SiYuan
Near-daily alphas grinding toward parity between desktop and every mobile OS
A side-by-side editorial comparison of SOGo and GitHub — release velocity, themes, recent moves, and the top alternatives to consider.
SOGo's 5.12 line has become a CVE conveyor belt while the team's attention sits on SOGo 6.
Six releases in three months, and the majority exist to fix vulnerabilities: XSS via crafted mail, SQL injection, JavaScript injection through hint and theme query parameters, impersonation when OpenID is paired with a non-matching user source, and two CVEs affecting PostgreSQL user sources. Releases 5.12.6 and 5.12.9 exist purely to undo regressions the security fixes introduced.
GitHub killed its model-hosting product and shipped stacked PRs in the same week.
Two moves dominate the current window and they point in opposite directions. GitHub Models is fully retired - playground, model catalog, inference API and bring-your-own-key all gone for every customer - while stacked pull requests entered public preview, changing the unit of code review from a single large diff to an ordered series of layers. Around them sits the familiar Copilot governance work: user-based model policy targeting for Enterprise, default model enablement so admins stop toggling each new model, and device restrictions on remotely controlled Copilot sessions. The curated model shelf keeps turning over too, with Gemini 2.5 Pro and Gemini 3 Flash pulled from every Copilot surface. Security hardening continues in parallel, with npm granular access tokens losing their 2FA bypass for sensitive operations.
Six releases in three months, and the majority exist to fix vulnerabilities: XSS via crafted mail, SQL injection, JavaScript injection through hint and theme query parameters, impersonation when OpenID is paired with a non-matching user source, and two CVEs affecting PostgreSQL user sources. Releases 5.12.6 and 5.12.9 exist purely to undo regressions the security fixes introduced.
Alinto declared a feature freeze on 5.12 to concentrate on SOGo 6, and the changelog reflects it — the one new capability in the window, a REST API in 5.12.2, was explicitly a pre-committed sponsored deliverable the team felt obliged to honour. What is left is a hardening cycle on a large groupware surface, with each fix carrying real regression risk into webmail and calendar.
Expect the 5.12.x line to keep producing security releases with regression follow-ups, and no new functionality until SOGo 6 surfaces.
Two moves dominate the current window and they point in opposite directions. GitHub Models is fully retired - playground, model catalog, inference API and bring-your-own-key all gone for every customer - while stacked pull requests entered public preview, changing the unit of code review from a single large diff to an ordered series of layers. Around them sits the familiar Copilot governance work: user-based model policy targeting for Enterprise, default model enablement so admins stop toggling each new model, and device restrictions on remotely controlled Copilot sessions. The curated model shelf keeps turning over too, with Gemini 2.5 Pro and Gemini 3 Flash pulled from every Copilot surface. Security hardening continues in parallel, with npm granular access tokens losing their 2FA bypass for sensitive operations.
GitHub is narrowing where it competes. Retiring Models concedes raw model access and inference to the model vendors, while investment concentrates on the surfaces GitHub actually owns - the repository, the review flow, and the administrative controls enterprises need before they will turn any of it on. The Copilot line has settled into a reach-then-govern rhythm: ship capability broadly, then follow with policy targeting, defaults and device scoping. Model deprecations landing on the same day as policy controls show the two halves of that position - GitHub curates the shelf and governs access to it, rather than competing on the models themselves. Stacked pull requests are the clearest sign that core platform workflow, not AI surface area, is where the differentiation is being placed.
Expect stacked pull requests to pick up API and CLI support before general availability, and the model-governance controls to consolidate into a single policy surface now that per-model manual enablement has been replaced by defaults.
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with SOGo.
Near-daily alphas grinding toward parity between desktop and every mobile OS
Jellyfin drops the 10. prefix and puts 12.0 through a three-candidate preview.
PhotoPrism swapped in an ONNX vision pipeline, then opened the library to 360° media at 16K.
Immich is four release candidates into v3 with every feature note published somewhere else.
Two branches, one deadline: 23.1 security coverage ends August 15th and 26.x is the only exit.
File Browser is shutting down — the repo archives on 2026-09-01 and no security fixes follow.
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with GitHub.
Two release trains running at once: 1.12.x on maintenance, v3 rebuilding the theme layer
Workato now sells the agent that builds the integrations, not just the builder.
agentOS is becoming infrastructure other agent platforms build on, not a Rivet feature
SvelteKit 3 steps into preview, and its config pivot is already shipping in the stable line.
Auth0 is building identity for agents before the rest of the category admits it needs one.
Kubernetes is pruning a decade of accumulated options while Headlamp becomes the official UI
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. GitHub is currently shipping more aggressively (velocity 10.0 vs 0.0), with 2 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. GitHub is currently shipping more aggressively (velocity 10.0 vs 0.0), with 2 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.
Top SOGo alternatives in Collab are ranked by recent ship velocity. Browse the "SOGo alternatives" section above for the current picks, or visit /alternatives/sogo for the full list with editorial commentary on each.
Top GitHub alternatives in Collab are ranked by recent ship velocity. Browse the "GitHub alternatives" section above for the current picks, or visit /alternatives/github for the full list with editorial commentary on each.