Skip to content

[AUTO] Add release notes for 3.8.0#2480

Merged
cwperks merged 1 commit into
opensearch-project:mainfrom
opensearch-ci-bot:release-chores/release-notes-3.8.0
Jul 24, 2026
Merged

[AUTO] Add release notes for 3.8.0#2480
cwperks merged 1 commit into
opensearch-project:mainfrom
opensearch-ci-bot:release-chores/release-notes-3.8.0

Conversation

@opensearch-ci-bot

Copy link
Copy Markdown
Contributor

Add release notes for 3.8.0

Borderline Calls

Signed-off-by: opensearch-ci-bot <opensearch-infra@amazon.com>
@github-actions

Copy link
Copy Markdown
Contributor

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

🧪 No relevant tests
🔒 No security concerns identified
✅ No TODO sections
🔀 No multiple PR themes
⚡ Recommended focus areas for review

Suspicious CVE IDs

The release note references CVE-2026-44240 and CVE-2026-42338, which use a 2026 year identifier. Given today's date is 2026-07-22, these could be valid but are worth verifying against the referenced PR #2440 to ensure the CVE IDs are accurate and not typos of 2024/2025 CVEs.

* Update proxy-agent to v8 to resolve CVE-2026-44240 and CVE-2026-42338 ([#2440](https://github.com/opensearch-project/security-dashboards-plugin/pull/2440))

@github-actions

Copy link
Copy Markdown
Contributor

PR Code Suggestions ✨

Explore these optional code suggestions:

CategorySuggestion                                                                                                                                    Impact
General
Correct likely typo in CVE year identifiers

The CVE identifiers reference the year 2026, which is likely a typo since CVE IDs
use the year assigned. Verify the correct CVE numbers (probably 2024 or 2025) and
update accordingly to avoid misleading users about the vulnerabilities being
addressed.

release-notes/opensearch-security-dashboards-plugin.release-notes-3.8.0.0.md [14]

-* Update proxy-agent to v8 to resolve CVE-2026-44240 and CVE-2026-42338 ([#2440](https://github.com/opensearch-project/security-dashboards-plugin/pull/2440))
+* Update proxy-agent to v8 to resolve CVE-2024-44240 and CVE-2024-42338 ([#2440](https://github.com/opensearch-project/security-dashboards-plugin/pull/2440))
Suggestion importance[1-10]: 6

__

Why: The CVE year 2026 is suspicious and likely a typo, but the suggestion guesses at replacement values (2024) without verification. It correctly flags a potential accuracy issue in user-facing release notes.

Low

@codecov

codecov Bot commented Jul 22, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.45%. Comparing base (e23f23c) to head (5af1862).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #2480   +/-   ##
=======================================
  Coverage   70.45%   70.45%           
=======================================
  Files         104      104           
  Lines        3198     3198           
  Branches      574      574           
=======================================
  Hits         2253     2253           
  Misses        773      773           
  Partials      172      172           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@cwperks cwperks added the backport 3.8 Backport to 3.8 branch label Jul 24, 2026
@cwperks
cwperks merged commit 53df9b4 into opensearch-project:main Jul 24, 2026
25 of 26 checks passed
cwperks pushed a commit that referenced this pull request Jul 24, 2026
(cherry picked from commit 53df9b4)

Signed-off-by: opensearch-ci-bot <opensearch-infra@amazon.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport 3.8 Backport to 3.8 branch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants