fix(release): update opencode security line 1.3.2

Author: rldyourmnd

.opencode/commands/index.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.3.1",
+  "version": "1.3.2",
   "generated_by": "scripts/generate_commands_index.py",
   "count": 11,
   "commands": [

.opencode/plugins/index.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.3.1",
+  "version": "1.3.2",
   "generated_by": "scripts/generate_plugins_index.py",
   "count": 10,
   "plugins": [

.opencode/skills/index.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.3.1",
+  "version": "1.3.2",
   "generated_by": "scripts/generate_skills_index.py",
   "count": 38,
   "skills": [

CHANGELOG.md

@@ -8,6 +8,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 
+## [1.3.2] - 2026-06-12
+
+### Fixed
+
+- State the current 1.3.x support line explicitly in public security policy. Preserve documented `opencode-ai` `1.17.4`, `@opencode-ai/plugin` `1.17.4`, and `@opencode-ai/sdk` `1.17.4` baseline evidence.
+
 ## [1.3.1] - 2026-06-12
 
 ### Fixed

SECURITY.md

@@ -3,12 +3,12 @@
 ## Supported Versions
 
 Only the current exact numeric product release tag receives security fixes.
-The `1.2.x` line label tracks only the latest released patch, not every
+The `1.3.x` line label tracks only the latest released patch, not every
 historical patch in the line.
 
 | Version | Supported |
 |---|---|
-| Current exact tag `1.3.1` | yes |
+| Current exact tag `1.3.2` | yes |
 | Older `1.1.*` tags | no; upgrade to current exact tag |
 | Older minor / major lines | no |
 

VERSION

@@ -1 +1 @@
-1.3.1
+1.3.2

references/mcp-profiles.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$comment": "Machine-readable MCP server profiles. Each server in opencode.json.mcp belongs to exactly one profile. Profiles are used by scripts/validate_mcp_profiles.py to enforce skill.requires_mcp coverage and by scripts/smoke_mcp_capabilities.py --mode to bound CI smoke probes. The descriptive trust matrix lives in docs/security/mcp-trust-boundaries.md and stays in sync via the validator.",
-  "version": "1.3.1",
+  "version": "1.3.2",
   "updated": "2026-06-12",
   "profiles": {
     "base": {

references/opencode-baseline.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$comment": "Single source of truth for every pinned dependency the marketplace targets. Validators read this file and compare against opencode.json, .opencode/package.json, .opencode/bun.lock, workflow installations, and README/CHANGELOG text. Any drift fails CI. Bump these values in one place and let `scripts/check_baseline_consistency.py` find every reference that needs updating.",
-  "version": "1.3.1",
+  "version": "1.3.2",
   "updated": "2026-06-12",
   "source_of_truth": {
     "runtime_latest_channel": "npm:opencode-ai",

references/rldyour-contract.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$comment": "Machine-readable rldyour workflow contract for the OpenCode adapter. Sister tool repos should map the same canonical IDs to their own native surfaces.",
-  "version": "1.3.1",
+  "version": "1.3.2",
   "updated": "2026-06-07",
   "adapter": "opencode",
   "security": {