[dependabot]

Bumps @opencode/plugin from 2.2.5 to 2.2.6.

Release notes

Sourced from @​opencode/plugin's releases.

v2.2.6

Highlights

• Shared MCP Connections: Turn on pooling for an MCP server to share one connection across projects with the same setup, so you run fewer processes and start faster. (#61185)
• GUI Plugin Themes and New Slots: GUI plugins can now add color themes, render or add actions to code blocks, and use native settings and menu components. (#61485, #61533, #61527, #61509)
• Mobile Composer Dock: On phones and tablets, composer actions now sit in a touch dock above the keyboard with larger buttons. (#61773)
• Scripted Runs in Worktrees: Run opencode run -w to start the session in a new git worktree, or --worktree=<name> to name it. (#60712)
• Automatically Archived Runs: Add --archived to opencode run to keep scripted and CI sessions out of your inbox and session lists. (#61270)

Core

Improvements

• Added opt-in MCP connection sharing through pool: true. (#61185)
• Added opencode run --archived, which creates the session already archived so scripted and CI runs stay out of the inbox, home, and session lists. Archived sessions are also hidden from the TUI session list and skipped by --continue. (#61270)
• Added opencode run --worktree (-w), which starts the session in a new git worktree. Use --worktree=<name> to choose the worktree name. It cannot be combined with --continue or --session. (#60712)
• Added provider- and model-specific session warming settings, including an interval: "auto" mode based on cache TTL. (#60025, #60969)
• Added the websearch.use policy action and switches for enabling all feature flags with OPENCODE_FLAGS=all or experimental.all_flags. (#61557, #61826)
• Added an experimental bytecode VM for Code Mode. It is off by default; turn it on with experimental.codemode_vm: true or OPENCODE_FLAGS=codemode_vm. (#62358)
• Added support for Microsoft Store installations of PowerShell 7 on Windows. (#61952)
• Added Azure Messages support for Foundry Claude models. (#60934)

Bug fixes

• opencode run now waits for the background shell commands, subagents, and image jobs that its prompt started, then lets the model respond to their results before it exits. While it waits, it prints waiting for N background job(s) (a background_wait event with --format json). There is no time limit: a job that never exits, such as a dev server or file watcher, keeps the run open until you press Ctrl+C or send SIGTERM, so set a timeout on CI jobs. (#60699, #61911)
• Reworked noninteractive opencode run execution so arguments, cancellation, compiled WebSocket upgrades, and service shutdown complete reliably. SIGTERM now cancels the session and its background jobs and exits with code 143. (#61911, #61721, #61518, #61564)
• Serve file reads and media from the server API as sandboxed downloads, and refuse cross-site browser navigations and requests from disallowed origins to /api/*, so a file in your project cannot run scripts on the server's origin. (#62422)
• Webfetch and Code Mode fetch now reject URLs that contain credentials and ignore the #fragment when matching permission rules, and Code Mode fetch checks every redirect against your webfetch rules. (#60502, #61701, #62373)
• Ask for external_directory permission before session_move leaves the current project. (#62204)
• Wait up to 2 seconds for MCP servers that are still connecting before a model call, so tools from servers that connect quickly reach the first prompt and opencode run. Also expand ~ in local MCP working directories, handle legacy stdio servers, and send logo_uri during dynamic registration. (#60490, #61496, #61817, #59031)
• Time out OpenCode Console config requests after 5 seconds, so startup no longer hangs when the Console accepts the connection but never answers. (#62404)
• Retry provider requests while their host is unreachable and recover prematurely ended Cohere streams. (#61880, #61184)
• Keep legacy custom providers whose models set only part of limit, such as only limit.context, instead of dropping the whole provider without an error. Thanks @​Tarquinen. (#62240)
• opencode acp now removes a session that a client creates with session/new and closes without prompting, so IDE integrations no longer leave empty sessions behind. (#62189)
• Prevent repeated zsh q flags from freezing shell permission scanning. Thanks @​yangguan-xue. (#60791)
• Allow npm upgrade install scripts again. Thanks @​renatomoselli. (#51554)

TUI

Improvements

• Added Scroll on send in Settings. Choose Keep (session.submit_scroll: "keep") to retain your reading position after submitting a prompt. (#61460)

Bug fixes

• Allow Ctrl+Z to suspend OpenCode while a form or dialog is open. (#62118)
• Keep focus on an open dialog when a question arrives and contain plugin dialogs that throw during rendering. (#60365, #62110)
• Show an error when Ctrl+V cannot read the clipboard. Thanks @​jimmyallinai. (#61094)
• Prevent session titles containing newlines from crashing the TUI. Thanks @​vishalshekhar. (#57523)
• Improved message spacing and prevented older history from flashing while scrolling. (#62104, #59236)

... (truncated)

Changelog

Sourced from @​opencode/plugin's changelog.

