Gitea
Gitea has switched to version 28 numbering; its feed has caught only the dev tags.
A side-by-side editorial comparison of NGINX and Traefik — release velocity, themes, recent moves, and the top alternatives to consider.
nginx patched HTTP/3 twice in a month and is trimming old platform code on mainline.
nginx runs a 1.31 mainline and a 1.30 stable line. After 1.31.5 added a native control API, a JSON module and predicate locations in September, the following releases were mostly security: 1.31.6 and 1.30.5 fixed an HTTP/3 buffer overflow (CVE-2026-90439), then 1.31.7 and 1.30.6 fixed five more CVEs including HTTP/3 request body injection. 1.31.8 on October 21 removed the Win32 iocp event module and fixed further HTTP/3 issues.
Traefik v3.8 rc.1 is a Gateway API release; v2.11 keeps getting security patches.
Traefik runs two lines. v3.8.0-rc.1 (2026-10-30) is mostly Kubernetes Gateway API work: ListenerSet support, client certificate validation, backend TLS policy for gRPC and TLSRoute, and TCPRoute consumed through its v1 version with Gateway API v1.5.x support dropped. It also adds per-router responding timeouts and an ACME option to reuse private keys. The v2.11 line keeps weekly-to-biweekly patches: 2.11.61 adds an entry-point limit on request header values and fixes a backend connection leak for NTLM and Kerberos.
nginx runs a 1.31 mainline and a 1.30 stable line. After 1.31.5 added a native control API, a JSON module and predicate locations in September, the following releases were mostly security: 1.31.6 and 1.30.5 fixed an HTTP/3 buffer overflow (CVE-2026-90439), then 1.31.7 and 1.30.6 fixed five more CVEs including HTTP/3 request body injection. 1.31.8 on October 21 removed the Win32 iocp event module and fixed further HTTP/3 issues.
HTTP/3 has needed fixes in each of the last three mainline releases, two of them CVEs. Mainline is adding features and removing legacy code at the same time, while stable gets the CVE backports.
More HTTP/3 fixes on both lines are likely; on mainline, follow-up work on the control API and JSON module is the next feature thread to watch.
Traefik runs two lines. v3.8.0-rc.1 (2026-10-30) is mostly Kubernetes Gateway API work: ListenerSet support, client certificate validation, backend TLS policy for gRPC and TLSRoute, and TCPRoute consumed through its v1 version with Gateway API v1.5.x support dropped. It also adds per-router responding timeouts and an ACME option to reuse private keys. The v2.11 line keeps weekly-to-biweekly patches: 2.11.61 adds an entry-point limit on request header values and fixes a backend connection leak for NTLM and Kerberos.
Feature work sits entirely on v3, and Gateway API is its center: the release tracks upstream versions and drops older ones, so Traefik is betting on Gateway API as its main Kubernetes interface. v2.11 is a security branch; five advisories in 2.11.58 and a CVE in 2.11.60 show it still gets real fixes.
Further 3.8 release candidates and then a final 3.8.0 are the likely next steps, with v2.11 patches continuing in parallel.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either NGINX or Traefik.
Gitea has switched to version 28 numbering; its feed has caught only the dev tags.
Skipper now serves zone-filtered routes only when its own ingress is balanced across zones.
rsyslog keeps adding cloud outputs, with Kinesis in October after CloudWatch in August.
KubeVirt 1.10 reaches beta with 1,345 changes from 94 contributors.
ToolJet's beta adds data source folders, database environments and git sync for workflows.
Apereo CAS 8.1.0 reaches a third release candidate with 8.0.0 still not final.
See all NGINX alternatives → · See all Traefik alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
Both compete on the same themes — reverse-proxy, security — within Infra & APIs. NGINX and Traefik are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. NGINX and Traefik are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top NGINX alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "NGINX alternatives" section above for the current picks, or visit /alternatives/nginx for the full list with editorial commentary on each.
Top Traefik alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Traefik alternatives" section above for the current picks, or visit /alternatives/traefik for the full list with editorial commentary on each.