[Snyk] Upgrade vue from 2.5.13 to 2.6.10

[snyk-bot]

Snyk has created this PR to upgrade vue from 2.5.13 to 2.6.10.

• The recommended version is 25 versions ahead of your current version.
• The recommended version was released 7 months ago, on 2019-03-20.

The recommended version fixes:

Severity	Title	Issue ID
	Cross-site Scripting (XSS)	npm:vue:20180802
	Regular Expression Denial of Service (ReDoS)	npm:vue:20180222

Release notes

• Package name: vue
  • 2.6.10 - 2019-03-20

    Bug Fixes

    • codegen: support named function expression in v-on (#9709) 3433ba5, closes #9709 #9707
    • core: cleanup timeouts for async components (#9649) 02d21c2, closes #9649 #9648
    • core: only unset dom prop when not present f11449d, closes #9650
    • core: use window.performance for compatibility in JSDOM (#9700) 653c74e, closes #9700 #9698
    • scheduler: revert timeStamp check 22790b2, closes #9729 #9632
    • slots: fix slots not updating when passing down normal slots as $scopedSlots ebc1893, closes #9699
    • types: allow using functions on the PropTypes (#9733) df4af4b, closes #9733 #9692
    • types: support string type for style in VNode data (#9728) 982d5a4, closes #9728 #9727
  • 2.6.9 - 2019-03-14

    Bug Fixes

    • event timeStamp check for Qt 7591b9d, closes #9681
    • should consider presence of normal slots when caching normalized scoped slots 9313cf9, closes #9644
    • should not swallow user catch on rejected promise in methods 7186940, closes #9694
    • should use fallback for scoped slots with single falsy v-if 781c705, closes #9658
    • ssr: not push non-async css files into map (#9677) d282400, closes #9677
    • v-bind object should be overridable by single bindings (#9653) 0b57380, closes #9653 #9641
    • compiler: whitespace: 'condense' should honor pre tag as well (#9660) f1bdd7f, closes #9660
    • scheduler: fix getNow check in IE9 (#9647) da77d6a, closes #9647 #9632
    • scheduler: getNow detection can randomly fail (#9667) ef2a380, closes #9667
    • ssr: fix nested async functional componet rendering (#9673) 8082d2f, closes #9673 #9643
    • transition: fix appear check for transition wrapper components (#9668) 4de4649, closes #9668
  • 2.6.8 - 2019-03-01

    Bug Fixes

    • avoid compression of unicode sequences by using regexps (#9595) 7912f75, closes #9595 #9456
    • fix modifier parsing for dynamic argument with deep path (#9585) 060c3b9, closes #9585 #9577
    • further adjust max stack size 571a488, closes #9562
    • handle async component when parent is toggled before resolve (#9572) ed34113, closes #9572 #9571
    • scoped slots dynamic check should include v-for on element itself 2277b23, closes #9596
    • compiler: set end location for incomplete elements (#9598) cbad54a, closes #9598
    • types: allow scoped slots to return a single VNode (#9563) 241eea1, closes #9563
    • types: update this for nextTick api (#9541) f333016, closes #9541
  • 2.6.7 - 2019-02-21

    Bug Fixes

    • avoid errors thrown during dom props update 8a80a23, closes #9459
    • avoid possible infinite loop by accessing observables in error handler (#9489) ee29e41, closes #9489
    • ensure generated scoped slot code is compatible with 2.5 7ec4627, closes #9545
    • ensure scoped slots update in conditional branches d9b27a9, closes #9534
    • scoped slots should update when inside v-for 8f004ea, closes #9506
    • #9511: avoid promise catch multiple times (#9526) 2f3020e, closes #9511 #9526 #9511 #9511 #9511
    • compiler: handle negative length in codeframe repeat 7a8de91
  • 2.6.6 - 2019-02-12

    Bug Fixes

    • ensure scoped slot containing passed down slot content updates properly 21fca2f
    • fix keyCode check for Chrome autofill fake key events 29c348f, closes #9441
  • 2.6.5 - 2019-02-11

