SOGo
SOGo's 5.12.13 fixes its largest batch of vulnerabilities yet, some critical.
A side-by-side editorial comparison of HedgeDoc and Komga — release velocity, themes, recent moves, and the top alternatives to consider.
HedgeDoc 1.12.1 fixes seven advisories, then gets pulled for a PostgreSQL migration bug
HedgeDoc 1.12.1 fixed seven security advisories, including an impersonation attack when two auth providers return the same profile id, a timing leak that revealed registered emails, and unescaped iframes in slides. It was pulled within minutes because a profile provider migration failed on PostgreSQL, and 1.12.2 replaces it. The release also lets OAuth2 and OIDC providers supply profile photos and updates mermaid to 11.17.
Komga's fourth NextUI beta adds bulk editing and remembers your filters.
Komga ships every one to two weeks, and nearly all feature work lands in NextUI, the rewritten web interface at /next. 1.30.0 brings its fourth beta: editing several series or books at once, reordering read lists and collections, and persisted filters, sort and library sub-views. HTTP sessions now default to database storage. The patches in between fixed page counts, KOReader hashes and NextUI navigation.
HedgeDoc 1.12.1 fixed seven security advisories, including an impersonation attack when two auth providers return the same profile id, a timing leak that revealed registered emails, and unescaped iframes in slides. It was pulled within minutes because a profile provider migration failed on PostgreSQL, and 1.12.2 replaces it. The release also lets OAuth2 and OIDC providers supply profile photos and updates mermaid to 11.17.
The 1.x line remains driven by security response, with advisory batches arriving every one to three months. This release adds a schema migration, and the immediate PostgreSQL breakage shows the risk of mixing data changes into security patches. Small auth and rendering features keep arriving alongside the fixes.
More advisory batches on the 1.12.x line are likely, given the pattern; the entries do not show when the next major line will replace 1.x.
Komga ships every one to two weeks, and nearly all feature work lands in NextUI, the rewritten web interface at /next. 1.30.0 brings its fourth beta: editing several series or books at once, reordering read lists and collections, and persisted filters, sort and library sub-views. HTTP sessions now default to database storage. The patches in between fixed page counts, KOReader hashes and NextUI navigation.
Each NextUI beta closes a gap with the old interface: metadata editing in the second, contextual navigation in the third, bulk editing and list organization in the fourth. Notable Entities metadata in 1.29 already exists only in NextUI, so the new interface is becoming the place where features appear first.
The remaining gaps look small enough that a later 1.3x release may make NextUI the default interface. Until then, expect more betas every few weeks with patch releases between them.
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either HedgeDoc or Komga.
SOGo's 5.12.13 fixes its largest batch of vulnerabilities yet, some critical.
Immich's 3.4 candidate adds passkeys and built-in backups.
Whereby folds three months into one digest and still lists nothing specific
Hive's dashboard push reaches goals: sub-goals now expand inline.
Tango ships an MCP server, so AI assistants can answer from a team's captured workflows.
HelloID's November release lets rule-mining results leave the console as Excel files.
See all HedgeDoc alternatives → · See all Komga alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
Both compete on the same themes — self-hosted — within Collab. HedgeDoc and Komga are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. HedgeDoc and Komga are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.
Top HedgeDoc alternatives in Collab are ranked by recent ship velocity. Browse the "HedgeDoc alternatives" section above for the current picks, or visit /alternatives/hedgedoc for the full list with editorial commentary on each.
Top Komga alternatives in Collab are ranked by recent ship velocity. Browse the "Komga alternatives" section above for the current picks, or visit /alternatives/komga for the full list with editorial commentary on each.