Skip to content

chore(deps): update floci/floci docker tag to v1.6.0 - #466

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/floci-floci-1.x
Open

chore(deps): update floci/floci docker tag to v1.6.0#466
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/floci-floci-1.x

Conversation

@renovate

@renovate renovate Bot commented Jul 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change
floci/floci (source) minor 1.5.32-compat → 1.6.0-compat

Release Notes

floci-io/floci (floci/floci)

v1.6.0

Compare Source

Bug Fixes
  • 1790: better populate describe alarm responses (#​1792) (fcb22be)
  • apigateway: fall through to less specific resources on method mi… (#​1630) (96c7aa6), closes #​1547
  • apigateway: import authorizers and security requirements from OpenAPI (#​1798) (91e06eb)
  • apigateway: use last duplicate header value (#​1806) (6a214e8)
  • athena: report the result CSV object key as OutputLocation (#​1895) (418ec1b), closes #​1752
  • cloudformation: AWS::IAM::ManagedPolicy exposes PolicyArn for Fn::GetAtt (#​2056) (f719033)
  • cloudformation: keep uniqueness suffix when truncating generated resource names (#​1802) (48b2139), closes #​1825
  • cloudformation: preserve subnet public IP setting (#​2031) (b62d1e7)
  • cloudformation: provision AWS::ApiGatewayV2::Authorizer and wire Route.AuthorizerId (#​1760) (7f51c74), closes #​1773
  • cloudformation: resolve Fn::GetAtt [Vpc, DefaultSecurityGroup] (#​1977) (bdad066), closes #​1976
  • cloudformation: treat delete of an already-removed DynamoDB table or Lambda function as idempotent (#​1803) (5cb26ff)
  • codebuild: stabilize start and retry responses (#​2052) (fa96b79)
  • cognito: reject unconfirmed users in SRP auth (#​2027) (733c72d)
  • dockerfile: ensure docker-java compatibility (#​2096) (7ade290)
  • dynamodb: resolve nested document paths in ADD and DELETE update actions (#​1908) (c052259)
  • ec2: DescribeKeyPairs returns InvalidKeyPair.NotFound for missing names/ids (#​1932) (7d96106), closes #​1911
  • ec2: return AWS-parity MissingParameter for CreateSubnet without VpcId (#​2094) (88408d8), closes #​2089
  • ecs: resolve Secrets Manager JSON-key selectors in task definition secrets (#​2133) (e3c180b), closes #​1912
  • lambda: carry the owning account into published version snapshots (#​2041) (f4e8bd8), closes #​2040
  • lambda: report resolved executed version (#​2026) (2889fbd)
  • lambda: reset volatile DynamoDB Streams ESM checkpoints on restart (#​2077) (847c30a)
  • pipes: register kafka-clients reflection metadata for native image (#​2068) (ab73379)
  • s3: accept a percent-encoded bucket/key separator in copy sources (#​2060) (a8ed218), closes #​2038
  • s3: apply CreateBucketConfiguration tags on bucket creation (#​2115) (79031a2)
  • s3: include EventBridgeConfiguration in GetBucketNotification response (#​2072) (b8edd37)
  • s3: recognize virtual-hosted-style requests over HTTP/2 (#​1954) (5f7d4d2), closes #​1866
  • ssm: report invalid batch parameter names (#​2075) (04873bf)
  • tls: reuse the persisted self-signed certificate across restarts (#​1799) (a4356f2)
Features
Performance Improvements
  • docker: stop duplicating the native binary into a second image layer (#​2069) (9e90e5c)

