authentik
authentik 2026.8 ships: Actors, domain-joined Agents, and a push past browser-mediated SSO
A side-by-side editorial comparison of Casdoor and ToolJet — release velocity, themes, recent moves, and the top alternatives to consider.
Casdoor is spending its release cadence moving auth checks from the client to the server
Casdoor is in a tight patch cadence: six tagged releases inside a week, most carrying a single commit. The substance is concentrated in identity enforcement rather than features - password rotation and MFA setup are now enforced server-side, admin updates to a user respect the column whitelist, sessions and tokens are revoked when a user is forbidden, and phone numbers are normalised before they are stored. The remainder is release plumbing and a PostgreSQL query fix.
ToolJet's LTS and beta trains both narrow to component polish and CVE patching
ToolJet runs two parallel release trains — a 3.20 LTS line and a 3.21 beta line — and this window is dominated by small fixes on both. The most substantive tag is v3.20.212-lts, which brings dynamic-height support to several widgets, a dynamic number format for Currency Input, mobile camera flip, and AI build notifications. Everything newer than it is single-issue: a table header wrap fix, a gRPC discovery freeze, a stale row-click value.
Casdoor is in a tight patch cadence: six tagged releases inside a week, most carrying a single commit. The substance is concentrated in identity enforcement rather than features - password rotation and MFA setup are now enforced server-side, admin updates to a user respect the column whitelist, sessions and tokens are revoked when a user is forbidden, and phone numbers are normalised before they are stored. The remainder is release plumbing and a PostgreSQL query fix.
Read together, these commits describe one job: closing the gap between what the console enforces and what the backend enforces. Several of them move a check that previously lived in the UI into the server, which is the work of a project being deployed into environments that audit it. New authentication providers and integrations have thinned relative to this hardening pass.
The next releases most likely continue the same sweep - remaining endpoints where an admin or user request is trusted more than the server verifies - rather than adding a new identity provider.
ToolJet runs two parallel release trains — a 3.20 LTS line and a 3.21 beta line — and this window is dominated by small fixes on both. The most substantive tag is v3.20.212-lts, which brings dynamic-height support to several widgets, a dynamic number format for Currency Input, mobile camera flip, and AI build notifications. Everything newer than it is single-issue: a table header wrap fix, a gRPC discovery freeze, a stale row-click value.
The component library is where the work is going — dynamic heights, sizing modes, and overflow handling have appeared across four of the last six releases, which reads as a systematic pass over layout behaviour rather than isolated requests. The AI surface is growing quietly at the edges: build notifications here, an AI credits portal domain change, hardened guards on the AI onboarding API. Cherry-picks in both directions suggest the LTS and beta lines are being kept deliberately close.
Expect the dynamic-height and sizing pass to continue across remaining widgets, and the beta line's AI datasource integrations to graduate into the LTS train.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Casdoor or ToolJet.
authentik 2026.8 ships: Actors, domain-joined Agents, and a push past browser-mediated SSO
Rancher's public feed is a build-tag stream: three branches bumped the same Go image on one afternoon
Buildkite keeps converting hand-rolled agent workarounds into first-class CI primitives.
Cursor's agents stop waiting to be asked - they subscribe, and they hold a goal until it's done.
Nexus does the diagnosis; the agent is now reaching into the status page too.
Warp turned its quarter of software-factory essays into infrastructure you can buy.
See all Casdoor alternatives → · See all ToolJet alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Casdoor and ToolJet are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Casdoor and ToolJet are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Casdoor alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Casdoor alternatives" section above for the current picks, or visit /alternatives/casdoor for the full list with editorial commentary on each.
Top ToolJet alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "ToolJet alternatives" section above for the current picks, or visit /alternatives/tooljet for the full list with editorial commentary on each.