[jsell-rh]

🤖 I have created a release beep boop

3.38.3 (2026-07-02)

Bug Fixes

• deploy: register openshell gateway CLI and sync GitOps docs to hp-fleet-gitops (#782) (c5d8800)

---

This PR was generated with Release Please. See documentation.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 47149e13-845f-45b3-bc00-b3df8c3f67bf

📥 Commits

Reviewing files that changed from the base of the PR and between c5d8800 and 775749f.

📒 Files selected for processing (5)

• .github/.release-please-manifest.json
• CHANGELOG.md
• src/api/pyproject.toml
• src/dev-ui/VERSION
• website/package.json

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• openshift-hyperfleet/architecture (manual)
• openshift-hyperfleet/hyperfleet-api (manual)
• openshift-hyperfleet/hyperfleet-sentinel (manual)
• openshift-hyperfleet/hyperfleet-adapter (manual)
• openshift-hyperfleet/hyperfleet-broker (manual)

---

📝 Walkthrough

Summary by CodeRabbit

• Bug Fixes

  • Resolved a deploy-related issue by ensuring the openshell gateway CLI is registered and GitOps documentation is synced to the latest fleet configuration.

• Chores

  • Bumped the release version to 3.38.3 across the repository, including the API package, dev UI, website, and release tracking files.
  • Updated the changelog with the new release entry.

Walkthrough

Version bump from 3.38.2 to 3.38.3 across release manifest, API pyproject.toml, dev-ui VERSION, and website package.json, with a corresponding CHANGELOG.md entry documenting a bug fix for openshell gateway CLI registration and GitOps docs sync to hp-fleet-gitops. No source logic altered.

Estimated code review effort: 1 (Trivial) | ~2 minutes

No CWE/CVE-relevant surface here — pure version-string synchronization, no dependency graph, lockfile, CI workflow, or IDE config touched. Confirm the manifest, pyproject.toml, VERSION, and package.json values are byte-identical (3.38.3) to prevent drift-induced release mismatches; version skew across build artifacts is a known source of supply-chain confusion (CWE-1104-adjacent: use of components with unverified/inconsistent versioning). No exported/public API changes.

Suggested labels: release, chore

Suggested reviewers: release-bot maintainers

Poem:
No new attack surface, no code to probe,
Just digits ticking on the version globe.
3.38.2 becomes .3 —
Four files nod in sync, plain to see.
Ship it, log it, nothing to distrust today.

🚥 Pre-merge checks | ✅ 11

✅ Passed checks (11 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly matches a version release for 3.38.3.
Description check	✅ Passed	The description matches the release notes and version bump in this changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Sec-02: Secrets In Log Output	✅ Passed	No added log statements with token/password/credential/secret fields or interpolation in the PR files; release-only metadata. CWE-532 not introduced.
No Hardcoded Secrets	✅ Passed	PASS — changed files only bump versions or add release notes; no new hardcoded creds, embedded URL creds, private keys, or secret literals (CWE-798).
No Weak Cryptography	✅ Passed	PR only bumps release metadata/changelog; no crypto code or secret comparisons changed. No CWE-327/CWE-328 findings.
No Injection Vectors	✅ Passed	Only version/changelog edits; no CWE-89/CWE-78/CWE-79/CWE-502 sinks added.
No Privileged Containers	✅ Passed	PASS: Only version/changelog files changed; no manifests, Helm templates, or Dockerfiles were touched, so no CWE-250 privileged-container exposure.
No Pii Or Sensitive Data In Logs	✅ Passed	Only version/changelog files changed; no slog/log/printf sites or PII-bearing data paths were added. CWE-532 not triggered.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release-please--branches--main--components--kartograph

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch release-please--branches--main--components--kartograph

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

PR Preview Action v1.8.1
Preview removed because the pull request was closed.
2026-07-02 04:23 UTC

[jsell-rh]

🤖 Created releases:

• v3.38.3

🌻