Tolgee
Tolgee adds OAuth 2.1 for MCP clients, making agent access a first-class login path.
A side-by-side editorial comparison of Harbor and Port — release velocity, themes, recent moves, and the top alternatives to consider.
Harbor 2.15 patches swap Redis for Valkey and tighten registry security.
Harbor is shipping 2.15.x patch candidates with security and dependency work. 2.15.2 replaced Redis with Valkey as the cache backend and moved to Go 1.26. 2.15.3 added a manifest upload size limit, blocked proxy-cache poisoning through robot-name prefixes and neutralised CSV formulas in scan exports. 2.15.4-rc1 relaxes two defaults that had caused regressions: webhooks can reach private networks and legacy signer pulls are allowed.
Port is turning its catalog into the permission layer other apps and GitHub inherit.
Port now runs governed Workflows with a growing library of native actions across GitHub, GitLab, Azure DevOps, Linear and Jira, and its AI Builder can execute catalog changes behind approvals. September added External Interfaces, which let custom apps sign users in with Port and act under their existing Port permissions, plus a one-way sync of Port properties into GitHub's new external custom properties. The Pages API went GA and Port AI can now route through any Anthropic-compatible gateway.
Harbor is shipping 2.15.x patch candidates with security and dependency work. 2.15.2 replaced Redis with Valkey as the cache backend and moved to Go 1.26. 2.15.3 added a manifest upload size limit, blocked proxy-cache poisoning through robot-name prefixes and neutralised CSV formulas in scan exports. 2.15.4-rc1 relaxes two defaults that had caused regressions: webhooks can reach private networks and legacy signer pulls are allowed.
The patch line is closing abuse paths in a registry many teams expose internally, while walking back defaults that broke existing setups. The Valkey switch shows Harbor following the wider move off Redis after its licence change.
Expect 2.15.4 to go final with the restored defaults and a refreshed Trivy; the entries don't show what the next minor release contains.
Port now runs governed Workflows with a growing library of native actions across GitHub, GitLab, Azure DevOps, Linear and Jira, and its AI Builder can execute catalog changes behind approvals. September added External Interfaces, which let custom apps sign users in with Port and act under their existing Port permissions, plus a one-way sync of Port properties into GitHub's new external custom properties. The Pages API went GA and Port AI can now route through any Anthropic-compatible gateway.
Port is pushing its data and permissions outward instead of keeping users inside its UI: apps built elsewhere authenticate against it, GitHub Rulesets target repos by Port-managed criticality and ownership, and agents reach it through MCP. Governance is also being decentralized, with scoped building permissions handing blueprint and workflow ownership to individual teams. The monthly cadence of one platform-level expansion plus a batch of workflow actions has held since spring.
Expect the GitHub property sync pattern to extend to other systems (GitLab, Azure DevOps) and more Workflow actions per release; External Interfaces will likely gain templates or starter apps tied to the Lovable/v0 path the release highlights.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Harbor or Port.
Tolgee adds OAuth 2.1 for MCP clients, making agent access a first-class login path.
ToolJet follows AI Builder 3 on LTS with Salesforce and signup fixes.
Tyk's release feed is CVE dependency bumps across three maintained lines.
Keycloak patches its 26.4 and 26.6 lines in lockstep; the tags carry no notes.
GitHub's Copilot push shifts to admin plumbing: billing, account controls and agent access.
Retool's agent is wiring backends now; the self-hosted release trains keep rolling underneath.
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Port is currently shipping more aggressively (velocity 7.5 vs 5.0), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Port is currently shipping more aggressively (velocity 7.5 vs 5.0), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Harbor alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Harbor alternatives" section above for the current picks, or visit /alternatives/harbor for the full list with editorial commentary on each.
Top Port alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Port alternatives" section above for the current picks, or visit /alternatives/port for the full list with editorial commentary on each.