[antauth-alfonso]

Replaces Dependabot #369, #372 and #373. @opentui/core and @opentui/solid move to 0.6.6 together, and @opencode/plugin to 2.0.32 with @opencode/{ai,client,protocol,schema,util} aligned in the lockfile, so exactly one copy of each installs. solid-js stays at 1.9.12 because @opentui/solid 0.6.6 declares exactly that peer. No source changes: the OpenTUI, Solid and OpenCode 2 changes reviewed don't touch APIs we use, and builds and typechecks pass. The packed smoke (fresh install, one copy of each shared client, real sidebar render under OpenCode 1 and 2 host libraries) passed.

---

Summary by cubic

Updates OpenTUI and the OpenCode 2 plugin SDK together so each family installs exactly once, replacing Dependabot PRs #369, #372, and #373. @opentui/core and @opentui/solid move to 0.6.6, and @opencode/plugin to 2.0.32 with the rest of the @opencode packages aligned in the lockfile. solid-js stays at 1.9.12, the exact version @opentui/solid 0.6.6 requires. No source changes: builds and typechecks pass, and the packed smoke test (fresh install, one copy of each shared client, real sidebar render under OpenCode 1 and 2 host libraries) passed. The move is recorded in the root changelog.

^{Written for commit 429157b. Summary will update on new commits.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​opencode/​plugin@​2.0.22 ⏵ 2.0.32	+1		+7
	@​opentui/​core@​0.6.5 ⏵ 0.6.6
	@​opentui/​solid@​0.6.5 ⏵ 0.6.6

View full report