ZoneMinder
ZoneMinder 1.38.5 fixes 19 vulnerabilities, including authenticated remote code execution
A side-by-side editorial comparison of Dashy and k0s — release velocity, themes, recent moves, and the top alternatives to consider.
Dashy shipped ten releases in five days; one fixes how auth headers trust origins
Dashy ships one release per merged PR. From October 26 to 31 that meant ten releases: six were Dependabot bumps, and the rest were fixes, including accepting IPv6 connections by default, a workspace header and search fix, an icon color fix, and a security fix for auth headers used with lookalike origins.
k0s opens its 1.37 line while security fixes ride the older branches.
k0s published v1.37.1 alongside 1.36.5, 1.35.9 and 1.34.12 on the same morning, so four branches are now live. The older branches took Kubernetes patch bumps, etcd 3.6.15 and deferred manifest directory creation, and 1.36 also scoped the worker autopilot to its own Node. In September, 1.36.4+k0s.1 and 1.35.8+k0s.1 shipped a fix for GHSA-qjgc-wmg7-3jc3, with csr-approver hardening on the 1.35 branch.
Dashy ships one release per merged PR. From October 26 to 31 that meant ten releases: six were Dependabot bumps, and the rest were fixes, including accepting IPv6 connections by default, a workspace header and search fix, an icon color fix, and a security fix for auth headers used with lookalike origins.
The cadence stays automated and small-grained, with the maintainer's own fixes interleaved with dependency updates.
More single-PR releases will follow; the entries give no sign of a larger feature release.
k0s published v1.37.1 alongside 1.36.5, 1.35.9 and 1.34.12 on the same morning, so four branches are now live. The older branches took Kubernetes patch bumps, etcd 3.6.15 and deferred manifest directory creation, and 1.36 also scoped the worker autopilot to its own Node. In September, 1.36.4+k0s.1 and 1.35.8+k0s.1 shipped a fix for GHSA-qjgc-wmg7-3jc3, with csr-approver hardening on the 1.35 branch.
The branch-parallel pattern is holding and now has a new top line. Lifecycle safety stays the core work: reset steps wired to contexts, autopilot retries and discovery refreshes, and autopilot scope limited to its own node. The 1.37 notes read as a long development log rather than a curated release, which fits a project that lets upstream Kubernetes carry the feature story.
Expect the next Kubernetes patch round to reach all four branches within hours of each other, and the oldest of them to drop off now that 1.37 is out, though these notes do not state a support window.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Dashy or k0s.
ZoneMinder 1.38.5 fixes 19 vulnerabilities, including authenticated remote code execution
CRI-O ships patch releases across three branches with empty change notes
Certbot keeps tidying correctness bugs around renewals and hooks
Routinator 0.16 will validate ASPA and BGPsec, and run strict, by default
Buildkite drops long-lived GitHub credentials from self-hosted agents
AIReiter adds ByteDance's Seedream 5.0 Flash for fast, low-cost image generation and editing
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Dashy and k0s are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Dashy and k0s are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Dashy alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Dashy alternatives" section above for the current picks, or visit /alternatives/dashy for the full list with editorial commentary on each.
Top k0s alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "k0s alternatives" section above for the current picks, or visit /alternatives/k0s for the full list with editorial commentary on each.