Pimcore
Nearly every release in this window carries security hardening — Pimcore is working through an injection sweep.
A side-by-side editorial comparison of n8n and Sulu — release velocity, themes, recent moves, and the top alternatives to consider.
n8n's daily patch train hides the real work: hardening its MCP server into a proper auth resource.
n8n ships patches almost daily across three live branches (2.31.x, 2.32.x, 2.33.x), so the changelog reads mostly as noise. Underneath it, nearly every substantive commit lands in one of two places: the AI agent builder and the MCP server. The 2.33.0 minor is the clearest example, a very large bundle with no features section at all, only fixes.
Sulu ships 2.6 and 3.0 in lockstep, and the 3.0 line still reads like a maintenance branch.
Sulu is a Symfony-based CMS for developer-built sites, and its release process is a synchronised pair: every 3.0.x patch ships within a minute of the matching 2.6.x patch, carrying largely the same pull requests. Six releases in five months — 3.0.8/2.6.25, 3.0.7/2.6.24, 3.0.6/2.6.23 — are almost entirely fixes, editor upgrades and framework compatibility work. A security advisory was patched across both branches in March.
n8n ships patches almost daily across three live branches (2.31.x, 2.32.x, 2.33.x), so the changelog reads mostly as noise. Underneath it, nearly every substantive commit lands in one of two places: the AI agent builder and the MCP server. The 2.33.0 minor is the clearest example, a very large bundle with no features section at all, only fixes.
The MCP work has moved past merely exposing a server toward protocol compliance: OAuth protected-resource metadata served at the bare well-known path, the RFC 9207 iss parameter on authorization error redirects, PKCE negotiation and token expiry handling. Agent-side changes point the same direction, with secrets scrubbed before they reach agent memory, MCP connection failures made non-blocking for agents, and workflow deletion refused while an unpublish is still running. This is the unglamorous half of making agents safe to run inside someone else's instance.
With the auth and audit plumbing largely landed, the next visible move is agent capability that depends on it, such as delegated MCP access, rather than another round of protocol fixes.
Sulu is a Symfony-based CMS for developer-built sites, and its release process is a synchronised pair: every 3.0.x patch ships within a minute of the matching 2.6.x patch, carrying largely the same pull requests. Six releases in five months — 3.0.8/2.6.25, 3.0.7/2.6.24, 3.0.6/2.6.23 — are almost entirely fixes, editor upgrades and framework compatibility work. A security advisory was patched across both branches in March.
Three threads run through the pairs. Editor upkeep is constant, with CKEditor moving to 47 LTS and then 48 and the fallout — table widgets, webpack font builds — fixed release by release. Framework compatibility is the second: Request->get calls replaced for Symfony 8, PHPUnit 13 and PHPStan kept green on lowest dependencies. The third and most interesting is data-model cleanup on the 3.0 side, where tags migrated from names to IDs behind a newly added DoctrineMigrationsBundle, with smart-content filters reworked to match. What is not visible is any capability that exists on 3.0 and not on 2.6 — a major version that is not yet behaving like one.
Expect the paired-release rhythm to continue with more Symfony 8 preparation and CKEditor 48 fallout. The open question is when 3.0 starts receiving work that is not upmerged from 2.6; until then the major version number is not buying users anything.
Other Mkt Auto products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either n8n or Sulu.
Nearly every release in this window carries security hardening — Pimcore is working through an injection sweep.
The v4 canary line is being renamed Build Awesome while 3.x is kept on pure maintenance.
Steady feature-then-patch cadence, with security reports rising because AI tools are finding them
Measurement gets granular while the API quietly opens ClickFunnels up to outside agents
OneSignal is arguing a new category into existence before showing the product behind it.
Kit rebuilt its landing page editor, then handed the controls to an AI agent.
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. n8n and Sulu are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. n8n and Sulu are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Mkt Auto products to evaluate alongside.
Top n8n alternatives in Mkt Auto are ranked by recent ship velocity. Browse the "n8n alternatives" section above for the current picks, or visit /alternatives/n8n for the full list with editorial commentary on each.
Top Sulu alternatives in Mkt Auto are ranked by recent ship velocity. Browse the "Sulu alternatives" section above for the current picks, or visit /alternatives/sulu for the full list with editorial commentary on each.