Cloudflare Tunnel
Cloudflare Tunnel ships its sixth October release, still with checksums only.
A side-by-side editorial comparison of Casdoor and Infisical — release velocity, themes, recent moves, and the top alternatives to consider.
Casdoor is rebuilding its console on shadcn/ui, porting auth features into web2 release by release.
Casdoor tags multiple releases a day, each carrying a single commit, so the version stream reads as a commit log rather than a milestone list. The visible work splits in two: a frontend rewrite called web2 that is absorbing the old antd console into shadcn/ui and re-acquiring features as it goes, and a steady trickle of repairs on the live auth surface covering signup validation, theme handling, and translations. SAML IdP-initiated SSO in v3.161.0 is the only protocol-level addition anywhere in this window.
Infisical makes batched secret edits the default and adds bulk review for change requests.
Infisical ships a release almost daily across secrets, PKI, PAM and Agent Vault. The latest two make batched secret and folder changes the default in the Secrets Overview, backed by a new batch commit API, and add bulk review of secret change requests plus auto-approvals in PAM. Agent Vault now accepts member-provided credentials with personal values, and Cloudflare Workers/Pages syncs let users pick the variable type.
Casdoor tags multiple releases a day, each carrying a single commit, so the version stream reads as a commit log rather than a milestone list. The visible work splits in two: a frontend rewrite called web2 that is absorbing the old antd console into shadcn/ui and re-acquiring features as it goes, and a steady trickle of repairs on the live auth surface covering signup validation, theme handling, and translations. SAML IdP-initiated SSO in v3.161.0 is the only protocol-level addition anywhere in this window.
The web2 migration is the spine of this release train, and it is advancing by increments rather than by cutover: code moves across, then the features that code backed get rebuilt on the other side. Everything else in the window is maintenance on the shipping product, sized to single commits. Expect the migration to keep consuming minor versions until web2 reaches parity with the console it replaces.
The next releases most likely continue porting console screens into web2 and cleaning up the login theme path that v3.160.0 and v3.163.3 have both touched. The entries give no signal on when web2 becomes the default, so the cutover timing is unclear.
Infisical ships a release almost daily across secrets, PKI, PAM and Agent Vault. The latest two make batched secret and folder changes the default in the Secrets Overview, backed by a new batch commit API, and add bulk review of secret change requests plus auto-approvals in PAM. Agent Vault now accepts member-provided credentials with personal values, and Cloudflare Workers/Pages syncs let users pick the variable type.
Secret changes are being handled like code commits that move through approval: global approvals in v0.166.5, now batch commits and bulk review. In parallel the PKI side keeps widening (DigiCert HSM signing, Linux certificate discovery) and Agent Vault is moving from breaking changes toward per-member credentials. The frontend is also shedding its V2 component library and legacy styles.
Expect approval policies to gain controls aimed at batched commits and more Agent Vault credential options over the next few releases.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Casdoor or Infisical.
Cloudflare Tunnel ships its sixth October release, still with checksums only.
Harbor 2.16 RC1 brings official arm64 builds, custom project roles and smarter proxy caching.
ToolJet ships AI Builder release 4 to its LTS line, with Gemini 4 Argon support.
Kubernetes moves conformance from the cluster to the workloads running on it.
Jackett ships a daily build to keep hundreds of torrent indexers working as sites move and close.
Redocly gives its docs MCP server its own name and public endpoint settings.
See all Casdoor alternatives → · See all Infisical alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Casdoor and Infisical are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Casdoor and Infisical are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Casdoor alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Casdoor alternatives" section above for the current picks, or visit /alternatives/casdoor for the full list with editorial commentary on each.
Top Infisical alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Infisical alternatives" section above for the current picks, or visit /alternatives/infisical for the full list with editorial commentary on each.