[1.5.34] - 2026-07-28

Added
  • cloudtrail: new in-process service. Supports CreateTrail, DescribeTrails, DeleteTrail, UpdateTrail, PutEventSelectors, GetEventSelectors, StartLogging, StopLogging, GetTrailStatus, LookupEvents. S3 data events on hooked ops (PutObject, GetObject, HeadObject, DeleteObject, ListObjects, GetObjectAcl) are buffered per-trail and flushed as gzipped JSON log files into the destination bucket at AWS-shaped key paths (AWSLogs/${account}/CloudTrail/${region}/yyyy/MM/dd/${file}.json.gz) at a configurable cadence. IAM-enforcement denials emit matching AccessDenied records (#​1460)
  • iam: seeded AWSCloudTrail_FullAccess and AWSCloudTrail_ReadOnlyAccess AWS managed policies.
  • iam: distinguish s3:GetObjectAcl / s3:PutObjectAcl / s3:Get|Put|DeleteObjectTagging from base S3 ops via ?acl / ?tagging query parameters when resolving an action for IAM enforcement.
  • ses: implement identity (sending authorization) policies for v1 and v2 (#​1750)
  • stepfunctions: support the HTTP invoke step (#​1503)
  • stepfunctions: implement the States.JsonMerge intrinsic (#​1662)
  • eks: add eks.disable-cni to start k3s without its bundled CNI, so a real CNI can be installed in its place (#​1793)
Fixed
  • storage: dedupe storage backends by resolved file path. Two components opening the same file each got an independent in-memory store, and on graceful shutdown the stale duplicate flushed last and overwrote persisted state (#​1931)
  • elbv2: move persisted-listener restore out of @PostConstruct. Restoring listeners during bean creation re-entered the CDI proxy and recursed until the process died, so after a restart with persisted listeners every ELBv2 operation failed (#​2015)
  • core: reject REST requests signed for a service Floci does not implement with UnknownOperationException, instead of letting them fall through to S3's path-style routes and return a misleading NoSuchBucket (#​1967)
  • cloudformation: model AWS::IAM::Policy as an inline policy so two stacks can reuse the same generated policy name; report failed rollback cleanup as ROLLBACK_FAILED, detach removed IAM inline-policy targets on stack updates, and migrate the legacy managed-policy representation during update or deletion (#​1800)
  • core: return 4xx client errors instead of 500 for malformed JSON-protocol input (#​1926)
  • s3: return 400 MalformedXML for an unparseable PutObjectRetention RetainUntilDate (#​1631)
  • s3: preserve literal question marks in copy source keys (#​1924)
  • cognito: build OIDC URLs from effectiveBaseUrl so FLOCI_HOSTNAME is honored (#​1929)
  • cognito: prefer phone delivery for signup verification (#​1839)
  • dynamodb: tokenize UpdateExpression whitespace-insensitively (#​1862)
  • dynamodb: throw ValidationException when a list_append operand is not a list type (#​1702)
  • firehose: return ResourceInUseException on a duplicate CreateDeliveryStream (#​1738)
  • ec2: apply the cidr-block filter in DescribeSubnets (#​1864)
  • neptune: throw the modeled InsufficientStorageClusterCapacity fault when the proxy-port range is exhausted, so SDK clients can map it to a typed exception (#​1879)
Changed
  • ci: attach provenance and SBOM attestations to the published images (#​2032)

[1.5.33] - 2026-07-15

Added
  • eks: support managed node groups and Fargate profiles (create/describe/list/delete) (#​1523)
  • stepfunctions: support JSONata workflow variables (Assign) (#​1824)
  • cognito: implement GlobalSignOut (#​1701)
  • cognito: emit jti/origin_jti claims and support RevokeToken (#​1705)
  • cloudformation: parse secrets in ECS ContainerDefinitions (#​1874)
Fixed
  • s3: fail fast on unwritable data root instead of opaque 500s (#​1868)
  • s3: handle DeleteBucketReplication instead of deleting the whole bucket (#​1837)
  • s3: return default SSE-S3 from GetBucketEncryption instead of 404 (#​1838)
  • s3: honor ACL headers and explicit grants (#​1768)
  • lifecycle: tear down process-bound containers on shutdown (#​1869)
  • ec2: reject duplicate key pair names in ImportKeyPair (#​1848)
  • iam: pass S3 list condition context to IAM enforcement (#​1748)
  • scheduler: forward MessageAttributes in universal sns:publish target (#​1706)
  • elbv2: expose target health reason parity (#​1743)
  • rds: return DBSubnetGroupNotFoundFault for missing DescribeDBSubnetGroups name (#​1870)
  • cloudformation: carry PackageType through SAM Function expansion (#​1772)
  • eks: register FargateProfileStatus for native-image reflection (#​1876)

[1.5.32] - 2026-07-11

Fixed
  • iam: default UserName to the calling access key's owner (#​1801)
  • lambda: register EventSourceMapping nested types for native-image reflection (#​1826)
  • lambda: return event source mapping failure config (#​1629)
  • lambda: return a downloadable GetFunction Code.Location (#​1718)
  • ec2: serialize concurrent mutations of shared resources per resource (#​1786)
  • ec2: round-trip create-time tags and route/SG-rule attributes (#​1763)
  • ecs: assign awsvpc tasks dynamic host ports to avoid collisions (#​1785)
  • elbv2: dispatch same-port listeners by host (#​1700)
  • autoscaling: propagate ASG tags at launch (#​1734)
  • s3: omit checksum headers from GetObject/HeadObject unless x-amz-checksum-mode: ENABLED (#​1633); support S3 auth enforcement (#​1689)
  • ses: populate VerificationStatus in v2 ListEmailIdentities (#​1722)
  • rds: preserve network placement metadata (#​1735)
  • neptune: roll back proxy port and container on failed provisioning (#​1742)
  • secretsmanager: return partial result for missing secrets in batch (#​1591)
  • scheduler: honor target EventBridgeParameters DetailType/Source (#​1489)
  • tls: add host.docker.internal to self-signed cert SANs (#​1821)
  • aws-core: register persisted model types for native-image reflection (#​1781)

[1.5.31] - 2026-07-07

Added
  • stepfunctions: support Map ItemReader for S3-backed JSON datasets (#​1588)
  • iam/rds/docdb/elasticache/glue/ssm/backup/s3control: implement read-only describe/list APIs for resource collection (#​1581)
  • eventbridge: deliver events to Firehose delivery stream targets (#​1739)
  • apigateway: persist API key tags and add the GetApiKey route (#​1677)
  • scheduler: dispatch ECS targets to RunTask (#​1733)
  • secretsmanager: support Filters and pagination in BatchGetSecretValue (#​1737)
  • ec2: support registered images and snapshots (#​1601); add instance metadata catalog and architecture parity (#​1596)
  • rds-data: add the Data API for PostgreSQL (#​1720)
  • rds: add mock mode to create clusters and instances without Docker (#​1655)
  • cloudwatch: add Logs Insights query support (#​1448)
  • cloudcontrol: list resources from local services (#​1602)
  • cloudformation: apply S3 Bucket CorsConfiguration (#​1617)
  • core: claim wire protocols reactively per the Smithy selection guide (#​1712)
  • docs: generate Supported Actions tables from handler source (#​1641)
Changed
  • lambda: mount function code from a read-only volume instead of copying per cold start (#​1673)
Fixed
  • stepfunctions: resolve qualified Lambda function ARNs in lambda:invoke (#​1660)
  • s3: fix CopyObject handling (#​1670)
  • sqs: honor queue-level DelaySeconds for standard queues (#​1567); render Query-protocol errors as XML instead of leaking JSON (#​1732)
  • ec2: honor launch template default version updates (#​1704)
  • rds: improve postgres proxy startup parity (#​1599); resolve tags by ARN resource type, not only DB instances (#​1649)
  • eks: let pods pull images pushed to the Floci ECR registry (#​1762)
  • cloudwatch: return ResourceNotFound for SetAlarmState on a missing alarm (#​1621)
  • lambda: persist version counters and event-invoke configs across restart (#​1730)
  • elasticbeanstalk: persist applications, versions, and environments across restart (#​1729)
  • emr: return AWS client-error codes instead of 500 InternalServerError (#​1731)
  • autoscaling: align active instance refresh behavior (#​1598)
  • docker: isolate managed resource containers (#​1703)
  • storage: make computeIfAbsent atomic (#​1699)

