#1586 Document Localstack latest image changes (#1588) (#1602)

Author: MatejNedic

.github/workflows/build.yml

@@ -2,9 +2,9 @@ name: Java CI with Maven
 
 on:
   push:
-    branches: [ main, 2.3.x, 2.4.x, 3.0.x, 3.1.x, 3.2.x, 3.3.x, 3.4.x ]
+    branches: [ main, 2.3.x, 2.4.x, 3.0.x, 3.1.x, 3.2.x, 3.3.x, 3.4.x, 4.0.x]
   pull_request:
-    branches: [ main, 2.3.x, 2.4.x, 3.0.x, 3.1.x, 3.2.x, 3.3.x, 3.4.x ]
+    branches: [ main, 2.3.x, 2.4.x, 3.0.x, 3.1.x, 3.2.x, 3.3.x, 3.4.x, 4.0.x ]
 
 permissions:
   contents: read

docs/src/main/asciidoc/testing.adoc

@@ -28,6 +28,18 @@ LocalStackContainer localStackContainer() {
 }
 ----
 
+[IMPORTANT]
+====
+Starting from March 23, 2026, the `localstack:latest` community image will require a `LOCALSTACK_AUTH_TOKEN` to run.
+
+For more information about this change, pricing and how to use LocalStack going forward, see:
+
+- https://blog.localstack.cloud/2026-upcoming-pricing-changes/
+- https://blog.localstack.cloud/localstack-single-image-next-steps/
+- https://blog.localstack.cloud/the-road-ahead-for-localstack/
+
+====
+
 To understand in depth how service connection works, follow https://docs.spring.io/spring-boot/docs/current/reference/htmlsingle/#features.testing.testcontainers.service-connections[Spring Boot Reference Guide] on this topic.
 
 === Using AWS Clients with LocalStack
@@ -41,7 +53,32 @@ class LocalstackAwsClientFactoryTest {
 
 	@Container
 	private LocalStackContainer localStackContainer = new LocalStackContainer(
-			DockerImageName.parse("localstack/localstack:4.4.0"));
+			DockerImageName.parse("localstack/localstack:latest"))
+			.withEnv("LOCALSTACK_AUTH_TOKEN", System.getenv("LOCALSTACK_AUTH_TOKEN"));
+
+	@Test
+	void aTest() {
+		LocalstackAwsClientFactory factory = new LocalstackAwsClientFactory(localStackContainer);
+		S3Client s3Client = factory.create(S3Client.builder());
+		// ...
+	}
+}
+----
+
+[NOTE]
+====
+If this caught you off guard and your pipelines started to fail, or you want to try Spring Cloud AWS, you can pin LocalStack version to `4.12.0`. Note that new features, security patches and any other support will not be provided for pinned versions.
+====
+
+
+[source,java]
+----
+@Testcontainers
+class LocalstackAwsClientFactoryTest {
+
+	@Container
+	private LocalStackContainer localStackContainer = new LocalStackContainer(
+			DockerImageName.parse("localstack/localstack:4.12.0"));
 
 	@Test
 	void aTest() {

spring-cloud-aws-autoconfigure/src/test/java/io/awspring/cloud/autoconfigure/metrics/CloudWatchExportAutoConfigurationIntegrationTests.java

@@ -53,7 +53,7 @@ class CloudWatchExportAutoConfigurationIntegrationTests {
 
 	@Container
 	static LocalStackContainer localstack = new LocalStackContainer(
-			DockerImageName.parse("localstack/localstack:latest"));
+			DockerImageName.parse("localstack/localstack:4.14.0"));
 
 	@DynamicPropertySource
 	static void registerProperties(DynamicPropertyRegistry registry) {

spring-cloud-aws-docker-compose/src/test/resources/docker-compose.yaml

@@ -1,6 +1,6 @@
 services:
   localstack:
-    image: localstack/localstack
+    image: localstack/localstack:4.4.0
     environment:
       AWS_ACCESS_KEY_ID: noop
       AWS_SECRET_ACCESS_KEY: noop

spring-cloud-aws-samples/spring-cloud-aws-ses-sample/docker-compose.yml

@@ -10,7 +10,7 @@ services:
       - AWS_DEFAULT_REGION=us-east-1
       - SERVICES=ses
       - S3_MOUNT=/tmp
-    image: localstack/localstack:latest
+    image: localstack/localstack:4.4.0
     ports:
       - "4566:4566"
     volumes: