Bump nanoid, @slidev/cli, @slidev/types and vue in /slides

[dependabot]

Bumps nanoid to 3.3.18 and updates ancestor dependencies nanoid, @slidev/cli, @slidev/types and vue. These dependencies need to be updated together.

Updates nanoid from 3.3.17 to 3.3.18

Release notes

Sourced from nanoid's releases.

3.3.18

• Fixed infinite loop on async for React Native (by @​OvergrowthBeards-JB).

Changelog

Sourced from nanoid's changelog.

3.3.18

• Fixed infinite loop on async for React Native (by @​OvergrowthBeards-JB).

Commits

• 9ad9805 Release 3.3.18 version
• 55e50a0 Update CI action
• e10f8d4 Update index.native.js (#606)
• See full diff in compare view

Updates @slidev/cli from 52.19.0 to 52.19.1

Release notes

Sourced from @​slidev/cli's releases.

v52.19.1

   🐞 Bug Fixes

• create-app: Default manual setup to npm  -  by @​NgoQuocViet2001 and @​antfu in slidevjs/slidev#2703 (22b96)

    View changes on GitHub

Commits

• dbc307b chore: release v52.19.1
• 73fb38b chore: update deps
• 22b9600 fix(create-app): default manual setup to npm (#2703)
• 1877b30 docs(skills): fix broken draggable link in core-components reference (#2700)
• 0d798ac chore: update deps
• d91feaf chore: Supply Chain Attack Countermeasures in GitHub Actions (#2684)
• 050ba85 refactor: replace semver with verkit (#2699)
• See full diff in compare view

Updates @slidev/types from 52.19.0 to 52.19.1

Release notes

Sourced from @​slidev/types's releases.

v52.19.1

   🐞 Bug Fixes

• create-app: Default manual setup to npm  -  by @​NgoQuocViet2001 and @​antfu in slidevjs/slidev#2703 (22b96)

    View changes on GitHub

Commits

• dbc307b chore: release v52.19.1
• 73fb38b chore: update deps
• 22b9600 fix(create-app): default manual setup to npm (#2703)
• 1877b30 docs(skills): fix broken draggable link in core-components reference (#2700)
• 0d798ac chore: update deps
• d91feaf chore: Supply Chain Attack Countermeasures in GitHub Actions (#2684)
• 050ba85 refactor: replace semver with verkit (#2699)
• See full diff in compare view

Updates vue from 3.5.40 to 3.5.42

Release notes

Sourced from vue's releases.

v3.5.42

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.41

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.42 (2026-08-27)

Bug Fixes

• hydration: handle async component unmount before lazy hydration (#15252) (6e1814a)
• hydration: handle moving unresolved async fragment (#15263) (a72036f)
• runtime-core: avoid caching unmounted suspense children (#15291) (b535917), closes #15288
• runtime-core: keep .trim result when combined with .number v-model modifier (#15346) (f8d42e1)
• runtime-core: resolve $el for dev root comment fragment (#15313) (8654f35), closes #12680
• runtime-dom: support !important on CSS custom properties in style binding (#15348) (31da934)
• server-renderer: reject CR in attribute names (#15266) (a2b40db)
• shared: correctly compare Map and Set values (#15328) (ef82a26), closes #15320
• suspense: don't treat the leaving branch as the fallback while its mount is pending (#15333) (cd19745), closes #15332
• v-model: re-sync select when model is overridden in change handler (#15298) (6eaecc1), closes #10505

3.5.41 (2026-08-05)

Bug Fixes

• compiler-core: preserve vnode lifecycle in stable v-for (#11682) (02421cd), closes #9239 #12569
• compiler-sfc: handle transformed template AST after cache invalidation (#15136) (a4440c0), closes #15126 #15128
• custom-element: preserve nested async mount order (#15154) (71f9ff5), closes #15153
• custom-element: warn when props override native properties (#12125) (22b53ea), closes #12124
• runtime-core: avoid re-fetching resource props with unchanged values (#15105) (a7513a1)
• runtime-core: restore SSR setup state when handling async setup result (#15114) (b6191cb), closes #15113
• scheduler: avoid stack overflow when flushing very large post cb arrays (#15143) (c04a45d), closes #15142
• slots: handle nullish v-bind slot props (#15177) (2506700)
• ssr: normalize hidden states during hydration (#13125) (4e467d7)
• transition: support transition to teleport component child (#11959) (77061fe), closes #11910
• types: preserve defineModel inference with factory defaults (#15097) (0516c43), closes #15096
• v-model: preserve text input before hydration (#14411) (2468464), closes #14403

Commits

• d63616c release: v3.5.42
• b8543dc Revert "fix(compiler-core): handle invalid static arg in same-name v-bind sho...
• 3857716 fix(compiler-core): handle invalid static arg in same-name v-bind shorthand (...
• 31da934 fix(runtime-dom): support !important on CSS custom properties in style bindin...
• f8d42e1 fix(runtime-core): keep .trim result when combined with .number v-model modif...
• cd19745 fix(suspense): don't treat the leaving branch as the fallback while its mount...
• 8654f35 fix(runtime-core): resolve $el for dev root comment fragment (#15313)
• ef82a26 fix(shared): correctly compare Map and Set values (#15328)
• 6eaecc1 fix(v-model): re-sync select when model is overridden in change handler (#15298)
• b535917 fix(runtime-core): avoid caching unmounted suspense children (#15291)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.