[dependabot]

Bumps anomalyco/opencode from 1.18.32 to 2.1.4.

Release notes

Sourced from anomalyco/opencode's releases.

v1.19.4

Core

Improvements

• Upgraded the bundled Bun runtime to 1.4.4, which includes security fixes for Brotli, TLS, HTTP/1.1, HTTP/2, HTTP/3, WebSocket, and fetch, and updates root certificates to NSS 3.131.1.

v1.19.3

Core

Improvements

• Configure model reasoning options to generate reasoning variants, replacing catalog variants while preserving your configured variant overrides.

v1.19.2

Core

Bugfixes

• OpenCode 1 now stays on the 1.x release line: update checks use only the npm opencode-ai latest version, so 1.x installs are never offered a 2.x build as a regular update.
• Upgrading to OpenCode 2 remains a separate, explicit choice through the 2.0 offer in /update or opencode upgrade --major.
• Fix upgrades for installs managed by yarn.
• Skip 1.x updates for Homebrew Core installs, which now track OpenCode 2, and check tap and Chocolatey availability before offering an update.
• The install script refuses to install 2.x versions.

v1.19.1

Core

Bugfixes

• Session sharing has been discontinued. Existing share links and session-sharing commands are no longer available, and importing sessions from share URLs is unsupported.

v1.19.0

Core

Improvements

• Run opencode upgrade --major to upgrade to OpenCode 2.

Bugfixes

• Allow the OpenAI ultrafast service tier.
• Validate PTY connection origins and tickets before checking whether a PTY exists.

TUI

Improvements

• Use /update to install OpenCode updates or upgrade to OpenCode 2; updates are no longer installed automatically.

Thank you to 1 community contributor:

• @​dc85:
  • docs(web): add Exo Free to Zen docs (#53622)
  • fix(stats): attribute exo usage to an unknown provider (#53621)
  • docs(web): remove Fledge Alpha Free from Zen docs (#53984)

v1.18.35

... (truncated)

Changelog

Sourced from anomalyco/opencode's changelog.

v2.1.4 — 2026-10-23

Highlights

• MCP Input Forms Now Appear: When an MCP server asks for input during a tool call, the form now shows up instead of the call waiting until it times out. Desktop and web can now show these forms too, including text, number, choice, multiselect, boolean, and URL requests. (#58184, #58305)
• Background Compaction: Set experimental.background_compaction to true to prepare a summary in the background as a session nears its compaction threshold, so automatic compaction does not wait for it. Summaries that are never used still cost tokens. (#57444, #58294)

Core

Improvements

• Added experimental background compaction through experimental.background_compaction. (#57444, #58294)
• When a compaction request exceeds the provider limit, older tool output and exchanges are now shortened first, so more useful history survives. (#58015)
• ChatGPT sign-in context caps are now a documented built-in plugin. Add "-opencode.provider.openai-context-caps" to plugins to turn them off. (#58194)
• Added opencode debug heap-dump [--server <url>] to capture a running server's heap without restarting it. (#58252)

Bug fixes

• Sessions without their own model now use the selected agent's model. (#58355)
• Compaction buffers that leave the model no room are now ignored, and more provider context-overflow errors are recognized. (#58313, #57982)
• Agent files that use V2-only fields are now read as V2 agents. (#58218)
• Codex models that ChatGPT accounts reject are now hidden. (#58180)
• Imported V1 global sessions are now attributed to the correct project. (#56322)

TUI

Improvements

• Added an experimental TUI tools option in the experiments dialog, which lets agents open and type into the session terminal through tui_open_terminal and tui_write_terminal without taking keyboard focus. (#57506)
• After an update restart, the TUI now tells you to start OpenCode again. (#58139)

Bug fixes

• Rows that contain Unicode direction marks, common in Hebrew and Arabic text, no longer shift one column when part of the row redraws. (#58380)

Desktop

Improvements

• MCP elicitation forms now appear in desktop and web sessions, with controls for structured and URL requests. (#58305)
• Added Capture heap snapshots to the command palette. It saves app-window, main-process, and server snapshots together in Downloads, with native-memory, GPU, and page diagnostics. (#58259, #58311)

Bug fixes

• File change counts now appear before their labels in review and file summaries. (#58353)
• Linux AppImage executable names no longer end in .desktop. Thanks @​ImBIOS. (#58263)

SDK

Improvements

... (truncated)

Commits

• 68bc26b release: v2.1.4
• 74f8d48 fix(cli): install musl native packages for cross builds on Bun 1.4.4 (#58398)
• a5dddc5 chore: update nix node_modules hashes
• c9c1dc0 chore: upgrade opentui v0.6.8 (#58380)
• 4d30794 fix(core): use the agent's model when a session has none (#58355)
• 8ecd6ad fix(core): don't duplicate MCP servers started during initial reconciliation ...
• 7b14ad4 fix(core): stop MCP servers in parallel on shutdown (#58351)
• 09399e3 fix(app): show file change count before label (#58353)
• bdf7572 fix(app): bundle worker dependency subpaths in dev pre-bundles (#58345)
• 309522f fix(core): keep MCP OAuth login waiting after stray callback requests (#58342)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Superseded by #81.