Prometheus Alertmanager
Alertmanager 0.34.2 turns off CORS by default, breaking cross-origin API calls.
A side-by-side editorial comparison of Coder and NetBox — release velocity, themes, recent moves, and the top alternatives to consider.
Coder now patches three release lines at once, and the fixes keep landing on agent access.
Coder's feed shows patch releases on v2.29, v2.34 and v2.36 within three days, which means a v2.35 and a v2.36 mainline shipped that this feed never captured. The late-October fixes are permission work: new API keys stay within the caller's scopes, fetching external agent credentials now requires SSH permission, and read_skill_file reads are confined to the skill directory. Everything else is release-script and DERP client fixes.
NetBox 4.7's patch run fixes a token leak and a broken restore path.
Four 4.7 patches followed the September 4.7.0 release. 4.7.1 reinstalled hierarchical-path triggers that a pg_dump restore silently dropped, 4.7.2 stopped background bulk requests recording plaintext API tokens in job results, 4.7.3 was a REST and GraphQL performance release, and 4.7.4 adds change-log IDs to webhook payloads, fixes the circuit status GraphQL enum and warns about a thumbnail storage change.
Coder's feed shows patch releases on v2.29, v2.34 and v2.36 within three days, which means a v2.35 and a v2.36 mainline shipped that this feed never captured. The late-October fixes are permission work: new API keys stay within the caller's scopes, fetching external agent credentials now requires SSH permission, and read_skill_file reads are confined to the skill directory. Everything else is release-script and DERP client fixes.
The security surface is moving to the AI agent features. Two of the three substantive fixes this round concern what an agent can read or which credentials it can obtain, following the June hardening drop on OIDC linking and token theft. The multi-branch backporting continues, so enterprise customers on older lines like 2.29 still get the same permission fixes as the mainline.
Expect more permission checks around agent credentials and skills as those features get exercised; the feature releases themselves are not visible in this feed, so their direction is unclear from these entries.
Four 4.7 patches followed the September 4.7.0 release. 4.7.1 reinstalled hierarchical-path triggers that a pg_dump restore silently dropped, 4.7.2 stopped background bulk requests recording plaintext API tokens in job results, 4.7.3 was a REST and GraphQL performance release, and 4.7.4 adds change-log IDs to webhook payloads, fixes the circuit status GraphQL enum and warns about a thumbnail storage change.
The ltree migration in 4.7.0 is still generating follow-up work, and the patch notes are candid about what broke. Performance work on REST serialisation and GraphQL has been steady across the line, and event payloads are getting richer for automation users.
Expect further 4.7.x patches on a two-week rhythm with more API performance fixes; the entries don't show what 4.8 will contain.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Coder or NetBox.
Alertmanager 0.34.2 turns off CORS by default, breaking cross-origin API calls.
NFS-Ganesha's 15.x line turns to weekly fixes, input checks and dropping 9P.
Kata Containers 4.3 fixes a guest-to-host escape and tightens annotation handling.
mod_auth_openidc 2.4.20.4 closes a provider-to-host command execution path.
Scrypted's v0.147.0 pairs RTSP compliance fixes with two web-server security patches.
Daytona adds warm pools and spot GPU support, targeting production-grade AI agent sandbox execution.
See all Coder alternatives → · See all NetBox alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
Both compete on the same themes — security — within Infra & APIs. Coder and NetBox are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Coder and NetBox are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Coder alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Coder alternatives" section above for the current picks, or visit /alternatives/coder for the full list with editorial commentary on each.
Top NetBox alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "NetBox alternatives" section above for the current picks, or visit /alternatives/netbox for the full list with editorial commentary on each.