chore(deps): update floci/floci docker tag to v1.7.0

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
floci/floci (source)	minor	1.5.32-compat → 1.7.0-compat

---

Release Notes

floci-io/floci (floci/floci)

v1.7.0

Compare Source

Bug Fixes

• apigateway: apply MOCK integration response headers (#​1822) (a49c3e5), closes #​1955 #​1955
• apigateway: create the stage when CreateDeployment carries a stageName (#​2130) (f34e0b5)
• apigateway: fall back to REST API region scan for non-SigV4 Authorization headers (#​2149) (5156095), closes ApiGatewayV2Service#resolveHttpApiRegion ApiGatewayService#resolveRestApiRegion #​2169 #​2169 #​2054 #​2054
• apigateway: honor configured execute-api hostname (#​2286) (3cfa983)
• apigateway: match Content-Type case-insensitively in Lambda proxy responses (#​2150) (10048ad)
• apigateway: preserve trailing slash in proxy event path (#​1863) (4236388), closes #​1557
• apigatewayv2: encode binary Lambda request bodies (#​2203) (28e9f6e)
• apigateway: verify and propagate HTTP API v2 JWT authorizer claims (#​2353) (0444753)
• appconfig: accept top-level resource ARNs in TagResource/ListTagsForResource (#​2279) (0818e5e), closes AppConfigTagHandler#parseArn
• appconfig: add DeleteConfigurationProfile/DeleteHostedConfigurationVersion/ListDeploymentStrategies/DeleteDeploymentStrategy (#​2280) (be62502)
• cloudformation: apply AssumeRolePolicyDocument when adopting an existing IAM role on update (#​2143) (4a5fae4)
• cloudformation: create AWS::IAM::Role inline Policies instead of silently dropping them (#​1969) (8d2a5bd), closes #​1952 #​1825 #​1952
• cloudformation: don't double-encode string-form SNS RedrivePolicy and FilterPolicy (#​2325) (c12f3fa), closes CloudFormationTemplateEngine#resolveJsonAttribute
• cloudformation: expand AWS::Serverless::HttpApi via SAM transform (#​2146) (5812910), closes #​1758 #​1758
• cloudformation: expand SAM AutoPublishAlias into Version + Alias (#​1961) (7d66bf0), closes #​1987 #​1988 #​1987 #​1987 #​1988 #​1987 #​1987
• cloudformation: honor resource-level conditions (#​2255) (8ef71d6)
• cloudformation: honor stack status filters (#​2244) (34c9c6c)
• cloudformation: infer Lambda FunctionName mode for pre-fix persisted stacks (#​2177) (0cbfba8), closes #​2163 #​1831 #​1831 #​2261
• cloudformation: map FIFO and redrive attributes for AWS::SQS::Queue (#​1939) (58112b1)
• cloudformation: pass the CloudFront service argument in the provisioner tests (#​2261) (6ca7d44), closes #​1820 #​1807
• cloudformation: physically delete nested stacks and removed resources on update (#​2345) (291a974)
• cloudformation: reconcile AWS::Logs::LogGroup in place on UpdateStack (#​2152) (76b264f), closes #​1965
• cloudformation: resolve ASG launch templates by id and MixedInstancesPolicy (#​2005) (#​2019) (0971cf6)
• cloudwatch: keep GetLogEvents paging inside the list bounds (#​2355) (c163a86)
• cloudwatch: page FilterLogEvents forward with a usable nextToken (#​2354) (112602f)
• cloudwatch: reject invalid log event tokens (#​2249) (12cf6e2)
• cloudwatch: return logStreamName on FilterLogEvents results (#​2259) (a0adea9), closes #​2210
• cloudwatch: warn on unsupported Logs Insights filter operators (#​2170) (f1c8197), closes #​2042
• cognito: expire refresh tokens and scope them to their own pool in REFRESH_TOKEN_AUTH (#​2135) (7d8aced), closes #​2132 #​2139 #​2132
• cognito: HMAC-sign refresh tokens to prevent forgery (#​2139) (c4f4181)
• cognito: mark verified contact attribute on ConfirmSignUp (#​1881) (d891425)
• cognito: reject invalid refresh tokens in InitiateAuth REFRESH_TOKEN_AUTH (#​2132) (3ce5041), closes #​2113
• cognito: restore the SecureRandom import (#​2337) (7a2dc53), closes #​2139 #​1881 #​1881
• compat: install AWS CLI v2 in the compat image so AWS_ENDPOINT_URL is honored (#​2315) (9fda5f5)
• core: extract shared pagination helper, reject maxResults=0 (#​2343) (25b46e2), closes #​2339 #​2340
• core: stop leaked executor threads from pinning test classloaders (#​2363) (6962e91)
• docker: fall back to Windows named pipe when docker-host is at its unix-socket default (#​2030) (c48c062)
• docker: label containers and volumes per emulator (#​2341) (d819c00)
• dynamodb: compare Value when legacy Expected supplies Exists (#​2125) (a2b20cc)
• dynamodb: isolate item storage and locks between accounts (#​2240) (a803626)
• dynamodb: order Query by full composite sort key (#​2114) (cd3c6b5), closes #​1675
• ec2: assign a public IP only when the subnet opts in via MapPublicIpOnLaunch (#​2023) (2ab795c), closes #​1984
• ec2: delete key pairs by name through the storage backend (#​2187) (fc74987), closes #​2185
• ec2: keep the source on security group rules (#​2266) (a6f5f12), closes #​2190
• ec2: reject prefix list names AWS reserves for its own lists (#​2274) (2d003b5), closes #​2273
