Alwaysdata
Alwaysdata rolls out patched PHP, Node, Python and Ruby within three days.
A side-by-side editorial comparison of authentik and PocketBase — release velocity, themes, recent moves, and the top alternatives to consider.
authentik patches 2026.8 and 2026.5 together, with cert updates after the eMudhra CA compromise.
authentik is in maintenance mode on its release branches. 2026.8.5 fixes an endpoints MultipleObjectsReturned error, skips members already in Microsoft Entra groups during sync, stops the Agents tab flashing for unlicensed users, and bumps certificate dependencies after the eMudhra CA compromise. 2026.5.8 backports a longer list, including a consent re-grant error, websocket header handling and pool credential refresh.
PocketBase v0.40.6 caps thumbnail memory and says releases will leave GitHub.
PocketBase v0.40.6 limits the source image size for thumbnail generation (about 262 megapixels by default, set via PB_THUMBS_MAX_SOURCE_PIXELS) to cut out-of-memory risk, adds extra file-bucket escape checks, and bumps Go for the eMudhra CA fix. It also switches the update command to a new host, and the maintainer says this is probably the last release published on GitHub. v0.22.57 backports the thumbnail cap and Go bump to the older line.
authentik is in maintenance mode on its release branches. 2026.8.5 fixes an endpoints MultipleObjectsReturned error, skips members already in Microsoft Entra groups during sync, stops the Agents tab flashing for unlicensed users, and bumps certificate dependencies after the eMudhra CA compromise. 2026.5.8 backports a longer list, including a consent re-grant error, websocket header handling and pool credential refresh.
Since the 2026.8.0 Agent and Actors release, every entry has been a patch on 2026.8 or an older branch, and the team keeps three branches supported. The fixes are concentrated in sync providers, the proxy outpost and the new Agents UI.
Expect further 2026.8.x patches and a 2026.11 release candidate; the entries don't yet show what the next feature release contains.
PocketBase v0.40.6 limits the source image size for thumbnail generation (about 262 megapixels by default, set via PB_THUMBS_MAX_SOURCE_PIXELS) to cut out-of-memory risk, adds extra file-bucket escape checks, and bumps Go for the eMudhra CA fix. It also switches the update command to a new host, and the maintainer says this is probably the last release published on GitHub. v0.22.57 backports the thumbnail cap and Go bump to the older line.
PocketBase continues to ship paired releases on v0.40 and the v0.22 LTS line, mostly security and stability fixes. Moving releases off GitHub to the maintainer's own host is the larger change, and it affects how every self-hoster updates.
The next release should arrive through the new host rather than GitHub; expect continued backports to v0.22 and further work on thumbnail memory use.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either authentik or PocketBase.
Alwaysdata rolls out patched PHP, Node, Python and Ruby within three days.
Tyk 5.16 reaches RC5 with small gateway fixes, still without release notes.
Kinsta's API can now manage company users and permissions.
Harbor 2.14.6 RC2 adds Go CVE fixes on top of the regression rollbacks.
ToolJet ships AI Builder release 4 to its LTS line, with Gemini 4 Argon support.
GitHub makes enterprise-wide GitHub Apps GA, giving admins a way off classic PATs.
See all authentik alternatives → · See all PocketBase alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
Both compete on the same themes — security-patch — within Infra & APIs. authentik and PocketBase are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. authentik and PocketBase are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top authentik alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "authentik alternatives" section above for the current picks, or visit /alternatives/authentik for the full list with editorial commentary on each.
Top PocketBase alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "PocketBase alternatives" section above for the current picks, or visit /alternatives/pocketbase for the full list with editorial commentary on each.