v2.2.6 — 2026-11-06

Highlights

• Shared MCP Connections: Turn on pooling for an MCP server to share one connection across projects with the same setup, so you run fewer processes and start faster. (#61185)
• GUI Plugin Themes and New Slots: GUI plugins can now add color themes, render or add actions to code blocks, and use native settings and menu components. (#61485, #61533, #61527, #61509)
• Mobile Composer Dock: On phones and tablets, composer actions now sit in a touch dock above the keyboard with larger buttons. (#61773)
• Scripted Runs in Worktrees: Run opencode run -w to start the session in a new git worktree, or --worktree=<name> to name it. (#60712)
• Automatically Archived Runs: Add --archived to opencode run to keep scripted and CI sessions out of your inbox and session lists. (#61270)

Core

Improvements

• Added opt-in MCP connection sharing through pool: true. (#61185)
• Added opencode run --archived, which creates the session already archived so scripted and CI runs stay out of the inbox, home, and session lists. Archived sessions are also hidden from the TUI session list and skipped by --continue. (#61270)
• Added opencode run --worktree (-w), which starts the session in a new git worktree. Use --worktree=<name> to choose the worktree name. It cannot be combined with --continue or --session. (#60712)
• Added provider- and model-specific session warming settings, including an interval: "auto" mode based on cache TTL. (#60025, #60969)
• Added the websearch.use policy action and switches for enabling all feature flags with OPENCODE_FLAGS=all or experimental.all_flags. (#61557, #61826)
• Added an experimental bytecode VM for Code Mode. It is off by default; turn it on with experimental.codemode_vm: true or OPENCODE_FLAGS=codemode_vm. (#62358)
• Added support for Microsoft Store installations of PowerShell 7 on Windows. (#61952)
• Added Azure Messages support for Foundry Claude models. (#60934)

Bug fixes

• opencode run now waits for the background shell commands, subagents, and image jobs that its prompt started, then lets the model respond to their results before it exits. While it waits, it prints waiting for N background job(s) (a background_wait event with --format json). There is no time limit: a job that never exits, such as a dev server or file watcher, keeps the run open until you press Ctrl+C or send SIGTERM, so set a timeout on CI jobs. (#60699, #61911)
• Reworked noninteractive opencode run execution so arguments, cancellation, compiled WebSocket upgrades, and service shutdown complete reliably. SIGTERM now cancels the session and its background jobs and exits with code 143. (#61911, #61721, #61518, #61564)
• Serve file reads and media from the server API as sandboxed downloads, and refuse cross-site browser navigations and requests from disallowed origins to /api/*, so a file in your project cannot run scripts on the server's origin. (#62422)
• Webfetch and Code Mode fetch now reject URLs that contain credentials and ignore the #fragment when matching permission rules, and Code Mode fetch checks every redirect against your webfetch rules. (#60502, #61701, #62373)
• Ask for external_directory permission before session_move leaves the current project. (#62204)
• Wait up to 2 seconds for MCP servers that are still connecting before a model call, so tools from servers that connect quickly reach the first prompt and opencode run. Also expand ~ in local MCP working directories, handle legacy stdio servers, and send logo_uri during dynamic registration. (#60490, #61496, #61817, #59031)
• Time out OpenCode Console config requests after 5 seconds, so startup no longer hangs when the Console accepts the connection but never answers. (#62404)
• Retry provider requests while their host is unreachable and recover prematurely ended Cohere streams. (#61880, #61184)
• Keep legacy custom providers whose models set only part of limit, such as only limit.context, instead of dropping the whole provider without an error. Thanks @​Tarquinen. (#62240)
• opencode acp now removes a session that a client creates with session/new and closes without prompting, so IDE integrations no longer leave empty sessions behind. (#62189)
• Prevent repeated zsh q flags from freezing shell permission scanning. Thanks @​yangguan-xue. (#60791)
• Allow npm upgrade install scripts again. Thanks @​renatomoselli. (#51554)

TUI

Improvements

• Added Scroll on send in Settings. Choose Keep (session.submit_scroll: "keep") to retain your reading position after submitting a prompt. (#61460)

Bug fixes

• Allow Ctrl+Z to suspend OpenCode while a form or dialog is open. (#62118)
• Keep focus on an open dialog when a question arrives and contain plugin dialogs that throw during rendering. (#60365, #62110)
• Show an error when Ctrl+V cannot read the clipboard. Thanks @​jimmyallinai. (#61094)
• Prevent session titles containing newlines from crashing the TUI. Thanks @​vishalshekhar. (#57523)

... (truncated)

Commits

• dc2ffcf release: v2.2.6
• e23d54c fix(app): show Open in only in file and review headers (#62174)
• 6469454 fix(app): show failed and offline review diffs instead of a clean tree (#61862)
• 3343941 feat(app): group settings navigation and distinguish pairing and changelog ic...
• 4a6067d fix(desktop): restart plugins when an update handoff fails (#61649)
• 605e912 fix(app): give plugin startup an explicit gate that always opens (#61580)
• 9a7f22a fix(app): derive server controllers from an explicit lifecycle machine (#61595)
• 27dd925 feat(app): let GUI plugins render and add actions to code blocks (#61533)
• 3fcdcb3 feat(plugin): add settings rows, selects and menu rows to ctx.ui (#61527)
• 69ef55f feat(app): let GUI plugin panels size the side region (#61509)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)