Oh Dear
Oh Dear's weekly changelogs have carried a security section five weeks running.
A side-by-side editorial comparison of BorgBackup and Dokku — release velocity, themes, recent moves, and the top alternatives to consider.
Borg 2.0 beta 25 breaks repositories to swap its hash and repository format.
BorgBackup's 2.0 beta line is still making breaking format changes. Beta 25 requires new repositories: it moves store object names to blake3, replaces several repository objects with an ini-style config, removes the none-sha256 and none-blake3 modes in favor of authenticated ones, and protects lock, index and cache objects with the repository key. The stable 1.4 line remains the production track.
Dokku's autumn patches swap new features for safer deploys and stricter validation.
The 0.38 line reached v0.38.34 in late October, and the recent releases are mostly about correctness. Deploy locks now release on exit and honor apps:lock, app names and arguments are validated across commands, config write failures are reported, and dokku run propagates exit codes. Smaller additions include a --no-cache flag for ps:rebuild, per-entry cron MAILTO and a configurable nginx proxy HTTP version.
BorgBackup's 2.0 beta line is still making breaking format changes. Beta 25 requires new repositories: it moves store object names to blake3, replaces several repository objects with an ini-style config, removes the none-sha256 and none-blake3 modes in favor of authenticated ones, and protects lock, index and cache objects with the repository key. The stable 1.4 line remains the production track.
Twenty-five betas in, the format is not settled, but this beta is decisive: it removes old modes and object types, which narrows what 2.0 has to support. Treating lock and cache objects as keyed data also extends the security model beyond archive contents.
Further betas are likely to keep requiring new repositories until the format freezes, so a release candidate should not be assumed soon. The 1.4 line stays the safe choice until then.
The 0.38 line reached v0.38.34 in late October, and the recent releases are mostly about correctness. Deploy locks now release on exit and honor apps:lock, app names and arguments are validated across commands, config write failures are reported, and dokku run propagates exit codes. Smaller additions include a --no-cache flag for ps:rebuild, per-entry cron MAILTO and a configurable nginx proxy HTTP version.
The August k3s parity push has given way to a hardening pass through commands that used to fail quietly. A second thread makes configuration declarative: storage mounts, scheduler-k3s metadata and chart overrides each gained a whole-set form, which suits automation tools more than people at a terminal. Machine use of the CLI remains the through-line.
Expect the whole-set form to reach more properties, since three subsystems have now gained it. Patch releases should stay frequent, and the notes give no sign of a move past the 0.38 line.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either BorgBackup or Dokku.
Oh Dear's weekly changelogs have carried a security section five weeks running.
ShenYu's AI gateway plugins are back in motion, with 2.7.2 candidate tags in October.
TestingBot's autumn work is plumbing: a rebuilt tunnel and another bug-tracker link.
KubeArmor ships fixes as release-candidate tags, and its feed misses the finals.
All Quiet moves from enterprise integrations to the on-call engineer's own day.
Robusta's recent releases patch its runner image rather than add features.
See all BorgBackup alternatives → · See all Dokku alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Dokku is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Dokku is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top BorgBackup alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "BorgBackup alternatives" section above for the current picks, or visit /alternatives/borgbackup for the full list with editorial commentary on each.
Top Dokku alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Dokku alternatives" section above for the current picks, or visit /alternatives/dokku for the full list with editorial commentary on each.