Stories by Staff Reporter

By Staff Reporter

Security

Drupal Security Advisories Cover Information Disclosure, Access Bypass and Cross-Site Scripting

Share

× SHARE

Sites that missed the 26 August security batch still have a clear task: identify affected contrib versions and apply the available fixes. ...more

Read Full Content
Blog

Dries Buytaert Frames Open Source as a Cost-Allocation System

Share

× SHARE

A technical design that works well at one scale can become costly as an ecosystem grows. Drupal's update service shows how those costs can fall on a different group from the one that controls the underlying code. ...more

Read Full Content
Event

Drupal Events This Week: 8–14 September 2026

Share

× SHARE

The week’s Drupal calendar stays in person, with a full conference programme in Poland alongside regional community gatherings in Germany and India. ...more

Read Full Content
Blog

Omega8 Reassesses AI Agents After BOA Documentation Errors

Share

× SHARE

A complete-looking documentation run later proved unreliable when Omega8 subjected the output to deeper verification against BOA's code. That failure changed what the team demanded from its later agent workflows. ...more

Read Full Content
PHP

Symfony Reprise 1.0.0 Establishes Stable API for Vite and Rsbuild Integration

Share

× SHARE

Symfony teams evaluating Vite or Rsbuild no longer have to treat Reprise as an experimental integration. Its 1.0 public API now carries Symfony's backwards-compatibility promise. ...more

Read Full Content
Discover Drupal

Markdownify 1.2.0 Adds YAML Frontmatter to Drupal Markdown Output

Share

× SHARE

Markdown output can now carry more of the context normally available around a Drupal page. Markdownify 1.2.0 adds structured metadata for consumers ranging from developers to AI agents. ...more

Read Full Content
Security

LiteLLM Supply-Chain Findings Highlight External Dependencies in Drupal AI Workflows

Share

× SHARE

Drupal AI integrations can depend on services whose runtimes, build pipelines and credentials sit outside the site's Composer-managed code. The LiteLLM incident shows how that external trust boundary can become part of the security picture. ...more

Read Full Content
Blog

Lucas Cunico Kalinowski Flags Silent Drupal Contracts in AI-Assisted Code

Share

× SHARE

A permission check can pass a unit test while still leaving Drupal without the cache context needed to vary access correctly. Kalinowski argues that these silent omissions deserve particular attention when reviewing AI-assisted code. ...more

Read Full Content
Event

DrupalAsia Connect India 2027 Opens Call for Speakers

Share

× SHARE

Practitioners with original lessons from Drupal projects, design, business, or community work can submit them for consideration across seven programme tracks. ...more

Read Full Content
Discover Drupal

FlowDrop 2.4.0 Adds Port Shapes to Distinguish Workflow Data

Share

× SHARE

A valid technical type does not tell a workflow author whether two values represent the same thing. Port Shapes add that distinction at the point where nodes are wired together. ...more

Read Full Content