diff --git a/deploy/compose.release.yaml b/deploy/compose.release.yaml
index 3b9bf8f..04e81f1 100644
--- a/deploy/compose.release.yaml
+++ b/deploy/compose.release.yaml
@@ -116,7 +116,7 @@ services:
   # container grants only the pinned guest UID access to the dedicated data
   # volume before the long-running non-root service starts.
   opencode-init:
-    image: ghcr.io/anomalyco/opencode:1.18.35@sha256:ae90ec960c871b0ea6df9abc1c2ec1e6b36464e8eca9b0e71e1ed3b553f47aa2
+    image: ghcr.io/anomalyco/opencode:1.19.5@sha256:f4cfe16d91efbbfca01a51c44094fba4cf82e15c7fa17de5f11f9059699b1e6e
     entrypoint:
       - /bin/sh
       - -ec
@@ -141,7 +141,7 @@ services:
   opencode-agent:
     # The pinned image, non-root UID 405, and OPENCODE_SERVER_* basic auth are
     # exercised by the opt-in M4 container test when Docker is available.
-    image: ghcr.io/anomalyco/opencode:1.18.35@sha256:ae90ec960c871b0ea6df9abc1c2ec1e6b36464e8eca9b0e71e1ed3b553f47aa2
+    image: ghcr.io/anomalyco/opencode:1.19.5@sha256:f4cfe16d91efbbfca01a51c44094fba4cf82e15c7fa17de5f11f9059699b1e6e
     command:
       - serve
       - --hostname
diff --git a/deploy/compose.yaml b/deploy/compose.yaml
index 1d195aa..da564ad 100644
--- a/deploy/compose.yaml
+++ b/deploy/compose.yaml
@@ -113,7 +113,7 @@ services:
   # container grants only the pinned guest UID access to the dedicated data
   # volume before the long-running non-root service starts.
   opencode-init:
-    image: ghcr.io/anomalyco/opencode:1.18.35@sha256:ae90ec960c871b0ea6df9abc1c2ec1e6b36464e8eca9b0e71e1ed3b553f47aa2
+    image: ghcr.io/anomalyco/opencode:1.19.5@sha256:f4cfe16d91efbbfca01a51c44094fba4cf82e15c7fa17de5f11f9059699b1e6e
     entrypoint:
       - /bin/sh
       - -ec
@@ -138,7 +138,7 @@ services:
   opencode-agent:
     # The pinned image, non-root UID 405, and OPENCODE_SERVER_* basic auth are
     # exercised by the opt-in M4 container test when Docker is available.
-    image: ghcr.io/anomalyco/opencode:1.18.35@sha256:ae90ec960c871b0ea6df9abc1c2ec1e6b36464e8eca9b0e71e1ed3b553f47aa2
+    image: ghcr.io/anomalyco/opencode:1.19.5@sha256:f4cfe16d91efbbfca01a51c44094fba4cf82e15c7fa17de5f11f9059699b1e6e
     command:
       - serve
       - --hostname