ContextQMD
Back to Pyroscope

Version 2.2 release notes

docs/sources/release-notes/v2-2.md

2.2.15.6 KB
Original Source

Version 2.2.1 release notes

Security fixes

  • Update github.com/getkin/kin-openapi to v0.144.0, addressing GHSA-r277-6w6q-xmqw (#5416)
  • Update google.golang.org/grpc to v1.82.1, addressing GHSA-hrxh-6v49-42gf (#5392, #5393)
  • Update golang.org/x/text to v0.39.0, addressing CVE-2026-56852 (#5383, #5385)
  • Update golang.org/x/net to v0.56.0, addressing CVE-2026-46600 (#5382, #5384)
  • Update github.com/klauspost/compress to v1.18.7 (#5429)
  • ui: Bump tar, js-yaml, and brace-expansion (#5413)
  • ui: Bump brace-expansion to 1.1.18 and 5.0.9, addressing CVE-2026-14257 and CVE-2026-69152 (#5466)
  • ui: Refresh the Yarn lockfile, removing the vulnerable ip-address package and updating postcss (#5419)

Version 2.2.0 release notes

The Pyroscope team is excited to present Grafana Pyroscope 2.2.0.

This release adds experimental asynchronous query execution, trace ID filtering in the v2 read path, and stability and performance fixes across the write and read paths.

Notable changes are listed below. For the full diff, check out the 2.2.0 changelog.

Enhancements

  • Add experimental support for asynchronous query execution (#4995)
  • read path: Support trace_id_selector in the v2 read path (#5284)
  • profilecli: Add a --trace-id flag to filter query profile samples by trace (#5300)
  • query API: Add SymbolRefTable and symbol_refs tree fields (#5318)
  • symbolizer: Expose address-level symbol resolution as a public API (#5317)
  • Add an optional admin HTTP server on a separate port (#5191)
  • Keep totals and labels of sampled-out profiles (#5354)
  • ui: Add autocomplete to the v2 embedded UI query bar (#5172)
  • querier: Unify merged profile query formats (#5358)
  • distributor: Add a push_batch_series histogram (#5305)
  • pprof: Make language detection deterministic and ~40% faster (#5309)
  • Improve label validation performance (#5313)
  • Helm: Add a service_name relabel rule to the Alloy scrape config (#5262)

Fixes

  • ingester: Return HTTP 429 for ingestion-limit rejections on the OTLP and /ingest paths (#5372)
  • otlp: Send all converted profiles in a single PushBatch per export (#5339)
  • distributor: Bound PushBatch series fan-out with a per-tenant limit (#5306)
  • Enforce tenant header extraction in the auth interceptor (#5251)
  • Reject non-positive ingest sample rates and improve sample rate errors (#5253, #5276)
  • metastore: Enable retention cleanup by default (#5280)
  • metastore: Retain shards with recent data (#5360)
  • query-backend: Forward and apply span selectors in pprof and tree query paths (#5273)
  • Return trace IDs in span heatmaps (#5353)
  • pprof: Treat two nil value types as compatible in ProfileMerge (#5315)
  • symdb: Preserve line-less locations when rewriting partitions without functions (#5337)
  • Add bounds checks to tree deserialization (#5145)
  • Fix a data race in usage stats counters (#5303)
  • debuginfo: Decline empty build IDs during upload initiation (#5302)
  • debuginfo: Improve ListDebugInfo performance for large tenants (#5286)
  • Helm: Respect metastore raft extraArgs overrides (#5275)

Security fixes

  • Update Go toolchain to 1.25.12, addressing CVE-2026-42505 and CVE-2026-39822 (#5338)

Documentation

  • Clarify which flags are v1-exclusive (#5308)
  • Add supported platforms documentation (#5316)
  • Document Python SDK fork safety (#5364)