Mattermost
Mattermost ships v11.8 compliance controls amid heavy sovereign-defence content
A side-by-side editorial comparison of Excalidraw and GitHub — release velocity, themes, recent moves, and the top alternatives to consider.
Excalidraw library cadence is glacial — v0.18 in March 2025, then silence; feed is mostly GitHub-profile noise.
The captured changelog tracks the npm library at github.com/excalidraw/excalidraw, not the hosted app at excalidraw.com. The library has shipped four substantive releases over two-and-a-half years: v0.16.1 (Sep 2023), v0.17.0 (Nov 2023), v0.17.3 (Feb 2024), and v0.18.0 (March 2025). The latest entry is from April 2026 but is a GitHub-profile scraping artifact, not a release. Half the feed is GitHub user-profile pages ('Sorry, something went wrong') that landed instead of release content.
GitHub spends the week hardening enterprise governance and supply-chain security.
GitHub's changelog this week leans heavily toward enterprise control and security: plugin-marketplace restrictions, hosted-runner label controls, npm account-takeover safeguards, and break-glass credential revocation. Copilot and Actions still ship — parallel steps, code-review efficiency — but the center of gravity is administrative governance and supply-chain defense.
The captured changelog tracks the npm library at github.com/excalidraw/excalidraw, not the hosted app at excalidraw.com. The library has shipped four substantive releases over two-and-a-half years: v0.16.1 (Sep 2023), v0.17.0 (Nov 2023), v0.17.3 (Feb 2024), and v0.18.0 (March 2025). The latest entry is from April 2026 but is a GitHub-profile scraping artifact, not a release. Half the feed is GitHub user-profile pages ('Sorry, something went wrong') that landed instead of release content.
v0.18.0 was the high-water release — command palette, multiplayer undo/redo, editable element stats, text wrapping, and laser pointer. Since then the library has been quiet for over a year while the hosted app at excalidraw.com presumably continued to evolve through unversioned deploys. This pattern suggests the team has shifted investment toward the SaaS product and integrations, with the open-source library treated as a stable embedding target rather than the frontier of feature work.
The library will likely see another minor release rather than going dormant — there is too much downstream embedding (Notion, Obsidian, etc.) for it to fully fall behind the SaaS app — but expect months between releases, not weeks. The feed-source issue is fixable: the crawler should target the GitHub Releases API or RSS, not the HTML release pages and contributor profiles that produce the current noise.
GitHub's changelog this week leans heavily toward enterprise control and security: plugin-marketplace restrictions, hosted-runner label controls, npm account-takeover safeguards, and break-glass credential revocation. Copilot and Actions still ship — parallel steps, code-review efficiency — but the center of gravity is administrative governance and supply-chain defense.
GitHub is building the guardrails enterprises need to adopt agentic and AI tooling at scale: controlling which plugins run, who can use which runners, and how fast a compromised credential can be killed. It is positioning itself as the governed substrate for AI-assisted development, not just the code host.
Expect more enterprise-admin controls around Copilot and agent usage plus further npm supply-chain protections, with previews like strictKnownMarketplaces moving toward GA.
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with Excalidraw.
Mattermost ships v11.8 compliance controls amid heavy sovereign-defence content
SiYuan's 3.7.0 turns the note-taker into a scriptable, extensible platform
Anytype's 0.55 cycle is a steady grind on chat, with code blocks the headline
Rocket.Chat is methodically migrating off Meteor DDP toward a REST core
Front is rebuilding the shared inbox around AI agents and omnichannel reach.
Claromentis's feed is secure-AI and compliance thought-leadership, not a release log.
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with GitHub.
Nuxt builds its own doc-grounded AI agent while the 4.x line ships steady framework upgrades
Astro 7.0 lands a Rust compiler and advanced routing as the framework chases build speed
Deno expands from runtime to platform — desktop apps, agent firewalls, and managed deploy
Bun keeps absorbing the toolchain — image processing, HTTP/3, and a built-in test runner
Hono is in a sustained security-hardening cycle, patching middleware and serverless adapters
Svelte's remote functions grow into a real-time data layer as the API stabilizes
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. GitHub is currently shipping more aggressively (velocity 10.0 vs 1.3), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. GitHub is currently shipping more aggressively (velocity 10.0 vs 1.3), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.
Top Excalidraw alternatives in Collab are ranked by recent ship velocity. Browse the "Excalidraw alternatives" section above for the current picks, or visit /alternatives/excalidraw for the full list with editorial commentary on each.
Top GitHub alternatives in Collab are ranked by recent ship velocity. Browse the "GitHub alternatives" section above for the current picks, or visit /alternatives/github for the full list with editorial commentary on each.