Tolgee
Tolgee adds OAuth 2.1 for MCP clients, making agent access a first-class login path.
A side-by-side editorial comparison of CircleCI and Harbor — release velocity, themes, recent moves, and the top alternatives to consider.
CircleCI is rebuilding its API for agents and retiring the 1.0-era surface beneath it.
CircleCI shipped API v3 this week with uniform conventions (UUID resource IDs, cursor pagination, one error format, standard rate-limit headers) and named AI agents as a target consumer. The same week it set a hard February 1, 2027 removal for ten v1/v1.1 trigger and rerun endpoints, and made Slack approval notifications actionable. These sit on top of September's open preview for running GitHub Actions YAML on CircleCI compute.
Harbor 2.15 patches swap Redis for Valkey and tighten registry security.
Harbor is shipping 2.15.x patch candidates with security and dependency work. 2.15.2 replaced Redis with Valkey as the cache backend and moved to Go 1.26. 2.15.3 added a manifest upload size limit, blocked proxy-cache poisoning through robot-name prefixes and neutralised CSV formulas in scan exports. 2.15.4-rc1 relaxes two defaults that had caused regressions: webhooks can reach private networks and legacy signer pulls are allowed.
CircleCI shipped API v3 this week with uniform conventions (UUID resource IDs, cursor pagination, one error format, standard rate-limit headers) and named AI agents as a target consumer. The same week it set a hard February 1, 2027 removal for ten v1/v1.1 trigger and rerun endpoints, and made Slack approval notifications actionable. These sit on top of September's open preview for running GitHub Actions YAML on CircleCI compute.
The pattern is consolidation plus new entry points. Legacy surfaces are being cut (v1 endpoints, Bitbucket Data Center, old Xcode images) while new ways in are added: GHA YAML for migrants, v3 for programmatic and agent clients, Slack for approvals. CircleCI is trying to be reachable from wherever the work is triggered, not only from its own config and web app.
Expect v3 coverage to expand endpoint by endpoint, with v2 deprecation notices following once parity is reached; the GHA YAML preview is the other likely next step, most plausibly adding non-Linux runners or secret import.
Harbor is shipping 2.15.x patch candidates with security and dependency work. 2.15.2 replaced Redis with Valkey as the cache backend and moved to Go 1.26. 2.15.3 added a manifest upload size limit, blocked proxy-cache poisoning through robot-name prefixes and neutralised CSV formulas in scan exports. 2.15.4-rc1 relaxes two defaults that had caused regressions: webhooks can reach private networks and legacy signer pulls are allowed.
The patch line is closing abuse paths in a registry many teams expose internally, while walking back defaults that broke existing setups. The Valkey switch shows Harbor following the wider move off Redis after its licence change.
Expect 2.15.4 to go final with the restored defaults and a refreshed Trivy; the entries don't show what the next minor release contains.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either CircleCI or Harbor.
Tolgee adds OAuth 2.1 for MCP clients, making agent access a first-class login path.
ToolJet follows AI Builder 3 on LTS with Salesforce and signup fixes.
Tyk's release feed is CVE dependency bumps across three maintained lines.
Keycloak patches its 26.4 and 26.6 lines in lockstep; the tags carry no notes.
GitHub's Copilot push shifts to admin plumbing: billing, account controls and agent access.
Retool's agent is wiring backends now; the self-hosted release trains keep rolling underneath.
See all CircleCI alternatives → · See all Harbor alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. CircleCI is currently shipping more aggressively (velocity 10.0 vs 5.0), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. CircleCI is currently shipping more aggressively (velocity 10.0 vs 5.0), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top CircleCI alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "CircleCI alternatives" section above for the current picks, or visit /alternatives/circleci for the full list with editorial commentary on each.
Top Harbor alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Harbor alternatives" section above for the current picks, or visit /alternatives/harbor for the full list with editorial commentary on each.