Bump localstack from 4.6.0 to 4.8.0

[dependabot]

Bumps localstack from 4.6.0 to 4.8.0.

Release notes

Sourced from localstack's releases.

v4.7.0

Summary

LocalStack 4.7 is now available! This release introduces native Organizations support for multi-account setups, Valkey engine support as a Redis alternative in ElastiCache/MemoryDB, AppSync Events API for real-time WebSocket subscriptions, and significant enhancements across CodeBuild, CloudTrail, EKS, and DynamoDB providers with improved AWS parity throughout.

AWS Features

• LocalStack now supports the Valkey engine as an alternative to Redis in ElastiCache (🌟 base) and MemoryDB (🌟 ultimate). To enable Valkey, you need to use the REDIS_CONTAINER_MODE=1 configuration variable while starting the LocalStack container.
• LocalStack now includes a native Organizations provider, replacing the legacy Moto-based implementation. This new provider introduces improved AWS parity and expands support for managing multi-account and multi-organization setups in a local environment. (🌟 ultimate)
• LocalStack now supports the AppSync Events API for real-time event subscriptions, featuring channel namespaces, API Key/IAM authentication, and Direct Lambda integration. It provides both domain-based and path-based endpoints for local development, as well as HTTP interfaces for backend event publishing. (🌟 ultimate)

Enhancements

• Kinesis provider has been upgraded to use kinesis-mock version 0.4.13.
• DynamoDB provider has been upgraded to use DynamoDB Local 3.0.0.
• Hive version 3.1.3 is now the default for Big Data services, such as EMR, Glue, and Athena. (🌟 ultimate)
• CodeBuild provider now includes the following enhancements: (🌟 base)
  • CodeBuild now assumes the configured IAM service role during builds, enabling use of AWS CLI commands without manual credential setup.
  • Additionally, CodeBuild automatically sets environment variables for region, and endpoint URL into the build container. The endpoint URL is configured to point to the LocalStack container, allowing jobs to access other emulated AWS services.
• CloudTrail provider now includes the following enhancements: (🌟 ultimate)
  • CloudTrail now delivers log delivery notifications to SNS after logs are written to S3.
  • CloudTrail events now contain the populated requestParameters and responseElements fields for most events.
• EKS provider now includes the following enhancements: (🌟 ultimate)
  • Support for k8s version 1.33 is now available. The default version also changed to 1.33
  • EKS Load Balancer Controller with target-mode set to ip is now supported.
  • Support for DescribeClusterVersions API for improved compatibility with IaC tooling.
• Support for the cognito-identity.amazonaws.com:sub IAM policy variable has been added. (🌟 base)
• Role ARN and session name parameters are now validated in STS operations.
• The UpdateKinesisStreamingDestination API is now supported in DynamoDB.
• Proper validation errors are now returned for malformed AVP policies instead of internal server errors. (🌟 ultimate)
• The GetTokensFromRefreshToken API is now supported in Cognito. (🌟 base)
• The RSA_AES_KEY_WRAP_SHA_256 algorithm is now supported in the KMS ImportKeyMaterial API.
• Route53 provider now correctly maps FQDNs with trailing dots for ELB routing.
• Proper error responses are now returned for Lambda functions with invalid S3 code locations.
• The DeploymentCanarySettings property is now supported for AWS::ApiGateway::Deployment resources.
• Multiple VPCs are now supported for AWS::Route53::HostedZone during initial creation.
• MySQL RDS containers now run as non-root by default, with support for configurable user and group IDs via RDS_CONTAINER_USER_GROUP_ID environment variable (default: 1000:1000). (🌟 base)
• Improved parity for EFS AccessPoint API with enhanced validation and error handling. (🌟 ultimate)
• The ipAddressType field is now supported in API Gateway REST & HTTP APIs, where the field can be set to ipv4 or dualstack, via the CreateRestApi, and CreateApi APIs.
• Updates to the AWS::SNS::Topic resource are now supported, including support for changes to DisplayName, TopicName, and Tags properties.
• DomainProcessingStatus is now returned and user-provided values are preserved when creating Elasticsearch domains via the CreateElasticsearchDomain API.
• The Name and OpenTableFormatInput parameters are now supported in the Glue CreateTable API, and TableInput is treated as optional in parity with AWS behaviour. (🌟 ultimate)
• Improved support for non-default account IDs in API Gateway v2, AppSync, CodePipeline, Cognito, ELBv2, IoT, and Route53.
• Improved appsync-utils JS package management. The library will now stay up to date by default. It was previously required to use APPSYNC_JS_LIBS_VERSION=refresh to update the library. (🌟 ultimate)

Deprecations

• MWAA support for Airflow versions v2.4.3, v2.5.1, and v2.6.3 is deprecated and will be retired after December 30, 2025. (🌟 ultimate)
• APPSYNC_JS_LIBS_VERSION=latest and APPSYNC_JS_LIBS_VERSION=refresh are no longer supported. Use a tagged version or commit from appsync-utils instead. Or leave empty to stay up to date. (🌟 ultimate)
• Lambda Debug Mode (Preview) has moved from the localstack/localstack image to the localstack/localstack-pro image. This change requires users to use the localstack/localstack-pro image with an authenticated account instead. You can register for free at https://app.localstack.cloud/sign-up

... (truncated)

Commits

• 668c3f7 release version 4.8.0
• aa8c1ba CFn: add more clarity on logging for unimplemented update methods (#13109)
• e3b4f46 KMS: AWS-compliant validation for multi-region key replication (#13102)
• 443b289 IaC: log warning about change of CFN_IGNORE_UNSUPPORTED_RESOURCE_TYPES only i...
• 9395686 S3: Support Preconditions Parameters for UploadPartCopy (#13105)
• cadffb6 Remove dependency of static error message in implementation coverage script (...
• fd33aaf CFn: improve parity of describing failed change sets (#13123)
• de06226 CFN: fix stack update with transformation included (#13122)
• 06e4847 Lambda: S3 presigned url should respect LOCALSTACK_HOST (#13119)
• f71778f CFn: propagate tags to stack/change-set (#13117)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #360.