Ably
Ably is building an agent transport layer, shipping a new AI SDK version roughly every ten days.
A side-by-side editorial comparison of Icinga and GitHub — release velocity, themes, recent moves, and the top alternatives to consider.
Three branches patched in lockstep for an unauthenticated takeover — then patched again for the fix's regression.
Icinga 2 maintains three live branches — 2.14.x, 2.15.x and 2.16.x — and this window shows all three moving together twice. On 13 July, a coordinated security release across every branch closed vulnerabilities that allowed an unauthenticated attacker to take over or crash the process over the network, and introduced a filter-expression permission so API users can be denied DSL filters they don't need. Two weeks earlier, the same three branches each shipped a hotfix for a Json.decode() DSL regression that leaked an internal second argument into user-facing scripts.
GitHub killed its model-hosting product and shipped stacked PRs in the same week.
Two moves dominate the current window and they point in opposite directions. GitHub Models is fully retired - playground, model catalog, inference API and bring-your-own-key all gone for every customer - while stacked pull requests entered public preview, changing the unit of code review from a single large diff to an ordered series of layers. Around them sits the familiar Copilot governance work: user-based model policy targeting for Enterprise, default model enablement so admins stop toggling each new model, and device restrictions on remotely controlled Copilot sessions. The curated model shelf keeps turning over too, with Gemini 2.5 Pro and Gemini 3 Flash pulled from every Copilot surface. Security hardening continues in parallel, with npm granular access tokens losing their 2FA bypass for sensitive operations.
Icinga 2 maintains three live branches — 2.14.x, 2.15.x and 2.16.x — and this window shows all three moving together twice. On 13 July, a coordinated security release across every branch closed vulnerabilities that allowed an unauthenticated attacker to take over or crash the process over the network, and introduced a filter-expression permission so API users can be denied DSL filters they don't need. Two weeks earlier, the same three branches each shipped a hotfix for a Json.decode() DSL regression that leaked an internal second argument into user-facing scripts.
The API surface is being narrowed and the transport layer modernized at the same time. v2.16.0 relicensed the project to GPLv3 or later, added an OTLPMetricsWriter and deprecated ElasticsearchWriter for removal in v2.18, and moved HTTP handlers to chunked streaming to cut memory held per response. The releases since have been the cost of that pace: v2.16.1 reverted the perfdata writer connection change outright, and v2.16.4 fixed an API authentication regression that v2.16.0 introduced. The new filter-expression permission fits the same direction — assume API clients should hold less power by default.
Expect continued triple-branch patch sets while 2.16 stabilizes, and further movement of perfdata users toward the OpenTelemetry writer ahead of the announced ElasticsearchWriter removal in v2.18.
Two moves dominate the current window and they point in opposite directions. GitHub Models is fully retired - playground, model catalog, inference API and bring-your-own-key all gone for every customer - while stacked pull requests entered public preview, changing the unit of code review from a single large diff to an ordered series of layers. Around them sits the familiar Copilot governance work: user-based model policy targeting for Enterprise, default model enablement so admins stop toggling each new model, and device restrictions on remotely controlled Copilot sessions. The curated model shelf keeps turning over too, with Gemini 2.5 Pro and Gemini 3 Flash pulled from every Copilot surface. Security hardening continues in parallel, with npm granular access tokens losing their 2FA bypass for sensitive operations.
GitHub is narrowing where it competes. Retiring Models concedes raw model access and inference to the model vendors, while investment concentrates on the surfaces GitHub actually owns - the repository, the review flow, and the administrative controls enterprises need before they will turn any of it on. The Copilot line has settled into a reach-then-govern rhythm: ship capability broadly, then follow with policy targeting, defaults and device scoping. Model deprecations landing on the same day as policy controls show the two halves of that position - GitHub curates the shelf and governs access to it, rather than competing on the models themselves. Stacked pull requests are the clearest sign that core platform workflow, not AI surface area, is where the differentiation is being placed.
Expect stacked pull requests to pick up API and CLI support before general availability, and the model-governance controls to consolidate into a single policy surface now that per-model manual enablement has been replaced by defaults.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with Icinga.
Ably is building an agent transport layer, shipping a new AI SDK version roughly every ten days.
One commit per release, and most of them are closing security holes in the Cloud Code and query paths.
Two maintained branches, a paired-release rhythm, and a window with no new features in it.
Three branches tagged on one day, with the actual release notes published somewhere else
Two supported branches, every release a bot-driven cherry-pick — authentik is in pure maintenance here
MISP extends instance-to-instance sync to collections while a security-hardening program runs underneath
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with GitHub.
Workato now sells the agent that builds the integrations, not just the builder.
agentOS is becoming infrastructure other agent platforms build on, not a Rivet feature
SvelteKit 3 steps into preview, and its config pivot is already shipping in the stable line.
Auth0 is building identity for agents before the rest of the category admits it needs one.
Kubernetes is pruning a decade of accumulated options while Headlamp becomes the official UI
Appwrite made its config programmable, then handed the keys to AI agents over OAuth
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. GitHub is currently shipping more aggressively (velocity 10.0 vs 5.0), with 2 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. GitHub is currently shipping more aggressively (velocity 10.0 vs 5.0), with 2 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Icinga alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Icinga alternatives" section above for the current picks, or visit /alternatives/icinga for the full list with editorial commentary on each.
Top GitHub alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "GitHub alternatives" section above for the current picks, or visit /alternatives/github for the full list with editorial commentary on each.