grafana/pyroscope v2.2.3 on GitHub

Version 2.2.3 release notes

Updated UI undici to v8.10.2, addressing CVE-2026-84961, a TLS certificate validation bypass (#5748).
Updated google.golang.org/grpc to v1.83.2, addressing CVE-2026-84445 (#5611, #5612).
Updated OpenTelemetry trace exporters to v1.45.0 (#5654, #5655, #5656).
Updated OpenTelemetry log modules to v0.21.0 (#5723).
Updated UI js-yaml to v4.3.2 (#5617).
Updated UI brace-expansion to v5.0.12 (#5706).

Expanded recording rules CLI documentation, added Rust jemalloc profiling documentation and a v2.0 upgrade guide, and corrected profile type documentation (#5621).

9567a34 [release/v2.2] docs: Expand recording rules CLI, add Rust jemalloc profiling, fix profile types, add v2.0 upgrade guide (#5621)
a13c2d9 chore: prepare v2.2.3 security release (#5750)
c935960 docs: Update release notes for v2.2.2 (#5604)
74a7c79 fix(deps): update otel log modules to v0.21.0 [security] (release/v2.2) (#5723)
e5546cf fix(deps): update undici to 8.10.2 to address TLS validation bypass (#5747) (#5748)
2c98e81 fix(security/high/): update module google.golang.org/grpc to v1.83.2 [security] (#5611)
da11790 fix(security/high/api): update module google.golang.org/grpc to v1.83.2 [security] (#5612)
d3967d8 fix(security/high/ui): update dependency brace-expansion to v5.0.12 [security] (release/v2.2) (#5706)
35cfaba fix(security/high/ui): update dependency js-yaml to v4.3.2 [security] (release/v2.2) (#5617)
c96834b fix(security/low/): update module go.opentelemetry.io/otel/exporters/otlp/otlptrace to v1.45.0 [security] (#5654)
b1b7d34 fix(security/unknown/): update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc to v1.45.0 [security] (#5655)
6c889e1 fix(security/unknown/): update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.45.0 [security] (#5656)

As always, feedback is more than welcome, feel free to open issues/discussions.
You can reach out to the team using:

  docker pull grafana/pyroscope:2.2.3