[1.5.30] - 2026-07-03

Added
  • stepfunctions: add the ecs:runTask service integration (#​1564); add the state machine version APIs PublishStateMachineVersion, ListStateMachineVersions, and DeleteStateMachineVersion (#​1562); add ResultSelector, Pass-state Parameters, ArrayContains, and wildcard projection, and fix IsPresent for absent paths (#​1558); run executions under the execution's account (#​1566)
  • amazonmq: add the Amazon MQ broker control plane backed by RabbitMQ (#​1642)
  • cloudformation: add StackSets with account-aware provisioning (#​1551)
  • ec2: add VPC Flow Logs (#​1611); publish security-group TCP ingress ports on the host (#​1680)
  • firehose: return ExtendedS3DestinationDescription and support UpdateDestination (#​1710)
  • ses: implement ContactList CRUD for SES v2 (#​1638)
  • iam: enforce AssumeRole trust policies when enforcement is enabled (#​1552)
  • cloudtrail: support empty lookup events (#​1603)
  • tls: serve HTTPS on 443 and trust Floci's certificate in Lambda containers (#​1595)
Changed
  • lambda: drop the base64 encode/decode round-trip on the S3 code path (#​1666)
Fixed
  • iam: resolve attached AWS-managed policies from any account (#​1663); enforce STS session policies (#​1636)
  • cloudformation: register the !Cidr and !GetAZs shorthand YAML tags (#​1635); treat a missing Secrets Manager secret as already-deleted on stack delete (#​1672)
  • ec2: return groupSet from DescribeInstanceAttribute (#​1709); align AMI guest and launch template parity (#​1597)
  • ses: align CreateEmailIdentity DKIM behavior with AWS (#​1620); treat missing SendingEnabled as false in v2 PutConfigurationSetSendingOptions (#​1594)
  • cognito: register VerificationCode for reflection so hybrid storage can persist state (#​1646); omit unset optional blocks from CreateUserPoolClient responses (#​1615)
  • ecr: advertise the published host port when adopting the registry container (#​1715)
  • kms: normalize alias targetKeyId to the plain key ID on CreateAlias (#​1648)
  • s3/sns: preserve root service-host routing (#​1625)
  • tagging: persist resource tag mappings across restart (#​1711)
  • dynamodb: return a null Message for non-failed item cancellation reasons (#​1623)
  • elasticache: roll back the proxy port and container on failed provisioning (#​1618)
  • autoscaling: fail SSM commands for stale ASG instances (#​1600)
  • cloudwatch-logs: preserve ingestion order for same-timestamp events (#​1592)
  • elbv2: wrap void Query responses in their Result envelope (#​1189)
  • core: register persisted enums for native-image reflection (#​1695)
  • docker: enable TLS and sync the Docker test runner with the compatibility workflow (#​1714)

[1.5.29] - 2026-06-30

Added
  • stepfunctions: add aws-sdk CloudFormation/EC2 and S3 PutObject service integrations (#​1556)
  • appsync: add the Phase 4 VTL engine for resolver mapping templates (#​1288)
  • iam: add the AmazonRDSEnhancedMonitoringRole managed policy (#​1559); route assumed-role credentials to the target account (#​1549)
  • cognito: add overrides for client id and client secret (#​1486)
  • core: add state reset and nuke endpoints (#​1482)
Fixed
  • cloudformation: treat an already-missing ECS task definition, cluster, or service as delete-complete during stack deletion (#​1645)
  • ecs: honor task portMappings hostPort when launching containers (#​1610); register persisted model records for native-image reflection (#​1606)
  • ses: make FromEmailAddress optional for v2 SendEmail (#​1561)
  • elbv2: publish resolvable local ALB DNS names (#​1492)
  • transcribe: persist vocabularies across restart (#​1608)
  • ssm: retain local service diagnostics on command failure (#​1529)
  • storage: flush persisted state before container teardown on shutdown (#​1607)

[1.5.28] - 2026-06-26

Added
  • iot: add experimental IoT Core support with an in-process MQTT broker (#​1359)
  • elasticbeanstalk: add initial Elastic Beanstalk Query API support (#​1362)
  • memorydb: model authentication via ACLs and users (#​1478)
  • appsync: add the $util runtime library for VTL resolvers (#​1223)
  • pipes: support Kafka pipe sources (MSK and self-managed via smk://) and polling (#​1260)
  • ecs: mount efsVolumeConfiguration task volumes as shared local volumes (#​1569)
  • ses: implement PutConfigurationSetDeliveryOptions for SES v1 (#​1553); publish SNS notifications to identity feedback topics (#​1540)
  • ec2: add an instance-type metadata catalog (#​1534); add a Java-built Ubuntu AMI guest image (#​1542)
  • s3: support bucket logging configuration (#​1510)
  • core: add opt-in Private Network Access for CORS preflights (#​1530)
Fixed
  • cognito: align AdminGetUser lookup with pool sign-in settings (#​1571); align CUSTOM_AUTH trigger failures with AWS behavior (#​1484); align sign-up confirmation with AWS behavior (#​1488)
  • lambda: use the persisted firstReceiveTimestamp in the SQS ESM (#​1548); propagate SQS FIFO system attributes to the ESM event (#​1527); populate SQS messageAttributes in the Lambda event payload (#​1422); resolve handler paths with a leading ./ against the package (#​1575)
  • iam: resolve AWS-managed policies from any account context (#​1573); make entity stores thread-safe under concurrent mutation (#​1509)
  • cloudformation: fail stack delete when a managed resource cannot be deleted (#​1554)
  • codedeploy: persist applications, deployment groups, configs, on-prem instances, and tags (#​1579)
  • codebuild: create the build working directory before running phases (#​1577); stabilize compatibility tests (#​1565)
  • rds: align subnet group placement handling with AWS behavior (#​1295); align create-time parameter group validation with AWS behavior (#​1330)
  • ec2: persist default egress as a SecurityGroupRule and fix DescribeSecurityGroupRules filter parsing (#​1525)
  • msk: advertise an externally reachable broker address (#​1239)
  • eventbridge: sync tags to the Resource Groups Tagging API (#​1347)
  • s3: serve a custom error document for missing keys on static websites (#​1334)
  • cloudfront: honor the configured domain-suffix for generated distribution domains (#​1533)
  • dynamodb: throw 400 with exact error messages for invalid expressions (#​1545)
  • athena: serialize timestamps as epoch seconds in GetWorkGroup and GetTableMetadata (#​1524)
  • elbv2: omit the terminal SSL policy marker (#​1522)
  • sfn: make execution data available via the SDK (#​1506)
  • secretsmanager: register the AWSPENDING version before invoking the rotation Lambda (#​1519)
  • floci-ui: report real sidecar-start failures instead of always blaming the image (#​1544)
  • core: implement read APIs required by Steampipe resource collection (#​1538)

[1.5.27] - 2026-06-23

Added
  • memorydb: add the MemoryDB service with mock mode (#​1420)
  • s3vectors: add the S3 Vectors service (#​1435)
  • codepipeline: add AWS CodePipeline emulation (#​1469)
  • ec2: add Network ACL support (#​1473)
  • secretsmanager: implement the automatic secret rotation lifecycle (#​1467)
  • ses: support v2 dedicated IP pools and configuration-set option groups (#​1412); support v1 configuration-set tracking and reputation-metrics options (#​1479)
  • dynamodb: add TableId, TableClass, and OnDemandThroughput (#​1457)
  • cloudformation: generate an implicit API Gateway from SAM Api events (#​1438)
  • neptune: support a neo4j backend for openCypher via NEPTUNE_DB_TYPE (#​1449)
Fixed
  • ecs: persist durable resources via StorageBackedMap so they survive a restart (#​1514)
  • codebuild: persist projects, report groups, and source credentials (#​1515)
  • config: persist config rules, conformance packs, recorders, delivery channels, and tags (#​1516)
  • dynamodb: validate ExclusiveStartKey against the key schema (#​1443); reject redundant parentheses, duplicate contains() operands, and non-string begins_with (#​1442); cap scanned items with Limit and carry the full cursor on index scans (#​1456)
  • cloudformation: support OAuth and callback configurations in UserPoolClient (#​1458); delete EC2 security groups on stack deletion (#​1472); merge SAM Globals into resource properties (#​1427)
  • ec2: omit the empty stateReason element in DescribeInstances (#​1410); log instance user data (#​1474)
  • rds: fix the PostgreSQL proxy ignoring the requested database name (#​1480)
  • cognito: implement token revocation for AdminUserGlobalSignOut (#​1407)
  • apigatewayv2: cascade-delete child resources and return 404 for dangling references (#​1300)
  • athena: add partition keys to the table metadata response (#​1454)
  • acm: restore certificates after a restart by ignoring computed getters (#​1440)
  • autoscaling: reject launch templates without image ids (#​1451)
  • ssm: reject send-command timeouts below the AWS minimum (#​1511)
  • docdb/neptune: stop containers and proxies on emulator shutdown (#​1452)
  • ui: register StatusResponse for native-image reflection (#​1441); resolve the readiness probe URL from the container endpoint (#​1471)
Changed
  • kms: use enums for type-safety and add algorithms to key metadata (#​1430)