• ec2: sshd can only be started from an absolute path since OpenSSH v3.9 (#​2351) (c194bff)
• ec2: start sshd even when run-instances omits a key pair (#​2245) (da5ff91)
• ec2: type a security group rule's tags as security-group-rule (#​2272) (4058dfa), closes #​2270
• ecs: report service deployments and MISSING failures on DescribeServices (#​2176) (8b8f837), closes #​2174
• eks: validate subnet IDs exist before creating a cluster (#​1943) (66fd109), closes #​1942
• elasticache: clean up container by id on readiness-timeout rollback (#​2090) (91b6a40)
• elasticache: store the user Engine instead of hardcoding redis (#​2331) (7a4fc45), closes #​2290
• eventbridge: boolean/numeric pattern values are matched correctly (#​1889) (517094a)
• firehose: build S3 object keys with AWS prefix expressions and name suffix (#​1858) (a79e04e), closes floci-io/floci#1857
• firehose: return Kinesis source in stream description (#​2025) (988696b)
• iam,lambda: return resource tags in Get and Create responses (#​2262) (b71bfc4), closes #​2155 #​2199
• iam: include policy description in GetPolicy/ListPolicies/CreatePolicy responses (#​2155) (1150cfc), closes #​2154
• iam: route long-term access keys to owning accounts (#​2319) (02898cf)
• iam: seed AmazonAPIGatewayPushToCloudWatchLogs managed policy (#​2147) (b1f953e), closes #​2121
• iam: seed the full AWS managed policy catalog (#​2194) (527615b), closes ClassLoader#getResourceAsStream
• iot: match topic rules outside the default region (#​2169) (9b451cc), closes #​2065
• kinesis: reject records over the 1 MiB size limit (#​1896) (5afb60d), closes #​1755
• kinesis: resolve LATEST shard iterator position at GetShardIterator time (#​1901) (3b760bd), closes #​1900
• kms: reject mismatched keys in decryption requests (#​1893) (0cfffbe)
• lambda,iam: assume execution role for in-function SDK calls (#​1909) (573d4bd), closes #​2040
• lambda: disable HTTP/2 cleartext on the runtime API server (#​2181) (cb06a73)
• lambda: drain parked extensions before closing the runtime API server (#​2156) (c0f36ea)
• lambda: give published versions their code location (#​2012) (42022fe), closes #​1988 #​1987 #​1987
• lambda: propagate image inspection failures (#​2268) (9ebf9fe)
• lambda: reassemble container log lines split across Docker frames (#​1953) (6344852)
• lambda: reconcile code volumes against real Docker state and clean up superseded ones (#​2208) (a5daab6), closes #​2164
• lambda: scope resource-policy statements to the request Qualifier (#​2129) (ea74b97)
• lambda: SIGTERM container before closing runtime API socket (#​2098) (b911ccd), closes #​2091 #​2156 #​2156
• lambda: validate Layers ARNs eagerly on CreateFunction/UpdateFunctionConfiguration (#​2282) (2f0ef45), closes #​2280 InMemoryStorage#get
• memorydb: clean up container by id on readiness-timeout rollback (#​2092) (11d5275), closes #​2090 #​2090
• rds: advertise reachable endpoints (#​2074) (f417164)
• rds: fault with DBInstanceNotFound/DBClusterNotFoundFault for missing identifiers in Describe* (#​1740) (02288ab)
• rds: preserve configured database images (#​2035) (9e7cdad)
• rds: resolve AWS-managed default DB cluster parameter groups on reference (#​1805) (b31cbb9), closes #​1820 #​1823
• rds: restore Terraform RDS and RabbitMQ compatibility (#​1951) (ea1231b)
• s3: DeleteObjects honours empty key list (#​2201) (15d6ce8), closes #​2198
• s3: derive S3 host suffix matching from DNS config (#​1843) (188588b)
• s3: enforce auth on object write paths when enforce-auth is enabled (#​2326) (16a8f04), closes #​2318
• s3: Ensure tags are added on multipart s3 uploads. (#​2151) (f6faf0f)
• s3: isolate object byte storage between accounts (#​2241) (cdb2c36)
• s3: preserve literal '+' in object keys and support encoding-type=url in list-objects (#​1736) (93b6f5e), closes #​1589
• s3: route the accelerate subresource instead of falling through (#​2330) (833de25), closes #​2295
• s3: validate FULL_OBJECT checksum on CompleteMultipartUpload (#​1980) (d039780)
• s3vectors: return cosine distance from queries (#​2175) (2f5bc39)
• s3vectors: route ListVectors instead of falling through to S3 (#​2285) (6c4d63b), closes #​2161
• s3: verify SigV4 signature on presigned URLs when enforce-auth is enabled (#​1842) (3fe836a)
• ses: pass the custom-verification-email store in the list-management test (#​2182) (396ef55), closes #​1875 #​1840
• sqs: delayed FIFO message no longer blocks its message group (#​2112) (fa8f8d7), closes #​2104
• stepfunctions: publish execution status after its terminal fields (#​2234) (4ba854a)
• stepfunctions: wrap optimized lambda:invoke result in the Invoke envelope (#​2165) (4581176), closes #​2110
• test: pass the managed prefix list store in Ec2PublicIpOnLaunchTest (#​2288) (62ff490), closes #​2023 #​2287

