Nautobot
Nautobot 3.3 alpha adds API rate limits while 3.2.9 stops cross-user token reads.
A side-by-side editorial comparison of OpenMQTTGateway and Vault — release velocity, themes, recent moves, and the top alternatives to consider.
OpenMQTTGateway returns after 22 months with a security-first 1.9.0.
OpenMQTTGateway shipped v1.9.0 on November 7, its first release since January 2025. It moves to the Arduino ESP32 core 3.x, ships Theengs Decoder 2.5.0 with a fix for a BLE advertisement parsing flaw affecting every earlier release, and hardens buffer handling across MQTT, HTTP, BLE and RF input. Upgrade notes warn that some Home Assistant unique_ids change and that encrypted BLE devices are skipped until a key is set.
Vault under IBM lands 2.0.0, with FIPS 140-3 and HSM enterprise builds inside two weeks.
Vault crossed 2.0.0 in late March under its post-HashiCorp / IBM stewardship — the artifact pages now carry IBM's International Program License Agreement language alongside the existing MPL 2.0 / BSL terms. Enterprise variants followed within days: 2.0.0 enterprise FIPS 140-3 and HSM-flavored builds published April 1 and April 8, plus an sdk/v0.25.1 backport addressing a Go CVE. The recent shipping is release-engineering-heavy, not feature-heavy.
OpenMQTTGateway shipped v1.9.0 on November 7, its first release since January 2025. It moves to the Arduino ESP32 core 3.x, ships Theengs Decoder 2.5.0 with a fix for a BLE advertisement parsing flaw affecting every earlier release, and hardens buffer handling across MQTT, HTTP, BLE and RF input. Upgrade notes warn that some Home Assistant unique_ids change and that encrypted BLE devices are skipped until a key is set.
Earlier releases made the gateway independent of controllers and external brokers. The return release is about safety and a modern ESP32 base rather than new features, which suggests the project is resetting its foundation before resuming feature work.
Expect the promised security advisory for the Theengs Decoder flaw and 1.9.x fixes for the Home Assistant entity changes; whether regular cadence resumes is not yet clear from the entries.
Vault crossed 2.0.0 in late March under its post-HashiCorp / IBM stewardship — the artifact pages now carry IBM's International Program License Agreement language alongside the existing MPL 2.0 / BSL terms. Enterprise variants followed within days: 2.0.0 enterprise FIPS 140-3 and HSM-flavored builds published April 1 and April 8, plus an sdk/v0.25.1 backport addressing a Go CVE. The recent shipping is release-engineering-heavy, not feature-heavy.
This is the cadence of a project completing a major-version rollout — community GA first, then RC and GA enterprise-flavor builds, then security-tracking SDK backports — rather than a roadmap pivot. The fact that FIPS 140-3 and HSM enterprise builds shipped in the same window as the 2.0 cycle is the signal worth holding onto: Vault's federal and regulated-industry posture is being kept intact under the new owner, and auth plugin version bumps suggest the wider ecosystem is staying in step.
Expect 2.x feature-bearing minor releases over the next few months, with FIPS 140-3 and HSM enterprise variants tracked alongside the community builds. GA bumps for the auth plugins to match the 2.x line are likely. Worth watching for more visible IBM branding or any Cloud-side packaging shifts that signal repositioning under the new owner.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either OpenMQTTGateway or Vault.
Nautobot 3.3 alpha adds API rate limits while 3.2.9 stops cross-user token reads.
SpinupWP now writes DNS records for you, starting with Cloudflare and Route 53.
One Node.js Brotli bug and a compromised CA bundle force ten patches across the Elastic Stack.
Parse Server 9.11.1 alphas close two beforeSave advisories, one a server crash.
GitLab sells Orbit as the evidence layer for agent pilots and AI-code rules.
Kestra's feed is design-system package releases while 2.1.0 waits past its first RC.
See all OpenMQTTGateway alternatives → · See all Vault alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. OpenMQTTGateway and Vault are shipping at a similar cadence (velocity 2.5 vs 2.5, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. OpenMQTTGateway and Vault are shipping at a similar cadence (velocity 2.5 vs 2.5, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top OpenMQTTGateway alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "OpenMQTTGateway alternatives" section above for the current picks, or visit /alternatives/openmqttgateway for the full list with editorial commentary on each.
Top Vault alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Vault alternatives" section above for the current picks, or visit /alternatives/vault for the full list with editorial commentary on each.