chore(deps): update minor-and-patch

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@biomejs/biome (source)	2.5.9 → 2.5.10
@slack/web-api (source)	8.0.0 → 8.1.0
aws-cdk (source)	2.1138.0 → 2.1139.0

---

Release Notes

biomejs/biome (@​biomejs/biome)

v2.5.10

Compare Source

Patch Changes

• #​11403 8f7786f Thanks @​Princesseuh! - Fixed Astro rejecting JavaScript comments between attributes.

  <div /* block comment */ class="something"></div>
  <Component /* c */ client:load />

• #​11403 8f7786f Thanks @​Princesseuh! - Fixed a bare < in Astro text being treated as the start of a tag, such as <p>5 < 6 and 7 > 6</p>. As in HTML, a < that cannot open a tag is text and needs no escaping.

• #​11438 3133ffa Thanks @​Princesseuh! - Fixed #​8294: an Astro expression holding only a comment is no longer reported as a parse error, which also stopped the whole file from being formatted.

  <div>{/* a note */}</div>
  <div class={/* a note */}>x</div>

• #​11403 8f7786f Thanks @​Princesseuh! - Fixed #​9165: an empty Astro expression such as <div>{}</div> no longer fails to parse. Astro renders {} as nothing.

• #​11403 8f7786f Thanks @​Princesseuh! - Fixed Astro expressions containing a comment failing to parse.

  <div>{/* block comment */ x}</div>
  <div>{/* only a comment */}</div>

• #​11403 8f7786f Thanks @​Princesseuh! - Added support for Astro's fragment shorthand.

  <>
    <p>a</p>
  </>

• #​11403 8f7786f Thanks @​Princesseuh! - Fixed an Astro frontmatter block being cut short by a closing tag inside a string or comment.

  ---
  const a = "</script>";
  // </script> in a comment
  ---

• #​11403 8f7786f Thanks @​Princesseuh! - Fixed --- being read as an Astro frontmatter fence when markup precedes it. Astro only recognizes frontmatter at the very start of a file, so a file opening with a comment now has no frontmatter, and its --- lines are content.

  <!-- c -->
  ---
  this is text, not frontmatter
  ---

• #​11403 8f7786f Thanks @​Princesseuh! - Fixed an Astro frontmatter block ending early on a line that merely starts with a dash.

  ---
  --count;
  ---

• #​11403 8f7786f Thanks @​Princesseuh! - Fixed the children of an Astro element carrying is:raw being parsed as markup instead of raw text. This now also covers <script> and <style>, whose contents Astro emits verbatim rather than processing, so they are no longer linted as JavaScript or CSS.

  <article is:raw><% awesome %></article>
  <script is:raw>{{ mustache }}</script>

• #​11403 8f7786f Thanks @​Princesseuh! - Fixed Astro rejecting attribute names that start with a colon, such as :href.

• #​11403 8f7786f Thanks @​Princesseuh! - Fixed the Astro parser failing to recover from a malformed closing tag such as <div></{<//, so that a later mistake is reported where it happens rather than cascading.

• #​11403 8f7786f Thanks @​Princesseuh! - Fixed { inside an Astro <math> element opening an expression. MathML is foreign content where Astro parses no expressions, so LaTeX such as R^{2x} now survives as text. <svg> is unaffected.

• #​11403 8f7786f Thanks @​Princesseuh! - Fixed {{ at the start of an Astro expression being read as an interpolation. Astro has no {{ }} syntax, so {{ a: 1 }} and <Comp a={{ b: 1 }} /> are object literals.

• #​11403 8f7786f Thanks @​Princesseuh! - Fixed expressions inside an Astro <pre> or <textarea> being read as raw text. Astro parses both as ordinary elements, so their markup and interpolations are now parsed, and a variable used only inside one is no longer reported as unused.

  <pre>{value}</pre>
  <textarea><div>{value}</div></textarea>

• #​11403 8f7786f Thanks @​Princesseuh! - Added support for template literal attribute values in Astro, such as <div class=`a ${b} c`>.

• #​11403 8f7786f Thanks @​Princesseuh! - Fixed Astro rejecting HTML5 unquoted attribute values that contain `, =, ' or ", such as <a href=a=b> and <a href=a'b>.

• #​11393 dec5a8f Thanks @​1678092075! - Fixed #​11207: useStrictMode no longer reports Vue event handlers such as @click="count++".

• #​11431 c065f99 Thanks @​levrik! - Fixed #​11429: Variables and imports used by Vue same-name bindings such as :disabled or v-bind:disabled are no longer reported as unused.

• #​11409 405dedb Thanks @​ematipico! - Fixed a memory leak in the LSP server where memory usage kept growing over long editor sessions.

• #​11422 a51eff7 Thanks @​dyc3! - Fixed #​11416: Biome no longer crashes when parsing incomplete {let} or {const} declarations in Svelte files.

• #​11378 34b715c Thanks @​Netail! - Added extra rule sources from @eslint/css. biome migrate eslint detects rules in your eslint configurations more reliably.

• #​11403 8f7786f Thanks @​Princesseuh! - Fixed {#, {/, {: and {@ being read as Svelte block openings in every HTML-like file. They are now Svelte-only, so in HTML, Vue and Angular files a sequence such as {#if x} is ordinary text instead of a parse error.

• #​11443 8d45229 Thanks @​ematipico! - Fixed #​11390: noFloatingPromises no longer performs unnecessary type inference on call arguments when checking methods of non-generic class instances created with new.

