## floci-io/floci — 1.5.34…1.6.0

_59 commits._

### Features
- **feat(kms): implement ListKeyPolicies (#2046)** (760115d)
- **feat(release): one-button release cut from main and ECR Public versioned publishing (#2127)** (61011c0)
- **feat(bedrock): add proxy backend for real LLM responses via OpenAI-compatible API (#1789)** (875e0f2)
- **feat(cloudformation): provision AWS::SecretsManager::SecretTargetAttachment (#1804)** (62a576c)
- **feat(cloudformation): provision AWS::EC2::LaunchTemplate (#1973)** (4e0a815)
- **feat(cloudformation): provision AWS::EC2::VPCGatewayAttachment (#1972)** (1a99721)
- **feat(mwaa): add Amazon MWAA emulation backed by real Airflow (LocalExecutor) (#2086)** (7e4e3e8)
- **feat(lambda): support extra /etc/hosts entries on Lambda launch (#2073)** (b543aa4)
- **feat(cloudformation): support AWS::Events::EventBus and EventBusPolicy (#1794)** (76f602f)
- **feat(iam): seed Amazon Bedrock managed policies (#2034)** (5874348)
- **feat(iam): seed the managed policies CDK bootstrap and the scenario stacks attach (#2064)** (43aea09)
- **feat(iam): list entities attached to managed policies (#1808)** (78ba5b3)
- **feat(ec2): return an empty set for DescribeVpnGateways (#1975)** (3baf4f4)
- **feat(sqs): retain MessageGroupId on standard queue messages (#1891)** (a01b707)
- **feat(ec2): added attach and detach volume support (#1787)** (2c74329)
- **feat(lambda): implement the Lambda Extensions API (#1773)** (9f0dec9)
- **feat(cognito): implement ResendConfirmationCode (#2071)** (bb7c45c)
- **feat(cloudcontrol): include EC2 resource tags (#1933)** (205a8f1)
- **feat(rum): add CloudWatch RUM app-monitor service (#1797)** (aadc93e)
- **feat: Add AWSCloudFormationReadOnlyAccess as a managed policy. (#2057)** (0142dc4)
- **feat(apigateway): support floci:override-id for v1 and v2 (#2045)** (02385da)

### Fixes
- **fix(ecs): resolve Secrets Manager JSON-key selectors in task definition secrets (#2133)** (e3c180b)
- **fix(cloudformation): provision AWS::ApiGatewayV2::Authorizer and wire Route.AuthorizerId (#1760)** (7f51c74)
- **fix(cloudformation): AWS::IAM::ManagedPolicy exposes PolicyArn for Fn::GetAtt (#2056)** (f719033)
- **fix(cloudformation): resolve Fn::GetAtt [Vpc, DefaultSecurityGroup] (#1977)** (bdad066)
- **fix(cloudformation): treat delete of an already-removed DynamoDB table or Lambda function as idempotent (#1803)** (5cb26ff)
- **fix(cloudformation): keep uniqueness suffix when truncating generated resource names (#1802)** (48b2139)
- **fix(apigateway): import authorizers and security requirements from OpenAPI (#1798)** (91e06eb)
- **fix(s3): recognize virtual-hosted-style requests over HTTP/2 (#1954)** (5f7d4d2)
- **fix(s3): apply CreateBucketConfiguration tags on bucket creation (#2115)** (79031a2)
- **fix(codebuild): stabilize start and retry responses (#2052)** (fa96b79)
- **fix(ec2): return AWS-parity MissingParameter for CreateSubnet without VpcId (#2094)** (88408d8)
- **fix(apigateway): use last duplicate header value (#1806)** (6a214e8)
- **fix(cognito): reject unconfirmed users in SRP auth (#2027)** (733c72d)
- **fix(dockerfile): ensure docker-java compatibility (#2096)** (7ade290)
- **fix(s3): accept a percent-encoded bucket/key separator in copy sources (#2060)** (a8ed218)
- **fix(lambda): report resolved executed version (#2026)** (2889fbd)
- **fix(1790): better populate describe alarm responses (#1792)** (fcb22be)
- **fix(lambda): reset volatile DynamoDB Streams ESM checkpoints on restart (#2077)** (847c30a)
- **fix(pipes): register kafka-clients reflection metadata for native image (#2068)** (ab73379)
- **fix(apigateway): fall through to less specific resources on method mi… (#1630)** (96c7aa6)
- **fix(s3): include EventBridgeConfiguration in GetBucketNotification response (#2072)** (b8edd37)
- **fix(lambda): carry the owning account into published version snapshots (#2041)** (f4e8bd8)
- **fix(ssm): report invalid batch parameter names (#2075)** (04873bf)
- **perf(docker): stop duplicating the native binary into a second image layer (#2069)** (9e90e5c)
- **fix(cloudformation): preserve subnet public IP setting (#2031)** (b62d1e7)
- **fix(dynamodb): resolve nested document paths in ADD and DELETE update actions (#1908)** (c052259)
- **fix(ec2): DescribeKeyPairs returns InvalidKeyPair.NotFound for missing names/ids (#1932)** (7d96106)
- **fix(tls): reuse the persisted self-signed certificate across restarts (#1799)** (a4356f2)
- **fix(athena): report the result CSV object key as OutputLocation (#1895)** (418ec1b)

### Tests
- **test(lambda): wait for the parked poll instead of sleeping in extension stop race (#2131)** (e048e52)
- **test(cloudformation): pin the declared-false MapPublicIpOnLaunch case (#2014)** (0929f20)

### Docs
- **docs(cloudwatch): document Logs Insights subset and missing Logs actions (#2044)** (86134e8)

### Chore
- **chore(release): 1.6.0** (e0aab2e)
- **chore(release): make CHANGELOG.md automation-owned (#2138)** (cc6e96d)
- **ci: add reusable JVM and native image publishing (#1936)** (42d94c6)
- **chore(deps): bump actions/setup-python from 6 to 7 (#2081)** (9bbe9ff)
- **chore(deps): bump the actions-minor-patch group with 7 updates (#2080)** (0af0ec7)
- **chore: add an advisory open-PR limit notice (#2047)** (00d59b4)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/floci-io/floci?utm_source=github-action)._