Tolgee
Tolgee ships four patch releases in a day, mostly security bumps and branching fixes.
A side-by-side editorial comparison of Duplicati and Portainer — release velocity, themes, recent moves, and the top alternatives to consider.
Duplicati can now restore from versioned storage as it looked at a past point in time.
The 2.4.0.105 canary adds --remote-point-in-time, which reads a versioned bucket as it was at a chosen time, read-only, so a damaged or tampered destination can be restored without manually copying old versions. Object-lock handling now detects unsupported destinations, and Duplicati Storage gains object locks and can act as a secondary destination.
Portainer 2.45.3 drops trust in eMudhra certificates and scopes kubeconfig tokens per environment.
Portainer 2.45.3 LTS stops trusting eMudhra emSign certificates after the compromise of eight intermediates, which can break SSO, LDAPS, registry and Git connections that use them. It also limits downloaded kubeconfig tokens to one environment's Kubernetes proxy, blocks a volumes_from route around hidden bind mounts, and patches a batch of critical Go and Helm CVEs.
The 2.4.0.105 canary adds --remote-point-in-time, which reads a versioned bucket as it was at a chosen time, read-only, so a damaged or tampered destination can be restored without manually copying old versions. Object-lock handling now detects unsupported destinations, and Duplicati Storage gains object locks and can act as a secondary destination.
The 2.4 canaries keep pushing recoverability: restore tests, filelist recovery, Hyper-V and MSSQL as restorable sources, and now point-in-time reads against versioned storage. Together they target ransomware and corruption scenarios, while the stable 2.4.0.x line receives the fixes.
Expect these canary features to land in the next 2.4 stable release, with more work on Duplicati's own storage service.
Portainer 2.45.3 LTS stops trusting eMudhra emSign certificates after the compromise of eight intermediates, which can break SSO, LDAPS, registry and Git connections that use them. It also limits downloaded kubeconfig tokens to one environment's Kubernetes proxy, blocks a volumes_from route around hidden bind mounts, and patches a batch of critical Go and Helm CVEs.
Every release in the 2.45 line has closed another way for non-admins or tokens to reach beyond their scope: the Docker proxy bypass, SSRF, bind-mount escapes, and now kubeconfig tokens. Native Kubernetes APIs from 2.45.0 make that tightening possible, and GitOps polling keeps getting reliability fixes alongside.
Expect a 2.39 LTS backport of the eMudhra and kubeconfig changes, and further token and permission scoping in the next 2.45 patch.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Duplicati or Portainer.
Tolgee ships four patch releases in a day, mostly security bumps and branching fixes.
NetBird's daemon-socket access canary gets a second build while v0.81 waits on GA.
Payload 4.0 beta 4 works through the admin accessibility audit and raises the Node minimum.
Cloudflare Tunnel reaches its fifth October release, still with checksums only.
Skipper's route server stops recompressing zones whose routes didn't change.
Chromatic now routes visual reviews to component owners automatically.
See all Duplicati alternatives → · See all Portainer alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Duplicati and Portainer are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Duplicati and Portainer are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Duplicati alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Duplicati alternatives" section above for the current picks, or visit /alternatives/duplicati for the full list with editorial commentary on each.
Top Portainer alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Portainer alternatives" section above for the current picks, or visit /alternatives/portainer for the full list with editorial commentary on each.