build(deps): bump anomalyco/opencode/github from 1.17.19 to 1.18.21

[dependabot]

Bumps anomalyco/opencode/github from 1.17.19 to 1.18.21.

Release notes

Sourced from anomalyco/opencode/github's releases.

v1.18.21

Core

Bugfixes

• Continue responses when a model reports an unknown finish reason instead of stopping early
• Route Vertex AI eu and us multi-region Gemini requests through REP endpoints

Desktop

Bugfixes

• Keep file search results visible while the next search is loading
• Register the archive session command in both desktop layouts (@​NathanTCode)

Thank you to 1 community contributor:

• @​NathanTCode:
  • fix(app): register archive session command in both layouts (#41741)

v1.18.20

Core

Bugfixes

• Surface failed subagent tool calls with a resumable task_id.
• Retry provider responses that end with finish_reason: network_error.
• Retry more network error variants, including network-error and network_error.
• Surface resumable subagent failures instead of returning an empty result.
• Preserve Cerebras max_completion_tokens without applying an extra output cap.
• Answer permission requests triggered by subagents during opencode run.
• Retry xAI capacity and temporary unavailability stream errors.

v1.18.19

Core

Improvements

• Added native OpenAI and Anthropic passthroughs for Cloudflare AI Gateway models.
• Matched Codex rate limits more closely to ChatGPT subscription limits. (@​GameOn223)

Bugfixes

• Removed built-in Qwen sampling defaults that could send unsupported settings.
• Properly show authenticated providers in /connect. (@​OpeOginni)
• Ignore malformed model pricing instead of breaking usage cost calculation.
• Fall back when OpenAI websocket requests exceed message size limits.
• Forward ChatGPT workspace compute residency to Codex requests.
• Updated the default Console URL used by account connection flows.
• Enabled web search when using the OpenCode Go provider.
• Preserved compatibility with existing v1 databases.

Desktop

... (truncated)

Commits

• 826d9ad release: v1.18.21
• 57fa34f fix(opencode): continue unknown finish responses (#43892)
• 0af9dd6 fix(stats): merge renamed model data (#43883)
• 8ecd4c2 chore: generate
• 361a71f fix(opencode): route Vertex multi-regions through REP (#42648)
• fa8f170 chore: generate
• 813e6f3 docs(go): add DeepSeek vision model (#43866)
• ba72a6f fix(go): align Ox Alpha model ID (#43837)
• b6a1f95 fix(app): preserve file search results while loading (#43836)
• f357e70 fix(app): register archive session command in both layouts (#41741)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[afonsoft]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Qodana Community for .NET

10 new problems were found

Inspection name	Severity	Problems
Access to a static member of a type via a derived type	🔶 Warning	4
Local variable hides member	🔶 Warning	4
Member can be made private: Non-private accessibility	◽️ Notice	2

💡 Qodana analysis was run in the pull request mode: only the changed files were checked

View the detailed Qodana report

To be able to view the detailed Qodana report, you can either:

• Register at Qodana Cloud and configure the action
• Use GitHub Code Scanning with Qodana
• Host Qodana report at GitHub Pages
• Inspect and use qodana.sarif.json (see the Qodana SARIF format for details)

To get *.log files or any other Qodana artifacts, run the action with upload-result option set to true,
so that the action will upload the files as the job artifacts:

      - name: 'Qodana Scan'
        uses: JetBrains/qodana-action@v2026.1.3
        with:
          upload-result: true

Contact Qodana team

Contact us at qodana-support@jetbrains.com

• Or via our issue tracker: https://jb.gg/qodana-issue
• Or share your feedback: https://jb.gg/qodana-discussions