[1.5.26] - 2026-06-19

Added
  • cloudformation: provision EC2 instances (#​1366); RDS resources (#​1367); EKS clusters and node groups (#​1368); CloudWatch Logs log groups (#​1369); CloudWatch metric alarms (#​1371); Auto Scaling groups and launch configurations (#​1372); Kinesis data streams (#​1370); Kinesis Firehose delivery streams (#​1399); add Fn::GetAZs and Fn::Cidr intrinsics (#​1365)
  • docdb: Amazon DocumentDB service emulation (#​1341)
  • autoscaling: preserve policy and mixed-instances parity (#​1437); support group reconciliation and instance refresh (#​1393)
  • ec2: support Spot Instance request actions (#​1291)
  • ssm: add DescribePatchBaselines and GetDefaultPatchBaseline (#​1404); execute run commands in EC2 containers (#​1387)
  • kms: add EnableKey support (#​1381)
  • cognito: align user pool client config APIs with AWS behavior (#​1360)
  • iam: provisioning preflight support (#​1250)
  • ui: serve a landing page and launch the floci-ui console on demand (#​1313)
  • aws: expand the EC2 and RDS availability catalogs (#​1391)
Fixed
  • cloudformation: record a REVIEW_IN_PROGRESS event on change-set creation (#​1431); create the stage from an AWS::ApiGateway::Deployment inline StageName (#​1400)
  • lambda: redrive failed SQS event-source-mapping messages to the DLQ (#​1419); return the {"status":"OK"} ack body from the runtime invocation endpoints (#​1418)
  • ec2: enable embedded DNS for instances (#​1390); persist EC2 state so CloudFormation references survive a restart (#​1364)
  • cognito: align the password recovery flow with AWS behavior (#​1415); add missing UserPoolClient validation (#​1394)
  • autoscaling: validate the MixedInstancesPolicy launch template (#​1439)
  • sqs: process messages from a non-default account (#​1406)
  • ecs: reject a negative desiredCount in CreateService and UpdateService (#​1409)
  • auth/s3: resolve account context from the X-Amz-Credential query param in presigned URLs (#​1413)
  • apigateway: support SQS query-protocol integrations (path-style URI) (#​1385)
  • rds: report DB parameter group attachments (#​1392)
  • rds-data: add native MySQL JDBC support (#​1352)
  • secretsmanager: honor ListSecrets MaxResults and NextToken pagination (#​1383)
  • kms: wrap RSA DIGEST signatures in a PKCS#1 DigestInfo (#​1396)
  • elasticache: register Endpoint for reflection so HybridStorage can persist state (#​1403)
  • cloudwatch: parse decimal epoch timestamps in the JSON protocol handler (#​1388)
  • ses: canonicalize only the domain of suppression-list email addresses (#​1350)
  • scheduler: support aws-sdk universal targets and FIFO MessageGroupId (#​1344)
  • config: make runtime defaults explicit (#​1389)
  • core: return an XML error for a missing action and add volume action fallbacks (#​1348)
Changed
  • floci: regroup the UI and DuckDB under services.floci (#​1397)
  • ci: run focused native compatibility tests (#​1375)
Documentation
  • cloudformation: sync supported resource types and annotate stub actions (#​1405)
  • docdb: document the DocumentDB service (#​1386)
  • correct the service count to 58 and add EMR, WAF v2, and CloudTrail pages (#​1398)
  • move brand assets into docs/assets and fix README image paths (#​1363)

