chore: bump version to v38.0.0 for release (#2195)

Signed-off-by: tdruez <tdruez@aboutcode.org>

Author: tdruez

CHANGELOG.rst

@@ -1,9 +1,36 @@
 Changelog
 =========
 
+**v38 Breaking Changes:**
+
+* Migrate VulnerableCode integration to API v3
+
+v38.0.0 (2026-07-10)
+--------------------
+
+* feat: Migrate VulnerableCode integration to API v3 by @tdruez in https://github.com/aboutcode-org/scancode.io/pull/2148
+* fix: add setup-buildx step to enable GHA cache support by @tdruez in https://github.com/aboutcode-org/scancode.io/pull/2176
+* feat: denormalize project counts to improve performances by @tdruez in https://github.com/aboutcode-org/scancode.io/pull/2178
+* feat: UI refinements for project list and detail pages by @tdruez in https://github.com/aboutcode-org/scancode.io/pull/2180
+* chore: upgrade service images to latest version by @tdruez in https://github.com/aboutcode-org/scancode.io/pull/2183
+* feat: auto-fill project PURL from single input URL by @tdruez in https://github.com/aboutcode-org/scancode.io/pull/2185
+* feat: render the compliance alert value as a colored label by @tdruez in https://github.com/aboutcode-org/scancode.io/pull/2186
+* feat: add pipeline availability check with disabled state in UI by @tdruez in https://github.com/aboutcode-org/scancode.io/pull/2188
+* feat: replace django-taggit with a plain Project.labels JSONField by @tdruez in https://github.com/aboutcode-org/scancode.io/pull/2189
+* feat: move scanpipe settings to local settings.py with lazy resolutio… by @tdruez in https://github.com/aboutcode-org/scancode.io/pull/2187
+* fix: ClamAV scan crash on codebase root directory by @tdruez in https://github.com/aboutcode-org/scancode.io/pull/2190
+* chore: upgrade vulnerable dependencies by @tdruez in https://github.com/aboutcode-org/scancode.io/pull/2191
+* fix: harden SSRF mitigation against redirect and URL-parser bypasses by @tdruez in https://github.com/aboutcode-org/scancode.io/pull/2192
+* fix: spelling typos in docs, models, and pipes by @mr-raj12 in https://github.com/aboutcode-org/scancode.io/pull/2046
+* fix: get_data_from_manifests returning wrong type on early exit by @prajakta128 in https://github.com/aboutcode-org/scancode.io/pull/2182
+* docs: update Errors section to Messages in Web UI tutorial  by @dikshaa2909 in https://github.com/aboutcode-org/scancode.io/pull/2066
+* fix: flag_and_ignore_files_over_max_size inconsistent return value and docstring by @prajakta128 in https://github.com/aboutcode-org/scancode.io/pull/2184
+* fix: silent overwrite when two input sources share the same filename by @tdruez in https://github.com/aboutcode-org/scancode.io/pull/2193
+* fix: xlsx_errors column overwriting last data field in XLSX export by @tdruez in https://github.com/aboutcode-org/scancode.io/pull/2194
+
 **v37 Breaking Changes:**
 
-- Drop support for Python3.10 and Python3.11
+* Drop support for Python3.10 and Python3.11
 
 v37.2.0 (2026-06-12)
 --------------------

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "scancodeio"
-version = "37.2.0"
+version = "38.0.0"
 description = "Automate software composition analysis pipelines"
 readme = "README.rst"
 requires-python = ">=3.12,<3.15"
@@ -36,22 +36,22 @@ dependencies = [
   "importlib-metadata==8.7.1",
   "setuptools==82.0.1",
   # Django related
-  "Django==6.0.5",
-  "django-environ==0.13.0",
+  "django==6.0.6",
+  "django-environ==0.14.0",
   "django-crispy-forms==2.6",
   "crispy-bootstrap3==2024.1",
   "django-filter==25.2",
   "djangorestframework==3.17.1",
   "django-htmx==1.27.0",
-  "django-debug-toolbar==6.3.0",
+  "django-debug-toolbar==7.0.0",
   # Database
   "psycopg[binary]==3.3.4",
   # wait_for_database Django management command
   "django-probes==1.8.0",
   # Task queue
-  "rq==2.9.0",
+  "rq==2.10.0",
   "django-rq==4.1.0",
-  "redis==7.4.0",
+  "redis==8.0.1",
   # WSGI server
   "gunicorn==26.0.0",
   "packaging==26.2",
@@ -60,7 +60,7 @@ dependencies = [
   # ScanCode-toolkit
   "scancode-toolkit[packages]==32.5.0",
   "extractcode[full]==31.1.0",
-  "commoncode==32.4.2",
+  "commoncode==32.5.2",
   "Beautifulsoup4[chardet]==4.14.3",
   "packageurl-python==0.17.6",
   # FetchCode
@@ -77,18 +77,18 @@ dependencies = [
   # Utilities
   "XlsxWriter==3.2.9",
   "openpyxl==3.1.5",
-  "requests==2.33.1",
+  "requests==2.34.2",
   "charset-normalizer==3.4.7",
   "chardet==7.4.3",
   "urllib3==2.7.0",
-  "idna==3.16",
+  "idna==3.18",
   "GitPython==3.1.50",
   "lxml==6.1.1",
-  "certifi==2026.5.20",
+  "certifi==2026.6.17",
   # Profiling
   "pyinstrument==5.1.2",
   # CycloneDX
-  "cyclonedx-python-lib==11.7.0",
+  "cyclonedx-python-lib==11.11.0",
   "jsonschema==4.26.0",
   # MatchCode-toolkit
   "matchcode-toolkit==7.2.2",
@@ -110,6 +110,7 @@ dependencies = [
   "cryptography==49.0.0",
   "aiohttp==3.14.1",
   "pydantic-settings==2.14.2",
+  "croniter==6.2.3",
 ]
 
 [project.optional-dependencies]

scancodeio/__init__.py

@@ -28,7 +28,7 @@
 
 import git
 
-VERSION = "37.2.0"
+VERSION = "38.0.0"
 
 PROJECT_DIR = Path(__file__).resolve().parent
 ROOT_DIR = PROJECT_DIR.parent