chore(deps): bump anomalyco/opencode/github from 1.18.17 to 1.18.27

[dependabot]

Bumps anomalyco/opencode/github from 1.18.17 to 1.18.27.

Release notes

Sourced from anomalyco/opencode/github's releases.

v1.18.27

Core

Bugfixes

• Default provider header timeouts to five minutes so slow model startups fail less often.
• Default streamed chunk timeouts to five minutes, with false supported to disable them.
• Let Anthropic thinking.blockBinding opt out via config when you need to keep the provider default. (@​dkindlund)
• Limit Anthropic thinking block binding to Claude 5.1+ models so older deployments do not reject requests.
• Avoid unhandled errors when canceling timed-out SSE reads. (@​AlexanderWillner)

Thank you to 2 community contributors:

• @​AlexanderWillner:
  • fix(provider): handle SSE reader cancel rejections (#44944)
• @​dkindlund:
  • fix(opencode): let config opt out of Anthropic thinking blockBinding (#46820)

v1.18.26

Core

Bugfixes

• Claude 5 sessions now tolerate stale thinking blocks instead of failing after prompt or tool changes.
• Bedrock GPT-5.6 models now accept none reasoning effort.
• Bedrock reasoning and replay handling is more reliable. (@​pengzh1)
• Tool call timing now stays accurate when tools update their metadata while still running. (@​bartlettroscoe)
• apply_patch no longer emits an empty move path in permission metadata. (@​altendky)

Improvements

• Azure CLI sign-in now asks for the resource name directly instead of querying Azure management APIs.

Desktop

Bugfixes

• Session renames now save reliably from the title editor and tab context menu.

Thank you to 3 community contributors:

• @​altendky:
  • fix(opencode): omit empty apply patch move path (#45329)
• @​pengzh1:
  • fix(core): bump @​ai-sdk/amazon-bedrock to 4.0.166 for reasoning and replay fixes (#45520)
• @​bartlettroscoe:
  • fix(core): Fix for incorrect time.start reset in tool call logging (#32574) (#32596)

v1.18.25

Core

Bugfixes

• Fixed Azure authentication so Azure CLI sign-in works without requiring Bun.

... (truncated)

Commits

• 4b7e19e release: v1.18.27
• b046973 fix(opencode): default header timeout to five minutes (#46903)
• 4eb29a6 fix(opencode): default chunk timeout to five minutes (#46890)
• 68abdce fix(opencode): let config opt out of Anthropic thinking blockBinding (#46820)
• ef27925 fix(console): restore migrated inference proxy requests (#46854)
• 9a71624 fix(provider): scope thinking binding to Claude 5.1+ (#46848)
• ffbdee7 chore: generate
• 77aec36 feat(console): add Muse Spark 1.3 and Gemini 3.8 Flash (#46836)
• 50efc05 feat(console): keep migrated teams on the new Console (#46830)
• 69c172e fix(provider): handle SSE reader cancel rejections (#44944)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud