What's Changed

• chore(deps): bump aws-actions/setup-sam from 89ddb14d60e682855e3fea4be85b3c56485de310 to 341eee193f458fa5aae5d52c94b0c5cf3a1c5a52 by @dependabot[bot] in #556
• chore(deps): bump github/codeql-action/upload-sarif from 4.38.3 to 4.39.0 in the github-actions group by @dependabot[bot] in #558
• Use hooks.post.install_steps for the cask quarantine step by @joe4dev in #512
• chore(deps): bump github.com/Microsoft/go-winio from 0.6.3 to 0.6.4 in the go-dependencies group across 1 directory by @dependabot[bot] in #557
• chore(go): weekly Go toolchain upgrade by @localstack-bot in #561
• chore(deps): bump https://github.com/zizmorcore/zizmor-pre-commit from v1.30.1 to 1.31.1 by @dependabot[bot] in #562
• chore(deps): bump pre-commit from 4.6.2 to 4.7.0 in /.github/tools by @dependabot[bot] in #563
• Fix stop cutting the emulator's shutdown short by @paolosalvatori in #551
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/sqs from 1.52.4 to 1.52.5 in /test/integration in the go-dependencies group by @dependabot[bot] in #565
• chore(deps): bump the github-actions group with 2 updates by @dependabot[bot] in #566

New Contributors

• @paolosalvatori made their first contribution in #551

Full Changelog: v1.4.2...v1.4.3

Bundled extensions: v2026.10.28 (commit ac8d63a1e586f14f61f6539ebad285c93473c056)

What's Changed

• chore(deps): bump the go-dependencies group in /test/integration with 6 updates by @dependabot[bot] in #552
• Ship licence documents in every package and scope the open-source claim by @carillan81 in #514
• chore(deps): bump goreleaser/goreleaser-action from 7.2.3 to 7.3.0 in the github-actions group by @dependabot[bot] in #555
• chore(deps): bump the go-dependencies group in /test/integration with 6 updates by @dependabot[bot] in #554
• Add S3-specific endpoint to generated AWS profile by @anisaoshafi in #473
• chore(deps): bump the go-dependencies group across 1 directory with 10 updates by @dependabot[bot] in #553

Full Changelog: v1.4.1...v1.4.2

Bundled extensions: v2026.10.19 (commit cad49369cca73c50dd12f2fcc03d782494f5b678)

What's Changed

• Selectively skip test that only passes for dev builds (for Nix) by @purcell in #537
• Bump golang.org/x/net to fix govulncheck and Trivy by @anisaoshafi in #546
• chore(deps): bump the github-actions group across 1 directory with 6 updates by @dependabot[bot] in #550
• chore(deps): bump the go-dependencies group across 1 directory with 6 updates by @dependabot[bot] in #548

Full Changelog: v1.4.0...v1.4.1

Bundled extensions: v2026.10.07 (commit 8376a0a119aa07ac38eea5f5ca62013e2761a3bc)

What's Changed

• Fix image pull progress bar moving backward by @dominikschubert in #526
• chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.1 by @dependabot[bot] in #513
• Run the container-starting emulator selection test serially by @joe4dev in #531
• Isolate extension JSON context test from running emulators by @joe4dev in #530
• Remove version test that fails with released binary by @purcell in #532
• Skip TestExtractAndReplacePreservesSpecialModeBits when setgid is not permitted by @purcell in #534
• Fix extension emulator endpoint for Snowflake and Azure by @peter-smith-phd in #533
• Start offline images with a bundled license without auth by @joe4dev in #528
• Record proxied, proxy_exit_code and cancelled on command telemetry by @joe4dev in #499
• Fix duplicated "emulator" in wrong-type endpoint errors by @anisaoshafi in #535
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.113.4 to 1.114.0 in /test/integration in the go-dependencies group by @dependabot[bot] in #536

New Contributors

• @purcell made their first contribution in #532

Full Changelog: v1.3.0...v1.4.0

Bundled extensions: v2026.10.07 (commit 8376a0a119aa07ac38eea5f5ca62013e2761a3bc)

What's Changed

• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.113.1 to 1.113.2 in /test/integration in the go-dependencies group by @dependabot[bot] in #519
• Stop integration tests from opening real browser tabs by @joe4dev in #516
• Default the integration harness to the file keyring by @joe4dev in #518
• chore(deps): bump the go-dependencies group in /test/integration with 5 updates by @dependabot[bot] in #521
• chore(deps): bump github/codeql-action/upload-sarif from 4.38.1 to 4.38.2 in the github-actions group by @dependabot[bot] in #522
• chore(go): weekly Go toolchain upgrade by @localstack-bot in #469
• Add post-start tip suggesting lstk deploy for IaC workspaces by @peter-smith-phd in #523
• Audit GitHub workflows with zizmor by @joe4dev in #520
• Add LSTK_SESSION_ID to override the analytics session id by @peter-smith-phd in #524
• Add --image flag to run a custom emulator image for one start by @anisaoshafi in #525

Full Changelog: v1.2.0...v1.3.0

Bundled extensions: v2026.09.30 (commit 60387c06afb54a4907aef169cdf8682420f23a6e)

What's Changed

• chore(deps): bump the go-dependencies group in /test/integration with 6 updates by @dependabot[bot] in #503
• chore(deps): bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in #505
• chore(deps): bump the go-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #506
• chore(deps): bump the go-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #507
• chore(deps): bump github/codeql-action/upload-sarif from 4.38.0 to 4.38.1 in the github-actions group by @dependabot[bot] in #508
• Show one tip on first start, document completion setup in the CLI by @joe4dev in #495
• Ship LocalStack's bundled extensions in every release package by @carillan81 in #477
• Fix deprecated postflight stanza in the generated Homebrew cask by @joe4dev in #510
• Turn on the bundled-extensions build flag and fix the descriptions gate by @carillan81 in #509
• Allow permanently disabling lstk update checks by @joe4dev in #491
• Pin GoReleaser and gate the generated Homebrew cask in CI by @joe4dev in #511
• Fix release job failing on a dirty tree by @carillan81 in #515

Full Changelog: v1.1.0...v1.2.0

Bundled extensions: v2026.09.23 (commit 1d08fc983c254a25de706c2a147879ab70865dd5)

What's Changed

• Dpx 693 pr 2 teach lstk update to handle the bundled extensions by @carillan81 in #482

Full Changelog: v1.0.1...v1.1.0

What's Changed

• chore(deps): bump the go-dependencies group across 1 directory with 8 updates by @dependabot[bot] in #487
• Track test/integration go.mod in dependabot by @anisaoshafi in #492
• chore(deps): bump the go-dependencies group in /test/integration with 5 updates by @dependabot[bot] in #493
• Pin GitHub Actions to commit SHAs by @joe4dev in #486
• Point users at shell completion setup on first start by @joe4dev in #484
• Skip release and integration workflows in forks by @joe4dev in #494
• Add --containers, --arch and copyto to the EC2 sandbox script by @peter-smith-phd in #490
• Force S3 path style for lstk cdk on CDK 2.1138.0+ by @peter-smith-phd in #497
• chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @dependabot[bot] in #498

Full Changelog: v1.0.0...v1.0.1

🎉 lstk 1.0.0

lstk is officially 1.0! The commands, config, and behavior are stable now, so you can build on it with confidence.

Thanks for using it and helping shape it along the way.

What's Changed

• Add the IAC error category and its four error codes by @peter-smith-phd in #471
• chore(deps): bump github/codeql-action from 4.37.8 to 4.37.9 in the github-actions group by @dependabot[bot] in #475
• chore(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1 by @dependabot[bot] in #481
• Feed keyboard input into the wrapped-tool PTY by @dominikschubert in #476
• Add --json output to lstk start by @anisaoshafi in #478
• Add --json output to lstk status by @anisaoshafi in #479
• Add ec2-sandbox.sh for throwaway Windows and Linux dev sandboxes by @peter-smith-phd in #480

New Contributors

• @dominikschubert made their first contribution in #476

Full Changelog: v0.22.2...v0.23.0