From d5457370ccdbc082089d2aa063408d0bcfb38572 Mon Sep 17 00:00:00 2001
From: Silvio Vasiljevic <silvio.vasiljevic@gmail.com>
Date: Wed, 26 Aug 2026 16:27:24 +0200
Subject: [PATCH 1/2] CI: run LocalStack via lstk instead of the localstack
 PyPI package

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 .github/workflows/release.yml | 30 ++++++++++++++++++++----------
 .github/workflows/test.yml    | 19 ++++++++++---------
 2 files changed, 30 insertions(+), 19 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 207fa92..6ca6d43 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -24,6 +24,7 @@ jobs:
       id-token: write
     env:
       RELEASE_VERSION: ${{ github.event_name == 'workflow_dispatch' && inputs.version || github.event.client_payload.version}}
+      LSTK_CONFIG_FILE: ${{ runner.temp }}/lstk-config.toml
 
     steps:
     - name: "Pull Image (localstack/localstack-pro:${{ env.RELEASE_VERSION }})"
@@ -64,16 +65,26 @@ jobs:
     - name: "Install Project"
       run: make install-dev
 
-    - name: "Install LocalStack"
-      run: pip install localstack==${RELEASE_VERSION}
+    - name: "Install lstk"
+      run: npm install -g @localstack/lstk
+
+    - name: "Configure lstk"
+      # The config pins the emulator image to the release version. It lives outside
+      # the workspace so the "Check Uncommitted Changes" step stays clean.
+      run: |
+        cat > "${LSTK_CONFIG_FILE}" <<EOF
+        [[containers]]
+        type = "aws"
+        tag = "${RELEASE_VERSION}"
+        port = "4566"
+        EOF
 
     - name: "Start Localstack"
       env:
-       LOCALSTACK_AUTH_TOKEN: ${{ secrets.LOCALSTACK_AUTH_TOKEN }}
-      run: |
-        source .venv/bin/activate
-        DEBUG=1 DISABLE_EVENTS="1" IMAGE_NAME="localstack/localstack-pro:${RELEASE_VERSION}" localstack start -d
-        localstack wait -t 120 || (python -m localstack.cli.main logs && false)
+        LOCALSTACK_AUTH_TOKEN: ${{ secrets.LOCALSTACK_AUTH_TOKEN }}
+        LOCALSTACK_DEBUG: "1"
+        LOCALSTACK_DISABLE_EVENTS: "1"
+      run: lstk --config "${LSTK_CONFIG_FILE}" start --timeout 2m
 
     - name: "Run Python Tests"
       env:
@@ -83,9 +94,8 @@ jobs:
     - name: "Stop Localstack"
       if: success() || failure()
       run: |
-        source .venv/bin/activate
-        localstack logs
-        localstack stop
+        lstk --config "${LSTK_CONFIG_FILE}" logs
+        lstk --config "${LSTK_CONFIG_FILE}" stop
 
     - name: "Check Uncommitted Changes"
       run: |
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index acfe316..0da1438 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -33,21 +33,23 @@ jobs:
       run: |
         make install-dev
 
-    - name: Install LocalStack
+    - name: Install lstk
       run: |
-        pip install --pre --upgrade localstack
+        npm install -g @localstack/lstk
 
     - name: Pull image
       run: |
         docker pull localstack/localstack-pro
 
+    # lstk defaults to the aws emulator with image localstack/localstack-pro:latest,
+    # so no config file is needed here.
     - name: Start Localstack
       env:
-       LOCALSTACK_AUTH_TOKEN: ${{ secrets.LOCALSTACK_AUTH_TOKEN }}
+        LOCALSTACK_AUTH_TOKEN: ${{ secrets.LOCALSTACK_AUTH_TOKEN }}
+        LOCALSTACK_DEBUG: "1"
+        LOCALSTACK_DISABLE_EVENTS: "1"
       run: |
-          source .venv/bin/activate
-          DEBUG=1 DISABLE_EVENTS="1" IMAGE_NAME="localstack/localstack-pro:latest" localstack start -d
-          localstack wait -t 120 || (python -m localstack.cli.main logs && false)
+          lstk start --timeout 2m
 
     - name: Run Python Tests
       env:
@@ -58,6 +60,5 @@ jobs:
     - name: Stop Localstack
       if: always()
       run: |
-          source .venv/bin/activate
-          localstack logs
-          localstack stop
+          lstk logs
+          lstk stop

From 964ecff4eb6e390c12af3f7392ba46c834b9d0a6 Mon Sep 17 00:00:00 2001
From: Silvio Vasiljevic <silvio.vasiljevic@gmail.com>
Date: Wed, 26 Aug 2026 16:29:32 +0200
Subject: [PATCH 2/2] Export LSTK_CONFIG_FILE via GITHUB_ENV (runner context is
 invalid in job env)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 .github/workflows/release.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6ca6d43..dcd94c2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -24,7 +24,6 @@ jobs:
       id-token: write
     env:
       RELEASE_VERSION: ${{ github.event_name == 'workflow_dispatch' && inputs.version || github.event.client_payload.version}}
-      LSTK_CONFIG_FILE: ${{ runner.temp }}/lstk-config.toml
 
     steps:
     - name: "Pull Image (localstack/localstack-pro:${{ env.RELEASE_VERSION }})"
@@ -72,12 +71,13 @@ jobs:
       # The config pins the emulator image to the release version. It lives outside
       # the workspace so the "Check Uncommitted Changes" step stays clean.
       run: |
-        cat > "${LSTK_CONFIG_FILE}" <<EOF
+        cat > "${RUNNER_TEMP}/lstk-config.toml" <<EOF
         [[containers]]
         type = "aws"
         tag = "${RELEASE_VERSION}"
         port = "4566"
         EOF
+        echo "LSTK_CONFIG_FILE=${RUNNER_TEMP}/lstk-config.toml" >> "$GITHUB_ENV"
 
     - name: "Start Localstack"
       env: