[AUTO] Increment version to 3.9.0-SNAPSHOT

[opensearch-ci-bot]

• Incremented version to 3.9.0-SNAPSHOT.

[github-actions]

PR Code Analyzer ❗

AI-powered 'Code-Diff-Analyzer' found issues on commit 894489d.

Path	Line	Severity	Description
build.gradle	9	high	Default OpenSearch dependency version changed from 3.8.0-SNAPSHOT to 3.9.0-SNAPSHOT. Per mandatory supply chain review rules, all dependency version changes must be flagged regardless of apparent legitimacy. Maintainers should verify this version exists in the expected registry and that the artifact has not been tampered with.

The table above displays the top 10 most important findings.

Total: 1 | Critical: 0 | High: 1 | Medium: 0 | Low: 0

---

Pull Requests Author(s): Please update your Pull Request according to the report above.

Repository Maintainer(s): You can bypass diff analyzer by adding label skip-diff-analyzer after reviewing the changes carefully, then re-run failed actions. To re-enable the analyzer, remove the label, then re-run all actions.

---

⚠️ Note: The Code-Diff-Analyzer helps protect against potentially harmful code patterns. Please ensure you have thoroughly reviewed the changes beforehand.

Thanks.

[dai-chen]

All build and test jobs are green: every build-linux / build-windows-macos matrix (JDK 21/25, unit + integration + doctest), both BWC suites, and CodeQL.

• Code-Diff-Analyzer — policy gate hard-fails for opensearch-ci-bot (not in the bot exclusion list); reproduces on unrelated PRs.
• analytics-engine-compat — HTTP 403 fetching 1-analytics-engine-3.9.0.zip; the artifact isn't published on feature-datafusion yet.
• security-it-windows-macos (windows-latest, 25) — HTTP 503 from the ci.opensearch.org maven proxy resolving junit-bom:5.9.3. Same check passes on JDK 21 and macOS-25 in this PR.