diff --git a/plugins/codex-security/skills/triage-finding/evals/package.json b/plugins/codex-security/skills/triage-finding/evals/package.json
index 23df858bc..17ef07386 100644
--- a/plugins/codex-security/skills/triage-finding/evals/package.json
+++ b/plugins/codex-security/skills/triage-finding/evals/package.json
@@ -31,7 +31,7 @@
   },
   "dependencies": {
     "@openai/codex-sdk": "0.154.0",
-    "@opencode-ai/sdk": "1.18.29",
+    "@opencode-ai/sdk": "1.18.30",
     "promptfoo": "0.122.2"
   }
 }
diff --git a/plugins/codex-security/skills/triage-finding/evals/pnpm-lock.yaml b/plugins/codex-security/skills/triage-finding/evals/pnpm-lock.yaml
index fbadac78c..ac4a8415c 100644
--- a/plugins/codex-security/skills/triage-finding/evals/pnpm-lock.yaml
+++ b/plugins/codex-security/skills/triage-finding/evals/pnpm-lock.yaml
@@ -8,7 +8,7 @@ overrides:
   '@huggingface/transformers@4.2.0>sharp': 0.35.4
   '@openai/codex': 0.154.0
   '@openai/codex-sdk': 0.154.0
-  '@opencode-ai/sdk': 1.18.29
+  '@opencode-ai/sdk': 1.18.30
   onnxruntime-node@1.24.3>adm-zip: 0.6.0
 
 importers:
@@ -19,8 +19,8 @@ importers:
         specifier: 0.154.0
         version: 0.154.0
       '@opencode-ai/sdk':
-        specifier: 1.18.29
-        version: 1.18.29
+        specifier: 1.18.30
+        version: 1.18.30
       promptfoo:
         specifier: 0.122.2
         version: 0.122.2(@aws-sdk/credential-provider-node@3.972.82)(@cfworker/json-schema@4.1.1)(@smithy/signature-v4@5.7.3)(@types/json-schema@7.0.15)(@types/node@25.9.1)(better-sqlite3@12.10.0)(graphql@17.0.2)(pg@8.23.0)(playwright-core@1.62.1)(socks@2.8.10)
@@ -1287,8 +1287,8 @@ packages:
     cpu: [x64]
     os: [win32]
 
-  '@opencode-ai/sdk@1.18.29':
-    resolution: {integrity: sha512-4CS+FoLPkymTlcga8jxivGDDb2AbWMIIl3b8+myoe2wtv/1ANYCErslgz1xy5hTVHymWE6CtVNKzRuPU0ED57A==}
+  '@opencode-ai/sdk@1.18.30':
+    resolution: {integrity: sha512-uviJ+PZLc/D1szt33WGzzt/rqJ+IaNmRGBb+UcOXrcQANl8XXKJrp4CNQQ2UAnUJ3Ek+VqcamIwjtKHUW/OjOQ==}
 
   '@opentelemetry/api-logs@0.221.0':
     resolution: {integrity: sha512-OlanaW1vv7ufTqQ3/fPLI4arGt5ZoM+P8abOMki6uEYnpRazepSWDwDnnw+la7kE26SHVC18//SMccrDvLKOXQ==}
@@ -5518,7 +5518,7 @@ snapshots:
   '@openai/codex@0.154.0-win32-x64':
     optional: true
 
-  '@opencode-ai/sdk@1.18.29':
+  '@opencode-ai/sdk@1.18.30':
     dependencies:
       cross-spawn: 7.0.6
 
@@ -7910,7 +7910,7 @@ snapshots:
       '@openai/agents': 0.11.8(@aws-sdk/credential-provider-node@3.972.82)(@cfworker/json-schema@4.1.1)(@smithy/signature-v4@5.7.3)(ws@8.21.3)(zod@4.5.4)
       '@openai/codex-sdk': 0.154.0
       '@openai/codex-security': 0.1.27(@types/node@25.9.1)(graphql@17.0.2)
-      '@opencode-ai/sdk': 1.18.29
+      '@opencode-ai/sdk': 1.18.30
       '@playwright/browser-chromium': 1.62.1
       '@rollup/rollup-linux-x64-gnu': 4.63.1
       '@slack/web-api': 8.1.1