OpenCode

Upgraded the bundled Bun runtime to 1.4.4, which includes [security fixes](https://bun.com/blog/bun-v1.4.4#security) for Brotli, TLS, HTTP/1.1, HTTP/2, HTTP/3, WebSocket, and `fetch`, and updates root certificates to NSS 3.131.1.

PR #56106 demo video

Configure model reasoning options to generate reasoning variants, replacing catalog variants while preserving your configured variant overrides.

OpenCode 1 now stays on the 1.x release line: update checks use only the npm `opencode-ai` latest version, so 1.x installs are never offered a 2.x build as a regular update.

• Upgrading to OpenCode 2 remains a separate, explicit choice through the 2.0 offer in `/update` or `opencode upgrade --major`.
• Fix upgrades for installs managed by yarn.
• Skip 1.x updates for Homebrew Core installs, which now track OpenCode 2, and check tap and Chocolatey availability before offering an update.
• The install script refuses to install 2.x versions.

Session sharing has been discontinued.

• Existing share links and session-sharing commands are no longer available, and importing sessions from share URLs is unsupported.

Run `opencode upgrade --major` to upgrade to OpenCode 2.

• Allow the OpenAI `ultrafast` service tier.
• Validate PTY connection origins and tickets before checking whether a PTY exists.
• Use `/update` to install OpenCode updates or upgrade to OpenCode 2; updates are no longer installed automatically.
• **Thank you to 1 community contributor:**
• @dc85:
• docs(web): add Exo Free to Zen docs (#53622)
• fix(stats): attribute exo usage to an unknown provider (#53621)
• docs(web): remove Fledge Alpha Free from Zen docs (#53984)

Added canonical redirects and JSON and Markdown data formats for agent-readable stats.

• xAI tool results now include supported images, while unsupported image formats are skipped. (@Jaaneek)
• **Thank you to 3 community contributors:**
• @dc85:
• docs(web): add Fledge Alpha Free to Zen docs (#52895)
• @jm0ney337:
• docs(ecosystem): add opencode-supabase to ecosystem plugins (#49848)
• @Jaaneek:
• fix(opencode): bump @ai-sdk/xai to 3.0.139 so tool-result images reach xAI (#53549)

Send namespaced session and parent-session identity headers with model requests.

• Re-sign locally compiled macOS binaries so they run reliably on macOS 27+. (@ryangamerdev)
• Sign macOS CLI release binaries with a Developer ID.
• **Thank you to 3 community contributors:**
• @dc85:
• docs(web): correct GPT 6.1 Sol cache pricing (#52176)
• @metal-huang:
• fix(tui): use path.sep for plugin name extraction in /status dialog (#52328)
• @ryangamerdev:
• fix(opencode): ad-hoc re-sign darwin binaries after local compile (#52183)

Cloudflare AI Gateway models now honor provider response and stream timeouts. (@danlapid)

• MCP browser launch failures are now reported when the launcher exits immediately.
• Debug configuration output now redacts credentials and sensitive headers.
• Gemini thinking defaults and effort options now match the supported controls across model generations. (@markmcd)
• **Thank you to 5 community contributors:**
• @dc85:
• docs(web): add Claude Opus 5.5, GPT 6 Sol, and GPT 6 Luna to Zen (#50708)
• @vglafirov:
• maint(gitlab): bump gitlab-ai-provider to 6.16.0 (#50742)
• @markmcd:
• +5 more changes

Fixed Bedrock image attachments so they are only hoisted for Claude, Nova, and Llama 4 models.

• Fixed Together AI streaming usage reporting.
• **Thank you to 1 community contributor:**
• @dc85:
• docs: add DeepSeek V4.1 Flash to Zen (#49897)
• feat: add Grok 4.7 to Zen and Go (#50288)

Restored ACP session model, effort, mode, and reasoning chunk boundaries when loading, resuming, or forking sessions. (@JacobNWolf)

• Show remote config authentication errors during startup and exit with a failure status.
• Request summarized adaptive thinking for GitHub Copilot models.
• **Thank you to 4 community contributors:**
• @heimoshuiyu:
• feat(console): add batch workspace block endpoints (#48491)
• @JacobNWolf:
• fix(acp): restore session options and reasoning boundaries (#48225)
• @R-Taneja:
• chore(deps): bump @ai-sdk/gateway to 3.0.191 (#48710)
• @MatthewFeroz:
• +1 more change

Added the Astra system prompt for GPT-6 models.

• Preserved Bedrock DeepSeek model IDs, including ARN-based IDs, so they resolve correctly. (@YeEmrick)
• Updated the Azure provider SDK to pick up compatibility fixes.
• Updated the OpenAI provider SDK to pick up compatibility fixes.
• Added reasoning effort variants for supported GitLab GPT and Claude models. (@far-ouq)
• **Thank you to 3 community contributors:**
• @heimoshuiyu:
• fix(console): openai usage normalization and tier threshold config (#47342)
• @far-ouq:
• fix(opencode): add GitLab reasoning variants (#47306)
• @YeEmrick:
• +1 more change

Allow Codex OAuth model filtering to recognize integer GPT versions like `gpt-6`

• Fixes issue of gpt-6-astra not showing up for openai subscription users
• **Thank you to 2 community contributors:**
• @Peter267:
• docs(zh): fix bold rendering by adding spaces around asterisks (#46231)
• @heimoshuiyu:
• feat(console): add quota reset support action (#47313)

Send the session ID as GitHub Copilot's interaction header to improve request tracking across a session.

• Use the desktop client ID during OpenCode account device authentication.
• Increase the open-in app icon size for better visibility.
• **Thank you to 1 community contributor:**
• @MVS-source:
• docs: add Eden AI to the providers list (#43386)

Default provider header timeouts to five minutes so slow model startups fail less often.

• Default streamed chunk timeouts to five minutes, with `false` supported to disable them.
• Let Anthropic `thinking.blockBinding` opt out via config when you need to keep the provider default. (@dkindlund)
• Limit Anthropic thinking block binding to Claude 5.1+ models so older deployments do not reject requests.
• Avoid unhandled errors when canceling timed-out SSE reads. (@AlexanderWillner)
• **Thank you to 2 community contributors:**
• @AlexanderWillner:
• +3 more changes