ZoneMinder
ZoneMinder 1.38.5 fixes 19 vulnerabilities, including authenticated remote code execution
Comparison · Infra & APIs
Prometheus Alertmanager vs Dashy
A side-by-side editorial comparison of Prometheus Alertmanager and Dashy — release velocity, themes, recent moves, and the top alternatives to consider.
Shared themes:security
Prometheus Alertmanager vs Dashy: at a glance
What is Prometheus Alertmanager?
Alertmanager 0.34.2 turns off CORS by default, breaking cross-origin API calls.
Alertmanager handles deduplication, grouping, silencing and routing of Prometheus alerts. 0.34.2 (October 29) stops sending CORS headers by default, so cross-origin calls to api/v2 now fail unless --web.cors.origin is set, and rebuilds with Go 1.26.10 to distrust the compromised eMudhra intermediates. 0.34.1 fixed inhibitions that could un-mute alerts, and 0.34.0 split auth and rate-limit failures out of the clientError metric reason.
What is Dashy?
Dashy shipped ten releases in five days; one fixes how auth headers trust origins
Dashy ships one release per merged PR. From October 26 to 31 that meant ten releases: six were Dependabot bumps, and the rest were fixes, including accepting IPv6 connections by default, a workspace header and search fix, an icon color fix, and a security fix for auth headers used with lookalike origins.
Prometheus Alertmanager vs Dashy: editorial side-by-side
Prometheus Alertmanager
2.5INFRA · APIS
Alertmanager 0.34.2 turns off CORS by default, breaking cross-origin API calls.
◆ Current state
Alertmanager handles deduplication, grouping, silencing and routing of Prometheus alerts. 0.34.2 (October 29) stops sending CORS headers by default, so cross-origin calls to api/v2 now fail unless --web.cors.origin is set, and rebuilds with Go 1.26.10 to distrust the compromised eMudhra intermediates. 0.34.1 fixed inhibitions that could un-mute alerts, and 0.34.0 split auth and rate-limit failures out of the clientError metric reason.
◆ Where it's heading
The 0.3x line keeps shipping breaking changes outside major versions: metric reason splits in 0.34.0, per-group markers in 0.33.0 and now a CORS default in a patch. Operators need to read every release note, not just minors.
◆ Prediction
Expect 0.35.0 to carry further breaking changes in the vein of 0.33 and 0.34, though the entries do not say what it will contain.
Dashy
5.0INFRA · APIS
Dashy shipped ten releases in five days; one fixes how auth headers trust origins
◆ Current state
Dashy ships one release per merged PR. From October 26 to 31 that meant ten releases: six were Dependabot bumps, and the rest were fixes, including accepting IPv6 connections by default, a workspace header and search fix, an icon color fix, and a security fix for auth headers used with lookalike origins.
◆ Where it's heading
The cadence stays automated and small-grained, with the maintainer's own fixes interleaved with dependency updates.
◆ Prediction
More single-PR releases will follow; the entries give no sign of a larger feature release.
Alternatives to Prometheus Alertmanager and Dashy
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Prometheus Alertmanager or Dashy.
CRI-O
CRI-O ships patch releases across three branches with empty change notes
Certbot
Certbot keeps tidying correctness bugs around renewals and hooks
Routinator
Routinator 0.16 will validate ASPA and BGPsec, and run strict, by default
Buildkite
Buildkite drops long-lived GitHub credentials from self-hosted agents
AIReiter
AIReiter adds ByteDance's Seedream 5.0 Flash for fast, low-cost image generation and editing
See all Prometheus Alertmanager alternatives → · See all Dashy alternatives →
Recent activity from Prometheus Alertmanager and Dashy
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 1d agoDashyDashy 4.9.12 fixes auth-header trust of lookalike origins
- 2d agoDashyDashy 4.9.11 bumps brace-expansion for security
- 2d agoDashyDashy 4.9.10 fixes icon color bleeding into text
- 3d agoDashyDashy 4.9.9 bundles three dependency updates
- 4d agoPrometheus Alertmanager0.34.2: CORS off by default, eMudhra CAs distrusted
- 6d agoDashyDashy 4.9.8 fixes workspace header and search
- 6d agoDashyDashy 4.9.7 bundles three dependency updates
- 1mo agoPrometheus Alertmanager0.34.1: inhibition fixes stop alerts being wrongly un-muted
- 2mo agoPrometheus AlertmanagerNotification failure reasons split; templatable route labels added
- 4mo agoPrometheus AlertmanagerSilence snapshot legacy matchers field restored
- 4mo agoPrometheus AlertmanagerPer-group alert markers replace the global one; event recorder lands ⚡
- 4mo agoPrometheus AlertmanagerDispatcher goroutine leak on alertgroup swap fixed
Frequently asked questions
What is the difference between Prometheus Alertmanager and Dashy?
Both compete on the same themes — security — within Infra & APIs. Dashy is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Prometheus Alertmanager better than Dashy?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Dashy is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
What are the best alternatives to Prometheus Alertmanager?
Top Prometheus Alertmanager alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Prometheus Alertmanager alternatives" section above for the current picks, or visit /alternatives/alertmanager for the full list with editorial commentary on each.
What are the best alternatives to Dashy?
Top Dashy alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Dashy alternatives" section above for the current picks, or visit /alternatives/dashy for the full list with editorial commentary on each.