diff --git a/bun.lock b/bun.lock
index 4754a6b..1fb4f74 100644
--- a/bun.lock
+++ b/bun.lock
@@ -4,10 +4,8 @@
   "workspaces": {
     "": {
       "name": "@openchamber/opencode-container-workspace",
-      "dependencies": {
-        "@opencode-ai/plugin": "1.18.8",
-      },
       "devDependencies": {
+        "@opencode-ai/plugin": "1.18.12",
         "typescript": "5.9.3",
         "vitest": "^4.1.5",
         "ws": "^8.18.3",
@@ -39,9 +37,9 @@
 
     "@napi-rs/wasm-runtime": ["@napi-rs/wasm-runtime@1.1.6", "", { "dependencies": { "@tybys/wasm-util": "^0.10.3" }, "peerDependencies": { "@emnapi/core": "^1.7.1", "@emnapi/runtime": "^1.7.1" } }, "sha512-ZLv/JdUfkvOy9eCnnBaGfiO+XimbjebAeO+MRQqD/B+FR1tnRN0tpKSJHRbE8sFfS6aqsXZ67TQjfwfsxULVbg=="],
 
-    "@opencode-ai/plugin": ["@opencode-ai/plugin@1.18.8", "", { "dependencies": { "@ai-sdk/provider": "3.0.8", "@opencode-ai/sdk": "1.18.8", "effect": "4.0.0-beta.83", "zod": "4.1.8" }, "peerDependencies": { "@opentui/core": ">=0.4.5", "@opentui/keymap": ">=0.4.5", "@opentui/solid": ">=0.4.5" }, "optionalPeers": ["@opentui/core", "@opentui/keymap", "@opentui/solid"] }, "sha512-ADO2XvuStRHWSXOhFYnDrM1ZOjcSokh5/6atp9xtgVZWic/UdW6BSXgJkOGB3Ud9+S0rEmYxTCRTH/7Mt4OSDg=="],
+    "@opencode-ai/plugin": ["@opencode-ai/plugin@1.18.12", "", { "dependencies": { "@ai-sdk/provider": "3.0.8", "@opencode-ai/sdk": "1.18.12", "effect": "4.0.0-beta.83", "zod": "4.1.8" }, "peerDependencies": { "@opentui/core": ">=0.4.5", "@opentui/keymap": ">=0.4.5", "@opentui/solid": ">=0.4.5" }, "optionalPeers": ["@opentui/core", "@opentui/keymap", "@opentui/solid"] }, "sha512-p+vOKlWMTAl0ix97hg3aELlVM/jNhIi0kOZEzY+Bo8W//hliw5vmDTuCnOJh0QdQl5fE9uaHzaCJR9qG9YodOQ=="],
 
-    "@opencode-ai/sdk": ["@opencode-ai/sdk@1.18.8", "", { "dependencies": { "cross-spawn": "7.0.6" } }, "sha512-8vi5UBKFFgc+fnyKhZhGUxiIWMtUuN00VAInnK9JO6g6EC8WvWefP+ccTBQD023zod69JaEoAzGgO8hdxXHUaw=="],
+    "@opencode-ai/sdk": ["@opencode-ai/sdk@1.18.12", "", { "dependencies": { "cross-spawn": "7.0.6" } }, "sha512-Skjm0uRWqIiL9BQliZSrvnBflT99q1aGhT2pATNwli2WU8XSKm4lhZJFay7dIzjrA5C9SfgK+YSeoES2PbFugA=="],
 
     "@oxc-project/types": ["@oxc-project/types@0.139.0", "", {}, "sha512-r9gHphtCs+1M7J0pw6Sn/hh/Wpa/iQrOOkrNAlVLF/gHq+/CJmHIWKKUUhdWjcD6CIa8idarspCsASiXCXvFUw=="],
 
diff --git a/package.json b/package.json
index 20e2826..2d3f825 100644
--- a/package.json
+++ b/package.json
@@ -28,10 +28,8 @@
     "lint": "bun run build",
     "test": "vitest run"
   },
-  "dependencies": {
-    "@opencode-ai/plugin": "1.18.8"
-  },
   "devDependencies": {
+    "@opencode-ai/plugin": "1.18.12",
     "typescript": "5.9.3",
     "vitest": "^4.1.5",
     "ws": "^8.18.3"
diff --git a/runtime-image/Dockerfile b/runtime-image/Dockerfile
index 7665ada..3b180e3 100644
--- a/runtime-image/Dockerfile
+++ b/runtime-image/Dockerfile
@@ -1,7 +1,7 @@
 ARG NODE_BASE_IMAGE
 FROM ${NODE_BASE_IMAGE}
 
-ARG OPENCODE_VERSION=1.18.8
+ARG OPENCODE_VERSION=1.18.12
 ARG NPM_VERSION=11.18.0
 # npm vendors these two and still ships versions with published denial-of-service
 # advisories, so the fixed releases are installed over the vendored copies. Both are