Features

• apigateway: API key management — UpdateApiKey, DeleteApiKey, UsagePlan custom-id, generateDistinctId (#​1883) (b6765b3), closes #​2045
• apigateway: derive SQS QueueUrl from path-style integration URI when absent from template (#​1903) (cfbae88)
• apigateway: route execute-api hostnames for HTTP APIs (#​2054) (33ba5ac)
• apigatewayv2: route execute-api hosts to WebSocket $connect and @​connections (#​2188) (45bb37f), closes #​2054 #​1846 #​1871 #​1871 #​1846
• applicationautoscaling: add Application Auto Scaling control plane (#​2159) (1795e13), closes #​2157
• appsync: Phase 6 — Query Execution + HTTP Endpoint (#​1884) (819bfed)
• bedrockagentcore: emulate the AgentCore control plane and InvokeAgentRuntime stub (#​2316) (4e6e6df), closes lex00/floci#2 lex00/floci#3 lex00/floci#4 lex00/floci#5 lex00/floci#6 #​7 #​8 #​9 #​12 lex00/floci#14 #​10 #​11 #​13 lex00/floci#10 lex00/floci#11 lex00/floci#13 #​14
• cloudcontrol: implement CreateResource / DeleteResource / GetResource (#​2037) (43f47a3)
• cloudformation: honor resource-level DeletionPolicy (#​2167) (7d9b9ae), closes #​1555
• cloudformation: implement GetTemplateSummary (#​2148) (a235b76), closes #​1964
• cloudformation: provision ApiGateway::Account, AutoScaling::LifecycleHook, and EC2::FlowLog (#​2003) (9280369), closes #​2002
• cloudformation: provision AWS::EC2::VPCEndpoint (#​1995) (a985fa4), closes #​1994
• cloudformation: provision AWS::ECS::CapacityProvider and ClusterCapacityProviderAssociations (#​1999) (907a2df), closes #​1998 #​1998 #​1825
• cloudformation: provision AWS::Events::EventBus as a real custom bus (#​1807) (bc21367), closes #​1803 #​2141
• cloudformation: provision AWS::Lambda::Permission and fix Version and Alias updates (#​1997) (105a8ee), closes #​1996 LambdaService#deleteVersion #​1961
• cloudformation: provision the network ACL family (#​2001) (5e01c07), closes #​2000
• cloudformation: resolve dynamic references in RDS credentials (#​1809) (d9e4447)
• cloudfront: enforce signed private content (#​1831) (5657e35), closes #​1820 #​1823
• cloudfront: serve distribution requests from S3 and custom origins (#​1820) (82f8016), closes #​1823
• cloudhsmv2: implement CloudHSM v2 service (#​1776) (1cc97d5), closes #​2035 #​1810 #​1827
• cognito: add AdminLinkProviderForUser (#​2166) (0203bc7), closes #​1563
• cognito: add GetUserAttributeVerificationCode support (#​1898) (24cdabb)
• dynamodb: global-table v2 replicas (UpdateTable ReplicaUpdates + Custom::DynamoDBReplica) (#​1811) (a29464a)
• ec2: add ReplaceRoute (#​2178) (d943e09), closes #​2087
• ec2: allow a security group rule to take a prefix list as its source (#​2271) (dfcd492), closes #​2269 #​2266
• ec2: config toggle to report the AWS-faithful private IP (#​2024) (33d35b2), closes #​1983
• ec2: DescribeImages synthesizes an AMI for an unmatched wildcard name lookup (#​2009) (cdb6811), closes #​2008
