chore(deps): bump @opencode-ai/plugin and @opencode-ai/sdk to 1.18.21

Consolidates dependabot PRs #105 and #106.

Author: justin-carper

CHANGELOG.md

@@ -4,6 +4,10 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+- **Dependency bumps:** `@opencode-ai/plugin` ^1.18.4 → ^1.18.21 (deps),
+  `@opencode-ai/sdk` ^1.18.18 → ^1.18.21 (dev). Consolidates dependabot
+  PRs #105 and #106.
+
 ## [0.8.0] — 2026-08-21
 
 Live Cursor subagent activity: the `task` card behaves like a native opencode

package-lock.json

@@ -59,7 +59,7 @@
   "dependencies": {
     "@connectrpc/connect-node": "^2.1.2",
     "@cursor/sdk": "^1.0.24",
-    "@opencode-ai/plugin": "^1.18.4",
+    "@opencode-ai/plugin": "^1.18.21",
     "semver": "^7.8.4"
   },
   "overrides": {
@@ -73,7 +73,7 @@
   },
   "devDependencies": {
     "@ai-sdk/provider": "^3.0.15",
-    "@opencode-ai/sdk": "^1.18.18",
+    "@opencode-ai/sdk": "^1.18.21",
     "@types/node": "^26.2.0",
     "@types/semver": "^7.8.0",
     "tsup": "^8.5.1",