Lima
Lima 2.3 nears release, with a Windows path that drops QEMU and a new TUI
A side-by-side editorial comparison of Greenbone Vulnerability Manager and Payload CMS — release velocity, themes, recent moves, and the top alternatives to consider.
Greenbone's gvmd starts on Active Directory credentials as report exports settle.
26.43.0 on 27 October adds an LDAP/AD credential type, a GMP command to verify it and feature flags for AD integration, plus encryption and anonymization options for agent bundles. The surrounding releases finish the report export work: cancellation in 26.40.0, then reuse of completed exports and repeatable downloads. 26.41.0 also adds executable report formats and validates keys and certificates when credentials are modified.
Payload's v4 beta ships every few days, and most of the risk sits in the breaking-change notes
Payload is working through a v4 beta line, with six betas tagged between October 13 and October 29. Each carries fixes plus a short list of breaking changes: stable TanStack Start and nodemailer 10 in beta.2, React Flight for TanStack RSC responses in beta.3, a changed uploadReference contract in beta.5, and Lexical 0.53 in beta.6. The other steady thread is accessibility, with audit findings closed across several betas.
26.43.0 on 27 October adds an LDAP/AD credential type, a GMP command to verify it and feature flags for AD integration, plus encryption and anonymization options for agent bundles. The surrounding releases finish the report export work: cancellation in 26.40.0, then reuse of completed exports and repeatable downloads. 26.41.0 also adds executable report formats and validates keys and certificates when credentials are modified.
Report export, the summer's main thread, has reached the fix-and-polish stage. New work is moving toward agents and directory integration: agent OS metadata, group scheduling delay and bundle options sit alongside the AD credential type. The steady memory-leak fixes suggest a code base being tightened as these features land.
AD integration sits behind feature flags, so expect follow-up releases to complete it. The entries don't say when it will be enabled by default.
Payload is working through a v4 beta line, with six betas tagged between October 13 and October 29. Each carries fixes plus a short list of breaking changes: stable TanStack Start and nodemailer 10 in beta.2, React Flight for TanStack RSC responses in beta.3, a changed uploadReference contract in beta.5, and Lexical 0.53 in beta.6. The other steady thread is accessibility, with audit findings closed across several betas.
The betas are widening where Payload runs rather than adding headline features: TanStack Start is treated as a real target alongside Next.js, and cache components arrived in beta.3. Accessibility and restore behaviour keep taking fixes, which reads as hardening of the admin UI before a stable cut. The breaking-change lists have stayed short and mostly hit integrators, such as custom transports, Lexical users and third-party upload adapters.
More betas on the same two-to-five-day spacing are the likely next step. The entries give no stable date, so the v4.0.0 timing is unclear.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Greenbone Vulnerability Manager or Payload CMS.
Lima 2.3 nears release, with a Windows path that drops QEMU and a new TUI
Verdaccio's v9 pre-release counter reaches 41, and the notes still say nothing
Snort 3.12.4 pairs a long memory-safety pass with detection speed work
Nineteen patches into 3.2, HAProxy's ingress controller is mostly bumping dependencies
Honeycomb is working on the first ten minutes, not just the incident
Talos 1.15's alpha keeps moving: a silent containerd config trap and declarative CPU control
See all Greenbone Vulnerability Manager alternatives → · See all Payload CMS alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Greenbone Vulnerability Manager and Payload CMS are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Greenbone Vulnerability Manager and Payload CMS are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Greenbone Vulnerability Manager alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Greenbone Vulnerability Manager alternatives" section above for the current picks, or visit /alternatives/greenbone-gvmd for the full list with editorial commentary on each.
Top Payload CMS alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Payload CMS alternatives" section above for the current picks, or visit /alternatives/payload for the full list with editorial commentary on each.