Oh Dear
Oh Dear's weekly changelogs have carried a security section five weeks running.
Comparison · Infra & APIs
Apereo CAS vs BorgBackup
A side-by-side editorial comparison of Apereo CAS and BorgBackup — release velocity, themes, recent moves, and the top alternatives to consider.
Apereo CAS vs BorgBackup: at a glance
What is Apereo CAS?
Apereo CAS opens an 8.1 line while 8.0 is still working through release candidates.
CAS is running a long release-candidate train. The 8.0.0 line reached RC6 in late June after RC4 and RC5 in spring, and 8.1.0-RC1 has now appeared in August. A 7.3.7.1 patch in June addressed a published OIDC vulnerability on the maintenance branch. The release entries themselves carry only navigation links and contributor credits, so feature detail is not visible here.
What is BorgBackup?
Borg 2.0 beta 25 breaks repositories to swap its hash and repository format.
BorgBackup's 2.0 beta line is still making breaking format changes. Beta 25 requires new repositories: it moves store object names to blake3, replaces several repository objects with an ini-style config, removes the none-sha256 and none-blake3 modes in favor of authenticated ones, and protects lock, index and cache objects with the repository key. The stable 1.4 line remains the production track.
Apereo CAS vs BorgBackup: editorial side-by-side
Apereo CAS
2.5INFRA · APIS
Apereo CAS opens an 8.1 line while 8.0 is still working through release candidates.
◆ Current state
CAS is running a long release-candidate train. The 8.0.0 line reached RC6 in late June after RC4 and RC5 in spring, and 8.1.0-RC1 has now appeared in August. A 7.3.7.1 patch in June addressed a published OIDC vulnerability on the maintenance branch. The release entries themselves carry only navigation links and contributor credits, so feature detail is not visible here.
◆ Where it's heading
Two lines are moving at once, which suggests 8.0 is close enough to final that work has begun branching forward rather than that the RC train has stalled. The contributor lists stay small and consistent across releases - a handful of recurring maintainers - and security handling happens on the older supported branch, as it should.
◆ Prediction
An 8.0.0 final is the obvious next milestone given RC6 was three months ago and an 8.1 branch is already open. The release bodies do not describe features, so what it contains cannot be read from this feed.
BorgBackup
0.0INFRA · APIS
Borg 2.0 beta 25 breaks repositories to swap its hash and repository format.
◆ Current state
BorgBackup's 2.0 beta line is still making breaking format changes. Beta 25 requires new repositories: it moves store object names to blake3, replaces several repository objects with an ini-style config, removes the none-sha256 and none-blake3 modes in favor of authenticated ones, and protects lock, index and cache objects with the repository key. The stable 1.4 line remains the production track.
◆ Where it's heading
Twenty-five betas in, the format is not settled, but this beta is decisive: it removes old modes and object types, which narrows what 2.0 has to support. Treating lock and cache objects as keyed data also extends the security model beyond archive contents.
◆ Prediction
Further betas are likely to keep requiring new repositories until the format freezes, so a release candidate should not be assumed soon. The 1.4 line stays the safe choice until then.
Alternatives to Apereo CAS and BorgBackup
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Apereo CAS or BorgBackup.
Apache ShenYu
ShenYu's AI gateway plugins are back in motion, with 2.7.2 candidate tags in October.
TestingBot
TestingBot's autumn work is plumbing: a rebuilt tunnel and another bug-tracker link.
KubeArmor
KubeArmor ships fixes as release-candidate tags, and its feed misses the finals.
All Quiet
All Quiet moves from enterprise integrations to the on-call engineer's own day.
Robusta
Robusta's recent releases patch its runner image rather than add features.
See all Apereo CAS alternatives → · See all BorgBackup alternatives →
Recent activity from Apereo CAS and BorgBackup
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 1mo agoBorgBackupBeta 25 moves to blake3 and requires new repositories
- 2mo agoBorgBackupBorgBackup 2.0.0b24
- 2mo agoApereo CASv8.1.0-RC1
- 2mo agoBorgBackupBorgBackup 2.0.0b23
- 3mo agoBorgBackupBorgBackup 1.4.5 — security fix and new features
- 3mo agoBorgBackupBorgBackup 2.0.0b22 — PACKS storage format debuts ⚡
- 4mo agoApereo CASv8.0.0-RC6
- 4mo agoApereo CASPatch release for a published OIDC vulnerability
- 5mo agoApereo CASv8.0.0-RC5
- 6mo agoApereo CASv8.0.0-RC4
- 7mo agoBorgBackupBorgBackup 1.4.4
Frequently asked questions
What is the difference between Apereo CAS and BorgBackup?
They serve adjacent needs but don't currently overlap on shipped themes. Apereo CAS is currently shipping more aggressively (velocity 2.5 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Apereo CAS better than BorgBackup?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Apereo CAS is currently shipping more aggressively (velocity 2.5 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
What are the best alternatives to Apereo CAS?
Top Apereo CAS alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Apereo CAS alternatives" section above for the current picks, or visit /alternatives/apereo-cas for the full list with editorial commentary on each.
What are the best alternatives to BorgBackup?
Top BorgBackup alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "BorgBackup alternatives" section above for the current picks, or visit /alternatives/borgbackup for the full list with editorial commentary on each.