helm/grafana/pyroscope 2.4.1

v2.4.1

on Artifact Hub

Security fixes

• Updated the Go build toolchain to 1.26.10 and distroless runtime images to include the compromised certificate authority mitigations (#5891).
• Updated github.com/getkin/kin-openapi to v0.149.0 to address validation bypass and denial-of-service vulnerabilities (#5832).
• Updated UI Vite to v8.3.4 to address dependency vulnerabilities (#5802).

Bug fixes

• Fixed decoding of resource and scope attributes stored in the OpenTelemetry profiles dictionary (#5894).

Documentation

• Documented Windows support for .NET Framework 4.7, 4.8, and IIS (#5869).

Changelog

• 6b23c61 [release/v2.4] chore(deps): update Go to 1.26.10 and distroless runtime images (#5891)
• 4d5ce67 chore(deps): lock file maintenance (#5802)
• 7aac40d docs(dotnet): mark .NET Framework 4.7, 4.8 and IIS as supported on Windows (#5868) (#5869)
• 36d558a docs: prepare v2.4.1 security release notes (#5898)
• 7c8fa46 fix(security/high/): update module github.com/getkin/kin-openapi to v0.149.0 [security] (#5832)
• 81eb9c5 fix: resource and scope attributes encoded through the profiles dictionary (#5857) (#5894)

As always, feedback is more than welcome, feel free to open issues/discussions.
You can reach out to the team using:

• Slack
• Github Discussions
• Github Issues
• Mailing List

Docker Images

• grafana/pyroscope

  docker pull grafana/pyroscope:2.4.1