WorkOS
WorkOS is making enterprise-auth infra programmable by agents and embeddable in the browser.
A side-by-side editorial comparison of Woodpecker CI and Windmill — release velocity, themes, recent moves, and the top alternatives to consider.
Woodpecker CI hardens agent security and forge handling through its 3.14 release candidates
Woodpecker is iterating through 3.14.0 release candidates focused on security and agent/forge robustness: sanitizing agent-introduced state changes and log streaming, blocking registration as arbitrary agents, restricting log access, and cleaning up the Forge interface. Dependency security bumps (axios, otel, follow-redirects) and a lodash removal run throughout.
Windmill is building a lakehouse into its workflow engine, DuckLake by DuckLake
Windmill's recent releases cluster tightly around DuckLake, turning the workflow platform into a data-engineering environment. In a single stretch it added fork-scoped data environments, scheduled lake maintenance (snapshot expiry, compaction, orphan cleanup), asset freshness badges with a watchdog, partition-range backfill, and schema contracts that validate consumer scripts against producer schemas. Alongside the data work, git-to-Windmill sync now runs fully in-app and AI agent steps gained model-adaptive reasoning effort.
Woodpecker is iterating through 3.14.0 release candidates focused on security and agent/forge robustness: sanitizing agent-introduced state changes and log streaming, blocking registration as arbitrary agents, restricting log access, and cleaning up the Forge interface. Dependency security bumps (axios, otel, follow-redirects) and a lodash removal run throughout.
The 3.14 line reads as a security-and-internals hardening cycle, tightening the agent trust boundary and forge integration rather than pushing features. The earlier 3.11 line shows the more typical mix of per-repo config features and fixes.
Expect 3.14.0 to converge to a stable release after the RC series, continuing the agent-security and forge-handling focus.
Windmill's recent releases cluster tightly around DuckLake, turning the workflow platform into a data-engineering environment. In a single stretch it added fork-scoped data environments, scheduled lake maintenance (snapshot expiry, compaction, orphan cleanup), asset freshness badges with a watchdog, partition-range backfill, and schema contracts that validate consumer scripts against producer schemas. Alongside the data work, git-to-Windmill sync now runs fully in-app and AI agent steps gained model-adaptive reasoning effort.
The direction is clear: Windmill wants pipelines, not just scripts, to be first-class — with the lineage, freshness, isolation, and maintenance guarantees a real lakehouse expects. Fork environments and schema contracts point at safe, branchable data development; scheduled maintenance and freshness watchdogs point at production data operations. The AI-step and git-sync work keeps the developer-workflow core current while DuckLake becomes the platform's center of gravity.
Expect the DuckLake pieces to consolidate into an observability-style surface — a single view of freshness, lineage, and materialization health across a workspace — turning today's per-asset badges into a data-ops dashboard.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Woodpecker CI or Windmill.
WorkOS is making enterprise-auth infra programmable by agents and embeddable in the browser.
Merge grinds weekly on the reliability and coverage of its unified API integrations.
Render is turning its PaaS into infrastructure your coding agent can operate directly.
Retool keeps layering enterprise governance and app-workflow wiring onto the new builder.
Semgrep grinds its analysis engine wider — more languages, more taint precision, less noise.
Depot is expanding from build acceleration into a full dev-infra platform — its own compute metal and now its own git hosting.
See all Woodpecker CI alternatives → · See all Windmill alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Windmill is currently shipping more aggressively (velocity 6.3 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Windmill is currently shipping more aggressively (velocity 6.3 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Woodpecker CI alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Woodpecker CI alternatives" section above for the current picks, or visit /alternatives/woodpecker-ci for the full list with editorial commentary on each.
Top Windmill alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Windmill alternatives" section above for the current picks, or visit /alternatives/windmill for the full list with editorial commentary on each.