v0.51.0

What's Changed

• fix(cognito): resolve aliases in custom authentication by @dougludlow in #2700
• feat(cognito): fixed pool/client ids and seeded authenticator secrets by @zenios in #2703
• fix(ec2): list every IpRange of a permission and honor DescribeSecurityGroupRules filters by @vieiralucas in #2704
• fix(docker): bump bundled docker CLI to 29.9.0 to clear Trivy HIGHs by @vieiralucas in #2705
• chore(deps): bump quinn-proto and rustls for new RUSTSEC advisories by @vieiralucas in #2719
• fix(ses): publish configuration-set events through both send APIs by @cavanaug in #2712
• fix(s3): enforce Object Lock on PutObjectRetention by @ericz7900 in #2718
• fix(firehose): reject direct puts to Kinesis-source streams by @cavanaug in #2713
• fix(s3): apply Object Lock to CopyObject and multipart uploads by @vieiralucas in #2721
• fix(logs): deliver raw gzip payload to Firehose subscription destinations by @vieiralucas in #2720
• fix(firehose): validate S3 compression formats before state changes by @cavanaug in #2714
• fix(s3): read object annotation inputs from their modeled wire keys by @vieiralucas in #2722
• ci(e2e): warm every ECR Public image the E2E tests reference by @vieiralucas in #2727
• fix(conformance): backup, kafka, kms, logs, sagemaker, ses, sts, support to 100% by @vieiralucas in #2726
• fix(firehose): preserve S3 record bytes and match AWS object names by @cavanaug in #2715
• fix(ecs): bound every container-CLI call on the task path by @vieiralucas in #2729
• fix(deps): upgrade zip to 9 for RUSTSEC-2026-0367/0368/0369 by @vieiralucas in #2731
• fix(conformance): batch D services to 100%; model-aware round-trip echo by @vieiralucas in #2728
• fix(conformance): re-probe runtime-dependent variants on a container-backed server by @vieiralucas in #2732
• fix(bedrock): pass bedrock-runtime conformance; real InvokeGuardrailChecks by @vieiralucas in #2723
• fix(s3): version and lock objects written by other services like PutObject by @vieiralucas in #2725
• fix(conformance): send empty path labels like omitted ones; route53/lambda to 100% by @vieiralucas in #2724
• fix(ec2,sagemaker): real capacity-reservation split/capacity blocks and model-driven SageMaker describe shapes by @vieiralucas in #2733
• fix(s3): complete flexible checksums across every upload path by @vieiralucas in #2730
• fix(conformance): batch E services to 100% on the refreshed models by @vieiralucas in #2734
• fix(lambda): cross-account layer access through real layer version policies by @vieiralucas in #2735
• chore(conformance): fail on any failing variant; re-baseline at 257,288/257,288 by @vieiralucas in #2736
• fix(s3): one write path for side effects; replication, encryption and cross-service reads match AWS by @vieiralucas in #2737
• chore(aws-models): weekly refresh from aws/api-models-aws by @github-actions[bot] in #2706
• fix(route53resolver): load snapshots with empty endpoint protocols and rule targets by @vieiralucas in #2738
• fix(docs): sync parity rows with the Smithy models (7,612 ops); gate rows, service pages and landing pages by @vieiralucas in #2740
• feat(conformance): measure AWS Batch; fix the gaps the probe found by @vieiralucas in #2739
• feat(firehose): deliver GZIP-compressed S3 objects by @cavanaug in #2745
• chore(release): bump workspace to v0.51.0 by @vieiralucas in #2748

New Contributors

• @zenios made their first contribution in #2703

Full Changelog: v0.50.0...v0.51.0