Release 1.23.3

Pup 1.23.3

Installation

# macOS (Apple Silicon)
curl -L https://github.com/DataDog/pup/releases/download/v1.23.3/pup_1.23.3_Darwin_arm64.tar.gz | tar xz

# macOS (Intel)
curl -L https://github.com/DataDog/pup/releases/download/v1.23.3/pup_1.23.3_Darwin_x86_64.tar.gz | tar xz

# Linux (x86_64)
curl -L https://github.com/DataDog/pup/releases/download/v1.23.3/pup_1.23.3_Linux_x86_64.tar.gz | tar xz

# Linux (arm64)
curl -L https://github.com/DataDog/pup/releases/download/v1.23.3/pup_1.23.3_Linux_arm64.tar.gz | tar xz

# Windows (x86_64)
curl -L https://github.com/DataDog/pup/releases/download/v1.23.3/pup_1.23.3_Windows_x86_64.zip -o pup.zip
tar -xf pup.zip

WASM

• WASI (pup_wasi.wasm): Run in Wasmtime or any WASI Preview 2 runtime
• Browser WASM (pup_browser_wasm.tar.gz): npm-ready package with PupClient JS class and TypeScript definitions

Verifying

# Verify checksums
sha256sum -c pup_1.23.3_checksums.txt

# Verify signature (requires cosign)
cosign verify-blob \
  --bundle pup_1.23.3_checksums.txt.sigstore.json \
  pup_1.23.3_checksums.txt

What's Changed

• feat(agent): emit the CLI surface as versioned JSON by @MintsInc in #854
• main: consult spec-derived write facts in the read-only guard by @MintsInc in #856
• feat(useragent): detect Codex, Gemini CLI, and Copilot CLI via documented env markers by @srosenthal-dd in #861
• add reachability test for generated command surface by @MintsInc in #857
• chore(release): bump version to v1.23.3 by @dd-octo-sts[bot] in #862

Full Changelog: v1.23.2...v1.23.3