Stories by Staff Reporter

A recent analysis by Dan Frost argues that effective security response depends on preparation rather than patching speed alone. The article examines how testing workflows, deployment governance, rollback planning, and infrastructure awareness help organisations manage security updates without introducing new operational risks. It positions patch management as one component of a broader resilience strategy focused on stability, risk assessment, and recovery readiness. ...more

Composer 2.10 has been released with native malware filtering enabled by default for Packagist users, expanding the project's software supply-chain security capabilities. The update also introduces a unified dependency policy framework, new package-management controls, and workflow improvements aimed at helping developers manage software risk more effectively. ...more

CKEditor will host a webinar on 25 June 2026 examining how AI features behave across multi-root and multi-editor interfaces. The session will address a common implementation challenge in CMSs, forms, portals, and document builders: maintaining context and predictable AI behaviour when content is distributed across multiple editable regions. ...more

A blog post by Amber Matz examines how artificial intelligence is reshaping trust, expertise, and stewardship in open source software projects. Drawing on a conversation with DDEV maintainer Randy Fay, the article argues that hesitation around AI-assisted contributions often stems less from code quality than from questions about long-term responsibility, project knowledge, and the human relationships that sustain open source communities. ...more

A recent Specbee guide argues that accessibility is not solely a developer responsibility but also an editorial discipline that shapes how people experience content. The article outlines practical publishing practices for Drupal content editors, including heading structures, alt text, descriptive links, and accessible tables. It also highlights Drupal modules that help editors identify and correct accessibility issues before content is published. ...more

Aaron Wolfe has outlined a Drupal implementation designed to simplify large legal intake workflows by breaking complex forms into reusable Webform datasets. The approach uses custom packet entities, shared submission data, and workflow tracking to reduce repeated data entry while improving usability and administrative performance. Reusable datasets, completion-state management, and downstream document generation are central components of the architecture. ...more

Drupal developer Nino Marrazzo has released drupal_rag, an alpha-stage Drupal 11 module that enables Retrieval-Augmented Generation workflows using Ollama and PostgreSQL with pgvector. The module converts Drupal content into vector embeddings for semantic retrieval and AI-assisted querying while keeping embedding generation, storage, and retrieval under infrastructure controlled by the site owner. Support for Drupal entities, document extraction, and local AI processing positions the project as an early RAG implementation for Drupal. ...more

Joost de Valk argues that “Open Source First” procurement mandates alone cannot deliver digital sovereignty if the infrastructure and governance systems underpinning open-source ecosystems remain concentrated in a small number of organisations. Drawing on experiences from the WordPress ecosystem and the FAIR project, the essay calls for public investment in neutral, federated infrastructure alongside procurement reforms. The article also highlights similar arguments made by Drupal founder Dries Buytaert regarding long-term funding for open-source commons infrastructure. ...more

Planning has begun for the inaugural DrupalCan Summit, with organisers launching a survey to gather community feedback on potential host cities and ticket pricing. The initiative aims to involve Drupal community members in key decisions ahead of the 2027 event. ...more