chore(main): release 3.38.1

[jsell-rh]

🤖 I have created a release beep boop

3.38.1 (2026-06-24)

Bug Fixes

• ci: wire hp-fleet-gitops auth for Konflux deploy-tag (#778) (96a3ac8)

---

This PR was generated with Release Please. See documentation.

[github-actions]

PR Preview Action v1.8.1
Preview removed because the pull request was closed.
2026-06-24 20:10 UTC

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 5a5d1793-e611-43df-b881-f1bddc6ebd3f

📥 Commits

Reviewing files that changed from the base of the PR and between 96a3ac8 and 06577e3.

📒 Files selected for processing (5)

• .github/.release-please-manifest.json
• CHANGELOG.md
• src/api/pyproject.toml
• src/dev-ui/VERSION
• website/package.json

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• openshift-hyperfleet/architecture (manual)
• openshift-hyperfleet/hyperfleet-api (manual)
• openshift-hyperfleet/hyperfleet-sentinel (manual)
• openshift-hyperfleet/hyperfleet-adapter (manual)
• openshift-hyperfleet/hyperfleet-broker (manual)

---

📝 Walkthrough

Summary by CodeRabbit

• Bug Fixes

  • Fixed an issue affecting deployment tag authentication in CI.

• Chores

  • Bumped the release version to 3.38.1 across project components.
  • Updated the changelog with the new release entry.

Walkthrough

Release metadata was updated from 3.38.0 to 3.38.1 across the release manifest, API package version, dev-ui version file, and website package version. The changelog also gained a 3.38.1 entry dated 2026-06-24 under Bug Fixes.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 11

✅ Passed checks (11 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies the release version and matches the version bump changes.
Description check	✅ Passed	The description matches the release automation and notes the 3.38.1 bug fix included in the changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Sec-02: Secrets In Log Output	✅ Passed	No log statements were introduced; PR only bumps versions and changelog. No CWE-532 exposure in changed files.
No Hardcoded Secrets	✅ Passed	Only release/version and changelog edits; no secret literals, credential URLs, or long base64 in changed lines. Placeholder test values in pyproject are exempt.
No Weak Cryptography	✅ Passed	Only release/version metadata changed; no added crypto code, weak primitives, ECB, SHA1-for-security, or secret comparisons (CWE-327/CWE-328).
No Injection Vectors	✅ Passed	Only release metadata/version bumps changed; no CWE-89/78/79/502 sinks found in touched files.
No Privileged Containers	✅ Passed	PR is release/version metadata only; no manifest/Dockerfile changes and no privileged flags found, so no CWE-250/285 exposure introduced.
No Pii Or Sensitive Data In Logs	✅ Passed	PASS: Changed release metadata/changelog only; no new slog/logr/zap/fmt.Print* call sites or raw request/response dumps. CWE-532/CWE-209 not implicated.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release-please--branches--main--components--kartograph

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch release-please--branches--main--components--kartograph

---

_{Comment @coderabbitai help to get the list of available commands.}

[jsell-rh]

🤖 Created releases:

• v3.38.1

🌻