SiYuan
Near-daily alphas grinding toward parity between desktop and every mobile OS
A side-by-side editorial comparison of SOGo and Slack — release velocity, themes, recent moves, and the top alternatives to consider.
SOGo's 5.12 line has become a CVE conveyor belt while the team's attention sits on SOGo 6.
Six releases in three months, and the majority exist to fix vulnerabilities: XSS via crafted mail, SQL injection, JavaScript injection through hint and theme query parameters, impersonation when OpenID is paired with a non-matching user source, and two CVEs affecting PostgreSQL user sources. Releases 5.12.6 and 5.12.9 exist purely to undo regressions the security fixes introduced.
Slack is shipping its developer platform to coding agents, not only to developers.
The developer changelog runs two tracks at once. One is a routine modernization wave across the client libraries: Bolt for JS reached v5, the Node SDK packages took coordinated major versions, and the CLI shipped twice in ten days. The other is newer and smaller in volume but larger in intent, aimed at AI tooling rather than at people writing apps by hand.
Six releases in three months, and the majority exist to fix vulnerabilities: XSS via crafted mail, SQL injection, JavaScript injection through hint and theme query parameters, impersonation when OpenID is paired with a non-matching user source, and two CVEs affecting PostgreSQL user sources. Releases 5.12.6 and 5.12.9 exist purely to undo regressions the security fixes introduced.
Alinto declared a feature freeze on 5.12 to concentrate on SOGo 6, and the changelog reflects it — the one new capability in the window, a REST API in 5.12.2, was explicitly a pre-committed sponsored deliverable the team felt obliged to honour. What is left is a hardening cycle on a large groupware surface, with each fix carrying real regression risk into webmail and calendar.
Expect the 5.12.x line to keep producing security releases with regression follow-ups, and no new functionality until SOGo 6 surfaces.
The developer changelog runs two tracks at once. One is a routine modernization wave across the client libraries: Bolt for JS reached v5, the Node SDK packages took coordinated major versions, and the CLI shipped twice in ten days. The other is newer and smaller in volume but larger in intent, aimed at AI tooling rather than at people writing apps by hand.
The MCP and Skills plugin is the clearest signal of where this is going: Slack is packaging its own platform knowledge for consumption by coding agents, and naming Claude Code and Cursor as the first targets rather than shipping a generic endpoint. Meanwhile the SDK work is clearing debt that would get in the way, dropping axios for native Fetch, removing the deprecated Workflow Steps from Apps feature, and raising the Node floor to 20. Modern runtime, fewer legacy surfaces, then agent access on top.
The plugin ships for two named agent clients today, so the obvious next step is broadening that list or folding the skills into the CLI itself. The entries do not indicate whether Slack intends the MCP server to reach runtime app behaviour or stay a build-time developer aid.
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with SOGo.
Near-daily alphas grinding toward parity between desktop and every mobile OS
Jellyfin drops the 10. prefix and puts 12.0 through a three-candidate preview.
PhotoPrism swapped in an ONNX vision pipeline, then opened the library to 360° media at 16K.
Immich is four release candidates into v3 with every feature note published somewhere else.
Two branches, one deadline: 23.1 security coverage ends August 15th and 26.x is the only exit.
File Browser is shutting down — the repo archives on 2026-09-01 and no security fixes follow.
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with Slack.
A one-binary mail server learning to behave like production infrastructure.
Friendica keeps betting on being the fediverse node that speaks everyone else's protocols.
The original federated social network now ships roughly once every two years.
Six releases, and every one of them is a security update in some form.
Renamed Element Classic, this client now ships one small fix every few months
Twilio is selling trust: branded calls, scoped keys, and stricter sender vetting.
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Slack is currently shipping more aggressively (velocity 6.3 vs 0.0), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Slack is currently shipping more aggressively (velocity 6.3 vs 0.0), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.
Top SOGo alternatives in Collab are ranked by recent ship velocity. Browse the "SOGo alternatives" section above for the current picks, or visit /alternatives/sogo for the full list with editorial commentary on each.
Top Slack alternatives in Collab are ranked by recent ship velocity. Browse the "Slack alternatives" section above for the current picks, or visit /alternatives/slack for the full list with editorial commentary on each.