Skip to content

build(deps): bump zod and @opencode/plugin - #63

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-5766732809
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-5766732809

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown

Removes zod. It's no longer used after updating ancestor dependency @opencode/plugin. These dependencies need to be updated together.

Removes zod

Updates @opencode/plugin from 2.0.12 to 2.2.5

Release notes

Sourced from @​opencode/plugin's releases.

v2.2.5

Highlights

  • Worktree and Shell Mode Shortcuts: Press ⌘⌥O on macOS or Ctrl+Alt+O on Windows and Linux to choose a worktree, and ⌘⌥B or Ctrl+Alt+B to choose its base branch. ⌘⇧X or Ctrl+Shift+X now toggles shell mode in the composer. (#60713)
  • Send Quotes From the Comment Popup: Hold ⌘ or Ctrl in the quote popup to turn its checkmark into send, or press ⌘Enter or Ctrl+Enter, to send just that quote and comment while leaving the rest of the composer untouched. (#60640)
  • Percentage Compaction Buffer: Set "compaction": { "buffer": "20%" } in opencode.json to keep a share of each model's context window free, so one setting fits models with small and large windows. Token counts still work. (#60647)

Core

Improvements

  • compaction.buffer accepts a percentage of the model's context window, such as "20%", in addition to a token count. (#60647)
  • When read misses because a folder is missing, the error names that folder and the nearest one that exists. (#60688)
  • When edit can't find oldString, the error shows the file's closest lines, or says the change is already there. (#60689)
  • Calls to a tool named bash now run as shell instead of failing, with the same permissions. A plugin tool actually named bash still takes precedence. (#60687)

Bug fixes

  • MCP servers that send stdio messages larger than 10 MiB no longer get disconnected, and large messages are read much faster. (#60694)
  • Idle locations no longer restart their MCP servers right after shutting down. (#60668)
  • Compaction now caps its prompt at the model's context window when the input limit is larger. (#60660)
  • LiteLLM context window errors now trigger compaction instead of stopping the session. (#60692)
  • Reasoning is no longer turned into plain text when you switch models or resume an interrupted response, which caused request errors on some providers. (#60498)

TUI

Bug fixes

  • The connect menu no longer lists MCP servers, which are managed in their own place. (#60675)

Desktop

Improvements

  • Added keyboard shortcuts to choose a worktree and its base branch, shown in tooltips, and a shortcut to toggle shell mode. The worktree path can be selected to copy the full directory. (#60713)
  • Hold ⌘ or Ctrl in the quote popup to send a quote and its comment directly. (#60640)
  • Added flat input surfaces and a compact input size. (#60598)

Bug fixes

  • The connect menu no longer lists MCP servers. (#60675)
  • Added the missing top inset to the search field in the recently closed menu. (#60652)

v2.2.4

Highlights

  • Persistent Desktop Terminals: Desktop terminals now belong to the session, survive server restarts with their scrollback, and stay synchronized with the TUI and other windows. Renamed terminals also keep their names across restarts. (#60346)
  • Publish Interactive Artifacts: Enable "experimental": { "artifacts": true } in opencode.json to let agents publish, update, and serve HTML or static artifacts through the built-in local provider or plugin-provided storage. (#60351)
  • Guided Claude Agent Setup: Select Claude Agent from the provider picker to copy claude auth login, install Claude Code, and verify the connection before continuing to model selection. (#60603)
  • Choose a Base Branch Quickly: While creating a worktree, open Choose base branch with ⌘⌥. on macOS or Ctrl+Alt+. on Windows and Linux. The command is also available in the command palette and Settings › Shortcuts. (#60579)

... (truncated)

Changelog

Sourced from @​opencode/plugin's changelog.

v2.2.5 — 2026-10-30

Highlights

  • Worktree and Shell Mode Shortcuts: Press ⌘⌥O on macOS or Ctrl+Alt+O on Windows and Linux to choose a worktree, and ⌘⌥B or Ctrl+Alt+B to choose its base branch. ⌘⇧X or Ctrl+Shift+X now toggles shell mode in the composer. (#60713)
  • Send Quotes From the Comment Popup: Hold ⌘ or Ctrl in the quote popup to turn its checkmark into send, or press ⌘Enter or Ctrl+Enter, to send just that quote and comment while leaving the rest of the composer untouched. (#60640)
  • Percentage Compaction Buffer: Set "compaction": { "buffer": "20%" } in opencode.json to keep a share of each model's context window free, so one setting fits models with small and large windows. Token counts still work. (#60647)

Core

Improvements

  • compaction.buffer accepts a percentage of the model's context window, such as "20%", in addition to a token count. (#60647)
  • When read misses because a folder is missing, the error names that folder and the nearest one that exists. (#60688)
  • When edit can't find oldString, the error shows the file's closest lines, or says the change is already there. (#60689)
  • Calls to a tool named bash now run as shell instead of failing, with the same permissions. A plugin tool actually named bash still takes precedence. (#60687)

Bug fixes

  • MCP servers that send stdio messages larger than 10 MiB no longer get disconnected, and large messages are read much faster. (#60694)
  • Idle locations no longer restart their MCP servers right after shutting down. (#60668)
  • Compaction now caps its prompt at the model's context window when the input limit is larger. (#60660)
  • LiteLLM context window errors now trigger compaction instead of stopping the session. (#60692)
  • Reasoning is no longer turned into plain text when you switch models or resume an interrupted response, which caused request errors on some providers. (#60498)

TUI

Bug fixes

  • The connect menu no longer lists MCP servers, which are managed in their own place. (#60675)

Desktop

Improvements

  • Added keyboard shortcuts to choose a worktree and its base branch, shown in tooltips, and a shortcut to toggle shell mode. The worktree path can be selected to copy the full directory. (#60713)
  • Hold ⌘ or Ctrl in the quote popup to send a quote and its comment directly. (#60640)
  • Added flat input surfaces and a compact input size. (#60598)

Bug fixes

  • The connect menu no longer lists MCP servers. (#60675)
  • Added the missing top inset to the search field in the recently closed menu. (#60652)

v2.2.4 — 2026-10-30

Highlights

  • Persistent Desktop Terminals: Desktop terminals now belong to the session, survive server restarts with their scrollback, and stay synchronized with the TUI and other windows. Renamed terminals also keep their names across restarts. (#60346)
  • Publish Interactive Artifacts: Enable "experimental": { "artifacts": true } in opencode.json to let agents publish, update, and serve HTML or static artifacts through the built-in local provider or plugin-provided storage. (#60351)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [zod](https://github.com/colinhacks/zod). It's no longer used after updating ancestor dependency [@opencode/plugin](https://github.com/anomalyco/opencode/tree/HEAD/packages/plugin). These dependencies need to be updated together.


Removes `zod`

Updates `@opencode/plugin` from 2.0.12 to 2.2.5
- [Release notes](https://github.com/anomalyco/opencode/releases)
- [Changelog](https://github.com/anomalyco/opencode/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/anomalyco/opencode/commits/v2.2.5/packages/plugin)

---
updated-dependencies:
- dependency-name: zod
  dependency-version:
  dependency-type: indirect
- dependency-name: "@opencode/plugin"
  dependency-version: 2.2.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants