[bacluc-agent]

Ref bacluc-agent/agent-todo#369

Summary

Bumps the stale exact-pinned dependencies that the issue's "Known gaps" enumerated, keeps the plugin in sync across both package.json files, and regenerates the lockfile. No source changes.

• @opencode-ai/plugin 1.18.33 → 1.19.0, kept identical in package.json and .opencode/package.json
• @types/bun 1.4.2 → 1.4.3
• @types/node 25.9.8 → 26.6.5
• prettier 3.9.9 → 3.9.10
• vitest 5.0.2 → 5.0.4
• typescript unchanged at 7.0.2
• package-lock.json regenerated

All pins stay exact (no ranges). The final diff vs origin/main is exactly package.json, .opencode/package.json, and package-lock.json — dependency pins only, no .github/ files.

Test evidence

These are the repository's own ci.yaml workflow runs on head 976496fc plus the tester's own local runs — not automatic agent-runner CI.

Repo ci.yaml (push event), run https://github.com/bacluc-agent/opencode-completion-check-command/actions/runs/38398607284 job 115300114831:

• setup-node: https://github.com/bacluc-agent/opencode-completion-check-command/actions/runs/38398607284/job/115300114831#step:3
• npm ci: https://github.com/bacluc-agent/opencode-completion-check-command/actions/runs/38398607284/job/115300114831#step:4
• npm run typecheck: https://github.com/bacluc-agent/opencode-completion-check-command/actions/runs/38398607284/job/115300114831#step:5
• npm test: https://github.com/bacluc-agent/opencode-completion-check-command/actions/runs/38398607284/job/115300114831#step:6
• npm run format:check: https://github.com/bacluc-agent/opencode-completion-check-command/actions/runs/38398607284/job/115300114831#step:7

Repo ci.yaml (pull_request event), run https://github.com/bacluc-agent/opencode-completion-check-command/actions/runs/38398615635 job 115300142489:

• npm ci: https://github.com/bacluc-agent/opencode-completion-check-command/actions/runs/38398615635/job/115300142489#step:4
• npm run typecheck: https://github.com/bacluc-agent/opencode-completion-check-command/actions/runs/38398615635/job/115300142489#step:5
• npm test: https://github.com/bacluc-agent/opencode-completion-check-command/actions/runs/38398615635/job/115300142489#step:6
• npm run format:check: https://github.com/bacluc-agent/opencode-completion-check-command/actions/runs/38398615635/job/115300142489#step:7

Independent tester verification on this checkout: npm ci exit 0; npm run typecheck exit 0; npm test 96/96 passed on vitest 5.0.4; npm run format:check exit 0.

Why no GitHub Actions pin was changed

An audit of upstream/main 4662a83 found every pinned action already on its current major at its latest release, with two exceptions that are not actionable here:

• mikepenz/release-changelog-builder-action v6.3.0 → v6.4.0: the owner explicitly deferred this to Renovate (upstream PR chore(ci): bump mikepenz/release-changelog-builder-action to v6.4.0 BacLuc/opencode-completion-check-command#92).
• actions/setup-node v7.0.0 → v7.1.0: still inside Renovate's 14-day minimumReleaseAge window.

projectsyn/pr-label-tag-action@v1.3.1 is the only remaining pin that still declares using: node20, but it is already at its latest release and no node24 version has been published, so it cannot be fixed by a pin bump.

[bacluc-agent]

Closing: this PR contains only manual dependency version bumps (package.json, .opencode/package.json, package-lock.json), which the maintainer rejected in BacLuc#100 (review) — "Do not do this by hand, we have renovate." Version bumps are renovate's lane; this branch will not be built upon. The remaining scope of bacluc-agent/agent-todo#369 (plugin/SDK API deprecation audit in src/, workflow feature/syntax audit) continues on a fresh branch.