Docker desktop 4.38 release notes (#21901)

<!--Delete sections as needed -->

## Description

Docker Desktop 4.38 release notes

## Related issues or tickets

<!-- Related issues, pull requests, or Jira tickets -->

## Reviews

<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->

- [ ] Technical review
- [ ] Editorial review
- [ ] Product review

---------

Signed-off-by: Lorena Rangel <[email protected]>
Co-authored-by: Allie Sadler <[email protected]>

Author: lorenrh

content/manuals/desktop/release-notes.md

@@ -27,6 +27,69 @@ Take a look at the [Docker Public Roadmap](https://github.com/orgs/docker/projec
 >
 > If you're experiencing malware detection issues on Mac, follow the steps documented in [docker/for-mac#7527](https://github.com/docker/for-mac/issues/7527).
 
+## 4.38.0
+
+{{< release-date date="2025-01-30" >}}
+
+{{< desktop-install-v2 all=true beta_win_arm=true version="4.38.0" build_path="/181591/" >}}
+
+### New
+
+- Installing Docker Desktop via the PKG installer is now generally available.
+- Enforcing sign in via configuration profiles is now generally available.
+- Docker Compose, Docker Scout, the Docker CLI, and Ask Gordon can now be updated independently of Docker Desktop and without a full restart (Beta).
+- The new `update` command has been added to the Docker Desktop CLI (Mac only).
+- [Bake](/manuals//build/bake/_index.md) is now GA, with support for entitlements and composable attributes.
+- You can now create multi-node Kubernetes clusters in Docker Desktop.
+- [Ask Gordon](/manuals/desktop/features/gordon.md) is more widely available. It is still in Beta.
+
+### Upgrades
+
+- [containerd v1.7.24](https://github.com/containerd/containerd/releases/tag/v1.7.24)
+- [Docker Buildx v0.20.1](https://github.com/docker/buildx/releases/tag/v0.20.1)
+- [Docker Compose v2.32.4](https://github.com/docker/compose/releases/tag/v2.32.4)
+- [Docker Engine v27.5.1](https://docs.docker.com/engine/release-notes/27/#2751)
+- [Docker Scout CLI v1.16.1](https://github.com/docker/scout-cli/releases/tag/v1.16.1)
+- [Runc v1.2.2](https://github.com/opencontainers/runc/releases/tag/v1.2.2)
+- [NVIDIA Container Toolkit v1.17.4](https://github.com/NVIDIA/nvidia-container-toolkit/releases/tag/v1.17.4)
+- [Kubernetes v1.31.4](https://github.com/kubernetes/kubernetes/releases/tag/v1.31.4)
+- Docker Debug `v0.0.38`
+
+### Bug fixes and enhancements
+
+#### For all platforms
+
+- Fixed a bug where access tokens generated by the `docker login` web flow could not be refreshed by Docker Desktop.
+- Fixed a bug where container creation via the Docker API using `curl` failed when [Enhanced Container Isolation](/manuals/security/for-admins/hardened-desktop/enhanced-container-isolation/_index.md) was enabled.
+- Fixed a bug where the RAM policy was not refreshed after the refresh period had elapsed.
+- Fixed a bug in Enhanced Container Isolation when mounting the Docker socket into a container, and then creating Docker containers with bind-mounts from within that container.
+- Fixed an issue that caused a discrepancy between the GUI and the CLI, the former forcing the `0.0.0.0` HostIP in port-mappings. This caused default binding IPs configured through Engine's `ip` flag, or through the bridge option `com.docker.network.bridge.host_binding_ipv4`, to not be used.
+- Fixed a bug where the `pac` setting was ignored in `admin-settings.json`.
+
+#### For Mac
+
+- Fixed a bug in Docker VMM where bind-mounts from non-root volumes would weren't working as expected.
+- Fixed an issue that caused startup failures on systems without IPv6. Fixes [docker/for-mac#14298](https://github.com/docker/for-win/issues/14298).
+- Fixed a bug that caused Docker Desktop to hang. See [docker/for-mac#7493](https://github.com/docker/for-mac/issues/7493#issuecomment-2568594070).
+- Fixed an issue where the uninstaller would fail if the settings file is missing.
+- Fixed a bug where config profiles deployed via Workspace One were ignored.
+
+#### For Windows
+
+- The Docker Desktop installer will now present a UAC prompt when launched.
+- Fixed an issue where Docker Desktop would fail to start for data disks created with old WSL versions that shared the same identifier as other WSL distros.
+- Docker Desktop now restarts when WSL integration settings are changed. This ensures proper setup of WSL integration when using Enhanced Container Isolation.
+
+#### For Linux
+
+- Added support for gvisor networking. Users with an incompatible version of qemu (8.x) will stay on qemu networking, and others will be migrated automatically.
+
+### Deprecation
+
+#### For all platforms
+
+- Deprecate `com.docker.diagnose check|check-dot|check-hypervisordetect-host-hypervisor`.
+
 ## 4.37.2
 
 {{< release-date date="2025-01-09" >}}