chore: add security hall of fame [ci skip]
• b4b856b release: v3.4.22
• f26d566 chore: improve event value validation message
• 9da34d7 fix(reactivity): computed should not be detected as true by isProxy (#10401)
• 37ba93c fix(types): avoid merging object union types when using withDefaults (#10596)
• fc99e4d fix(Transition): ensure the KeepAlive children unmount w/ out-in mode (#10632)
• 53d15d3 fix(runtime-core): handle invalid values in callWithAsyncErrorHandling
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)