v0.41.1

What's Changed

• fix(core,s3): explicit-Deny beats public ACL + strict-mode deny on unmapped action (bug-hunt) by @vieiralucas in #2296
• fix(ec2): DescribeVolumes MaxResults guard + change_state TOCTOU + empty-filter-value (bug-hunt) by @vieiralucas in #2297
• fix(cloudformation): translate S3 bucket config + SQS tags through service state in provisioner (bug-hunt) by @vieiralucas in #2299
• fix(rds): persist Copy/Modify/Restore extras + activity-stream + PI fields (bug-hunt) by @vieiralucas in #2298
• fix(elasticache): serverless endpoint port + replication-group members + snapshot export (bug-hunt) by @vieiralucas in #2300
• fix(iot,iotwireless): persist remaining Verb::Action mutators + fail loud on unhandled ones (bug-hunt) by @vieiralucas in #2303
• fix: ghcr image + Lambda extra_hosts + arch-aware ECR scan + real trust/signer/sample-query output (bug-hunt) by @vieiralucas in #2304
• fix(eventbridge,stepfunctions,sns): dup-name guard + terminal-transition re-check + redrive interpreter + ESM poller snapshot (bug-hunt) by @vieiralucas in #2301
• fix(apigatewayv2,opensearch,redshift,cognito,sagemaker): persist Update/Put fields + real Get round-trip (bug-hunt) by @vieiralucas in #2306
• fix(eks,sqs,ecs): OIDC issuer region + host-aware QueueUrl + attr cap + RunTask group by @vieiralucas in #2302
• fix(logs,sns,secretsmanager): real logGroupClass + aggregate summaries + numeric-filter type + pagination (bug-hunt) by @vieiralucas in #2307
• fix(ec2): persist SG rule descriptions + IAM-profile/SG-VPC/TGW-multicast/route-server/BYOIP/NAT associations (bug-hunt) by @vieiralucas in #2305
• fix(models): vendor Smithy models into crates + release v0.41.1 by @vieiralucas in #2308

Full Changelog: v0.41.0...v0.41.1