Rancher
Rancher's public feed is a build-tag stream: three branches bumped the same Go image on one afternoon
A side-by-side editorial comparison of authentik and testdat — release velocity, themes, recent moves, and the top alternatives to consider.
authentik 2026.8 ships: Actors, domain-joined Agents, and a push past browser-mediated SSO
2026.8.0 is out, closing a seven-candidate train that ran through early August. The GA tag itself is the last cherry-pick batch — SCIM group membership removals, a proxy redirect that preserves query strings, session deletion on user deactivation — but the release it finalizes is where the substance lives: an Actors primitive in core, an enterprise Agent requiring a domain join and its own API scope, OAuth2 token exchange delegation, and a CAS source integration.
Unit testing for datasets, built on testthat and now bending to its next release.
testdat applies the testthat idiom to data rather than code: expectations that assert properties of a data frame, run as a suite, with results exportable to Excel. Recent releases have been about correctness and upstream compatibility. Expectations are now constructed via new_expectation() ahead of testthat 3.3.0, and expect_base() errors on a missing variable instead of silently passing.
2026.8.0 is out, closing a seven-candidate train that ran through early August. The GA tag itself is the last cherry-pick batch — SCIM group membership removals, a proxy redirect that preserves query strings, session deletion on user deactivation — but the release it finalizes is where the substance lives: an Actors primitive in core, an enterprise Agent requiring a domain join and its own API scope, OAuth2 token exchange delegation, and a CAS source integration.
Two threads converge in this major. The identity surface keeps broadening at the protocol edge — CAS, WS-Fed, token exchange delegation, on-behalf-of — while the enterprise tier grows an endpoint story that reaches machines and devices rather than browser sessions. The RC train's shape reinforces it: six candidates fired in one day on CI and docs, then one heavy candidate carrying the features, then a fix-only close. That is release engineering hardened around a major, not a routine point release.
With Agents and Actors now GA rather than cherry-picks, the next branch should build out what they enable — device-conditioned policies or agent-brokered credentials — while 2026.8.x settles into backport patches.
testdat applies the testthat idiom to data rather than code: expectations that assert properties of a data frame, run as a suite, with results exportable to Excel. Recent releases have been about correctness and upstream compatibility. Expectations are now constructed via new_expectation() ahead of testthat 3.3.0, and expect_base() errors on a missing variable instead of silently passing.
The package reached its shape early and has spent the years since sanding it. The design decisions worth noting are all in the past: the move to tidyselect at 0.3.0, the test data pipe at 0.4.0, and the failure messages at 0.4.1 that name which variable failed rather than just reporting a count. Since then activity is sparse and reactive, tracking testthat and R-devel. The two 0.4.3 and 0.4.4 tags arriving ninety minutes apart on the same day is the signature of a release caught by an upstream deadline.
The immediate work is finishing the testthat 3.3.0 adaptation. Beyond that the notes give no evidence of new expectation families; the package looks maintained rather than developed.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either authentik or testdat.
Rancher's public feed is a build-tag stream: three branches bumped the same Go image on one afternoon
Buildkite keeps converting hand-rolled agent workarounds into first-class CI primitives.
Cursor's agents stop waiting to be asked - they subscribe, and they hold a goal until it's done.
Nexus does the diagnosis; the agent is now reaching into the status page too.
Warp turned its quarter of software-factory essays into infrastructure you can buy.
Okta's developer blog is a Cross App Access campaign, now diluted by advocacy-team storytelling.
See all authentik alternatives → · See all testdat alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. authentik is currently shipping more aggressively (velocity 6.3 vs 0.0), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. authentik is currently shipping more aggressively (velocity 6.3 vs 0.0), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top authentik alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "authentik alternatives" section above for the current picks, or visit /alternatives/authentik for the full list with editorial commentary on each.
Top testdat alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "testdat alternatives" section above for the current picks, or visit /alternatives/testdat for the full list with editorial commentary on each.