• #​11425 9c2667b Thanks @​dyc3! - Fixed #​6426: GritQL plugins now match and rewrite metavariables embedded in quoted strings.

• #​11441 00317c3 Thanks @​dyc3! - Improved performance of useNamedCaptureGroup, noMisplacedAssertion, noSkippedTests, noExportsInTest, noDuplicateTestHooks, noIdenticalTestTitle, useTestHooksInOrder, and useTestHooksOnTop.

slackapi/node-slack-sdk (@​slack/web-api)

v8.1.0

Compare Source

Minor Changes

• 955e6b9: feat(web-api): add support for admin.users.getExpiration

• 4322e14: feat(web-api): add agents.sessions.rename and agents.sessions.setStatus

• 4ba30a1: feat(web-api): add session_status to chat.stopStream arguments

• bff3398: feat(web-api): add webapi response changes as of 2026-08-21

  Regenerate response types with new stable response properties (e.g. agent_session on message-bearing responses, ListView grouping/sort/filter fields, bots.info connector/workflow flags).

  Two fields are removed from UsersListResponse, neither of which is a real success-response property:

  • Member.is_connector_bot — not returned by users.list; this flag is surfaced on bots.info (added here to BotsInfoResponse).
  • arg — an error-response echo field, not part of a successful users.list body.

• f5fd35a: feat(web-api): add blocks.validate method

Patch Changes

• Updated dependencies [916d8e9]
• Updated dependencies [f5e9a01]
  • @​slack/types@​3.1.0

aws/aws-cdk-cli (aws-cdk)

v2.1139.0

Compare Source

2.1139.0 (2026-08-26)

Features

• cli: default to errors-only progress when run by an AI agent (#​1850) (37bbd4d), closes #​1800
• deps: upgrade aws-cdk-lib (#​1868) (7ff50e7)
• show the target environment in cdk diff stack headers (#​1885) (f875d81), closes #​286

Bug Fixes

• aws-cdk: cdk migrate deduplication drops resources with compound identifiers (#​1879) (d30e791)
• aws-cdk: remove SIGINT listener leak in TelemetrySession (#​1863) (83dcea3), closes #​1862
• cli: --yes mode requires a TTY when a request's default is falsy (#​1892) (acc6f4d)
• cli: cdk CLI alias package declares an entrypoint that does not exist (#​1897) (2a6a802)
• cli: guide Stage users to a working pattern in stack-selection error (#​1847) (d51353e), closes #​1451 #​1451
• cli: recognize the AI_AGENT convention and more coding agents (#​1855) (6f7d58e), closes /github.com/anthropics/claude-code/blob/770933ea1ad2fa7b858191e397a65e6644771c64/CHANGELOG.md#L2349 /github.com/charmbracelet/crush/blob/7d78d7422a92918441a68d01d96d48fa3b9fd9db/internal/shell/shell.go#L46 /github.com/anomalyco/opencode/blob/b155b15694dbcc6768f11d2f25cc2bdd1f738ab4/packages/opencode/src/index.ts#L75 /github.com/anomalyco/opencode/blob/b155b15694dbcc6768f11d2f25cc2bdd1f738ab4/packages/opencode/src/index.ts#L76 /github.com/github/copilot-cli/blob/3f9c5e1ce792150a852804132e2b08c58e9a8e95/changelog.md#L1971 /github.com/QwenLM/qwen-code/blob/099a71c9364473303adb31e0dfb5f488b31634d9/packages/core/src/services/shellExecutionService.ts#L806 /github.com/openai/codex/blob/4a942885c8b4745757a9f86ad2075e16c42483c5/codex-rs/protocol/src/shell_environment.rs#L7 /github.com/openai/codex/blob/4a942885c8b4745757a9f86ad2075e16c42483c5/codex-rs/core/src/spawn.rs#L26 /github.com/openai/codex/blob/4a942885c8b4745757a9f86ad2075e16c42483c5/codex-rs/core/src/unified_exec/process_manager.rs#L93 /github.com/cline/cline/blob/16875140fbc7bae51aad79c203837b4f51e54aa5/apps/vscode/src/hosts/vscode/terminal/VscodeTerminalRegistry.ts#L31
• toolkit-lib: finalizing deployment after refactor intermittently fails while stacks are still in UPDATE_IN_PROGRESS (#​1805) (beb1e2f), closes #​1804

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[Copilot]

Pull request overview

依存関係のマイナー／パッチ更新を取り込みつつ、CI と Lambda 実行環境（Node.js 24系）に整合する形で更新内容が反映されており、変更範囲も明確で良いです。

Changes:

• ルートの開発依存として @biomejs/biome を 2.5.9 → 2.5.10 に更新
• ルートの開発依存として @slack/web-api を 8.0.0 → 8.1.0 に更新（lockfile上の関連する推移依存も更新）
• infra 側で aws-cdk を 2.1138.0 → 2.1139.0 に更新

Reviewed changes

Copilot reviewed 2 out of 4 changed files in this pull request and generated no comments.

File	Description
package.json	@biomejs/biome と @slack/web-api のバージョン更新
package-lock.json	上記更新に伴う lockfile の解決結果（推移依存含む）を更新
infra/package.json	aws-cdk のバージョン更新
infra/package-lock.json	上記更新に伴う lockfile の解決結果を更新

Files not reviewed (1)

• infra/package-lock.json: Generated file

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.