fix(deps): bump vue from 2.6.14 to 3.5.22 in /scorecards-site

[dependabot[bot]]

Bumps vue from 2.6.14 to 3.5.22.

Release notes

Sourced from vue's releases.

v3.5.22

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.21

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.20

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.19

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.18

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.17

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.16

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.15

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.14

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.13

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.12

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.11

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.10

For stable releases, please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vue's changelog.

3.5.22 (2025-09-25)

Bug Fixes

• compiler-core: identifiers in switch-case should not be inferred as references (#13923) (5953c9f)
• compiler-dom: nodes with v-once shouldn't be stringified (#13878) (95c1975)
• compiler-sfc: add support for @vue-ignore in runtime type resolution (#13906) (ba7f7f9)
• compiler-sfc: enhance inferRuntimeType to support TSMappedType with indexed access (#13848) (e388f1a), closes #13847
• compiler-sfc: ensure css custom properties do not start with a digit (#13870) (9c27951)
• compiler-sfc: ensure props bindings register before compiling template (#13922) (abd5638), closes #13920
• compiler-ssr: ensure v-show has a higher priority in SSR (#12171) (836b829), closes #12162
• custom-element: properly mount multiple Teleports in custom element component w/ shadowRoot false (#13900) (5e1e791), closes #13899
• custom-element: set prop runs pending mutations before disconnect (#13897) (c4a88cd), closes #13315
• custom-element: use PatchFlags.BAIL for slot when props are present (#13907) (5358bca), closes #13904
• reactivity: respect readonly during ref unwrapping (#13905) (aba7fed), closes #13903
• reactivity: update iterator to check for completion instead of value presence (#13761) (2078f8b)
• runtime-core: simplify block-tracking disabling in h helper (#13841) (75220c7)
• transition-group: run forceReflow on the correct document (fix #13849) (#13853) (1be5ddf)
• types: more precise types for Events and added missing definitions (#9675) (8bb8fb2)
• types: set dom stub type to never instead of {} (#13915) (8620a61), closes #11564
• types: widen directive arg type from string to any (#13758) (4b71706), closes #13757

Features

• custom-element: allow specifying additional options for shadowRoot in custom elements (#12965) (47e628d), closes #12964

Reverts

• Revert "fix(hmr): prevent VUE_HMR_RUNTIME from being overwritten by vue runtime in 3rd-party libraries" (#13925) (6b68f72), closes #13925

3.5.21 (2025-09-02)

Bug Fixes

• compiler-core: force dynamic slots when slot referencing scope vars (#9427) (99d54b2), closes #9380
• compiler-sfc: check lang before attempt to compile script (#13508) (55922ff), closes #8368
• compiler-sfc: support ${configDir} in paths for TypeScript 5.5+ (#13491) (8696e34), closes #13484
• compiler-sfc: support global augments with named exports (#13789) (35da3c6)
• custom-element: prevent defineCustomElement from mutating the options object (#13791) (e322436)
• hmr: prevent __VUE_HMR_RUNTIME__ from being overwritten by vue runtime in 3rd-party libraries (#13817) (1392734), closes vitejs/vite-plugin-vue#644
• hmr: prevent update unmounting component during HMR reload (#13815) (ef20b86), closes vitejs/vite-plugin-vue#599
• runtime-core: disable tracking block in h function (#8213) (8f6b505), closes #6913
• runtime-core: use separate emits caches for components and mixins (#11661) (15fc75f)
• Suspence: handle Suspense + KeepAlive HMR updating edge case (#13076) (5d75a17), closes #13075

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vue since your current version.

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[netlify[bot]]

❌ Deploy Preview for ossf-scorecard failed.

Name	Link
🔨 Latest commit	04697fc12fc252256c15e0fa148ffdf8e6b1e91b
🔍 Latest deploy log	https://app.netlify.com/projects/ossf-scorecard/deploys/6917a377f110630008570f35

[UlisesGascon]

@dependabot recreate