A light day. The opencode coding agent shipped v2.2.6, which makes scripted, headless runs cheaper to operate: sessions can start directly in a git worktree with opencode run -w, CI runs can be marked --archived so they stay out of the session inbox, and MCP servers can pool one shared connection across projects instead of spawning a process per project. On the security side, Apiiro’s census of public GitHub repos found that 1,122 public copies of Claude Code’s .claude/settings.local.json contain at least one secret, because accepting a prompt with “Yes, and don’t ask again” saves the entire approved command — passwords and tokens included — into a project file whose git-exclusion only ever lives on the local machine.
From the labs
- v2.2.6 — opencode (MCP pooling, worktree runs, archived CI sessions)