    Bug Fixes

    • allow passing multiple arguments to scoped slot e7d49cd, closes #9468
    • bail out of event blocking for iOS bug 0bad7e2, closes #9462
    • do not cache scoped slots when mixed with normal slots 060686d
  • 2.6.4 - 2019-02-08

    Performance Improvements

    • cache result from functional ctx.slots() calls 7a0dfd0
    • skip scoped slots normalization when possible 099f3ba

    Bug Fixes

    • avoid breaking avoriaz edge case 9011b83
    • avoid logging same error twice when thrown by user in global handler ca57920, closes #9445
    • empty scoped slot should return undefined 57bc80a, closes #9452
    • expose v-slot slots without scope on this.$slots 0e8560d, closes #9421 #9458
    • new syntax slots without scope should also be exposed on functional slots() 8a80086
  • 2.6.3 - 2019-02-06

    Bug Fixes

    • async component should use render owner as force update context b9de23b, closes #9432
    • avoid exposing internal flags on $scopedSlots 24b4640, closes #9443
    • bail out scoped slot optimization when there are nested scopes 4d4d22a, closes #9438
    • compiler: fix v-bind dynamic arguments on slot outlets 96a09aa, closes #9444
    • types: add Vue.version to types (#9431) 54e6a12, closes #9431
    • skip microtask fix if event is fired from different document dae7e41, closes #9448
    • skip microtask fix in Firefix <= 53 7bc88f3, closes #9446

    Reverts

    • revert: expose all scoped slots on this.$slots d5ade28
  • 2.6.2 - 2019-02-05

    Improvements

    • Reverted in 2.6.3 expose all scoped slots on this.$slots. 0129b0e, closes #9421

    Bug Fixes

    • always set transformed model value on attrs b034abf (Fixes v-select issue in Vuetify)
    • restore slot-scope + v-if behavior 44a4ca3, closes #9422
  • 2.6.1 - 2019-02-04

    Bug Fixes

    • regression: avoid isPromise check when handler return value is Vue instance b6b42ca, closes #9418
    • compiler: fix inline-template crashing (#9365) 55bfb94, closes #9365 #9361
    • compiler: allow comments on the root node in templates (#9408) 1922e7d, closes #9408 #9407
    • compiler: decode single quotes in html attributes (#9341) c27fe24, closes #9341
    • v-model: add value to $attrs if not defined in props (#9331) 66fd3c8, closes #9331 #9330
    • ie: avoid blocking first input event in IE when it shouldn't (#9297) 0fb03b7, closes #9297 #7138 #9042 #9383
  • 2.6.0 - 2019-02-04

      </li>
      <li>
        <b>2.6.0-beta.3</b> - <a href="">2019-01-30</a>
        
      </li>
      <li>
        <b>2.6.0-beta.2</b> - <a href="">2019-01-26</a>
        
      </li>
      <li>
        <b>2.6.0-beta.1</b> - <a href="">2019-01-16</a>
        
      </li>
      <li>
        <b>2.5.22</b> - <a href="">2019-01-11</a>
        
      </li>
      <li>
        <b>2.5.21</b> - <a href="">2018-12-11</a>
        
      </li>
      <li>
        <b>2.5.20</b> - <a href="">2018-12-10</a>
        
      </li>
      <li>
        <b>2.5.19</b> - <a href="">2018-12-09</a>
        
      </li>
      <li>
        <b>2.5.18</b> - <a href="">2018-12-07</a>
        
      </li>
      <li>
        <b>2.5.18-beta.0</b> - <a href="">2018-12-02</a>
        
      </li>
      <li>
        <b>2.5.17</b> - <a href="">2018-08-01</a>
        
      </li>
      <li>
        <b>2.5.17-beta.0</b> - <a href="">2018-03-23</a>
        
      </li>
      <li>
        <b>2.5.16</b> - <a href="">2018-03-13</a>
        
      </li>
      <li>
        <b>2.5.15</b> - <a href="">2018-03-10</a>
        
      </li>
      <li>
        <b>2.5.14</b> - <a href="">2018-03-09</a>
        
      </li>
      <li>
        <b>2.5.13</b> - <a href="">2017-12-19</a>
        
      </li>
    </ul>
    

  from [`vue` GitHub Release Notes](https://github.com/vuejs/vue/releases)

------------

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs