chore(deps): update floci/floci docker tag to v1.5.30

[renovate]

This PR contains the following updates:

Package	Update	Change
floci/floci (source)	patch	1.5.28 → 1.5.30

---

Release Notes

floci-io/floci (floci/floci)

v1.5.30

Compare Source

Added

• stepfunctions: add the ecs:runTask service integration (#​1564); add the state machine version APIs PublishStateMachineVersion, ListStateMachineVersions, and DeleteStateMachineVersion (#​1562); add ResultSelector, Pass-state Parameters, ArrayContains, and wildcard projection, and fix IsPresent for absent paths (#​1558); run executions under the execution's account (#​1566)
• amazonmq: add the Amazon MQ broker control plane backed by RabbitMQ (#​1642)
• cloudformation: add StackSets with account-aware provisioning (#​1551)
• ec2: add VPC Flow Logs (#​1611); publish security-group TCP ingress ports on the host (#​1680)
• firehose: return ExtendedS3DestinationDescription and support UpdateDestination (#​1710)
• ses: implement ContactList CRUD for SES v2 (#​1638)
• iam: enforce AssumeRole trust policies when enforcement is enabled (#​1552)
• cloudtrail: support empty lookup events (#​1603)
• tls: serve HTTPS on 443 and trust Floci's certificate in Lambda containers (#​1595)

Changed

• lambda: drop the base64 encode/decode round-trip on the S3 code path (#​1666)

Fixed

• iam: resolve attached AWS-managed policies from any account (#​1663); enforce STS session policies (#​1636)
• cloudformation: register the !Cidr and !GetAZs shorthand YAML tags (#​1635); treat a missing Secrets Manager secret as already-deleted on stack delete (#​1672)
• ec2: return groupSet from DescribeInstanceAttribute (#​1709); align AMI guest and launch template parity (#​1597)
• ses: align CreateEmailIdentity DKIM behavior with AWS (#​1620); treat missing SendingEnabled as false in v2 PutConfigurationSetSendingOptions (#​1594)
• cognito: register VerificationCode for reflection so hybrid storage can persist state (#​1646); omit unset optional blocks from CreateUserPoolClient responses (#​1615)
• ecr: advertise the published host port when adopting the registry container (#​1715)
• kms: normalize alias targetKeyId to the plain key ID on CreateAlias (#​1648)
• s3/sns: preserve root service-host routing (#​1625)
• tagging: persist resource tag mappings across restart (#​1711)
• dynamodb: return a null Message for non-failed item cancellation reasons (#​1623)
• elasticache: roll back the proxy port and container on failed provisioning (#​1618)
• autoscaling: fail SSM commands for stale ASG instances (#​1600)
• cloudwatch-logs: preserve ingestion order for same-timestamp events (#​1592)
• elbv2: wrap void Query responses in their Result envelope (#​1189)
• core: register persisted enums for native-image reflection (#​1695)
• docker: enable TLS and sync the Docker test runner with the compatibility workflow (#​1714)

v1.5.29

Compare Source

Added

• stepfunctions: add aws-sdk CloudFormation/EC2 and S3 PutObject service integrations (#​1556)
• appsync: add the Phase 4 VTL engine for resolver mapping templates (#​1288)
• iam: add the AmazonRDSEnhancedMonitoringRole managed policy (#​1559); route assumed-role credentials to the target account (#​1549)
• cognito: add overrides for client id and client secret (#​1486)
• core: add state reset and nuke endpoints (#​1482)

Fixed

• cloudformation: treat an already-missing ECS task definition, cluster, or service as delete-complete during stack deletion (#​1645)
• ecs: honor task portMappings hostPort when launching containers (#​1610); register persisted model records for native-image reflection (#​1606)
• ses: make FromEmailAddress optional for v2 SendEmail (#​1561)
• elbv2: publish resolvable local ALB DNS names (#​1492)
• transcribe: persist vocabularies across restart (#​1608)
• ssm: retain local service diagnostics on command failure (#​1529)
• storage: flush persisted state before container teardown on shutdown (#​1607)

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 81.88%. Comparing base (439a4d4) to head (24b25e8).

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #464   +/-   ##
=======================================
  Coverage   81.88%   81.88%           
=======================================
  Files           5        5           
  Lines         414      414           
=======================================
  Hits          339      339           
  Misses         45       45           
  Partials       30       30           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.