Bump demisto-sdk from 1.38.14 to 1.38.25 in /docker/demisto-sdk

[dependabot]

Bumps demisto-sdk from 1.38.14 to 1.38.25.

Release notes

Sourced from demisto-sdk's releases.

v1.38.25

Feature

• Added support for the internal flag in pack_metadata.json to mark packs as internal (hidden from UI and API). #5325
• Jobs are now blocked from being uploaded as part of a pack. #5329

Fix

• Prevent SDK crash when encountering deployment.json files in pack root. #5332
• Get script's python file from local repo when unifying old_base_content. #5331
• Fixed BC117 validation to handle new pack scenarios where the old content item has no pack attribute, preventing an AttributeError. #5326
• Added support for RENAMED git status in BC117 validation and improved handling of newly added items in new packs. #5326

Internal

• Bump nltk version #5328

v1.38.24

Feature

• Added AS109 validation to ensure that context keys referenced in displayLabel fields of autonomous playbook tasks are actually used in other tasks within the same playbook. #5299
• Added new ignorable and auto-fixable validation BA130 that checks whether 'marketplacev2' appears in a content item's marketplaces while 'platform' does not. #5315
• Added AS107 validator: Validate that subplaybook prefix is consistent across filename, id, and name fields. Added AS108 validator: Validate that subplaybooks have the internal field set to true. #5312
• Added a deprecation warning to the generate-unit-tests command, this command will remove in a subsequent version of the SDK. #5320
• Added TR101 validation to verify that trigger_id is a valid hex string without special characters like dashes or dots. #5287
• Updated the validate-content-path pre-commit hook to enforce the new AgentixActions directory hierarchy. Files must now be placed in a subfolder (e.g., AgentixActions/<ActionName>/<ActionName>.yml), and the old flat structure (AgentixActions/<ActionName>.yml) is no longer allowed. #5303

Fix

• Added support for .html, .css, and .csv file suffixes in the validate-content-path pre-commit hook. #5317

Internal

• Remove agentix_xsiam references from demisto-sdk #5323
• Updated AgentixActionTest parser to resolve action dependencies using action_name instead of action_id, and simplified the strict object model for EvaluationOutcome and AgentixActionTestCase. #5313

v1.38.23

Feature

• Added "Agentic assistant" as a valid sectionorder value for integrations. #5296
• Added supportedModules support for integration parameters with new validators IN170 and IN171 to ensure parameter-level supportedModules values are valid. #5301
• Added AS106 validation warning for autonomous playbook tasks that have a displayLabel but also have quietmode set to 1. #5298
• Added adopted boolean field to playbooks. Added AS104 validator to enforce adopted:true on autonomous pack playbooks with auto-fix. Added Playbook Completed as a mandatory duplicatable section header in AS103. Format command now auto-sets adopted for autonomous pack playbooks. #5286
• Added the AS105 validator to ensure playbooks and triggers in autonomous packs do not have issilent set to true. #5288
• Added new MC101 validation that checks managed packs (managed: true in pack_metadata) have a deployment.json file in the pack folder. #5294

Fix

• Pinned all third-party GitHub Actions to commit SHAs to mitigate supply chain attacks (CVE-2025-30066), upgraded tj-actions/changed-files from compromised v46.0.1 to v46.0.3, and fixed command injection vulnerabilities via GitHub expression interpolation in workflow run blocks. #5295
• Fixed false duplicate errors in GR111/GR112 for Agentix Actions split across files with different version ranges. #5300
• Fixed an issue where the test_xsoar_linter_errors UT was flaky and failed intermittently. #5279

Internal

• Remove old product codes from demisto-sdk #5281

v1.38.22

Feature

• Do not prompt for silent playbook when formatting playbooks with the --assume-no argument is given. #5270

... (truncated)

Changelog

Sourced from demisto-sdk's changelog.

1.38.25 (2026-05-04)

Feature

• Added support for the internal flag in pack_metadata.json to mark packs as internal (hidden from UI and API). #5325
• Jobs are now blocked from being uploaded as part of a pack. #5329

Fix

• Prevent SDK crash when encountering deployment.json files in pack root. #5332
• Get script's python file from local repo when unifying old_base_content. #5331
• Fixed BC117 validation to handle new pack scenarios where the old content item has no pack attribute, preventing an AttributeError. #5326
• Added support for RENAMED git status in BC117 validation and improved handling of newly added items in new packs. #5326

Internal

• Bump nltk version #5328

1.38.24 (2026-04-26)

Feature

• Added AS109 validation to ensure that context keys referenced in displayLabel fields of autonomous playbook tasks are actually used in other tasks within the same playbook. #5299
• Added new ignorable and auto-fixable validation BA130 that checks whether 'marketplacev2' appears in a content item's marketplaces while 'platform' does not. #5315
• Added AS107 validator: Validate that subplaybook prefix is consistent across filename, id, and name fields. Added AS108 validator: Validate that subplaybooks have the internal field set to true. #5312
• Added a deprecation warning to the generate-unit-tests command, this command will remove in a subsequent version of the SDK. #5320
• Added TR101 validation to verify that trigger_id is a valid hex string without special characters like dashes or dots. #5287
• Updated the validate-content-path pre-commit hook to enforce the new AgentixActions directory hierarchy. Files must now be placed in a subfolder (e.g., AgentixActions/<ActionName>/<ActionName>.yml), and the old flat structure (AgentixActions/<ActionName>.yml) is no longer allowed. #5303

