← Back to Collab
Weekly · Collab · Week of May 25, 2026

GitHub Staged npm Publishing + Asana, Linear, Mattermost | Collaboration SaaS Recap 2026

Generated 6d ago

GitHub ships staged npm publishing with install-time gates, Asana rewrites Scheduled Triggers, and Linear auto-creates a Slack channel per project — this week in collaboration SaaS.

GitHub turns npm releases into a two-phase flow: every publish lands in a queue first and requires a 2FA-approved promotion before going live, while four new install-time allowlist flags (files, remote URLs, directories, git) let consumers restrict where dependencies are pulled from. In CLI v12, git installs are off by default.

Asana ships Scheduled Triggers V2, adding an execution scope step so a rule can act on tasks already in your project — stale-task cleanup, Monday triage, recurring resets, aging-work escalation. V1 could only create new tasks; V2 reaches into existing work, and it burns zero AI credits.

Linear auto-creates a Slack channel for every project and seats Linear Agent inside it, while the new Asks Agent triages free-form Slack requests against per-channel templates, files them as issues, and asks follow-up questions when required fields are missing. Mattermost pairs Agents v2.0 with granular ABAC in v11.7 and launches Mission Assurance Service for defense customers. Rocket.Chat 8.5.0-rc.0 moves OAuth fully server-side with PKCE, state validation, and enforced 2FA over social logins.

Claap adds Deal Report and Company Report, aggregating conversation intelligence around accounts rather than individual meetings. Skedda introduces Visit Types for granular booking flows, and BookStack ships v26.03.5 with maintenance fixes.

---

Mentioned in this video: • GitHub — Staged npm publishing GA with install-time allowlist controls • Asana — Scheduled Triggers V2 acts on existing tasks, not just new ones • Linear — Project Slack channels auto-create rooms with Linear Agent + Asks Agent • Mattermost — Agents v2.0 + ABAC in v11.7, plus Mission Assurance Service for defense • Rocket.Chat — Server-side OAuth with PKCE and enforced 2FA in 8.5.0-rc.0 • Claap — Deal Report and Company Report aggregate intelligence by account • Skedda — Visit Types add granular booking flows • BookStack — v26.03.5 maintenance release

---

More weekly collaboration SaaS recaps: https://sparkpulse.io/collaboration

Subscribe for weekly collaboration product updates.