Evidence record / opencode
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-24-opencode-bundled-bun-and-long-running-request-fixes-require-updating-the-running-application
Bundled Bun and long-running request fixes require updating the running application. V2.1.3 and V1.19.4 move their bundled Bun build to 1.4.4. Bun’s versioned notes describe security fixes across networking, decompression and other runtime surfaces; they do not establish which issue was exploitable through each OpenCode entry point. V2.1.0 fixes long-pending TUI requests; run and mini retain their existing no-timeout behavior through a shared helper. The same release adds persistent PTYs on Windows. V2.1.2 keeps locations loaded while sessions or background jobs are active; 2.1.3 degrades gracefully when file watching fails. V2.0.29 also continues responses after output-token limits. These are specific reliability repairs, not proof that every reported freeze or hung child process is fixed.
Channel: tagged-release. Half: both. Date: 2026-10-22.
Operator consequence: Update the application and restart the serving process; installing a newer system Bun does not replace the runtime already compiled into an OpenCode binary. Retest a representative long tool call, background job and watcher-limit condition on the actual client/server pair, with an external timeout and completion receipt. The changes can reduce babysitting and reconnect work, but this read measured neither the failure rate nor human time saved. Preserve unresolved freeze reports until a versioned reproduction ties them to a fix.
Receipt
- https://github.com/anomalyco/opencode/blob/v2.1.4/.github/workflows/publish.yml
- https://github.com/anomalyco/opencode/commit/baec69bae8e2c90551dbb8e3c462456870c735cf
- https://bun.com/blog/bun-v1.4.4#security
- https://github.com/anomalyco/opencode/commit/52a10f573f1da5103c85990da9341e3645a39365
- https://github.com/anomalyco/opencode/commit/c93aaae37157d785f76a8e9a9243a6560e286468
- https://github.com/anomalyco/opencode/commit/89d996c2c5b902c9467494d8abe01205830e1d4a
Finding metadata
Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0
Finding ID: 2026-10-24-opencode-bundled-bun-and-long-running-request-fixes-require-updating-the-running-application
Source links
Primary links, including exact changelog lines when available.
- tagged commit file2026-10-24-opencode-bundled-bun-and-long-running-request-fixes-require-updating-the-running-applicationanomalyco/opencode / .github/workflows/publish.ymlcommit2026-10-24-opencode-bundled-bun-and-long-running-request-fixes-require-updating-the-running-applicationgithub.com/anomalyco/opencode/commit/baec69bae8e2c90551dbb8e3c462456870c735cfofficial docs2026-10-24-opencode-bundled-bun-and-long-running-request-fixes-require-updating-the-running-applicationbun.com/blog/bun-v1.4.4#securitycommit2026-10-24-opencode-bundled-bun-and-long-running-request-fixes-require-updating-the-running-applicationgithub.com/anomalyco/opencode/commit/52a10f573f1da5103c85990da9341e3645a39365commit2026-10-24-opencode-bundled-bun-and-long-running-request-fixes-require-updating-the-running-applicationgithub.com/anomalyco/opencode/commit/c93aaae37157d785f76a8e9a9243a6560e286468commit2026-10-24-opencode-bundled-bun-and-long-running-request-fixes-require-updating-the-running-applicationgithub.com/anomalyco/opencode/commit/89d996c2c5b902c9467494d8abe01205830e1d4a
Versioned source: run artifact