chore(deps): upgrade all dependencies to latest releases

.github/workflows/codeql-analysis.yml

@@ -29,8 +29,8 @@ jobs:
         with:
           persist-credentials: false
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
+        uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370
         with:
           languages: ${{ matrix.language }}
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
+        uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370

.github/workflows/docker.yml

@@ -17,9 +17,9 @@ jobs:
       matrix:
         include:
           - platform: linux/amd64
-            runner: ubuntu-24.04
+            runner: ubuntu-26.04
           - platform: linux/arm64
-            runner: ubuntu-24.04-arm
+            runner: ubuntu-26.04-arm
     runs-on: ${{ matrix.runner }}
     permissions:
       contents: read
@@ -56,7 +56,7 @@ jobs:
       - name: Set up Node.js for smoke tests
         uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
-          node-version: 26.11.1
+          node-version: 26.12.1
       - name: Smoke test
         run: bash scripts/smoke-test.sh opencode-server:test
       - name: Log in to the Container registry

.github/workflows/test.yml

@@ -25,7 +25,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
-          node-version: 26.11.1
+          node-version: 26.12.1
       - name: Validate V2 configuration and workflow
         run: |
           pnpm install --frozen-lockfile --ignore-scripts --no-optional

.github/workflows/yaml-json.yml

@@ -43,10 +43,10 @@ jobs:
           done < <(git ls-files -z)
       - name: Commit formatting changes
         if: github.event_name == 'pull_request'
-        uses: stefanzweifel/git-auto-commit-action@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d # v7
+        uses: stefanzweifel/git-auto-commit-action@d0b01107b5db882071f96de5dd4b54961ea93f4c
         with:
           commit_message: 'style: format YAML and JSON with yq'
-          file_pattern: '. :!.github/workflows/*'
+          file_pattern: . :!.github/workflows/*
           commit_author: GitHub Actions <actions@github.com>
           commit_user_name: github-actions[bot]
           commit_user_email: github-actions[bot]@users.noreply.github.com

Dockerfile

@@ -6,7 +6,7 @@ RUN CGO_ENABLED=0 GOBIN=/out go install "github.com/mikefarah/yq/v4@${YQ_VERSION
 
 FROM golang AS gotools
 ARG TASK_VERSION=v3.54.0
-ARG GOLANGCI_LINT_VERSION=v2.14.0
+ARG GOLANGCI_LINT_VERSION=v2.15.0
 RUN CGO_ENABLED=0 GOBIN=/out go install "github.com/go-task/task/v3/cmd/task@${TASK_VERSION}" \
     && CGO_ENABLED=0 GOBIN=/out go install "github.com/golangci/golangci-lint/v2/cmd/golangci-lint@${GOLANGCI_LINT_VERSION}"
 
@@ -15,7 +15,7 @@ FROM node:26.12.1-trixie-slim AS tools
 COPY --from=golang /usr/local/go /usr/local/go
 COPY --from=yq /out/yq /usr/local/bin/yq
 COPY --from=gotools /out/task /out/golangci-lint /usr/local/bin/
-COPY --from=grafana/mcp-grafana:2.0.2@sha256:78d208116ec52b09b44f0eca66892073b39aefcb64483c54d43255c8eab7e97a /app/mcp-grafana /usr/local/bin/mcp-grafana
+COPY --from=grafana/mcp-grafana:2.1.1@sha256:71a3f4e6f412d253611314233df709ec2571fb50e39742d23fa2940f670646dc /app/mcp-grafana /usr/local/bin/mcp-grafana
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
       bash-completion build-essential ca-certificates curl fd-find file fzf \
@@ -28,10 +28,10 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 
 ENV SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
 
-ARG OPENCODE_VERSION=2.0.32
-ARG OPENCHAMBER_VERSION=2.4.0
+ARG OPENCODE_VERSION=2.1.3
+ARG OPENCHAMBER_VERSION=2.5.0
 ARG TYPESCRIPT_VERSION=7.0.2
-ARG PNPM_VERSION=12.11.2
+ARG PNPM_VERSION=12.15.0
 ARG TARGETARCH
 ENV PNPM_HOME=/opt/pnpm
 ENV PATH=${PNPM_HOME}/bin:${PATH}

opencode.jsonc

@@ -80,7 +80,7 @@
         "command": [
           "npx",
           "-y",
-          "@karakeep/mcp@0.33.1"
+          "@karakeep/mcp@0.34.0"
         ],
         "environment": {
           "KARAKEEP_API_ADDR": "{env:KARAKEEP_API_ADDR}",
@@ -125,7 +125,7 @@
   "plugins": [
     "opencode-gemini-auth@2.0.1",
     "opencode-wakatime@1.4.0",
-    "superpowers@git+https://github.com/obra/superpowers.git#bb92a77741419a4ab5f06e711a283343f1ada0c3",
+    "superpowers@git+https://github.com/obra/superpowers.git#2ce8aa15d05bd57213e6f746f953aafb7ded7a8b",
     "@slkiser/opencode-quota@5.0.3",
     {
       "package": "opencode-runtime-fallback@0.3.0",

package.json

@@ -2,14 +2,14 @@
   "name": "opencode-server-config-tests",
   "private": true,
   "type": "module",
-  "packageManager": "pnpm@12.11.2",
+  "packageManager": "pnpm@12.15.0",
   "scripts": {
     "test": "node --test tests/*.test.mjs"
   },
   "devDependencies": {
-    "@opencode/plugin": "2.0.32",
-    "@opencode/schema": "2.0.32",
-    "effect": "4.0.5",
+    "@opencode/plugin": "2.1.3",
+    "@opencode/schema": "2.1.3",
+    "effect": "4.0.6",
     "jsonc-parser": "3.3.1"
   }
 }