v0.19.1

What's Changed

• fix(s3): reject invalid object-lock Mode/Status to close GET panic (DoS) by @vieiralucas in #1699
• refactor(server): extract runtime helpers from main.rs into runtime.rs by @vieiralucas in #1700
• fix(rds): port runtime onto shared container_net to close #1539 podman/in-container bugs by @vieiralucas in #1702
• fix(cloudformation,ecr): async custom-resource provisioning + non-blocking JSON layer upload by @vieiralucas in #1703
• fix(lambda,ec2,dynamodb,glue): implement stubbed write-read asymmetric ops by @vieiralucas in #1704
• fix(core,s3,lambda,rds): close concurrency + IAM-bypass hazards (bug-hunt 4.x/5.1) by @vieiralucas in #1706
• fix(s3): serve anonymous GetObject for public-read bucket policy/ACL (#1707) by @vieiralucas in #1708
• fix: close Tier-1 correctness + stub gaps (SQS/Kinesis/ACM/APIGW/APIGWv2/CFN/Athena) by @vieiralucas in #1705
• fix(s3): reject control chars in bucket-default SSE config to close GetObject panic (DoS) by @vieiralucas in #1701
• fix(stepfunctions): faithful lambda:invoke optimized integration by @WarpRat in #1711
• fix(cloudformation): stack events for changeset-created stacks by @WarpRat in #1717
• fix(lambda): warm-pool unique pod names + fast dead-instance failover by @WarpRat in #1713
• fix(cloudformation): apply SAM Globals in the server-side transform by @WarpRat in #1721
• fix(s3): enforce public-read on anonymous GetObject; fix SigV2-presigned auth regression by @ericz7900 in #1710
• fix(cloudformation): resolve Outputs on changeset-executed stacks by @WarpRat in #1715
• fix(cloudformation): dependency-ordered resource provisioning by @WarpRat in #1719
• chore(release): bump workspace to v0.19.1 by @vieiralucas in #1723

Full Changelog: v0.19.0...v0.19.1