ZoneMinder
ZoneMinder 1.38.5 fixes 19 vulnerabilities, including authenticated remote code execution
A side-by-side editorial comparison of Buildkite and Certbot — release velocity, themes, recent moves, and the top alternatives to consider.
| Feature | Buildkite | Certbot |
|---|---|---|
| Sector | Infra & APIs | Infra & APIs |
| Velocity score | 5.0 | 2.5 |
| Sparks · 30d | 0 | 0 |
| Top themes | ci/cd, self-hosted-agents, credentials, opentelemetry | tls, certificates, acme, maintenance |
| Last editorial update | 1h ago | 1h ago |
| Website | — | Visit → |
Buildkite drops long-lived GitHub credentials from self-hosted agents
Buildkite's recent changelog fills infrastructure gaps teams used to cover with plugins or custom images. Self-hosted agents can now check out private GitHub repositories with temporary, read-only GitHub App tokens instead of SSH keys or personal access tokens. OpenTelemetry trace context now passes from parent builds to triggered builds without a Support request. October also brought Buildkite Cache GA, cluster-level OpenTelemetry, queue-filtered webhooks and Test Engine workflows in Terraform.
Certbot keeps tidying correctness bugs around renewals and hooks
Certbot is in maintenance and consolidation. 5.9.0 fixes a bug where failed SANs were sometimes reported to renewal hooks as renewed, picks the account to deactivate before asking for confirmation, and labels its Docker images for tools like Renovate. Earlier releases moved the nginx and apache plugin code into the core package, raised the cryptography floor, and added IP address certificates in 5.3.0.
Buildkite's recent changelog fills infrastructure gaps teams used to cover with plugins or custom images. Self-hosted agents can now check out private GitHub repositories with temporary, read-only GitHub App tokens instead of SSH keys or personal access tokens. OpenTelemetry trace context now passes from parent builds to triggered builds without a Support request. October also brought Buildkite Cache GA, cluster-level OpenTelemetry, queue-filtered webhooks and Test Engine workflows in Terraform.
The theme is removing per-agent setup: credentials, caching and telemetry all move from something each machine carries to something Buildkite supplies. Observability work has stepped from cluster-level config to cross-pipeline traces within two weeks.
Expect more of the remaining on-request options, such as HTTP traceparent acceptance, to become self-serve, following the trace propagation change.
Certbot is in maintenance and consolidation. 5.9.0 fixes a bug where failed SANs were sometimes reported to renewal hooks as renewed, picks the account to deactivate before asking for confirmation, and labels its Docker images for tools like Renovate. Earlier releases moved the nginx and apache plugin code into the core package, raised the cryptography floor, and added IP address certificates in 5.3.0.
Recent work is about correctness in renewal reporting and prompts rather than new capability. The IP-address support from early 2026 remains the last directional change in the feed.
Expect further monthly-to-bimonthly maintenance releases; the entries do not show new capability work.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Buildkite or Certbot.
ZoneMinder 1.38.5 fixes 19 vulnerabilities, including authenticated remote code execution
CRI-O ships patch releases across three branches with empty change notes
Routinator 0.16 will validate ASPA and BGPsec, and run strict, by default
AIReiter adds ByteDance's Seedream 5.0 Flash for fast, low-cost image generation and editing
Dashy shipped ten releases in five days; one fixes how auth headers trust origins
Mergify's merge queue now hunts the breaking PR by rerunning failed tests first
See all Buildkite alternatives → · See all Certbot alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Buildkite is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Buildkite is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Buildkite alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Buildkite alternatives" section above for the current picks, or visit /alternatives/buildkite for the full list with editorial commentary on each.
Top Certbot alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Certbot alternatives" section above for the current picks, or visit /alternatives/certbot for the full list with editorial commentary on each.