Notably a major security regression which leads me to believe they have a misunderstanding of security in the age of ai. The precedence order for configuration loading is the exact opposite it needs to be. Buyer be warned, I stopped using opencode because of what I see in v2, there is a lot more beyond this. tl;dr they are trying to be too much, more like an IDE, and that is not what I personally want in a harness. However the security issue is of real concern in our organization. We are not upgrading to v2.
Notably a major security regression which leads me to believe they have a misunderstanding of security in the age of ai. The precedence order for configuration loading is the exact opposite it needs to be. Buyer be warned, I stopped using opencode because of what I see in v2, there is a lot more beyond this. tl;dr they are trying to be too much, more like an IDE, and that is not what I personally want in a harness. However the security issue is of real concern in our organization. We are not upgrading to v2.
https://news.ycombinator.com/item?id=50075319
https://github.com/anomalyco/opencode/pull/54921
If you're interested in a description of the security issue, I have written more details in a feature request for the Pi harness.
https://github.com/earendil-works/pi/issues/10895#issuecomme...
Looks like it was already reverted
I am please my activism and articulation worked!
https://github.com/anomalyco/opencode/pull/55267
I'm personally still not going to use v2 because I dislike the UX to no end, but at least I feel they are listening and the reply is a good one.