Fix

• Added support for .html, .css, and .csv file suffixes in the validate-content-path pre-commit hook. #5317

Internal

• Remove agentix_xsiam references from demisto-sdk #5323
• Updated AgentixActionTest parser to resolve action dependencies using action_name instead of action_id, and simplified the strict object model for EvaluationOutcome and AgentixActionTestCase. #5313

1.38.23 (2026-03-29)

Feature

• Added "Agentic assistant" as a valid sectionorder value for integrations. #5296
• Added supportedModules support for integration parameters with new validators IN170 and IN171 to ensure parameter-level supportedModules values are valid. #5301
• Added AS106 validation warning for autonomous playbook tasks that have a displayLabel but also have quietmode set to 1. #5298
• Added adopted boolean field to playbooks. Added AS104 validator to enforce adopted:true on autonomous pack playbooks with auto-fix. Added Playbook Completed as a mandatory duplicatable section header in AS103. Format command now auto-sets adopted for autonomous pack playbooks. #5286
• Added the AS105 validator to ensure playbooks and triggers in autonomous packs do not have issilent set to true. #5288
• Added new MC101 validation that checks managed packs (managed: true in pack_metadata) have a deployment.json file in the pack folder. #5294

Fix

• Pinned all third-party GitHub Actions to commit SHAs to mitigate supply chain attacks (CVE-2025-30066), upgraded tj-actions/changed-files from compromised v46.0.1 to v46.0.3, and fixed command injection vulnerabilities via GitHub expression interpolation in workflow run blocks. #5295
• Fixed false duplicate errors in GR111/GR112 for Agentix Actions split across files with different version ranges. #5300
• Fixed an issue where the test_xsoar_linter_errors UT was flaky and failed intermittently. #5279

Internal

• Remove old product codes from demisto-sdk #5281

... (truncated)

Commits

• c222682 Provider validation (#5203)
• f33581b Add firstCreated Field (#4707)
• See full diff in compare view

[xsoar-bot]

Docker Image Ready - Dev

Docker automatic build has deployed your docker image: devdemisto/demisto-sdk:1.38.25.8786601
It is available now on docker hub at: https://hub.docker.com/r/devdemisto/demisto-sdk/tags
Get started by pulling the image:

docker pull devdemisto/demisto-sdk:1.38.25.8786601

Docker Metadata

• Image Size: 662.68 MB
• Image ID: sha256:c38e16fa148ee881a8bd65932e4b7690ba41a213ac38090318ceb0479814c54a
• Created: 2026-05-06T11:08:03.140889899Z
• Arch: linux/amd64
• Command: ["demisto-sdk","--help"]
• Environment:
  • PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
  • LANG=C.UTF-8
  • GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305
  • PYTHON_VERSION=3.12.12
  • PYTHON_SHA256=fb85a13414b028c49ba18bbd523c2d055a30b56b18b92ce454ea2c51edc656c4
  • DOCKER_IMAGE=devdemisto/demisto-sdk:1.38.25.8786601
• Labels:
  • org.opencontainers.image.authors:Demisto <containers@demisto.com>
  • org.opencontainers.image.revision:9eb316bc75d8c3a8345beb73269dbff318470b83
  • org.opencontainers.image.version:1.38.25.8786601

[shmuel44]

@dependabot rebase

[xsoar-bot]

Docker Image Ready - Dev

Docker automatic build has deployed your docker image: devdemisto/demisto-sdk:1.38.25.8872635
It is available now on docker hub at: https://hub.docker.com/r/devdemisto/demisto-sdk/tags
Get started by pulling the image:

docker pull devdemisto/demisto-sdk:1.38.25.8872635

Docker Metadata

• Image Size: 662.16 MB
• Image ID: sha256:8dabddc0e3f8b815e6100ca82b7f78c92c8c71958fee5a0e4c5ab1457143caa4
• Created: 2026-05-10T11:47:05.698856854Z
• Arch: linux/amd64
• Command: ["demisto-sdk","--help"]
• Environment:
  • PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
  • LANG=C.UTF-8
  • GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305
  • PYTHON_VERSION=3.12.12
  • PYTHON_SHA256=fb85a13414b028c49ba18bbd523c2d055a30b56b18b92ce454ea2c51edc656c4
  • DOCKER_IMAGE=devdemisto/demisto-sdk:1.38.25.8872635
• Labels:
  • org.opencontainers.image.authors:Demisto <containers@demisto.com>
  • org.opencontainers.image.revision:93212766695d9af84789a74a3b899954c3d6983f
  • org.opencontainers.image.version:1.38.25.8872635

[content-bot]

🔍 AI Triage Report Available

An automated triage report has been generated for this pipeline.

Status: failed
Report ID: a4d9004805010ade

📋 Triage Report
💡 Resolutions are available in the full report.

⚠️ AI-generated triage. Validate before acting.

[dependabot]

Superseded by #44808.