• ec2: DescribeVpcEndpointServices returns the common interface services with AZs (#​2007) (42a79a7), closes #​2004
• ec2: support CreateImage (create AMI from instance) (#​1979) (30a6164), closes #​1978
• ec2: support managed prefix lists (#​2105) (ac4b865), closes #​2100
• ec2: support transit gateways (#​2329) (20470b7)
• eks: support IRSA with a real OIDC issuer and JWT validation (#​2108) (7e5afae)
• elbv2: honor preserve_host_header parameter (#​2109) (2594705)
• eventbridge: deliver events to event-bus targets (#​1814) (50fe67d)
• firehose: honor BufferingHints with time and size based flush (#​2314) (bfda938), closes #​1886
• guardduty: add GuardDuty detector and organization configuration emulation (#​2346) (6779aa8)
• iam: add GetAccountSummary support (#​1986) (c21337c)
• iam: add service-linked role create, delete and deletion status (#​2179) (c8403ac), closes #​2122
• iam: support account aliases (#​2103) (1215429), closes #​2101
• iam: support OIDC identity providers (#​2106) (f17dd1e), closes #​2102
• kinesis: add local inspection endpoints for UI (#​1880) (486be8f)
• kinesisanalytics: add Managed Service for Apache Flink (Kinesis Analytics V2) (#​1914) (d78520d)
• kms: implement UpdateAlias (#​2324) (984886f)
• lambdamicrovms: AWS Lambda MicroVMs service module and its CloudFormation types (#​2079) (40e8aad)
• lambda: support EFS file system configs (#​2053) (e1f389f)
• logs: support log group deletion protection (#​2256) (4215006)
• msk: add configuration CRUD (Create/List/Describe/Delete) (#​2336) (4c510e5)
• opensearch: parse, store, and return AccessPolicies (#​2327) (78ad357)
• rds-data: adding data-api preparedstatement() support (#​1887) (19a32ab)
• rds: model DB proxies and their target groups (#​1813) (e4010ec)
• s3: resolve index documents for static-website directory requests (#​1815) (6d829ff)
• s3tables: emulate metadata service (#​2322) (b45de1b)
• ses: add DKIM actions with domain-inherited email DKIM (#​1904) (ff0201a)
• ses: honor ConfigurationSetName on CreateEmailIdentity (v2) (#​1812) (cd3588b)
• ses: implement custom verification email templates for v1 and v2 (#​1840) (aed50cc)
• ses: implement PutAccountVdmAttributes and return VdmAttributes from GetAccount (v2) (#​2265) (80d1dc7)
• ses: implement SendCustomVerificationEmail for v1 and v2 (#​2191) (bd01c1a)
• ses: implement SendEmail ListManagementOptions suppression and unsubscribe (v2) (#​1875) (fa9ed91)
• ses: implement v1 receipt rule set actions (stored-but-inert) (#​2128) (ff8d6ef)
• stepfunctions: add UpdateStateMachine and update in place on stack updates (#​1867) (97ac3ca)
• stepfunctions: emulate distributed Map ResultWriter (S3 export + manifest) (#​1823) (59cb643), closes #​1820
• stepfunctions: run Map iterations concurrently honoring MaxConcurrency (#​1810) (a7da1b9)
• swf: add Simple Workflow Service emulation (#​2257) (ecad6ac), closes com.amazonaws.swf.base.model#Fault

Performance Improvements

• lambda: reuse a populated code volume across restarts via a completion marker (#​1827) (5d61e95)

v1.6.0

Compare Source

Bug Fixes

• 1790: better populate describe alarm responses (#​1792) (fcb22be)
• apigateway: fall through to less specific resources on method mi… (#​1630) (96c7aa6), closes #​1547
• apigateway: import authorizers and security requirements from OpenAPI (#​1798) (91e06eb)
• apigateway: use last duplicate header value (#​1806) (6a214e8)
• athena: report the result CSV object key as OutputLocation (#​1895) (418ec1b), closes #​1752
• cloudformation: AWS::IAM::ManagedPolicy exposes PolicyArn for Fn::GetAtt (#​2056) (f719033)
• cloudformation: keep uniqueness suffix when truncating generated resource names (#​1802) (48b2139), closes #​1825
• cloudformation: preserve subnet public IP setting (#​2031) (b62d1e7)
• cloudformation: provision AWS::ApiGatewayV2::Authorizer and wire Route.AuthorizerId (#​1760) (7f51c74), closes #​1773
• cloudformation: resolve Fn::GetAtt [Vpc, DefaultSecurityGroup] (#​1977) (bdad066), closes #​1976
• cloudformation: treat delete of an already-removed DynamoDB table or Lambda function as idempotent (#​1803) (5cb26ff)
• codebuild: stabilize start and retry responses (#​2052) (fa96b79)
• cognito: reject unconfirmed users in SRP auth (#​2027) (733c72d)
• dockerfile: ensure docker-java compatibility (#​2096) (7ade290)
• dynamodb: resolve nested document paths in ADD and DELETE update actions (#​1908) (c052259)
• ec2: DescribeKeyPairs returns InvalidKeyPair.NotFound for missing names/ids (#​1932) (7d96106), closes #​1911
• ec2: return AWS-parity MissingParameter for CreateSubnet without VpcId (#​2094) (88408d8), closes #​2089
• ecs: resolve Secrets Manager JSON-key selectors in task definition secrets (#​2133) (e3c180b), closes #​1912
• lambda: carry the owning account into published version snapshots (#​2041) (f4e8bd8), closes #​2040
• lambda: report resolved executed version (#​2026) (2889fbd)
• lambda: reset volatile DynamoDB Streams ESM checkpoints on restart (#​2077) (847c30a)
• pipes: register kafka-clients reflec

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 81.88%. Comparing base (1ae5028) to head (c3077d7).

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #466   +/-   ##
=======================================
  Coverage   81.88%   81.88%           
=======================================
  Files           5        5           
  Lines         414      414           
=======================================
  Hits          339      339           
  Misses         45       45           
  Partials       30       30           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.