# opencode v1.19.4 upgrades bundled Bun runtime to 1.4.4 with security fixes

published: 2026-10-22T14:05:52.232Z
topic: infrastructure
source: https://github.com/anomalyco/opencode/releases/tag/v1.19.4
url: https://aiagentnews.io/stories/opencode-v1-19-4-upgrades-bundled-bun-runtime-to-1-4-4-with-security-fixes

The opencode project released v1.19.4, which upgrades the Bun runtime it bundles to version 1.4.4. The update brings in security fixes across several protocols and refreshes root certificates to NSS 3.131.1.

The GitHub release for opencode v1.19.4, published by the opencode-agent account on 22 Oct, lists one change under Core Improvements. It raises the Bun runtime that ships with opencode to 1.4.4.

According to the GitHub release page, that Bun version includes security fixes for Brotli, TLS, HTTP/1.1, HTTP/2, HTTP/3, WebSocket and fetch. The release also updates root certificates to NSS 3.131.1.

The release page does not list any other changes, and it is marked as the latest release for the project.

## Why it matters if you build agents

Anyone running opencode gets the bundled Bun fixes with this version, so there is no separate runtime patch to apply. Teams that pin opencode should move to v1.19.4 to pick up the TLS and HTTP fixes.