Enhancements
- The source code integration now supports Python (#4726, #4732, #4730)
- Implement comprehensive profile size limits across ingestion endpoints (#4734)
- Update golang version to 1.24.12 (#4760)
- Set a maximum ingestion body size by default (#4761)
- Update OpenTelemetry dependencies,
proto=v1.9.0profiles=v0.2.0(#4731) - Enforce maxNodes optionally on SelectMergeProfile through limits in v2 (#4723)
- Add benchmarks for timeseries query performance with exemplars (#4665)
Fixes
- Fix exemplar value calculation for split profiles (#4753)
- Relative matching for source code mapping (#4754)
- VCS Service: Failed file lookup should be 404 instead of 500 (#4759)
- Remove unintended double base64 encoding in vcs service (#4703)
- Frontend: Bump
qsto address CVE-2025-15284 (#4724) - Frontend: Bump
sweetalert2to address GHSA-457r-cqc8-9vj9, GHSA-8jh9-wqpf-q52c and GHSA-pg98-6v7f-2xfv (#4727) - Frontend: Bump
@remix-run/routerandreact-routerto address CVE-2026-22029 and CVE-2025-68470 (#4763)
Documentation
- Rename GitHub integration to source code integration (#4755)
- Update source code integration docs to include Java and Python support (#4651)
- Fix inline link in eBPF docs (#4733)
Changelog
- e542ef3 Add release notes for v1.18
- a6dcad6 Fixing inline link (#4733)
- 4523fd1 Implement comprehensive profile size limits across ingestion endpoints (#4734)
- f7611c2 Partially revert function name modification from
pyspy-based profiles (#4757) - 1d28675 Remove function name modification from
pyspy-based profiles (#4730) - ef09e77 Rename GitHub integration to source code integration (#4755)
- 2155e94 Update golang version to 1.24.12 (#4760)
- e2dbb9c Update goreleaser and use it to push weekly builds (#4719)
- fb3b8c6 chore(deps): bump axios (#4764)
- 6fdc8e6 chore(deps): bump sinatra (#4518)
- b80dcbe chore(deps): update a few frontend packages flagged for vulnerabilities (#4724)
- 7f21353 chore(deps): update dependency eslint-plugin-jsdoc to v53 (#4744)
- 8390f63 chore(deps): update helm release alloy to v1.5.1 (#4740)
- 60bd489 chore(deps): update helm release k8s-monitoring to v3.7.1 (#4741)
- c55e2fd chore(examples): update examples (#4698)
- 413c051 chore(exampless,.NET) update Pyroscope.Opentelemetry dependency, fix dynamic labels (#4722)
- 976a49e chore(release): do not run on weekly tags, pass correct release tag explicitly (#4709)
- 681d7ae chore: Do not run update examples cron on forks (#4718)
- 50a6583 chore: Enforce max nodes in v2 query-frontend (#4723)
- 9c5cbb3 chore: Fix overlapping test names (#4728)
- 420116c chore: Frontend update sweetalert2 (#4727)
- 5b6c9f7 chore: Publish Github releases immediately during release process (#4720)
- 08ce6f8 chore: Set a maximum ingestion body size by default (#4761)
- b3ca091 chore: Update OpenTelemetry dependencies proto=v1.9.0 profiles=v0.2.0 (#4731)
- 68da980 chore: Update helm chart and release notes for v1.17 (#4702)
- ef3d709 chore: add resources to provide guidance to coding agents (#4725)
- ffd0232 chore: bump react router (#4763)
- 8d26bca chore: fix regression in main (#4738)
- 8813f79 docs: Fix code blocks code generation (#4693)
- 24cf6cf docs: Update profiling docs to include Java and Python support (#4651)
- 6879681 docs: add missing CVE reference in v1.17 release notes (#4715)
- 904fd10 docs: add warning for patching older release versions (#4714)
- 1ef6460 docs: update release notes for v1.17, v1.16.x & v1.15.x (#4710)
- d702139 docs: updates the list of contributors in README (#4721)
- e4c0f76 feat: Add support for Python source code integration (#4726)
- 4fe7a80 fix: Failed file lookup should be 404 instead of 500 (#4759)
- b378d7f fix: Properly map local file paths for Python source code integration (#4732)
- 01542cf fix: Re-enable defaults for /render
fromanduntilparameters (#4745) - d971a5b fix: Relative matching for source code mapping (#4754)
- 6f18461 fix: Remove unintended double base64 encoding in vcs service (#4703)
- bdfc8ca fix: pass
$IMAGE_TAGdirectly to Goreleaser (#4749) - 989af26 fix: sum exemplar values from same profile ID and timestamp across splits (#4753)
- 0a5b09a perf: Add benchmarks for timeseries query (exemplars) performance (#4665)
As always, feedback is more than welcome, feel free to open issues/discussions.
You can reach out to the team using:
Docker Images
docker pull docker.io/grafana/pyroscope:1.18.0