v0.12.1

coleam00/Archonv0.12.1Oct 17, 2026by Wirasm

Upgrading?

AI Summary

This release addresses a critical security vulnerability where release binaries inadvertently loaded environment files (.env or bunfig.toml) from target repositories, potentially exposing API keys to providers like Claude.

Key Highlights

  • Security fix prevents release binaries from loading .env or bunfig.toml from working directories
  • Fixes an issue in v0.12.0 where repository environment variables could override Archon's internal stripping of keys
  • Source installs remain unaffected by this security issue
  • Users with v0.12.0 setup in repositories with provider keys must re-add providers after upgrading

Breaking Changes

  • Release binaries no longer load .env or bunfig.toml from the working directory

Full Release Notes


Release binaries no longer hand a target repository's `.env` to providers.

### Security

- Release binaries, including the Claude, Codex and Pi provider plugins and the forge-github and chat-slack plugins, no longer load `.env` or `bunfig.toml` from their working directory. In v0.12.0 a provider started in a target repository loaded that repository's `.env` and undid Archon's strip of it, so a project's `ANTHROPIC_API_KEY` could reach Claude and override your subscription. Source installs were not affected. If you ran v0.12.0 in a repository whose `.env` holds provider keys, upgrade, then run `archon provider add` again for each provider you use. (#4426, #4427)


## Installation

### Quick Install (Recommended)

**macOS / Linux**
```bash
curl -fsSL https://archon.diy/install | bash
```

**Windows (PowerShell)**
```powershell
irm https://archon.diy/install.ps1 | iex
```

**Homebrew (macOS / Linux)**
```bash
brew install coleam00/archon/archon
```

**Docker**
```bash
docker run --rm -v "$PWD:/workspace" ghcr.io/coleam00/archon:latest workflow list
```

### Manual Installation

**macOS (Apple Silicon)**
```bash
curl -fsSL https://github.com/coleam00/Archon/releases/latest/download/archon-darwin-arm64 -o /usr/local/bin/archon
chmod +x /usr/local/bin/archon
```

**macOS (Intel)**
```bash
curl -fsSL https://github.com/coleam00/Archon/releases/latest/download/archon-darwin-x64 -o /usr/local/bin/archon
chmod +x /usr/local/bin/archon
```

**Linux (x64)**
```bash
curl -fsSL https://github.com/coleam00/Archon/releases/latest/download/archon-linux-x64 -o /usr/local/bin/archon
chmod +x /usr/local/bin/archon
```

**Linux (ARM64)**
```bash
curl -fsSL https://github.com/coleam00/Archon/releases/latest/download/archon-linux-arm64 -o /usr/local/bin/archon
chmod +x /usr/local/bin/archon
```

**Windows (Manual)**
Download `archon-windows-x64.exe` from the assets below, rename to `archon.exe`, and add to your PATH.

### Release assets

| Asset | Purpose |
| --- | --- |
| `archon-<os>-<arch>[.exe]` | CLI |
| `archon-server-<os>-<arch>[.exe]` | Version-matched server executable fetched by `archon serve` |
| `archon-forge-github-<os>-<arch>[.exe]` | GitHub forge plugin |
| `archon-chat-slack-<os>-<arch>[.exe]` | Slack chat plugin |
| `archon-provider-claude-<os>-<arch>[.exe]` | Claude provider plugin, installed by `archon provider add claude` |
| `archon-provider-codex-<os>-<arch>[.exe]` | Codex provider plugin, installed by `archon provider add codex` |
| `archon-provider-pi-<os>-<arch>[.exe]` | Pi provider plugin, installed by `archon provider add pi` |
| `archon-web.tar.gz` | Web UI |
| `checksums.txt` | SHA-256 checksums for every asset |

### Verify installation
```bash
archon version
```

Related Repositories