Manticore Search
Manticore 31.0.7 undoes a 2x COUNT(DISTINCT) slowdown its own collation fix caused.
A side-by-side editorial comparison of GitHub and SuperTokens — release velocity, themes, recent moves, and the top alternatives to consider.
GitHub adds GPT-6.1 Terra to Copilot and makes assisted permissions GA across CLI, app and VS Code.
GitHub's latest releases split between Copilot and enterprise administration. On October 26, GPT-6.1 Terra became generally available in Copilot as a lower-cost model for everyday agentic and terminal work, and assisted permissions went GA in Copilot CLI, the Copilot app and VS Code, helping users decide when Copilot asks to run a command or touch a path. The week before brought enterprise-wide GitHub App installs, public monitoring for leaked secrets with triage and webhooks, and a Copilot app for Teams.
SuperTokens patches seven auth advisories and makes SAML IdP-initiated login opt-in by allow-list.
SuperTokens is a self-hostable auth backend that spent the v12 cycle hardening its security surface and extending multi-tenancy. The v12.3.0 canary in September added an append-only activity log for user lifecycle events. v12.0.11 is a security release: SAML replay protection and single-assertion binding, an ACS URL allow-list now required for IdP-initiated logins, tenant-scoped WebAuthn sign-in, a session/unlink race fix and dashboard session expiry checks, with additive schema migrations.
GitHub's latest releases split between Copilot and enterprise administration. On October 26, GPT-6.1 Terra became generally available in Copilot as a lower-cost model for everyday agentic and terminal work, and assisted permissions went GA in Copilot CLI, the Copilot app and VS Code, helping users decide when Copilot asks to run a command or touch a path. The week before brought enterprise-wide GitHub App installs, public monitoring for leaked secrets with triage and webhooks, and a Copilot app for Teams.
Copilot is becoming an agent that runs commands across several clients, and GitHub is adding the controls that make that tolerable: per-action permission handling for users, global feature defaults and usage metrics for admins. Model choice is moving toward tiers by cost, with cheaper models aimed at routine agent work.
Expect more permission and policy controls for Copilot's agent actions, likely surfaced to admins, and further cheaper model options for agentic tasks.
SuperTokens is a self-hostable auth backend that spent the v12 cycle hardening its security surface and extending multi-tenancy. The v12.3.0 canary in September added an append-only activity log for user lifecycle events. v12.0.11 is a security release: SAML replay protection and single-assertion binding, an ACS URL allow-list now required for IdP-initiated logins, tenant-scoped WebAuthn sign-in, a session/unlink race fix and dashboard session expiry checks, with additive schema migrations.
Two tracks run in parallel: a stable 12.0 line that keeps closing authentication edge cases, much of it in SAML, and a 12.3 canary that adds stateful features such as the activity log. The new ACS allow-list requirement shows the project is willing to refuse insecure configurations by default rather than leave them to documentation.
Expect further 12.0.x security patches and, separately, the 12.3 activity log moving toward a stable release; the entries don't show when it will get a read API.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with GitHub.
Manticore 31.0.7 undoes a 2x COUNT(DISTINCT) slowdown its own collation fix caused.
Grav backports a Clockwork profiler security fix from 2.1.7 to its 1.7 line.
NATS 2.15.2 closes auth-callout and leafnode ACL gaps on both supported lines.
Z-Wave JS UI 11.25.2 fixes HTTPS certificates that the new Node 24 image rejected.
Scalingo blocks exploit traffic at the router while customers patch Node.js and PHP.
Gravity Forms follows its 3.2 Repeater field with three add-on point releases.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with SuperTokens.
Jackett ships a daily build to keep hundreds of torrent indexers working as sites move and close.
Redocly gives its docs MCP server its own name and public endpoint settings.
Hatchet 0.114.2 adds flow-control levers and FIPS images, then spends a day fixing durable stalls.
Cursor's Agent SDK turns custom agents into code projects you can test, then deploy anywhere.
NetBird's v0.82 candidate drops MySQL for self-hosted management and splits access logs out.
ToolJet ships AI Builder release 4 to its LTS line, with Gemini 4 Argon support.
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. GitHub is currently shipping more aggressively (velocity 10.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. GitHub is currently shipping more aggressively (velocity 10.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top GitHub alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "GitHub alternatives" section above for the current picks, or visit /alternatives/github for the full list with editorial commentary on each.
Top SuperTokens alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "SuperTokens alternatives" section above for the current picks, or visit /alternatives/supertokens for the full list with editorial commentary on each.