Chore(deps): Bump vue from 3.5.24 to 3.5.27

[dependabot]

Bumps vue from 3.5.24 to 3.5.27.

Release notes

Sourced from vue's releases.

v3.5.27

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.26

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.25

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.27 (2026-01-19)

Bug Fixes

• compile-sfc: correctly handle variable shadowing in for loop for defineProps destructuring. (#14296) (6a1bb50), closes #14294
• compiler-sfc: handle indexed access types in declare global blocks (#14260) (e4091fe), closes #14236
• compiler-sfc: use correct scope when resolving indexed access types from external files (#14297) (f0f0a21), closes #14292
• reactivity: collection iteration should inherit iterator instance methods (#12644) (3c8b2fc), closes #12615
• runtime-core: skip patching reserved props for custom elements (#14275) (19cc7e2), closes #14274
• server-renderer: use ssrRenderClass helper for className attribute (#14327) (a4708f3)
• ssr: handle v-bind modifiers during render attrs (#14263) (c2f5964), closes #14262

3.5.26 (2025-12-18)

Bug Fixes

• compat: fix compat handler of draggable (#12445) (ed85953), closes #12444
• compat: handle v-model deprecation warning with missing appContext (#14203) (945a543), closes #14202
• compiler-sfc: demote const reactive bindings used in v-model (#14214) (e24ff7d), closes #11265 #11275
• compiler-ssr: handle ssr attr fallthrough when preserve whitespace (#12304) (4783118), closes #8072
• hmr: handle cached text node update (#14134) (69ce3c7), closes #14127
• keep-alive: use resolved component name for async components in cache pruning (#14212) (dfe667c), closes #14210
• runtime-core: ensure correct anchor el for deeper unresolved async components (#14182) (f5b3bf2), closes #14173
• runtime-core: handle patch stable fragment edge case (#12411) (94aeb64), closes #12410
• runtime-core: pass component instance to flushPreFlushCbs on unmount (#14221) (e857e12), closes #14215

Performance Improvements

• compiler-core: use binary-search to get line and column (#14222) (1904053)

3.5.25 (2025-11-24)

Bug Fixes

• compiler: share logic for comments and whitespace (#13550) (2214f7a)
• provide: warn when using provide after mounting (#13954) (247b2c2), closes #13921 #13924
• reactivity: correctly wrap iterated array items to preserve their readonly status (#14120) (301020b)
• reactivity: toRef edge cases for ref unwrapping (#12420) (0d2357e)
• runtime-core: keep options API typing intact when expose is used (#14118) (8f82f23), closes #14117 vuejs/language-tools#5069
• suspense: defer clearing fallback vnode el in case it has dirs (#14080) (c0f63dd), closes #14078

Commits

• aa9af1d release: v3.5.27
• 35c3608 Revert "fix(runtime-core): resolve kebab-case slot names from in-DOM template...
• 7e554bf fix(runtime-core): resolve kebab-case slot names from in-DOM templates (#14302)
• 0596a5f types(jsx): improve autocomplete type (#14237)
• 19cc7e2 fix(runtime-core): skip patching reserved props for custom elements (#14275)
• c2f5964 fix(ssr): handle v-bind modifiers during render attrs (#14263)
• 3c8b2fc fix(reactivity): collection iteration should inherit iterator instance method...
• e4091fe fix(compiler-sfc): handle indexed access types in declare global blocks (#14260)
• 6a1bb50 fix(compile-sfc): correctly handle variable shadowing in for loop for `define...
• f0f0a21 fix(compiler-sfc): use correct scope when resolving indexed access types from...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @nextcloud-command.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[nextcloud-command]

@dependabot merge

[dependabot]

Beginning January 27, 2026, Dependabot will no longer support the @dependabot merge command. Please use GitHub's native pull request controls instead. Please see the changelog announcement for additional details.

[dependabot]

One of your CI runs failed on this pull request, so Dependabot won't merge it.

Dependabot will still automatically merge this pull request if you amend it and your tests pass.

[susnux]

/compile