chore(release): 1.5.1

Patch the unified 1.5.x governance surfaces: the SECURITY.md line label and README Current Baseline now track the 1.5.x line; tracked release surfaces (VERSION, manifests, and lockfile where present) are realigned to 1.5.1.

Author: rldyourmnd

.opencode/commands/index.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.5.0",
+  "version": "1.5.1",
   "generated_by": "scripts/generate_commands_index.py",
   "count": 11,
   "commands": [

.opencode/plugins/index.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.5.0",
+  "version": "1.5.1",
   "generated_by": "scripts/generate_plugins_index.py",
   "count": 10,
   "plugins": [

.opencode/skills/index.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.5.0",
+  "version": "1.5.1",
   "generated_by": "scripts/generate_skills_index.py",
   "count": 38,
   "skills": [

CHANGELOG.md

@@ -8,6 +8,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 
+## [1.5.1] - 2026-06-15
+
+### Changed
+
+- Align SECURITY.md line label, adapter README baseline, and tracked uv.lock self-version to the 1.5.x line for the public governance gate. Preserve documented `opencode-ai` `1.17.7`, `@opencode-ai/plugin` `1.17.7`, and `@opencode-ai/sdk` `1.17.7` baseline evidence.
+
 ## [1.5.0] - 2026-06-15
 
 ### Changed

README.md

@@ -14,9 +14,9 @@
 
 | Field | Value |
 |---|---|
-| Adapter version | `1.5.0` |
+| Adapter version | `1.5.1` |
 | Runtime baseline | OpenCode 1.17.7 |
-| GitHub release tag | `1.5.0` |
+| GitHub release tag | `1.5.1` |
 
 Runtime baseline source: `references/opencode-baseline.json`. Submodule pins are owned by the root control-plane `config/repositories.json`.
 

SECURITY.md

@@ -3,12 +3,12 @@
 ## Supported Versions
 
 Only the current exact numeric product release tag receives security fixes.
-The `1.3.x` line label tracks only the latest released patch, not every
+The `1.5.x` line label tracks only the latest released patch, not every
 historical patch in the line.
 
 | Version | Supported |
 |---|---|
-| Current exact tag `1.5.0` | yes |
+| Current exact tag `1.5.1` | yes |
 | Older `1.1.*` tags | no; upgrade to current exact tag |
 | Older minor / major lines | no |
 

VERSION

@@ -1 +1 @@
-1.5.0
+1.5.1

references/mcp-profiles.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$comment": "Machine-readable MCP server profiles. Each server in opencode.json.mcp belongs to exactly one profile. Profiles are used by scripts/validate_mcp_profiles.py to enforce skill.requires_mcp coverage and by scripts/smoke_mcp_capabilities.py --mode to bound CI smoke probes. The descriptive trust matrix lives in docs/security/mcp-trust-boundaries.md and stays in sync via the validator.",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "updated": "2026-06-15",
   "profiles": {
     "base": {

references/opencode-baseline.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$comment": "Single source of truth for every pinned dependency the marketplace targets. Validators read this file and compare against opencode.json, .opencode/package.json, .opencode/bun.lock, workflow installations, and README/CHANGELOG text. Any drift fails CI. Bump these values in one place and let `scripts/check_baseline_consistency.py` find every reference that needs updating.",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "updated": "2026-06-15",
   "source_of_truth": {
     "runtime_latest_channel": "npm:opencode-ai",

references/rldyour-contract.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$comment": "Machine-readable rldyour workflow contract for the OpenCode adapter. Sister tool repos should map the same canonical IDs to their own native surfaces.",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "updated": "2026-06-07",
   "adapter": "opencode",
   "security": {