[1.5.25] - 2026-06-15

Added
  • batch: AWS Batch service support (#​1332)
  • wafv2: AWS WAF v2 management API (Phase 1) (#​1327)
  • emr: Amazon EMR management API (Phase 1) (#​1321)
  • rds-data: RDS Data API support (#​1262)
  • rds: provisioning support (#​1253)
  • cloudformation: provision Lambda-backed custom resources and layer versions (#​1146)
  • glue: support partition APIs (#​1315); support column statistics (#​1309); support table statistics deletion (#​1324)
Fixed
  • cloudformation: provision AWS::EC2::VPC/Subnet (and related networking) resources instead of stubbing, so exported subnet ids resolve in EC2 and ELBv2 (#​1342)
  • sqs: raise the max message size to 1 MiB (#​1339); release in-flight ReceiveMessage long polls when their queue is deleted (#​1286); report ApproximateNumberOfMessagesDelayed in GetQueueAttributes (#​1285)
  • ses: omit unknown identities from GetIdentityNotificationAttributes (#​1338); align MailFromAttributes presence with MAIL FROM configuration (#​1310, #​1273); persist inline options on v2 CreateConfigurationSet (#​1307)
  • glue: return partitions in a deterministic order from GetPartitions (#​1335); reject deletes of missing tables (#​1323)
  • sts: persist the session secret key so RDS/ElastiCache IAM tokens validate (#​1266)
  • s3: make conditional puts atomic (#​1329); return BadRequest for dot-dot object keys (#​1325)
  • elbv2: enforce ALB subnet availability-zone rules (#​1247); improve target resolution and persistence (#​1254)
  • ec2: embed the image catalog in the native image and load it lazily (#​1308)
  • ecs: validate network mode and resources for Fargate task definitions (#​1274)
  • cognito: include USERNAME in the SRP PASSWORD_VERIFIER challenge (#​1316)
  • appconfig: stop AppConfig from hijacking the S3 bucket named configuration (#​1317)
  • athena: align GetWorkGroup with AWS behavior (#​1301)
  • msk: populate currentBrokerSoftwareInfo in the cluster describe response (#​1238)
  • parity: pre-create LocalStack/Floci init-hook directories (#​1337)
Documentation
  • lambda: document Podman rootless support and the Runtime API host override (#​1340)

[1.5.24] - 2026-06-11

Added
  • cloudtrail: trail lifecycle support (#​1256)
  • cloudmap: AWS Cloud Map (servicediscovery) management API (#​1217)
  • ec2: provisioning primitives — launch templates, VPC endpoints, NAT gateways, instance type offerings (#​1252)
  • ec2: auto-create default security group and main route table on CreateVpc (#​1177)
  • eks: support managed node groups (#​1226)
  • kms: key state and description operations (DisableKey, UpdateKeyDescription) (#​1251)
  • cognito: verification code subsystem (#​1249)
  • **

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

  • Branch creation
    • Only on Sunday and Saturday (* * * * 0,6)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@codecov

codecov Bot commented Jul 10, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 81.88%. Comparing base (1ae5028) to head (c612be9).

Additional details and impacted files 
@@           Coverage Diff           @@
##           master     #466   +/-   ##
=======================================
  Coverage   81.88%   81.88%           
=======================================
  Files           5        5           
  Lines         414      414           
=======================================
  Hits          339      339           
  Misses         45       45           
  Partials       30       30

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate
renovate Bot force-pushed the renovate/floci-floci-1.x branch from 81c0a32 to e2c5c3f Compare July 11, 2026 08:10
@renovate renovate Bot changed the title chore(deps): update floci/floci docker tag to v1.5.31 chore(deps): update floci/floci docker tag to v1.5.32 Jul 11, 2026
@renovate renovate Bot changed the title chore(deps): update floci/floci docker tag to v1.5.32 chore(deps): update floci/floci docker tag to v1.5.33 Jul 15, 2026
@renovate
renovate Bot force-pushed the renovate/floci-floci-1.x branch 2 times, most recently from 7301364 to 40f462f Compare July 15, 2026 09:58
@renovate renovate Bot changed the title chore(deps): update floci/floci docker tag to v1.5.33 chore(deps): update floci/floci docker tag to v1.5.34 Jul 29, 2026
@renovate
renovate Bot force-pushed the renovate/floci-floci-1.x branch from 40f462f to 92f5d83 Compare July 29, 2026 06:49
@renovate
renovate Bot force-pushed the renovate/floci-floci-1.x branch from 92f5d83 to c612be9 Compare August 6, 2026 07:30
@renovate renovate Bot changed the title chore(deps): update floci/floci docker tag to v1.5.34 chore(deps): update floci/floci docker tag to v1.6.0 Aug 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants