From a354e4f52c6fefe86af9770ac578f32a8d981e16 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 8 Oct 2026 08:59:09 +0000
Subject: [PATCH] chore(deps): bump anomalyco/opencode

Bumps the compose-services group with 1 update in the /deploy directory: anomalyco/opencode.


Updates `anomalyco/opencode` from 1.18.31 to 1.18.35

---
updated-dependencies:
- dependency-name: anomalyco/opencode
  dependency-version: 1.18.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compose-services
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 deploy/compose.release.yaml | 4 ++--
 deploy/compose.yaml         | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/deploy/compose.release.yaml b/deploy/compose.release.yaml
index fcc4890..3b9bf8f 100644
--- a/deploy/compose.release.yaml
+++ b/deploy/compose.release.yaml
@@ -116,7 +116,7 @@ services:
   # container grants only the pinned guest UID access to the dedicated data
   # volume before the long-running non-root service starts.
   opencode-init:
-    image: ghcr.io/anomalyco/opencode:1.18.31@sha256:0d3c9551ea2522fcfd23fbc2e302fc87218d6c198bff277e8ab44d93a3bd6d3d
+    image: ghcr.io/anomalyco/opencode:1.18.35@sha256:ae90ec960c871b0ea6df9abc1c2ec1e6b36464e8eca9b0e71e1ed3b553f47aa2
     entrypoint:
       - /bin/sh
       - -ec
@@ -141,7 +141,7 @@ services:
   opencode-agent:
     # The pinned image, non-root UID 405, and OPENCODE_SERVER_* basic auth are
     # exercised by the opt-in M4 container test when Docker is available.
-    image: ghcr.io/anomalyco/opencode:1.18.31@sha256:0d3c9551ea2522fcfd23fbc2e302fc87218d6c198bff277e8ab44d93a3bd6d3d
+    image: ghcr.io/anomalyco/opencode:1.18.35@sha256:ae90ec960c871b0ea6df9abc1c2ec1e6b36464e8eca9b0e71e1ed3b553f47aa2
     command:
       - serve
       - --hostname
diff --git a/deploy/compose.yaml b/deploy/compose.yaml
index 692521a..1d195aa 100644
--- a/deploy/compose.yaml
+++ b/deploy/compose.yaml
@@ -113,7 +113,7 @@ services:
   # container grants only the pinned guest UID access to the dedicated data
   # volume before the long-running non-root service starts.
   opencode-init:
-    image: ghcr.io/anomalyco/opencode:1.18.31@sha256:0d3c9551ea2522fcfd23fbc2e302fc87218d6c198bff277e8ab44d93a3bd6d3d
+    image: ghcr.io/anomalyco/opencode:1.18.35@sha256:ae90ec960c871b0ea6df9abc1c2ec1e6b36464e8eca9b0e71e1ed3b553f47aa2
     entrypoint:
       - /bin/sh
       - -ec
@@ -138,7 +138,7 @@ services:
   opencode-agent:
     # The pinned image, non-root UID 405, and OPENCODE_SERVER_* basic auth are
     # exercised by the opt-in M4 container test when Docker is available.
-    image: ghcr.io/anomalyco/opencode:1.18.31@sha256:0d3c9551ea2522fcfd23fbc2e302fc87218d6c198bff277e8ab44d93a3bd6d3d
+    image: ghcr.io/anomalyco/opencode:1.18.35@sha256:ae90ec960c871b0ea6df9abc1c2ec1e6b36464e8eca9b0e71e1ed3b553f47aa2
     command:
       - serve
       - --hostname