v0.17.0

What's Changed

• fix(runtime): finish #1539 podman + in-container container spawning (ECS/RDS/ElastiCache) by @vieiralucas in #1563
• fix(dynamodb): reject keyless Query, correct UPDATED_NEW/OLD, precise numeric compare by @vieiralucas in #1564
• fix(eventbridge,scheduler): real cron field parsing + anything-but prefix by @vieiralucas in #1565
• fix(s3): cap max-keys at 1000, verify Content-MD5, honor copy-source date conditions by @vieiralucas in #1566
• fix(sns): return FIFO SequenceNumber on Publish and PublishBatch by @vieiralucas in #1567
• fix(kinesis): stream-unique sequence numbers via shard discriminator by @vieiralucas in #1568
• fix(sqs): FIFO dedup'd send replays original MessageId + SequenceNumber by @vieiralucas in #1569
• fix(stepfunctions): dynamodb:updateItem ADD to a set unions elements by @vieiralucas in #1570
• fix(apigateway): TestInvokeAuthorizer honors identity source instead of canned Allow by @vieiralucas in #1571
• fix(acm): SearchCertificates honors CertificateStatuses filter + SortBy/SortOrder by @vieiralucas in #1572
• fix(ssm): State Manager associations record + return execution history by @vieiralucas in #1573
• fix(s3,core): guard header/XML parsing against panics on malformed input by @vieiralucas in #1574
• fix(stepfunctions): StartSyncExecution mints unique execution ARNs by @vieiralucas in #1575
• fix(iam): deactivated access keys no longer authenticate by @vieiralucas in #1576
• fix(sigv4): enforce presigned-URL X-Amz-Expires lifetime by @vieiralucas in #1577
• fix(core): handle new SigV4Error presigned variants in dispatch match (unbreak build) by @vieiralucas in #1578
• fix: unbreak main (CFN SnsTopic fifo_sequence + e2e fifo_dedup harness) by @vieiralucas in #1581
• fix(dynamodb): persist un-consumed stream change records across restart by @vieiralucas in #1580
• fix(sts): AssumeRole on a non-existent role is denied by @vieiralucas in #1579
• fix(persistence): unique temp file name for atomic writes by @vieiralucas in #1582
• fix(sqs): restart-orphaned message-move tasks no longer block new moves by @vieiralucas in #1583
• fix(sqs): unbreak build — complete driver_pid for restart-orphaned move tasks (#1583 follow-up) by @vieiralucas in #1584
• fix(lambda): persist + echo SourceAccessConfigurations on event source mappings by @vieiralucas in #1585
• fix(elasticache): delete-during-create no longer resurrects cluster or orphans container by @vieiralucas in #1586
• fix(e2e): repair elasticache delete-during-create test to use real harness helpers by @vieiralucas in #1587
• feat(core): add strict paginate_checked rejecting invalid NextToken (1.7 groundwork) by @vieiralucas in #1588
• fix(lambda): add missing source_access_configurations field (unbreak main) by @vieiralucas in #1590
• fix(scheduler): reject invalid pagination token with ValidationException (1.7) by @vieiralucas in #1589
• fix(ecs): reject invalid pagination token (1.7) by @vieiralucas in #1591
• fix(ecs): correct 1.7 invalid-token test to use real idiom by @vieiralucas in #1592
• fix(application-autoscaling): reject invalid pagination token (1.7) by @vieiralucas in #1593
• fix(wafv2): reject invalid pagination token (1.7) by @vieiralucas in #1594
• fix(organizations): reject invalid pagination token (1.7) by @vieiralucas in #1595
• fix(stepfunctions): reject invalid pagination token (1.7) by @vieiralucas in #1596
• fix(athena): reject invalid pagination token (1.7) by @vieiralucas in #1597
• fix(eventbridge): reject invalid pagination token (1.7) by @vieiralucas in #1598
• fix(eventbridge): reject invalid pagination token (1.7) by @vieiralucas in #1599
• revert(eventbridge): undo 1.7 migration — broke the build by @vieiralucas in #1600
• fix(elasticache): add missing request_id arg (unbreak build) by @vieiralucas in #1601
• fix(elasticache): release write guard before await (unbreak build) by @vieiralucas in #1602
• fix(cloudformation): add source_access_configurations to EventSourceMapping initializer (unbreak build) by @vieiralucas in #1603
• fix(persistence): qualify tempfile::tempdir() in atomic test (unbreak build) by @vieiralucas in #1604
• fix: add source_access_configurations to all EventSourceMapping constructors (unbreak build) by @vieiralucas in #1605
• fix(dynamodb): correct PartiQL number comparison for signs/decimals/exponents by @vieiralucas in #1606
• test(sts): create role before AssumeRole in conformance + e2e/sigv4 tests by @vieiralucas in #1607
• fix(e2e): use iam_client for create_role in sts assume-role tests by @vieiralucas in #1608
• fix(e2e): stagger + retry sfn_sync concurrent-ARN starts to avoid connect storm by @vieiralucas in #1612
• fix(e2e): drive sfn_sync unique-ARN test over raw HTTP to dodge SDK sync- host prefix by @vieiralucas in #1613
• fix(iam): reject malformed Marker in List*Tags instead of silent first-page by @vieiralucas in #1615
• fix(elasticache): reject malformed Marker with InvalidParameterValue by @vieiralucas in #1616
• fix(ssm): reject malformed NextToken with InvalidNextToken by @vieiralucas in #1614
• fix(cloudformation): pre-pull CFN-provisioned Lambda images in background (3.3) by @vieiralucas in #1617
• fix(iam,s3): cross-account S3 requires bucket policy to grant access (5.3) by @vieiralucas in #1621
• fix(server,compose): real container healthcheck + native-Linux extra_hosts by @vieiralucas in #1618
• fix(iam): KMS authorization requires key-policy delegation to IAM (5.5) by @vieiralucas in #1620
• fix(s3): assemble + persist CompleteMultipartUpload off the global lock (4.7) by @vieiralucas in #1622
• fix(dynamodb): monotonic unique stream sequence numbers (4.4) by @vieiralucas in #1619
• fix(cloudformation): provision stacks via block_in_place to avoid worker starvation (3.1) by @vieiralucas in #1624
• fix(elasticache): background Create{CacheCluster,ReplicationGroup,ServerlessCache} (3.2) by @vieiralucas in #1623
• chore(aws-models): weekly refresh from aws/api-models-aws by @github-actions[bot] in #1540
• feat(k8s): shared fakecloud-k8s crate + global backend selection (batch 1/5) by @vieiralucas in #1625
• feat(elasticache): native Kubernetes Pod backend (batch 2/5) by @vieiralucas in #1626
• feat(rds): native Kubernetes Pod backend (batch 3/5) by @vieiralucas in #1627
• feat(ecs): native Kubernetes Pod backend (batch 4/5) by @vieiralucas in #1628
• docs(k8s): document the Kubernetes backend across the whole container stack (batch 5/5) by @vieiralucas in #1629
• chore(release): bump workspace to v0.17.0 by @vieiralucas in #1630

New Contributors

• @github-actions[bot] made their first contribution in #1540

Full Changelog: v0.16.0...v0.17.0