Thanos
Thanos is rebuilding Receive around multi-tenancy, and shipping it through a stuttering RC train.
A side-by-side editorial comparison of Nomad and webpack — release velocity, themes, recent moves, and the top alternatives to consider.
Nomad's July release closed two Docker CVEs that let tasks escape their own driver configuration.
HashiCorp is cutting 1.11.x and 1.10.x Enterprise releases in matched pairs, seconds apart, with identical content. July's pair carried two Docker CVEs — one where allowed_modes or allow_privileged was not enforced before setting host namespace modes, one where a symlink let a task bypass volumes.enabled=false — plus a dynamic host volume bug that let a namespace-scoped delete permission remove another namespace's claims.
webpack is absorbing its own loader ecosystem — TypeScript, CSS and HTML now build natively.
webpack 5.109 flips experiments.typescript, experiments.css, experiments.html and experiments.asyncWebAssembly to "auto", so a project on Node 22.6+ compiles TypeScript, CSS and HTML with no loader registered at all. The same release adds built-in build progress via infrastructureLogging.progress, resource hints (preload/prefetch/modulepreload/preconnect) on by default for ESM output, and CommonJS module concatenation. Underneath, the 5.108 line is a sustained parser-performance campaign — struct-of-arrays HTML ASTs, dropped unused CSS value tokens, lower peak memory.
HashiCorp is cutting 1.11.x and 1.10.x Enterprise releases in matched pairs, seconds apart, with identical content. July's pair carried two Docker CVEs — one where allowed_modes or allow_privileged was not enforced before setting host namespace modes, one where a symlink let a task bypass volumes.enabled=false — plus a dynamic host volume bug that let a namespace-scoped delete permission remove another namespace's claims.
All three July fixes are the same failure: a boundary that was declared in configuration but not enforced at the point of use. Alongside that, the improvements are about degraded-mode operation — falling back to the client agent's Consul token when workload identity is unavailable, Vault token renewal retries, an optional Init hook for task driver plugins. Nomad is hardening the seams between the scheduler and the systems it delegates to.
Expect the paired Enterprise releases to continue at monthly cadence, with further fixes concentrated in the Docker driver and dynamic host volumes, where the isolation boundaries are newest.
webpack 5.109 flips experiments.typescript, experiments.css, experiments.html and experiments.asyncWebAssembly to "auto", so a project on Node 22.6+ compiles TypeScript, CSS and HTML with no loader registered at all. The same release adds built-in build progress via infrastructureLogging.progress, resource hints (preload/prefetch/modulepreload/preconnect) on by default for ESM output, and CommonJS module concatenation. Underneath, the 5.108 line is a sustained parser-performance campaign — struct-of-arrays HTML ASTs, dropped unused CSS value tokens, lower peak memory.
The direction is unmistakable: webpack is deleting the reason its configs became notorious. Every capability that used to require ts-loader, css-loader or html-webpack-plugin is being pulled into core and defaulted on, which is the only credible answer to zero-config rivals that never asked users to assemble a loader chain. Alongside that, a bun target and repeated Bun/Deno compatibility guards show webpack no longer assumes Node is the only runtime it must run under.
Expect the "auto" experiments to graduate out of the experiments namespace into stable top-level options, and expect the loader-shaped surface area to keep shrinking as more of the pipeline lands in core.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Nomad or webpack.
Thanos is rebuilding Receive around multi-tenancy, and shipping it through a stuttering RC train.
CAS 8.0 is six release candidates deep with notes that describe nothing
LibreELEC's changelog stops dead at the 12.0 release in May 2024
Node-RED 5.0 rebuilt the editor, and the patches since are settling it in
Jaeger folds its MCP server into the query service and drops Elasticsearch 6
Biome's patch train is really a type-aware linting project in disguise
See all Nomad alternatives → · See all webpack alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. webpack is currently shipping more aggressively (velocity 6.3 vs 5.0), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. webpack is currently shipping more aggressively (velocity 6.3 vs 5.0), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Nomad alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Nomad alternatives" section above for the current picks, or visit /alternatives/nomad for the full list with editorial commentary on each.
Top webpack alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "webpack alternatives" section above for the current picks, or visit /alternatives/webpack for the full list with editorial commentary on each.