chore(main): release 3.38.2

[jsell-rh]

🤖 I have created a release beep boop

3.38.2 (2026-06-30)

Bug Fixes

• ci: retarget Konflux deploy-tag to fleet-apps on GitLab (#780) (2d76a14)

---

This PR was generated with Release Please. See documentation.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 16fefedd-02de-406b-8505-811a9cd82d1a

📥 Commits

Reviewing files that changed from the base of the PR and between 2d76a14 and 2985219.

📒 Files selected for processing (5)

• .github/.release-please-manifest.json
• CHANGELOG.md
• src/api/pyproject.toml
• src/dev-ui/VERSION
• website/package.json

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• openshift-hyperfleet/architecture (manual)
• openshift-hyperfleet/hyperfleet-api (manual)
• openshift-hyperfleet/hyperfleet-sentinel (manual)
• openshift-hyperfleet/hyperfleet-adapter (manual)
• openshift-hyperfleet/hyperfleet-broker (manual)

---

📝 Walkthrough

Summary by CodeRabbit

• Bug Fixes
  • Updated the release to 3.38.2.
  • Fixed a CI deployment tagging issue so the release process now targets the correct GitLab destination.
• Chores
  • Bumped version metadata across the project to keep package and app versions in sync.
  • Added the 3.38.2 changelog entry.

Walkthrough

Version strings bumped from 3.38.1 to 3.38.2 in .github/.release-please-manifest.json, src/api/pyproject.toml, src/dev-ui/VERSION, and website/package.json. CHANGELOG.md updated with a 3.38.2 entry under Bug Fixes referencing a CI change retargeting the Konflux deploy-tag to fleet-apps on GitLab.

Security Notes

CWE-1357 (Reliance on Insufficiently Trustworthy Component) applies broadly to any CI retargeting change — this diff does not show the actual deploy-tag retarget logic, only the changelog reference (commit 2d76a14). Verify the underlying GitLab/Konflux pipeline config change separately; it is not included in these ranges. No code, dependency, or executable artifact changes present here — purely version string and changelog bumps.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 11

✅ Passed checks (11 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies the release version and matches the changeset.
Description check	✅ Passed	The description is directly related to the version bump and release notes in this PR.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Sec-02: Secrets In Log Output	✅ Passed	Only release metadata/changelog changed; no log statements or secret/token/password/credential fields were added in the PR diff (CWE-532).
No Hardcoded Secrets	✅ Passed	Touched files are version bumps/changelog only; no CWE-798/CWE-522 hardcoded secrets, credentialed URLs, or literal apiKey/secret/token/password assignments.
No Weak Cryptography	✅ Passed	Diff only bumps versions and adds changelog text; no md5/des/rc4/SHA1-for-security, ECB, custom crypto, or secret comparisons (CWE-327/CWE-208).
No Injection Vectors	✅ Passed	No CWE-89/CWE-78/CWE-79/CWE-502 patterns were added; only release metadata/version bumps and changelog text changed.
No Privileged Containers	✅ Passed	Release metadata only; no Kubernetes/OpenShift manifests, Helm templates, or Dockerfiles changed, so no CWE-250/CWE-276 privileged-container finding.
No Pii Or Sensitive Data In Logs	✅ Passed	PASS: Only release metadata/changelog/version files changed; no slog/log/fmt.Print statements or sensitive fields, so no CWE-532 exposure.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release-please--branches--main--components--kartograph

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch release-please--branches--main--components--kartograph

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

PR Preview Action v1.8.1
Preview removed because the pull request was closed.
2026-06-30 20:27 UTC

[jsell-rh]

🤖 Created releases:

• v3.38.2

🌻