v0.12.1
coleam00/Archonv0.12.1Oct 17, 2026by Wirasm
Upgrading?
AI Summary
This release addresses a critical security vulnerability where release binaries inadvertently loaded environment files (.env or bunfig.toml) from target repositories, potentially exposing API keys to providers like Claude.
Key Highlights
- Security fix prevents release binaries from loading .env or bunfig.toml from working directories
- Fixes an issue in v0.12.0 where repository environment variables could override Archon's internal stripping of keys
- Source installs remain unaffected by this security issue
- Users with v0.12.0 setup in repositories with provider keys must re-add providers after upgrading
Breaking Changes
- Release binaries no longer load .env or bunfig.toml from the working directory
Full Release Notes
Release binaries no longer hand a target repository's `.env` to providers. ### Security - Release binaries, including the Claude, Codex and Pi provider plugins and the forge-github and chat-slack plugins, no longer load `.env` or `bunfig.toml` from their working directory. In v0.12.0 a provider started in a target repository loaded that repository's `.env` and undid Archon's strip of it, so a project's `ANTHROPIC_API_KEY` could reach Claude and override your subscription. Source installs were not affected. If you ran v0.12.0 in a repository whose `.env` holds provider keys, upgrade, then run `archon provider add` again for each provider you use. (#4426, #4427) ## Installation ### Quick Install (Recommended) **macOS / Linux** ```bash curl -fsSL https://archon.diy/install | bash ``` **Windows (PowerShell)** ```powershell irm https://archon.diy/install.ps1 | iex ``` **Homebrew (macOS / Linux)** ```bash brew install coleam00/archon/archon ``` **Docker** ```bash docker run --rm -v "$PWD:/workspace" ghcr.io/coleam00/archon:latest workflow list ``` ### Manual Installation **macOS (Apple Silicon)** ```bash curl -fsSL https://github.com/coleam00/Archon/releases/latest/download/archon-darwin-arm64 -o /usr/local/bin/archon chmod +x /usr/local/bin/archon ``` **macOS (Intel)** ```bash curl -fsSL https://github.com/coleam00/Archon/releases/latest/download/archon-darwin-x64 -o /usr/local/bin/archon chmod +x /usr/local/bin/archon ``` **Linux (x64)** ```bash curl -fsSL https://github.com/coleam00/Archon/releases/latest/download/archon-linux-x64 -o /usr/local/bin/archon chmod +x /usr/local/bin/archon ``` **Linux (ARM64)** ```bash curl -fsSL https://github.com/coleam00/Archon/releases/latest/download/archon-linux-arm64 -o /usr/local/bin/archon chmod +x /usr/local/bin/archon ``` **Windows (Manual)** Download `archon-windows-x64.exe` from the assets below, rename to `archon.exe`, and add to your PATH. ### Release assets | Asset | Purpose | | --- | --- | | `archon-<os>-<arch>[.exe]` | CLI | | `archon-server-<os>-<arch>[.exe]` | Version-matched server executable fetched by `archon serve` | | `archon-forge-github-<os>-<arch>[.exe]` | GitHub forge plugin | | `archon-chat-slack-<os>-<arch>[.exe]` | Slack chat plugin | | `archon-provider-claude-<os>-<arch>[.exe]` | Claude provider plugin, installed by `archon provider add claude` | | `archon-provider-codex-<os>-<arch>[.exe]` | Codex provider plugin, installed by `archon provider add codex` | | `archon-provider-pi-<os>-<arch>[.exe]` | Pi provider plugin, installed by `archon provider add pi` | | `archon-web.tar.gz` | Web UI | | `checksums.txt` | SHA-256 checksums for every asset | ### Verify installation ```bash archon version ```
Related Repositories
openclaw/openclaw★ 392,729
The AI that really does things. Any OS. Any Platform. The lobster way. 🦞
nilbuild/developer-roadmap★ 370,105
Interactive roadmaps, guides and other educational content to help developers grow in their careers.
morluto/rea★ 361,460
Reverse engineer anything with agents, from app behavior down to native binaries.
anomalyco/opencode★ 219,920
The open source coding agent.
n8n-io/n8n★ 208,293
Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.