Summary
This is a mandatory upgrade for all users running any prior version. All prior Anchor releases including v1.2.3 are affected by vulnerabilities. All Anchor nodes should be upgraded as soon as possible. Further details to come in the following days.
All Changes
- chore: Release v1.2.4 (#1101)
- chore: Migrate to prost and bump deps (#1100)
- merge from stable
- ci: scope claude review/mention bots to read-only git tools (#1069)
- fix(ci): claude-mentions fork PR checkout for action v1.0.127 (#1054)
- ci: bump Node20-deprecated actions in
stable-loaded workflows (Phase 1 of #1040) (#1042) - ci: bump Claude PR review to Opus 4.7 (#997)
- fix: claude-pr-review to be able to grep around forked branch (#974)
Binaries
See pre-built binaries documentation.
The binaries are signed with Sigma Prime's PGP key: 15E66D941F697E28F49381F426416DC3F30674B0
| System | Architecture | Binary | PGP Signature |
|---|---|---|---|
| aarch64 | anchor-v1.2.4-aarch64-apple-darwin.tar.gz | PGP Signature | |
| x86_64 | anchor-v1.2.4-x86_64-unknown-linux-gnu.tar.gz | PGP Signature | |
| aarch64 | anchor-v1.2.4-aarch64-unknown-linux-gnu.tar.gz | PGP Signature | |
| System | Option | - | Resource |
| Docker | v1.2.4 | sigp/anchor |