Bump demisto-sdk from 1.38.14 to 1.39.1 in /docker/demisto-sdk

[dependabot]

Bumps demisto-sdk from 1.38.14 to 1.39.1.

Release notes

Sourced from demisto-sdk's releases.

v1.39.1

Feature

• Enriched the pack marketplace metadata for classifiers and mappers by adding a tags field (set to ["feed"] when the item is a feed) and exposing the type field. #5367
• Enriched the integration marketplace metadata with a tags field that advertises fetch capabilities (feed, fetch-incidents, fetch-events, fetch-assets, fetch-credentials) so consumers can identify supported fetch types before installation. #5367
• Added support for the isfetchcredentials integration field in the schema, parser, content graph object, and strict object models. #5367
• Adding Github.com co-pilot instructions #5350
• Improved BA129 validation to exclude reputation commands, list commands, and get commands from validation to prevent false positives. #5356

Fix

• Strip the internal and isInternal fields from script YAMLs and the internal field from pack metadata files during the upload flow so the uploaded content is visible to users (including in the pack metadata.json content items list). #5346
• Fixed false positives in AS109 validation by improving context key detection to handle single-segment keys, complex root/accessor splits, DT filter expressions, iscontext fields, and Set command key arguments. #5341
• Fixed the error message of BA125 to be more clear. #5344
• Fixed IM106 validation crash when integration image file does not exist by checking image existence before attempting to load it. #5388

Internal

• Switch npm install to npm ci in the setup_test_environment action, add NPM caching to the action. #5386
• Add auto-merge for Dependabot PRs #5352

v1.39.0

Breaking

• Drop support for Python 3.9. #5319
• Removed the deprecated generate-unit-tests command, which is no longer supported. #5319

Feature

• Added support for Python 3.13 and 3.14 #5319
• Added GR114 validation that warns when a content item's supportedModules are not a subset of its non-mandatory dependency's supportedModules. #5327
• Added support for the marketplace-suffix syntax (e.g., hybrid:marketplacev2) on the integration root-level hybrid field, so it no longer fails the ST110 validation. #5353
• Added internal and prompt as valid underlyingcontentitem.type values for Agentix actions. #5206

Fix

• Added marketplaces field to the StrictPreProcessRule schema to prevent ST110 validation failures when pre-process rules include a marketplaces field. #5345

Internal

• Fixed docstring parsing in generate-yml-from-python for Python 3.13+ compatibility using inspect.cleandoc normalization. #5319
• Updated GitHub Actions to support Node.js 24 and resolve deprecation warnings for Node.js 20. #5319

v1.38.25

Feature

• Added support for the internal flag in pack_metadata.json to mark packs as internal (hidden from UI and API). #5325
• Jobs are now blocked from being uploaded as part of a pack. #5329

Fix

• Prevent SDK crash when encountering deployment.json files in pack root. #5332
• Get script's python file from local repo when unifying old_base_content. #5331
• Fixed BC117 validation to handle new pack scenarios where the old content item has no pack attribute, preventing an AttributeError. #5326
• Added support for RENAMED git status in BC117 validation and improved handling of newly added items in new packs. #5326

Internal

• Bump nltk version #5328

... (truncated)

Changelog

Sourced from demisto-sdk's changelog.

1.39.1 (2026-05-31)

Feature

• Enriched the pack marketplace metadata for classifiers and mappers by adding a tags field (set to ["feed"] when the item is a feed) and exposing the type field. #5367
• Enriched the integration marketplace metadata with a tags field that advertises fetch capabilities (feed, fetch-incidents, fetch-events, fetch-assets, fetch-credentials) so consumers can identify supported fetch types before installation. #5367
• Added support for the isfetchcredentials integration field in the schema, parser, content graph object, and strict object models. #5367
• Adding Github.com co-pilot instructions #5350
• Improved BA129 validation to exclude reputation commands, list commands, and get commands from validation to prevent false positives. #5356

Fix

• Strip the internal and isInternal fields from script YAMLs and the internal field from pack metadata files during the upload flow so the uploaded content is visible to users (including in the pack metadata.json content items list). #5346
• Fixed false positives in AS109 validation by improving context key detection to handle single-segment keys, complex root/accessor splits, DT filter expressions, iscontext fields, and Set command key arguments. #5341
• Fixed the error message of BA125 to be more clear. #5344
• Fixed IM106 validation crash when integration image file does not exist by checking image existence before attempting to load it. #5388

Internal

• Switch npm install to npm ci in the setup_test_environment action, add NPM caching to the action. #5386
• Add auto-merge for Dependabot PRs #5352

1.39.0 (2026-05-13)

Breaking

• Drop support for Python 3.9. #5319
• Removed the deprecated generate-unit-tests command, which is no longer supported. #5319

Feature

• Added support for Python 3.13 and 3.14 #5319
• Added GR114 validation that warns when a content item's supportedModules are not a subset of its non-mandatory dependency's supportedModules. #5327
• Added support for the marketplace-suffix syntax (e.g. hybrid:marketplacev2) on the integration root-level hybrid field, so it no longer fails the ST110 validation. #5353
• Added internal and prompt as valid underlyingcontentitem.type values for Agentix actions. #5206

Fix

• Added marketplaces field to the StrictPreProcessRule schema to prevent ST110 validation failures when pre-process rules include a marketplaces field. #5345

Internal

• Fixed docstring parsing in generate-yml-from-python for Python 3.13+ compatibility using inspect.cleandoc normalization. #5319
• Updated GitHub Actions to support Node.js 24 and resolve deprecation warnings for Node.js 20. #5319

1.38.25 (2026-05-04)

Feature

• Added support for the internal flag in pack_metadata.json to mark packs as internal (hidden from UI and API). #5325
• Jobs are now blocked from being uploaded as part of a pack. #5329

Fix

• Prevent SDK crash when encountering deployment.json files in pack root. #5332
• Get script's python file from local repo when unifying old_base_content. #5331
• Fixed BC117 validation to handle new pack scenarios where the old content item has no pack attribute, preventing an AttributeError. #5326
• Added support for RENAMED git status in BC117 validation and improved handling of newly added items in new packs. #5326

Internal

... (truncated)

Commits

• c222682 Provider validation (#5203)
• f33581b Add firstCreated Field (#4707)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[xsoar-bot]

Docker Image Ready - Dev

Docker automatic build has deployed your docker image: devdemisto/demisto-sdk:1.39.1.9918623
It is available now on docker hub at: https://hub.docker.com/r/devdemisto/demisto-sdk/tags
Get started by pulling the image:

docker pull devdemisto/demisto-sdk:1.39.1.9918623

Docker Metadata

• Image Size: 671.04 MB
• Image ID: sha256:13429f718acfadf088b9938139f87b019f54d9c687bd7eee069ddd1e34993a36
• Created: 2026-06-07T13:03:38.497597001Z
• Arch: linux/amd64
• Command: ["demisto-sdk","--help"]
• Environment:
  • PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
  • LANG=C.UTF-8
  • GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305
  • PYTHON_VERSION=3.12.12
  • PYTHON_SHA256=fb85a13414b028c49ba18bbd523c2d055a30b56b18b92ce454ea2c51edc656c4
  • DOCKER_IMAGE=devdemisto/demisto-sdk:1.39.1.9918623
• Labels:
  • org.opencontainers.image.authors:Demisto <containers@demisto.com>
  • org.opencontainers.image.revision:d63e11ad48732df09d9b98dfa8f27672fffde8ae
  • org.opencontainers.image.version:1.39.1.9918623

[xsoar-bot]

Docker Image Ready - Dev

Docker automatic build has deployed your docker image: devdemisto/demisto-sdk:1.39.1.9918623
It is available now on docker hub at: https://hub.docker.com/r/devdemisto/demisto-sdk/tags
Get started by pulling the image:

docker pull devdemisto/demisto-sdk:1.39.1.9918623

Docker Metadata

• Image Size: 671.04 MB
• Image ID: sha256:3aa86e4a88cd534c7287b682f20acda179217e5b86c81e4bd8115b20c78b9ba9
• Created: 2026-06-07T13:32:01.993972045Z
• Arch: linux/amd64
• Command: ["demisto-sdk","--help"]
• Environment:
  • PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
  • LANG=C.UTF-8
  • GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305
  • PYTHON_VERSION=3.12.12
  • PYTHON_SHA256=fb85a13414b028c49ba18bbd523c2d055a30b56b18b92ce454ea2c51edc656c4
  • DOCKER_IMAGE=devdemisto/demisto-sdk:1.39.1.9918623
• Labels:
  • org.opencontainers.image.authors:Demisto <containers@demisto.com>
  • org.opencontainers.image.revision:d63e11ad48732df09d9b98dfa8f27672fffde8ae
  • org.opencontainers.image.version:1.39.1.9918623

[xsoar-bot]

Docker Image Ready - Dev

Docker automatic build has deployed your docker image: devdemisto/demisto-sdk:1.39.1.9918623
It is available now on docker hub at: https://hub.docker.com/r/devdemisto/demisto-sdk/tags
Get started by pulling the image:

docker pull devdemisto/demisto-sdk:1.39.1.9918623

Docker Metadata

• Image Size: 671.04 MB
• Image ID: sha256:3aa86e4a88cd534c7287b682f20acda179217e5b86c81e4bd8115b20c78b9ba9
• Created: 2026-06-07T13:32:01.993972045Z
• Arch: linux/amd64
• Command: ["demisto-sdk","--help"]
• Environment:
  • PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
  • LANG=C.UTF-8
  • GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305
  • PYTHON_VERSION=3.12.12
  • PYTHON_SHA256=fb85a13414b028c49ba18bbd523c2d055a30b56b18b92ce454ea2c51edc656c4
  • DOCKER_IMAGE=devdemisto/demisto-sdk:1.39.1.9918623
• Labels:
  • org.opencontainers.image.authors:Demisto <containers@demisto.com>
  • org.opencontainers.image.revision:d63e11ad48732df09d9b98dfa8f27672fffde8ae
  • org.opencontainers.image.version:1.39.1.9918623

[content-bot]

🔍 AI Triage Report Available

An automated triage report has been generated for this pipeline.

Status: failed
Report ID: 4651867417012e9d

📋 Triage Report
💡 Resolutions are available in the full report.

⚠️ AI-generated triage. Validate before acting.