[fro-bot]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
fro-bot/agent	action	minor	v0.128.0 → v0.129.0

---

Release Notes

fro-bot/agent

v0.129.0

Compare Source

What's new

Stock OpenCode V2 binaries can now be installed with integrity checks against both a repository-recorded digest and the release’s SHA256SUMS. The pin currently records V2.2.0; the workspace image verifies its musl asset too, while the default remains on the existing V1 harness path. #​1973

Full changelog

0.129.0 (2026-10-28)

Features

• setup: verify pinned stock OpenCode V2 binaries against a recorded digest (#​1973) (f7698f3)

Bug Fixes

• deps: update dependency hono to v4.13.14 (#​1971) (1549f33)

Code Refactoring

• runtime: map OpenCode V2 events onto the activity and ledger model (#​1974) (36e07a5)

---

Configuration

📅 Schedule: (in timezone America/Phoenix)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.