ContextQMD
Back to Pyroscope

Version 2.1 release notes

docs/sources/release-notes/v2-1.md

2.3.06.5 KB
Original Source

Version 2.1.2 release notes

Security fixes

  • Update github.com/getkin/kin-openapi to v0.144.0, addressing GHSA-r277-6w6q-xmqw (#5417)
  • Update google.golang.org/grpc to v1.82.1, addressing GHSA-hrxh-6v49-42gf (#5394, #5395)
  • Update golang.org/x/text to v0.39.0, addressing CVE-2026-56852 (#5387, #5389)
  • Update golang.org/x/net to v0.56.0, addressing CVE-2026-46600 (#5386, #5388)
  • Update github.com/klauspost/compress to v1.18.7 (#5430)
  • ui: Bump tar, js-yaml, and brace-expansion (#5413)
  • ui: Bump brace-expansion to 1.1.18 and 5.0.9, addressing CVE-2026-14257 and CVE-2026-69152 (#5466)
  • ui: Refresh the Yarn lockfile, removing the vulnerable ip-address package and updating postcss (#5420)

Version 2.1.1 release notes

Security fixes

  • Update Go toolchain to 1.25.12, addressing CVE-2026-42505 and CVE-2026-39822 (security) (#5338)

Version 2.1.0 release notes

The Pyroscope team is excited to present Grafana Pyroscope 2.1.0.

This release adds new operational metrics, expands debug information management APIs, improves Helm chart defaults for the v2 storage architecture, and includes stability and security fixes across the read path, store-gateway, metastore, UI, and dependencies.

Notable changes are listed below. For the full diff, check out the 2.1.0 changelog.

Enhancements

  • distributor: Add readiness checks (#5142)
  • debuginfo: Add list and delete APIs, including profilecli support (#5217)
  • segment-writer: Build dataset indexes in segments (#5112)
  • metastore: Add cache hit and miss metrics (#5156)
  • distributor: Add ingest parse duration histogram metrics for /ingest (#5107)
  • query-backend: Add per-tenant, per-query bytes-fetched metrics (#5180)
  • query-frontend: Add estimation accuracy histogram metrics and log ratio output (#5252)
  • Add per-tenant limits for the number of recording rules (#5247)
  • Helm: Default to the v2 storage architecture (#5160)
  • Helm: Add extraObjects for deploying extra Kubernetes manifests (#5097)
  • Monitoring: Migrate dashboards to native histograms (#5048)

Fixes

  • Fix an out-of-bounds panic in clearAddresses (#5250)
  • Fix nil matcher handling for recording rule upserts (#5134)
  • store-gateway: Validate tenant IDs (#5194)
  • Fix archive extraction issues, including zip-slip/tar-slip cleanup and file closure handling (#5195, #5206)
  • Fix label value cloning to avoid buffer reuse-after-free issues (#5116)
  • query-backend: Restore the original start time for RangeSeries bucketing (#5161)
  • read path: Reject sub-millisecond step parameters (#5137)
  • Fix a panic on unknown QueryNode types (#5196)
  • store-gateway: Restore the ring info route from /tenants to /ring (#5130)
  • speedscope: Return an error instead of panicking for unknown unit values (#5143)
  • metastore: Version shard cache reads (#5189)
  • compaction-worker: Correct time_to_compaction_seconds histogram buckets (#5164)
  • Helm: Add apiVersion and kind to volumeClaimTemplates (#5203)

Security fixes

  • ui: Update Vite to v8.0.16 (#5260)
  • ui: Bump tar, js-yaml, and @babel/core (#5263)
  • ui: Bump uuid from 11.1.0 to 11.1.1 (#5123)
  • ui: Patch CVE-2026-45149 and CVE-2026-46625 in Yarn dependencies (#5181)
  • Update golang.org/x/net to v0.53.0 (#5131)
  • Update golang.org/x/crypto to v0.52.0 (#5197)
  • Update golang.org/x/image to v0.41.0 (#5216)
  • Update github.com/prometheus/prometheus to v0.311.3 (#5113)
  • Update the Go toolchain directive to v1.25.11 (#5228)

Documentation

  • Add generated YAML examples and documentation for v2 configuration blocks (#5151)
  • Remove the public preview note from pyroscope.receive_http documentation (#5176)
  • Update supported .NET versions to 8, 9, and 10 (#5096)
  • Refresh README content and agent guides for the v2 layout, Go version, and tracing updates (#5246, #5183)
  • Fix a broken Grafana Cloud Profiles link in SDK guides (#5132)