build(deps): bump the prod-minor-patch group across 1 directory with 2 updates

[dependabot]

Bumps the prod-minor-patch group with 2 updates in the / directory: core-js and vue.

Updates core-js from 3.49.0 to 3.50.0

Changelog

Sourced from core-js's changelog.

3.50.0 - 2026.08.05

• Changes v3.49.0...v3.50.0 (138 commits)
• Joint iteration proposal:
  • Built-ins:
    • Iterator.zip
    • Iterator.zipKeyed
  • Moved to stable ES, May 2026 TC39 meeting
  • Added es. namespace modules, /es/ and /stable/ namespace entries
• Iterator chunking proposal:
  • Built-ins:
    • Iterator.prototype.chunks
    • Iterator.prototype.windows
  • Throw a TypeError instead of RangeError on non-integer number chunkSize / windowSize, following [tc39/proposal-iterator-chunking/#30](tc39/proposal-iterator-chunking#30)
  • Moved to stage 3, May 2026 TC39 meeting
  • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
• Added Iterator includes stage 3 proposal:
  • Added built-in:
    • Iterator.prototype.includes
• Added Iterator join stage 3 proposal:
  • Added built-in:
    • Iterator.prototype.join
• Added Await dictionary of Promises stage 3 proposal:
  • Added built-ins:
    • Promise.allKeyed
    • Promise.allSettledKeyed
• Throw a RangeError on finite unsafe integer limit in Iterator.prototype.{ drop, take }, following [tc39/ecma262/#3776](tc39/ecma262#3776)
• Use PromiseResolve semantics in Promise.try, following [tc39/ecma262/#3883](tc39/ecma262#3883)
• Added detection of missed Webkit ~ Safari < 26.2 Iterator.prototype.flatMap bug case, #1538
• Deno 2.9+ replaces Object.prototype.__proto__ instead of removing it, so the feature detection updated
• Fixed JSON.stringify polyfill with an array replacer - keys order now follows the replacer, inherited and non-enumerable properties are no longer ignored, #1539
• Make URL / URLSearchParams parsing a little more correct (char sets, percent coding, etc)
• Ensure opaque paths always roundtrip in URL polyfill (still without adding to feature detection), whatwg/url#844
• Fix URL#toJSON when URL#toString is reassigned after core-js is imported
• Fixed possible crash on some keys in Symbol.for
• Some get-iterator / get-iterator-method fixes
• Fixed String.prototype.{ match, search } polyfills conversion order
• Added missed MAX_SAFE_INTEGER excess check in Array.from and { Map, Object }.groupBy polyfills
• Improved the way of inner iterators cleaning in iterator helpers
• Improved accuracy of Math.{ asinh, cbrt, log1p } polyfills with big and small values
• Improved performance of Uint8Array base64 methods
• Improved performance of escape
• Slight performance improvement for engines with native Array.prototype.fill on ArrayBuffer constructor and %TypedArray%.prototype.fill
• Clarify supported Node versions in package.json of some missed packages (just to satisfy publint)
• Compat data improvements:
  • Following [tc39/ecma262/#3776](tc39/ecma262#3776), Iterator.prototype.{ drop, take } properly supported from:
    • V8 ~ Chrome 150
    • Safari 27.0
    • Bun 1.4.0
  • Following [tc39/ecma262/#3883](tc39/ecma262#3883), Promise.try marked as not properly supported in all engines
  • Iterator.prototype.{ chunks, windows } marked as shipped in FF154

... (truncated)

Commits

• 486e8d6 v3.50.0
• 6a78c6a Cache URL#toString (#1533)
• 5d4f138 fix: correct Iterator zip entry exports
• 7e8e1cc rename method for consistency
• 2507115 fix JSON.stringify polyfill with an array replacerJSON.stringify polyfill...
• 4036342 make URL / URLSearchParams parsing a little more correct (char sets, perc...
• 37375ba fix order of detection
• 276de47 add detection of missed Webkit ~ Safari < 26.2 Iterator.prototype.flatMap b...
• 6e4a942 use PromiseResolve semantics in Promise.try
• ff52b9f backport await dictionary stage 3 proposal
• Additional commits viewable in compare view

Updates vue from 3.5.40 to 3.5.41

Changelog

Sourced from vue's changelog.

3.5.41 (2026-08-05)

Bug Fixes

• compiler-core: preserve vnode lifecycle in stable v-for (#11682) (02421cd), closes #9239 #12569
• compiler-sfc: handle transformed template AST after cache invalidation (#15136) (a4440c0), closes #15126 #15128
• custom-element: preserve nested async mount order (#15154) (71f9ff5), closes #15153
• custom-element: warn when props override native properties (#12125) (22b53ea), closes #12124
• runtime-core: avoid re-fetching resource props with unchanged values (#15105) (a7513a1)
• runtime-core: restore SSR setup state when handling async setup result (#15114) (b6191cb), closes #15113
• scheduler: avoid stack overflow when flushing very large post cb arrays (#15143) (c04a45d), closes #15142
• slots: handle nullish v-bind slot props (#15177) (2506700)
• ssr: normalize hidden states during hydration (#13125) (4e467d7)
• transition: support transition to teleport component child (#11959) (77061fe), closes #11910
• types: preserve defineModel inference with factory defaults (#15097) (0516c43), closes #15096
• v-model: preserve text input before hydration (#14411) (2468464), closes #14403

Commits

• d2c458b release: v3.5.41
• 4e467d7 fix(ssr): normalize hidden states during hydration (#13125)
• 22b53ea fix(custom-element): warn when props override native properties (#12125)
• 02421cd fix(compiler-core): preserve vnode lifecycle in stable v-for (#11682)
• 2468464 fix(v-model): preserve text input before hydration (#14411)
• b67cfcf chore(deps): update actions/setup-node action to v7 (#15122)
• a7928a3 chore(deps): update all non-major dependencies (#15116)
• 5d0db08 chore(deps): update dependency jsdom to v30 (#15197)
• af6afaa chore(deps): update test (#15162)
• 3840dda chore(deps): update dependency postcss to v8.5.23 [security] (#15209)
• Additional commits viewable in compare view