TypeDB
Query caching and type renaming land, then three patches to make the schema engine hold.
Comparison · Infra & APIs
Elasticsearch vs gh
A side-by-side editorial comparison of Elasticsearch and gh — release velocity, themes, recent moves, and the top alternatives to consider.
Elasticsearch vs gh: at a glance
What is Elasticsearch?
Agent Builder, Elastic's newest surface, is where most of this month's Kibana CVEs live.
The visible feed window is one coordinated disclosure batch: ten Kibana advisories published within a minute of each other on August 13, spanning the 8.19, 9.3, 9.4 and 9.5 branches. Four of the six most recent concern Agent Builder — private agents readable and tamperable by non-owners, an A2A JSON-RPC endpoint that derives a conversation id from user-supplied input, and a missing cross-feature privilege check. The remainder cover Fleet issuing over-scoped Elastic Agent API keys and an Elastic Defend endpoint-event disclosure via field-value suggestions.
What is gh?
gh spent its last two releases making failures and interruptions recoverable.
The GitHub API client rebuilt on httr2 in 1.4.0, then took a security-driven breaking change in 1.5.0: response headers are no longer stored in returned objects, because they can carry sensitive information. The 1.6.0 release made interrupted pagination recoverable and downgraded personal access token format validation from an error to a warning.
Elasticsearch vs gh: editorial side-by-side
Elasticsearch
6.3DEVOPSINFRA · APIS
Agent Builder, Elastic's newest surface, is where most of this month's Kibana CVEs live.
◆ Current state
The visible feed window is one coordinated disclosure batch: ten Kibana advisories published within a minute of each other on August 13, spanning the 8.19, 9.3, 9.4 and 9.5 branches. Four of the six most recent concern Agent Builder — private agents readable and tamperable by non-owners, an A2A JSON-RPC endpoint that derives a conversation id from user-supplied input, and a missing cross-feature privilege check. The remainder cover Fleet issuing over-scoped Elastic Agent API keys and an Elastic Defend endpoint-event disclosure via field-value suggestions.
◆ Where it's heading
Authorization is the single recurring failure mode here — every one of these is a caller-identity or privilege-check mistake, not memory safety or injection. That is the predictable cost of extending a permissions model built for dashboards and saved searches to a layer that acts on a user's behalf. Fixes are shipping inside ordinary patch releases (9.4.5, 9.5.1) rather than as a dedicated hardening effort.
◆ Prediction
Expect further Agent Builder advisories as that surface widens, and pressure to consolidate its ownership and privilege checks into one enforcement path instead of patching endpoint by endpoint.
gh
2.5INFRA · APIS
gh spent its last two releases making failures and interruptions recoverable.
◆ Current state
The GitHub API client rebuilt on httr2 in 1.4.0, then took a security-driven breaking change in 1.5.0: response headers are no longer stored in returned objects, because they can carry sensitive information. The 1.6.0 release made interrupted pagination recoverable and downgraded personal access token format validation from an error to a warning.
◆ Where it's heading
The direction is tolerance for partial and unusual outcomes rather than new endpoint coverage. Interrupting a paginated call now raises a classed condition carrying the records already fetched; a 304 Not Modified returns an empty response with headers intact instead of erroring; an unrecognised token format warns and proceeds. A fake_github_app() built on webfakes ships for testing, and is offered to other package authors.
◆ Prediction
Token format handling is now configurable rather than fixed, so the next likely work is following GitHub's credential formats as they change, not expanding the client surface.
Elasticsearch alternatives
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with Elasticsearch.
Slurm
Two supported branches, both absorbing the aftershocks of the 26.05 identity change.
Meilisearch
A week of reverts and prototype tags, with tuning knobs standing in for features.
Auth0
Auth0 is replacing its legacy configuration surfaces one at a time, and shipping NIST defaults to new tenants only.
HashiCorp
HashiCorp says provenance is the moat, and Packer is the first product to actually ship it.
GitHub
GitHub is standardising the agent layer it doesn't own, while the model roster churns underneath.
gh alternatives
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with gh.
evaluate
The engine under every knitted R document reached 1.0 by making evaluation behave like the console.
carrier
carrier's 0.3.0 quietly rewrites how crated functions see each other — and breaks code that relied on the old rules.
watcher
watcher is a thin filesystem-events binding whose releases are mostly build work.
checkhelper
checkhelper grew from a check wrapper into a CRAN pre-submission auditor.
dockerfiler
dockerfiler's 1.0.0 changes what its generated Dockerfiles actually contain.
crane
Crane is turning into the table-and-plot layer for Roche's clinical output stack.
Recent activity from Elasticsearch and gh
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 1d agoElasticsearchKibana 9.4.5, 9.5.1 Security Update (ESA-2026-128)
- 1d agoElasticsearchKibana 9.4.5, 9.5.1 Security Update (ESA-2026-124)
- 1d agoElasticsearchKibana 9.4.5 Security Update (ESA-2026-97)
- 1d agoElasticsearchKibana 9.4.5 Security Update (ESA-2026-89)
- 1d agoElasticsearchKibana 9.4.5 Security Update (ESA-2026-82)
- 1d agoElasticsearchKibana 9.4.4 Security Update (ESA-2026-83)
- 25d agoghPagination progress bar reports true record counts
- 2mo agoghInterrupted pagination keeps its partial results
- 1y agoghResponse headers dropped from results after a security advisory ⚡
- 2y agoghPagination helpers repaired and atomic file writes
- 3y agoghClient rebuilt on httr2 with rate-limit controls
- 3y agoghLower-case methods and richer error conditions
Frequently asked questions
What is the difference between Elasticsearch and gh?
They serve adjacent needs but don't currently overlap on shipped themes. Elasticsearch is currently shipping more aggressively (velocity 6.3 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Elasticsearch better than gh?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Elasticsearch is currently shipping more aggressively (velocity 6.3 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
What are the best alternatives to Elasticsearch?
Top Elasticsearch alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Elasticsearch alternatives" section above for the current picks, or visit /alternatives/elastic for the full list with editorial commentary on each.
What are the best alternatives to gh?
Top gh alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "gh alternatives" section above for the current picks, or visit /alternatives/gh for the full list with editorial commentary on each.