This is documentation for the next version of Grafana Pyroscope documentation. For the latest stable release, go to the latest version.

Open source

Version 1.21.0 release notes

The Pyroscope team is excited to present Grafana Pyroscope 1.21.0.

This release contains enhancements, fixes, and improves stability & performance. It is the final v1.x feature release before Pyroscope 2.0 ships v2 storage as the default.

Notable changes are listed below. For the full diff, check out the 1.21.0 changelog.

Enhancements

  • debuginfo: Rewrite upload API to work over HTTP/1.1 (#5046)
  • debuginfo: Add per-request timeout for upload handler (#5056)
  • querier: Add DOT format support to SelectMergeStacktraces Connect API (#5047)
  • query-frontend: Log user_agent on query log lines (#5042)
  • v2: Move default storage paths under ./data/v2/ (#4978)
  • Log HTTP protocol version in per-request logs (#5014)
  • Helm: Add pyroscope.rbac.create toggle (#5067)
  • Helm: Add HTTPRoute support (#4983)
  • Bump go.opentelemetry.io/otel to v1.43.0 across all modules (#5037)
  • Update Go toolchain to 1.25.9 (#5015)

Fixes

  • compactor: Fix blocks cleaner hanging indefinitely after SIGTERM (#4992)
  • segment-writer: Tolerate ErrServerStopped in client test suite (#4977)
  • scheduler: Replace bufconn with TCP listener to fix flaky test (#5052)
  • ui: Align time-series line graph with actual data points (#5041)
  • ui: Fix file-naming collision when building UI on macOS (#5055)
  • ui: Bump dompurify, immutable, brace-expansion to fix Trivy CVEs (#5070)
  • profilecli: Preserve label-name casing in table output (#4989)
  • Helm: Remove redundant adaptive-placement default (#5057)
  • Fix pkg/test/integration.TestStatusCode (#5058)

Security fixes

  • Bump protobufjs to 7.5.5 (security) (#5062)
  • Bump protocol-buffers-schema to 3.6.1 (security) (#5059)
  • Bump axios (security) (#5045)
  • Bump lodash from 4.17.23 to 4.18.1 (security) (#4974)
  • Bump rack-session (security) (#5003)
  • Bump rack-session in /examples/tracing/ruby (security) (#5011)
  • Update vite to v8.0.5 (security) (#4994)
  • Update github.com/go-jose/go-jose/v4 to v4.1.4 (security) (#4984)

Documentation

  • Fix v1 → v2 migration guide prereq check and port-forward race (#5044)
  • Clarify HeatmapSlot timestamp semantics (#4986)
  • Fix Rust SDK documentation and examples for v2.0.0 (#4972)