[ci] Update builtin xrootd to 5.9.5

Author: dpiparo

README/ReleaseNotes/v638/index.md

@@ -593,4 +593,15 @@ This patch release brings a few fixes, that accumulated during the last month.
   * [[#21378](https://github.com/root-project/root/issues/21378)] - [Python] NumPy conversion fails for multidimensional arrays (incorrect itemsize in LowLevelView)
   * [[#21366](https://github.com/root-project/root/issues/21366)] - TGraph2D::Build function may leave the newly created object in inconsistent non-initialised state
   * [[#19329](https://github.com/root-project/root/issues/19329)] - h2root fragilities
-  * [[#16673](https://github.com/root-project/root/issues/16673)] - [RF] Different behaviour of multi-range fit in RooAddPdf and RooProdPdf
+  * [[#16673](https://github.com/root-project/root/issues/16673)] - [RF] Different behaviour of multi-range fit in RooAddPdf and RooProdPdf
+
+## Release 6.38.06
+Published on June 15, 2026
+
+Last patch release of the 6.38 STS series, now superseded by the superior 6.40, LTS.
+
+### Versions of built-in packages
+
+The version of the following packages has been updated:
+
+ - xrootd: 5.9.5

builtins/xrootd/CMakeLists.txt

@@ -6,7 +6,7 @@
 
 include(ExternalProject)
 
-set(XROOTD_VERSION "5.8.0")
+set(XROOTD_VERSION "5.9.5")
 set(XROOTD_PREFIX ${CMAKE_BINARY_DIR}/XROOTD-prefix)
 
 message(STATUS "Downloading and building XROOTD version ${XROOTD_VERSION}")
@@ -27,7 +27,7 @@ endif()
 ExternalProject_Add(
     BUILTIN_XROOTD
     URL http://lcgpackages.web.cern.ch/lcgpackages/tarFiles/sources/xrootd-${XROOTD_VERSION}.tar.gz
-    URL_HASH SHA256=fb5810e18670759292d22a3b5c92d21e1c301e999f319340fd84a6bc8ada6ca2
+    URL_HASH SHA256=f16c33d133bbdaf0db79815d7e13bbd5792e3eac3716cf34ee13e4bbd389b85b
     INSTALL_DIR ${XROOTD_PREFIX}
     CMAKE_ARGS -DCMAKE_INSTALL_PREFIX:PATH=<INSTALL_DIR>
                -DCMAKE_PREFIX_PATH:STRING=${OPENSSL_PREFIX}