Open source

Version 1.21.0 release notes

The Pyroscope team is excited to present Grafana Pyroscope 1.21.0.

This release contains enhancements, fixes, and improves stability & performance. It is the final v1.x feature release before Pyroscope 2.0 ships v2 storage as the default.

Notable changes are listed below. For the full diff, check out the 1.21.0 changelog.

Enhancements

  • debuginfo: Rewrite upload API to work over HTTP/1.1 (#5046)
  • debuginfo: Add per-request timeout for upload handler (#5056)
  • querier: Add DOT format support to SelectMergeStacktraces Connect API (#5047)
  • query-frontend: Log user_agent on query log lines (#5042)
  • v2: Move default storage paths under ./data/v2/ (#4978)
  • Log HTTP protocol version in per-request logs (#5014)
  • Helm: Add pyroscope.rbac.create toggle (#5067)
  • Helm: Add HTTPRoute support (#4983)
  • Bump go.opentelemetry.io/otel to v1.43.0 across all modules (#5037)
  • Update Go toolchain to 1.25.9 (#5015)

Fixes

  • compactor: Fix blocks cleaner hanging indefinitely after SIGTERM (#4992)
  • segment-writer: Tolerate ErrServerStopped in client test suite (#4977)
  • scheduler: Replace bufconn with TCP listener to fix flaky test (#5052)
  • ui: Align time-series line graph with actual data points (#5041)
  • ui: Fix file-naming collision when building UI on macOS (#5055)
  • ui: Bump dompurify, immutable, brace-expansion to fix Trivy CVEs (#5070)
  • profilecli: Preserve label-name casing in table output (#4989)
  • Helm: Remove redundant adaptive-placement default (#5057)
  • Fix pkg/test/integration.TestStatusCode (#5058)

Security fixes

  • Bump protobufjs to 7.5.5 (security) (#5062)
  • Bump protocol-buffers-schema to 3.6.1 (security) (#5059)
  • Bump axios (security) (#5045)
  • Bump lodash from 4.17.23 to 4.18.1 (security) (#4974)
  • Bump rack-session (security) (#5003)
  • Bump rack-session in /examples/tracing/ruby (security) (#5011)
  • Update vite to v8.0.5 (security) (#4994)
  • Update github.com/go-jose/go-jose/v4 to v4.1.4 (security) (#4984)

Documentation

  • Fix v1 → v2 migration guide prereq check and port-forward race (#5044)
  • Clarify HeatmapSlot timestamp semantics (#4986)
  • Fix Rust SDK documentation and examples for v2.0.0 (#4972)