Skip to content

chore(deps): bump @opencode-ai/plugin from 1.18.25 to 1.18.30 in the opencode-ai group - #122

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/opencode-ai-a10baa981c
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/opencode-ai-a10baa981c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the opencode-ai group with 1 update: @opencode-ai/plugin.

Updates @opencode-ai/plugin from 1.18.25 to 1.18.30

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the opencode-ai group with 1 update: @opencode-ai/plugin.


Updates `@opencode-ai/plugin` from 1.18.25 to 1.18.30

---
updated-dependencies:
- dependency-name: "@opencode-ai/plugin"
  dependency-version: 1.18.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: opencode-ai
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 16, 2026
@justin-carper

Copy link
Copy Markdown
Collaborator

Superseded by #132, which includes this bump (at newer versions where available), clears npm audit, and passed the full CI matrix. Closing so Dependabot does not keep rebasing it.

@dependabot @github

dependabot Bot commented on behalf of github Sep 29, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/opencode-ai-a10baa981c branch September 29, 2026 17:35
justin-carper added a commit that referenced this pull request Sep 30, 2026
… param docs (#132)

* chore: consolidate dependency updates, clear npm audit, fix per-model param docs

Dependencies (supersedes #122, #124, #125):
- @connectrpc/connect-node 2.1.2 -> 2.2.0
- @cursor/sdk 1.0.31 -> 1.0.32
- @opencode-ai/plugin + sdk -> 1.18.33 (one sdk copy)
- @ai-sdk/provider 3.0.15 -> 3.0.18, @types/node -> 26.6.3, vitest -> 5.0.2
- overrides: undici ^6.28.1 (GHSA-3wwx-pv8p-q78v), new toml ^4.2.0
  (GHSA-82x6-q7mm-w9cf); npm audit reports 0 vulnerabilities
- @ai-sdk/provider v4 and TypeScript 7 stay blocked per dependabot.yml

Docs (#119): Cursor model param ids are per model, so `thinking` on a
model without that param (e.g. grok-4.6, which takes `effort`) is ignored.
Correct the README examples and the delegate/cloud-agent `thinking`
tool-arg descriptions. Comment-only changes in src/provider; no logic change.

* fix: point v2 install at @next, list model params in refresh tool, fix fallback param

- README (#126): the opencode v2 install snippet used @latest, which is
  0.9.0 (v1-only build, no { id, setup } default export) and reproduces
  "Plugin must export a default definition" on opencode 2.x. Point it at
  @next until 0.10.0 is promoted, with a note.
- cursor_refresh_models (#119): append each model's param ids and accepted
  values, e.g. `grok-4.6 [effort=low|medium|high|xhigh, fast=false|true]`,
  so users can tell effort from reasoning_effort. Add a test.
- fallback catalog: composer-2.5 exposes `fast`, not `thinking`; the stale
  entry produced a bogus `thinking` variant on the keyless path.
- CHANGELOG: limit the connect-node note to verified facts (nothing in the
  repo imports it; @cursor/sdk nests its own 1.7.0) and record the above.

* docs: give opencode v2 users the right plugin cache path

The troubleshooting entry and the manual-install snippet only described the
opencode v1 cache layout (~/.cache/opencode/packages/...). opencode v2 caches
plugin installs under ~/.cache/opencode/npm/<spec>/, so anyone following the
README on v2 cleared the wrong directory (#126). Cover both layouts, point v2
users at `opencode plugin update`, and note that an @latest install of 0.9.x
has no v2 entrypoint.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant