chore(main): release 1.38.0

[openhands-release-bot]

🤖 I have created a release beep boop

1.38.0 (2026-08-12)

What's Changed

Features

• feat: add ProfilesClient.validateProfile for LLM pre-flight checks by @neubig in feat: add ProfilesClient.validateProfile for LLM pre-flight checks #337

Maintenance

• chore: agent-server (software-agent-sdk) to v1.41.0 by @all-hands-bot in chore: agent-server (software-agent-sdk) to v1.41.0 #327
• chore(deps): bump ws from 8.21.0 to 8.21.2 by @dependabot[bot] in chore(deps): bump ws from 8.21.0 to 8.21.2 #335
• chore(deps-dev): bump typescript-eslint from 8.65.0 to 8.66.0 by @dependabot[bot] in chore(deps-dev): bump typescript-eslint from 8.65.0 to 8.66.0 #334
• chore(deps): bump @openrouter/sdk from 0.13.24 to 1.2.11 by @dependabot[bot] in chore(deps): bump @openrouter/sdk from 0.13.24 to 1.2.11 #333
• chore(deps-dev): bump globals from 17.7.0 to 17.9.0 by @dependabot[bot] in chore(deps-dev): bump globals from 17.7.0 to 17.9.0 #332
• chore(deps-dev): bump ts-jest from 29.4.11 to 29.4.12 by @dependabot[bot] in chore(deps-dev): bump ts-jest from 29.4.11 to 29.4.12 #296
• chore(deps-dev): bump the linting group across 1 directory with 2 updates by @dependabot[bot] in chore(deps-dev): bump the linting group across 1 directory with 2 updates #276
• chore(deps-dev): bump @hey-api/openapi-ts from 0.95.0 to 0.99.0 by @dependabot[bot] in chore(deps-dev): bump @hey-api/openapi-ts from 0.95.0 to 0.99.0 #325
• chore(deps-dev): bump @types/node from 26.1.0 to 26.2.0 by @dependabot[bot] in chore(deps-dev): bump @types/node from 26.1.0 to 26.2.0 #324
• chore: agent-server (software-agent-sdk) to v1.42.1 by @all-hands-bot in chore: agent-server (software-agent-sdk) to v1.42.1 #341

Full Changelog: v1.37.0...v1.38.0

---

This PR was generated with Release Please. See documentation.

[github-actions]

Endpoint audit

⚠️ 7 actionable Agent Server contract divergence(s) · report-only

Contract: pinned release artifact

Category	Count
Actionable client-only calls	0
Actionable server-only operations	7
Documented non-divergences	13
Agent Server contract operations	117
Audited handwritten client endpoints	119

Actionable client-only calls (0)

none

Actionable server-only operations (7)

• GET /api/conversations/{}/events
• GET /api/file/archive
• GET /api/git/commits
• GET /api/git/commits/{}/changes
• GET /api/init
• POST /api/conversations/{}/load_plugin
• POST /api/init

Documented non-divergences (13)

Client calls intentionally absent from the filtered contract (11)

• GET /
• GET /alive
• GET /health
• GET /ready
• GET /server_info

Reason: Operational Agent Server endpoints intentionally excluded from the filtered public release artifact.
Owner: OpenHands runtime maintainers

• DELETE /api/meta-profiles/{}
• GET /api/meta-profiles
• GET /api/meta-profiles/{}
• POST /api/meta-profiles/{}
• POST /api/meta-profiles/{}/activate

Reason: Client-ahead API stacked on the pending Agent Server meta-profiles implementation.
Owner: OpenHands SDK maintainers
Tracking: OpenHands/software-agent-sdk#3744

• POST /api/profiles/{}/validate

Reason: Client-ahead API stacked on the pending Agent Server pre-flight LLM validation endpoint.
Owner: OpenHands TypeScript client maintainers
Tracking: OpenHands/software-agent-sdk#4422

Server operations covered by an exposed browser URL (2)

• GET /api/conversations/{}/workspace
• GET /api/conversations/{}/workspace/{}

Reason: RemoteWorkspace.startWorkspaceSession exposes these authenticated URLs for browser iframe and file requests; they are not HttpClient method calls.
Owner: OpenHands TypeScript client maintainers

[openhands-release-bot]

🤖 Created releases:

• v1.38.0

🌻