SiYuan
Near-daily alphas grinding toward parity between desktop and every mobile OS
A side-by-side editorial comparison of Immich and SOGo — release velocity, themes, recent moves, and the top alternatives to consider.
Immich is four release candidates into v3 with every feature note published somewhere else.
The visible release stream is a v3.0.0 RC series — rc.0 through rc.3, cut over eleven days in June — and each entry is the same template: a release-candidate disclaimer, a database and library backup warning, and instructions to move IMMICH_VERSION from v2 to v3 or the rolling v3-rc tag. The actual release notes live on a work-in-progress preview page outside the changelog.
SOGo's 5.12 line has become a CVE conveyor belt while the team's attention sits on SOGo 6.
Six releases in three months, and the majority exist to fix vulnerabilities: XSS via crafted mail, SQL injection, JavaScript injection through hint and theme query parameters, impersonation when OpenID is paired with a non-matching user source, and two CVEs affecting PostgreSQL user sources. Releases 5.12.6 and 5.12.9 exist purely to undo regressions the security fixes introduced.
The visible release stream is a v3.0.0 RC series — rc.0 through rc.3, cut over eleven days in June — and each entry is the same template: a release-candidate disclaimer, a database and library backup warning, and instructions to move IMMICH_VERSION from v2 to v3 or the rolling v3-rc tag. The actual release notes live on a work-in-progress preview page outside the changelog.
What the feed does show is a project running a disciplined pre-release: a rolling RC tag so testers do not have to chase point versions, and two-to-seven day turnarounds between candidates as bugs come in. What it does not show is a single feature, which means anyone tracking Immich through its changelog learns only that a major version is close, not what it changes.
A v3.0.0 stable release follows once the RC turnaround lengthens; the entries give no basis for predicting what it contains, because none of them describe it.
Six releases in three months, and the majority exist to fix vulnerabilities: XSS via crafted mail, SQL injection, JavaScript injection through hint and theme query parameters, impersonation when OpenID is paired with a non-matching user source, and two CVEs affecting PostgreSQL user sources. Releases 5.12.6 and 5.12.9 exist purely to undo regressions the security fixes introduced.
Alinto declared a feature freeze on 5.12 to concentrate on SOGo 6, and the changelog reflects it — the one new capability in the window, a REST API in 5.12.2, was explicitly a pre-committed sponsored deliverable the team felt obliged to honour. What is left is a hardening cycle on a large groupware surface, with each fix carrying real regression risk into webmail and calendar.
Expect the 5.12.x line to keep producing security releases with regression follow-ups, and no new functionality until SOGo 6 surfaces.
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Immich or SOGo.
Near-daily alphas grinding toward parity between desktop and every mobile OS
Jellyfin drops the 10. prefix and puts 12.0 through a three-candidate preview.
PhotoPrism swapped in an ONNX vision pipeline, then opened the library to 360° media at 16K.
Two branches, one deadline: 23.1 security coverage ends August 15th and 26.x is the only exit.
File Browser is shutting down — the repo archives on 2026-09-01 and no security fixes follow.
Paperless-ngx shipped its 3.0 rewrite, then spent a week putting out the fires.
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Immich and SOGo are shipping at a similar cadence (velocity 0.0 vs 0.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Immich and SOGo are shipping at a similar cadence (velocity 0.0 vs 0.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.
Top Immich alternatives in Collab are ranked by recent ship velocity. Browse the "Immich alternatives" section above for the current picks, or visit /alternatives/immich for the full list with editorial commentary on each.
Top SOGo alternatives in Collab are ranked by recent ship velocity. Browse the "SOGo alternatives" section above for the current picks, or visit /alternatives/sogo for the full list with editorial commentary on each.