pgBackRest
pgBackRest 2.60 now stops a restore when a page checksum is bad
A side-by-side editorial comparison of Elasticsearch and PDFMonkey — release velocity, themes, recent moves, and the top alternatives to consider.
Seven ECE advisories land in one batch, three rated High, one exposing control-plane keys.
Elastic Cloud Enterprise 3.8.6 and 4.2.1 shipped on October 29 with seven advisories between ESA-2026-211 and ESA-2026-222, rated up to CVSS 8.2. The recurring failure is isolation: symlink handling that lets one deployment reach another on the same host, platform secrets readable by lower-privileged components, and a read-only user changing an installation-wide setting. Most of the bugs need a foothold first, such as code running inside a deployment container or access to internal platform services.
PDFMonkey adds an MCP server and Node.js SDK, so assistants can generate its documents.
An October 26 catch-up lists what shipped since summer. New items are zero-downtime API key rotation with a two-day overlap, snippet folders, an official Node.js SDK and an MCP server for Claude, Cursor and other AI assistants. Zapier document generation no longer races the 30-second limit, and n8n node 1.0 is now verified by n8n. February's visual builder remains the largest change in this window.
Elastic Cloud Enterprise 3.8.6 and 4.2.1 shipped on October 29 with seven advisories between ESA-2026-211 and ESA-2026-222, rated up to CVSS 8.2. The recurring failure is isolation: symlink handling that lets one deployment reach another on the same host, platform secrets readable by lower-privileged components, and a read-only user changing an installation-wide setting. Most of the bugs need a foothold first, such as code running inside a deployment container or access to internal platform services.
September's wave was about authorization in Kibana and Fleet; October asks the same question one layer down, at the hosting platform. Several affected ranges start at 1.0.0 or 2.6.0, so these are long-standing gaps rather than fresh regressions, and only ESA-2026-222 traces to code added in 4.1.0. Fixes reach both the 3.8 and 4.x lines.
Expect further ECE point releases on both lines, since isolation between deployments on a shared host is the repeated finding. Whether Elastic changes the shared-host model itself is not visible in these advisories.
An October 26 catch-up lists what shipped since summer. New items are zero-downtime API key rotation with a two-day overlap, snippet folders, an official Node.js SDK and an MCP server for Claude, Cursor and other AI assistants. Zapier document generation no longer races the 30-second limit, and n8n node 1.0 is now verified by n8n. February's visual builder remains the largest change in this window.
The two-audience pattern holds, and a third has joined: AI assistants calling PDFMonkey directly. The builder serves non-developers, while the SDKs, key rotation and automation fixes serve teams with PDFMonkey in production. Work on Zapier and n8n shows attention to where documents are actually triggered.
Expect more integration and SDK coverage, given the Ruby and Node.js releases and the n8n and Zapier work. How MCP use develops is not readable from a single catch-up post.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with Elasticsearch.
pgBackRest 2.60 now stops a restore when a page checksum is bad
Tines opens Records to AI clients and removes stored keys from its cloud credentials
Browser Use opens BU Ultrafast to every US plan, free tier included
Vitess tightens what it accepts: sql_mode checks and CRL enforcement reach both release lines.
After 13 months of silence, Jetpack's feed returns with a rebuilt VideoPress player.
Eclipse Che pulls workspaces into chectl and adds Orca, an editor for AI coding agents.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with PDFMonkey.
Scalar is testing demand for hosting from inside localhost
Incus 7.6 fixes 18 security issues, eight critical, and adds SR-IOV NIC live migration
DNSimple's Erlang DNS stack now handles 14% more queries per second, with no C involved
Doppler adds keyless syncs and agent-facing secrets as on-prem settles in
runc 1.6.0-rc.1 lifts the 1024-CPU limit and refuses settings it used to quietly ignore
Algolia's Agent Studio opens to outside agents and starts grading its own before they ship
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Elasticsearch is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Elasticsearch is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Elasticsearch alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Elasticsearch alternatives" section above for the current picks, or visit /alternatives/elastic for the full list with editorial commentary on each.
Top PDFMonkey alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "PDFMonkey alternatives" section above for the current picks, or visit /alternatives/pdfmonkey for the full list with editorial commentary on each.