[dependabot]

Bumps anomalyco/opencode/github from 1.18.29 to 2.0.26.

Release notes

Sourced from anomalyco/opencode/github's releases.

v1.19.0

Core

Improvements

• Run opencode upgrade --major to upgrade to OpenCode 2.

Bugfixes

• Allow the OpenAI ultrafast service tier.
• Validate PTY connection origins and tickets before checking whether a PTY exists.

TUI

Improvements

• Use /update to install OpenCode updates or upgrade to OpenCode 2; updates are no longer installed automatically.

Thank you to 1 community contributor:

• @​dc85:
  • docs(web): add Exo Free to Zen docs (#53622)
  • fix(stats): attribute exo usage to an unknown provider (#53621)
  • docs(web): remove Fledge Alpha Free from Zen docs (#53984)

v1.18.35

Core

Improvements

• Added canonical redirects and JSON and Markdown data formats for agent-readable stats.

Bugfixes

• xAI tool results now include supported images, while unsupported image formats are skipped. (@​Jaaneek)

Thank you to 3 community contributors:

• @​dc85:
  • docs(web): add Fledge Alpha Free to Zen docs (#52895)
• @​jm0ney337:
  • docs(ecosystem): add opencode-supabase to ecosystem plugins (#49848)
• @​Jaaneek:
  • fix(opencode): bump @​ai-sdk/xai to 3.0.139 so tool-result images reach xAI (#53549)

v1.18.34

Core

Bugfixes

• Send namespaced session and parent-session identity headers with model requests.
• Re-sign locally compiled macOS binaries so they run reliably on macOS 27+. (@​ryangamerdev)
• Sign macOS CLI release binaries with a Developer ID.

Thank you to 3 community contributors:

• @​dc85:
  • docs(web): correct GPT 6.1 Sol cache pricing (#52176)
• @​metal-huang:

... (truncated)

Changelog

Sourced from anomalyco/opencode/github's changelog.

Changelog

Release notes for OpenCode V2, newest first.

v2.0.29 — 2026-10-14

Highlights

• Remote Device Pairing: In Settings → Pairing, select Pair device to enable OpenTunnel remote access and get a QR code or copyable link. (#55306)
• Provider Account Management: Use the connect dialog or Settings → Providers to switch, rename, remove, or add provider accounts. (#54101)
• Automatic Response Continuation: Responses that reach their output-token limit now continue automatically, preserving partial output instead of stopping abruptly. (#53876)
• Trackpad Image Navigation: Pinch to zoom and use two-finger scrolling to pan image and SVG previews. Select Fit to reset the view. (#54590)

Core

Improvements

• Automatically continue responses after an output-token limit, with bounded retries and clearer recovery for truncated tool calls. (#53876)
• Stabilize access policies under the top-level policies configuration key while retaining compatibility with experimental.policies. (#55297)

Bug fixes

• Give centrally managed configuration precedence over local and user configuration. (#55267)
• Allow migrated V1 npm provider configuration to target built-in provider routes. (#55254)

TUI

Improvements

• Report working sessions and sessions awaiting permission or input through terminal program-status notifications. (#55172)

Desktop

Improvements

• Pair devices from Settings → Pairing through OpenTunnel remote access, with a QR code and copyable link. (#55306)
• Manage provider accounts from the connect dialog and Settings → Providers, including switching, renaming, removal, and adding another account. (#54101)
• Show session context tokens and accumulated family cost in the session view. (#53785)
• Pinch to zoom and use two-finger scrolling to pan image and SVG previews; select Fit to reset. (#54590)
• Cycle side-panel tabs with the configured previous-tab and next-tab shortcuts while the side panel is focused. (#54899)
• Refresh the question composer and clarify timeline notices that apply only to a model variant. (#54822, #54880)
• Refine diff colors and move unread indicators into session tabs. (#52551, #53570)

Bug fixes

• Show steered messages as pending immediately and render inline attachments before their server echo arrives. (#55251, #54650)
• Preserve raw media data up to 256 MiB so artifact previews remain available. (#55018)
• Retain session model selections when the model catalog refreshes. (#54481)
• Close browser tabs from the address field and suppress incorrect missing-file notices for restored or already-open tabs. (#54501, #55022)
• Prevent a project-store eviction loop during launch and remove hover gaps between vertical tabs. (#55078, #54866)

... (truncated)

Commits

• 9b4ec57 release: v2.0.26
• 5e73d5c feat(core): add Google Cloud credential setup for Vertex (#53798)
• 38c955e fix(tui): keep low verbosity summaries in place when toggled (#52357)
• 0bd95d0 docs(www): remove Fledge Alpha Free from Console models (#53985)
• 7522502 feat(release): lead V2 release notes with highlights (#53969)
• 7de2e68 fix(tui): keep the home footer off the hint row in short terminals (#53891)
• 56ab743 fix(core): batch tree diff selections on every platform (#53956)
• d445615 feat(release): write reviewed V2 release notes to CHANGELOG.md (#53964)
• 6dfb413 docs: add Step 5 Free to V2 (#53897)
• 19fb891 fix(cli): serve remote access on a random unguessable subdomain (#53962)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #450.