build(deps): bump anomalyco/opencode/github from 1.17.19 to 1.18.25

[dependabot]

Bumps anomalyco/opencode/github from 1.17.19 to 1.18.25.

Release notes

Sourced from anomalyco/opencode/github's releases.

v1.18.25

Core

Bugfixes

• Fixed Azure authentication so Azure CLI sign-in works without requiring Bun.

v1.18.24

Core

Bugfixes

• Bedrock reasoning responses no longer get cached into unreplayable empty messages.

Improvements

• Azure providers can now sign in with Microsoft Entra ID through the Azure CLI instead of requiring an API key.
• V1 now reads supported V2 config fields so newer config files keep working in more mixed setups.

Desktop

Bugfixes

• Archived sessions disappear from the Home list immediately. (@​NathanTCode)

Thank you to 3 community contributors:

• @​NathanTCode:
  • fix(app): drop archived sessions from home list right away (#44905)
• @​OpeOginni:
  • fix(ui): restore focus in stacked dialogs (#44928)
• @​dondetir:
  • docs: mention Exa and Parallel as web search backends (#38395)

v1.18.23

Core

Bugfixes

• Fixed Cloudflare AI Gateway routing for third-party providers so non-Workers models work through the gateway's REST API. (@​superhighfives)
• Fixed Anthropic models through Cloudflare AI Gateway by converting dotted model IDs like claude-haiku-4.5 to the dashed slug Anthropic expects. (@​superhighfives)
• Fixed parent session IDs being sent in request headers for session-aware providers.

TUI

Bugfixes

• Fixed GitHub auth for immutable OIDC subject tokens.

Thank you to 1 community contributor:

• @​superhighfives:
  • fix(provider): send Anthropic's dashed native slug through the AI Gateway (#44281)
  • fix(provider): route non-native Cloudflare AI Gateway providers via the REST API (#44828)

... (truncated)

Commits

• cb7d8b2 release: v1.18.25
• 733562e fix(opencode): remove Bun dependency from Azure authentication (#45845)
• 8a7cc0c docs(go): add Qwen3.8 Flash (#45836)
• 19db518 sync release versions for v1.18.24
• 15537a4 fix(opencode): compare config snapshots as JSON (#45784)
• 790fb5b feat(opencode): support Azure CLI authentication (#45079)
• 517ee73 fix(provider): filter unreplayable Bedrock reasoning before caching (#45769)
• c77100a chore: generate
• 03afae5 feat(opencode): load supported v2 config in v1 (#45421)
• 05ea507 fix(console): improve Go comparison chart on mobile (#45044)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

[afonsoft]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[devin-ai-integration]

Devin Review found 1 potential issue.

[devin-ai-integration]

📝 Info: CLI version remains dynamic

Both action revisions install the latest opencode CLI at runtime. The new SHA does not select version 1.18.25 or make runs reproducible.

---

Was this helpful? React with 👍 or 👎 to provide feedback.

[github-actions]

Qodana Community for .NET

10 new problems were found

Inspection name	Severity	Problems
Access to a static member of a type via a derived type	🔶 Warning	4
Local variable hides member	🔶 Warning	4
Member can be made private: Non-private accessibility	◽️ Notice	2

💡 Qodana analysis was run in the pull request mode: only the changed files were checked

View the detailed Qodana report

To be able to view the detailed Qodana report, you can either:

• Register at Qodana Cloud and configure the action
• Use GitHub Code Scanning with Qodana
• Host Qodana report at GitHub Pages
• Inspect and use qodana.sarif.json (see the Qodana SARIF format for details)

To get *.log files or any other Qodana artifacts, run the action with upload-result option set to true,
so that the action will upload the files as the job artifacts:

      - name: 'Qodana Scan'
        uses: JetBrains/qodana-action@v2026.1.3
        with:
          upload-result: true

Contact Qodana team

Contact us at qodana-support@jetbrains.com

• Or via our issue tracker: https://jb.gg/qodana-issue
• Or share your feedback: https://jb.gg/qodana-discussions