BookStack vs Rocket.Chat
Side-by-side trajectory, velocity, and editorial themes.
Security-first wiki on a steady cadence; v26.05 lands the year's biggest feature batch
BookStack is a mature self-hosted wiki shipping on a near-monthly cadence dominated by security releases. The recent arc pairs a substantial v26.05 feature drop with a steady stream of patch releases hardening URL filtering, attachments, MFA, and permission checks. The project's priority is clearly locking down untrusted-editor and public-instance scenarios while keeping the feature surface moving.
The pattern is a feature-anchor release (v26.03, v26.05) followed by a run of point releases that are almost entirely security and dependency hardening. Feature work is trending toward finer-grained permissions (separate revision-view control), a broader API (tag browsing), and export/editor polish. Expect the same rhythm to continue: one meaty minor, then hardening.
The next release is likely another security/dependency point release (v26.05.3 or similar) continuing the attachment/URL-filtering hardening, with the following feature minor extending the API and permission model.
Rocket.Chat's 8.6 RC line adds self-hostable translation and a unified presence engine
This feed tracks Rocket.Chat GitHub release-candidate tags, and the top of the window is dominated by empty 8.6.0-rc.x and 8.5.0-rc.x 'Bump meteor version' cuts with the real content concentrated in the 8.6.0-rc.0 minor release. Note: this appears to be a duplicate product row of the other Rocket.Chat entry in the catalog (same RocketChat/Rocket.Chat repo, same releases, different slug/UUID); it is being classified independently off its own entries. Because these are RCs, capabilities are staged into a pre-release train rather than GA.
The 8.6 cycle leans into self-hosted and privacy-controlled deployments: LibreTranslate for fully on-premise message auto-translation, Virtru as an external ABAC attribute store, and a unified presence engine with priority-based claims. In parallel there is a broad, deliberate migration of legacy DDP methods to REST endpoints (settings, spotlight, im.blockUser, e2e key requests, rooms.join), signaling an API-surface modernization ahead of a 9.0.0 removal.
The rc.x cadence points to an 8.6.0 GA cut once the release candidates settle. Expect the DDP-to-REST migration to continue toward the flagged 9.0.0 removal.
See more alternatives to BookStack →
See more alternatives to Rocket.Chat →