Skip to content

chore(deps): bump @opencode-ai/sdk from 1.2.25 to 1.3.0#308

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/opencode-ai/sdk-1.3.0
Open

chore(deps): bump @opencode-ai/sdk from 1.2.25 to 1.3.0#308
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/opencode-ai/sdk-1.3.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 23, 2026

Bumps @opencode-ai/sdk from 1.2.25 to 1.3.0.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@opencode-ai/sdk](https://github.com/sst/opencode-sdk-js) from 1.2.25 to 1.3.0.
- [Release notes](https://github.com/sst/opencode-sdk-js/releases)
- [Changelog](https://github.com/anomalyco/opencode-sdk-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sst/opencode-sdk-js/commits)

---
updated-dependencies:
- dependency-name: "@opencode-ai/sdk"
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 23, 2026

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@chatgpt-codex-connector
Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

@github-actions
Copy link
Copy Markdown
Contributor

Issue Linking Reminder

This PR doesn't appear to have a linked issue. Consider linking to:

  • This repo: Closes #123
  • ralph-ideas: Closes multivmlabs/ralph-ideas#123

Using Closes, Fixes, or Resolves will auto-close the issue when this PR is merged.


If this PR doesn't need an issue, you can ignore this message.

@github-actions github-actions bot added the chore label Mar 23, 2026
@github-actions
Copy link
Copy Markdown
Contributor

✔️ Bundle Size Analysis

Metric Value
Base 2638.70 KB
PR 2638.70 KB
Diff 0 KB (0%)
Bundle breakdown
156K	dist/auth
80K	dist/automation
4.0K	dist/cli.d.ts
4.0K	dist/cli.d.ts.map
20K	dist/cli.js
12K	dist/cli.js.map
584K	dist/commands
28K	dist/config
4.0K	dist/index.d.ts
4.0K	dist/index.d.ts.map
4.0K	dist/index.js
4.0K	dist/index.js.map
896K	dist/integrations
100K	dist/llm
1.2M	dist/loop
188K	dist/mcp
60K	dist/presets
92K	dist/setup
40K	dist/skills
392K	dist/sources
76K	dist/ui
144K	dist/utils
336K	dist/wizard

Copy link
Copy Markdown

@claude claude bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM — routine Dependabot lock file update, no logic changes.

Extended reasoning...

Overview

This PR modifies only pnpm-lock.yaml, bumping @opencode-ai/sdk from 1.2.25 to 1.3.0 (minor version) and incidentally updating @sourcegraph/amp to a newer build snapshot. No source files, configuration, or logic are touched.

Security Risks

None. The change is confined to the lock file — integrity hashes are updated to match the new package versions, which is the expected and correct outcome of a dependency bump.

Level of Scrutiny

Low. Dependabot-generated lock file bumps for minor version increments are mechanical and low-risk. The 1.2.25 → 1.3.0 bump is a minor release, which conventionally signals backwards-compatible additions.

Other Factors

No bugs were reported by the bug hunting system. No prior reviews from me exist on this PR. The PR is scoped to a single file with no ambiguity.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants