[Snyk] Security upgrade vue from 2.4.4 to 2.5.17

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Regular Expression Denial of Service (ReDoS) npm:vue:20180222	No	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Cross-site Scripting (XSS) npm:vue:20180802	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: vue

The new version differs by 250 commits.

• 636c9b4 build: release 2.5.17
• 7e75b79 build: build 2.5.17
• b3c5e64 chore: minor tweaks
• c28f792 fix: fix potential xss vulnerability in ssr
• 2534219 build: release 2.5.16
• 9089170 build: build 2.5.16
• 62a922e fix: fix wrongly matched named slots in functional components
• 9084747 fix(core): Make set/delete warning condition for undefined, null and (#7818)
• 1a979c4 fix(ssr): fix v-show inline style rendering when style binding is array (#7814)
• a6169d1 fix(model): fix static input type being overwritten by v-bind object (#7819)
• 6dd73e9 fix: named slots for nested functional components
• 215f877 fix(keep-alive): run prune after render for correct active component check
• 4378fc5 fix: fix keyName checking for arrow keys in IE11
• 984927a fix: fix regression on duplicate component init when using shared data objects
• cf0b1b7 ci: use yarn.lock instead of package-lock.json
• 7020009 chore: fix typo
• 35dc8c2 types: add Fragment in RenderState typing (#7802)
• 882e719 fix(ssr): fix SSR for async functional components
• 666cdbd test(vdom): add test case for #7786 (#7793)
• 71b4b25 fix: allow multiline expression in v-for
• af5453c build: release 2.5.15
• bafc73f build: build 2.5.15
• 84a9a9d fix: do not traverse VNodes when regsitering dependencies
• 387d256 build: release 2.5.14

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic