Merge branch 'main' into renovate/ghcr.io-renovatebot-renovate-44.x

versions.env

@@ -26,7 +26,7 @@ NAMETAG_CRON_IMAGE=alpine:3.24.3
 SUPERNOTE_MARIADB_IMAGE=mariadb:10.6.28
 SUPERNOTE_REDIS_IMAGE=redis:7.4.11
 SUPERNOTE_NOTELIB_IMAGE=docker.io/supernote/notelib:6.9.3
-SUPERNOTE_SERVICE_IMAGE=docker.io/supernote/supernote-service:26.06.04
+SUPERNOTE_SERVICE_IMAGE=docker.io/supernote/supernote-service:26.10.09
 
 # --- monitor (Flatcar) ---
 # The hub and agents share the TLS pair baked into the image, so this must
@@ -40,7 +40,7 @@ LITELLM_IMAGE=docker.litellm.ai/berriai/litellm:v1.106.4
 QDRANT_IMAGE=qdrant/qdrant:v1.20.0
 OPEN_TERMINAL_IMAGE=ghcr.io/open-webui/open-terminal:0.14.5
 OPEN_WEBUI_IMAGE=ghcr.io/open-webui/open-webui:v0.12.4
-OPENCODE_IMAGE=ghcr.io/anomalyco/opencode:1.18.32
+OPENCODE_IMAGE=ghcr.io/anomalyco/opencode:1.19.4
 
 # --- oswald_runner (Flatcar) ---
 GITEA_RUNNER_IMAGE=docker.io/gitea/runner:3.5.0