Bump vue from 3.5.38 to 3.5.40

[dependabot]

Bumps vue from 3.5.38 to 3.5.40.

Release notes

Sourced from vue's releases.

v3.5.40

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.39

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.40 (2026-07-16)

Bug Fixes

• compiler-core: avoid leaking slot branch keys (#15051) (20c9d26), closes #15048
• hydration: pass namespace when patching dynamic props (#15082) (e0d2723), closes #15081 #15050
• reactivity: handle effect removal during scope stop (#15084) (378f978), closes #15083
• runtime-core: skip lazy hydration for detached roots (#15092) (97f3525), closes #15091
• runtime-core: unwind dangling blocks when slot content throws (#15071) (ddc132d), closes #15070
• runtime-dom: respect current select model type (#15010) (eb89e93), closes #15009
• server-renderer: handle errors in optimized component renders (#12601) (474907c), closes #12575
• server-renderer: remove package dependency cycle (#15063) (4d35eca)
• shared: prevent SSR comment escaping from creating closing delimiters (#15045) (bd962bb)
• types: don't constrain component $el type to Element (#15040) (164460a)

3.5.39 (2026-06-25)

Bug Fixes

• compiler-core: correct filter rewrite recursion (#14959) (be7ce31)
• hydration: force patch dynamic props when hydrating (#9083) (024cf06), closes #9033
• hydration: respect data-allow-mismatch on conditional branches (#12801) (164af63), closes #12782
• reactivity: avoid triggering effects when set fails (#14964) (e450973)
• runtime-core: handle non-isomorphic block element update (#15002) (932ddd0), closes #6385
• runtime-core: normalize function children for elements and Teleport (#9108) (2f374cd), closes #9107
• runtime-core: pause tracking when invoking function refs (#14985) (3ac052b)
• runtime-core: preserve once event listener name (#8341) (87b73b6), closes #8342
• runtime-dom: preserve option modifier event names (#8338) (4b659e6), closes #8334
• ssr: dedupe inherited scope ids during vnode rendering (#15005) (027da6b), closes #12159 #12175
• ssr: resolve nested async teleport content (#9431) (31d0f23), closes #6207
• teleport: handle teleport unmount edge case (#12705) (671997a), closes #12702
• types: support named tuple emits (#12676) (232f402), closes #12673
• types: validate defineModel defaults (#14968) (747f57e), closes #14966

Commits

• fa2885d release: v3.5.40
• 20c9d26 fix(compiler-core): avoid leaking slot branch keys (#15051)
• 7da6334 Revert "fix(runtime-core): pause tracking when invoking function refs" (#15094)
• 90aecb1 chore(deps): update all non-major dependencies (#15026)
• 97f3525 fix(runtime-core): skip lazy hydration for detached roots (#15092)
• fe1c0f8 chore(deps): update test (#15025)
• e41c45a chore(deps): update dependency conventional-changelog to v8 (#15078)
• 3eb66a9 chore(deps): update actions/cache action to v6 (#15076)
• 40178dd chore(deps): update lint (#15075)
• 7f122b9 chore(deps): update dependency conventional-changelog-angular to v9 (#15079)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)