ZoneMinder
ZoneMinder 1.38.5 fixes 19 vulnerabilities, including authenticated remote code execution
A side-by-side editorial comparison of Buildkite and Fluentd — release velocity, themes, recent moves, and the top alternatives to consider.
| Feature | Buildkite | Fluentd |
|---|---|---|
| Sector | Infra & APIs | Infra & APIs |
| Velocity score | 5.0 | 5.0 |
| Sparks · 30d | 0 | 0 |
| Top themes | ci/cd, self-hosted-agents, credentials, opentelemetry | log-collector, ruby-4, in-tail-performance, dependency-cleanup |
| Last editorial update | 59m ago | 1h ago |
| Website | — | Visit → |
Buildkite drops long-lived GitHub credentials from self-hosted agents
Buildkite's recent changelog fills infrastructure gaps teams used to cover with plugins or custom images. Self-hosted agents can now check out private GitHub repositories with temporary, read-only GitHub App tokens instead of SSH keys or personal access tokens. OpenTelemetry trace context now passes from parent builds to triggered builds without a Support request. October also brought Buildkite Cache GA, cluster-level OpenTelemetry, queue-filtered webhooks and Test Engine workflows in Terraform.
Fluentd 1.20 drops its yajl dependency to keep building on Ruby 4.1
Fluentd shipped 1.20.0 and 1.20.1 on the same day in late October. 1.20.0 replaces yajl with Ruby's built-in JSON, adds opt-in threaded parsing and directory watching to in_tail, a command timeout for in_exec, TCP keepalive for out_forward, a umask option and a cap on evacuated buffer chunks. 1.20.1 removed yajl-ruby from runtime dependencies because it cannot build on Ruby 4.1, so plugins that require it must now declare it themselves. 1.19.4 in September fixed buffer accounting leaks, a path traversal check and syslog limits.
Buildkite's recent changelog fills infrastructure gaps teams used to cover with plugins or custom images. Self-hosted agents can now check out private GitHub repositories with temporary, read-only GitHub App tokens instead of SSH keys or personal access tokens. OpenTelemetry trace context now passes from parent builds to triggered builds without a Support request. October also brought Buildkite Cache GA, cluster-level OpenTelemetry, queue-filtered webhooks and Test Engine workflows in Terraform.
The theme is removing per-agent setup: credentials, caching and telemetry all move from something each machine carries to something Buildkite supplies. Observability work has stepped from cluster-level config to cross-pipeline traces within two weeks.
Expect more of the remaining on-request options, such as HTTP traceparent acceptance, to become self-serve, following the trace propagation change.
Fluentd shipped 1.20.0 and 1.20.1 on the same day in late October. 1.20.0 replaces yajl with Ruby's built-in JSON, adds opt-in threaded parsing and directory watching to in_tail, a command timeout for in_exec, TCP keepalive for out_forward, a umask option and a cap on evacuated buffer chunks. 1.20.1 removed yajl-ruby from runtime dependencies because it cannot build on Ruby 4.1, so plugins that require it must now declare it themselves. 1.19.4 in September fixed buffer accounting leaks, a path traversal check and syslog limits.
The project is clearing old native dependencies ahead of new Ruby versions while making in_tail cheaper at high file counts. The hardening theme from 1.19.3 and 1.19.4 continues in the buffer and input paths.
Expect 1.20.x patches driven by plugins that break without yajl-ruby, since 1.20.1 pushes that dependency onto plugin authors.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Buildkite or Fluentd.
ZoneMinder 1.38.5 fixes 19 vulnerabilities, including authenticated remote code execution
CRI-O ships patch releases across three branches with empty change notes
Certbot keeps tidying correctness bugs around renewals and hooks
Routinator 0.16 will validate ASPA and BGPsec, and run strict, by default
AIReiter adds ByteDance's Seedream 5.0 Flash for fast, low-cost image generation and editing
Dashy shipped ten releases in five days; one fixes how auth headers trust origins
See all Buildkite alternatives → · See all Fluentd alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Buildkite and Fluentd are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Buildkite and Fluentd are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Buildkite alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Buildkite alternatives" section above for the current picks, or visit /alternatives/buildkite for the full list with editorial commentary on each.
Top Fluentd alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Fluentd alternatives" section above for the current picks, or visit /alternatives/fluentd for the full list with editorial commentary on each.