Featured

An interactive pricing calculator demonstrates how front-end developers can build a component locally and give Drupal editors control over its settings. ...more

Organizations staying on a previous Drupal minor release will have roughly two months after its successor arrives before security coverage ends. The tighter window comes as maintainers confront rising vulnerability reports and shrinking release-management funding. ...more

OAuth permissions, payment webhooks and text filters may need manual attention after administrators install security updates. Separate Symfony fixes also warrant checking the dependencies and code paths used by each Drupal site. ...more

The Paris summit will examine how organisations can introduce AI into established Drupal systems while retaining control over sensitive information, editorial changes and human decisions. ...more

Replacing a proprietary CMS does not automatically give governments control over their digital services. Five Government Summit speakers examine the responsibilities that come with adopting open source. ...more

Europe's open-source cooperation plans now have defined implementation targets for 2027, including cross-border software deployment, maintainer support and a review of shared funding arrangements. ...more

Universities can replace a CMS or reorganise their websites without knowing how difficult it would be to change providers again. The missing evidence lies in contracts, documentation and the cost of transferring technical responsibility. ...more

Applications sharing a message queue can encounter errors when they cannot interpret Symfony-specific metadata. The upcoming release addresses that problem while introducing new requirements for exchanging message types and identifiers. ...more

As Drupal projects move their issue queues to GitLab, contributors working across projects face gaps in tracking related work. ContribKanban now brings both issue systems into a shared view. ...more

The integration addresses authentication compatibility and configuration issues while discontinuing its older maintenance track. ...more

The demo keeps publishing decisions with editors. Hands-on testing also reveals where its AI tools still fall short. ...more

Drupack promises a simpler way to run and deploy Drupal, but packaging the runtime is only part of the challenge. Creator Théodore Biadala discusses automated security updates, cross-platform testing, database performance, and the work needed to make the project practical for more developers. ...more

The read-only integration allows AI coding assistants to retrieve current Druxt guides and API references without accessing Drupal installations. ...more

Drupal's form-based experiments now sit outside the main WebMCP specification, while a new compatibility pilot aims to help developers test emerging browser interfaces. ...more

After earlier previews and demonstrations, Webhaven has reached commercial release, giving Drupal teams access to its preconfigured codebase under a per-project licence. ...more

Muhammad Tanweer Khan shares his DrupalCon Rotterdam experience, discussing AI's impact on developers, Drupal advocacy, public-sector adoption in Asia, and the value of community connections. ...more

A security fix can be ready before an installable update is. Public maintainer records show how branching, testing and packaging complicate the final stages of releasing Drupal security updates. ...more

A government may be free to change software suppliers but lack the capacity to do so. Rotterdam contributors explain why that distinction matters for digital sovereignty. ...more

A new setup recipe handles the basics, but one unused Canvas template blocked publishing in the tested Starter site. Here is how the author completed the translation. ...more

Lightning talks, local gatherings and conversations about Drupal security and AI policy feature in this week's community meetup schedule. ...more

A single unauthenticated request could crash certain FrankenPHP servers, while other vulnerabilities require specific code or configurations. The distinction matters when assessing exposure. ...more

One workflow can span several execution engines without leaving a single record of what happened. Jürgen Haas has outlined the technical changes that could make those operations easier to investigate. ...more

A new Drupal toolkit records consent decisions and data rights requests under India's DPDP framework. Three alpha releases introduce the functionality while addressing access permissions and compatibility issues. ...more

Drupal sites may need no application code changes, but DNS settings, reverse proxies and automated integrations can still complicate the CDN transition. ...more

Agencies managing multiple Drupal sites can reuse a shared codebase across projects instead of maintaining a separate foundation for each website. ...more

An order can appear paid without a corresponding payment record. Centarro's new guidance explains which Drupal Commerce transactions deserve closer scrutiny. ...more

The same token can produce a working demo or no visible launcher, depending on how a Drupal site processes its content. ...more

A style violation can block a routine content save, yet still appear on a live page through a different route. ...more

The Netherlands has committed to greater open-source collaboration. But what will it take to turn that commitment into shared digital services that governments can develop and maintain together? ...more

Dashi demonstrates Drupal CMS's multilingual editing capabilities, but its first release exposes two compatibility problems that affect local installations. ...more

A signed media file can receive an incorrect trust verdict if its verifier misses a problem. Drupal's latest Content Credentials update addresses several failure points, but important limitations remain. ...more

AI-generated Drupal code can look correct while using outdated APIs, invented fields or incomplete cache metadata. Project instructions and repeatable checks help developers identify those mistakes before committing changes. ...more

QED42's website looked correct after an early AI-assisted migration, but its Drupal backend told a different story. Souvik Pal explains how that finding changed the framework. ...more

Patching the vulnerability may not be enough for affected Drupal Commerce stores. The Security Team has also instructed operators to check their orders for inconsistencies. ...more

Organisations without in-house developers may have a new way to support the maintainers behind the Drupal modules they depend on. How would that responsibility fit into certification? ...more

Companies already contributing to Drupal may find that their work carries more weight. A higher contribution score, however, does not automatically mean a higher Certified Partner tier. ...more

Metatag gained Drupal 12 support in version 2.2.1, but serious regressions prompted three follow-up releases in five days. The latest fixes affect API compatibility, update scripts and dependencies. ...more

With fewer routine stories and more time devoted to research, The DropTimes is examining how contributors can help determine which Drupal developments receive deeper coverage. ...more

Sixty-three maintained Drupal AI projects, one per job, each with its install count, latest release and security advisory status from Drupal.org. ...more

DruxtJS can now reduce repeated Drupal API requests through server-side caching and request deduplication. The improvements depend on Drupal's cache configuration, while the framework remains tied to an unsupported version of Nuxt. ...more

A familiar WordPress design can now become an editable Drupal site. But what survives the conversion, who maintains the result, and how close is the experiment to working on real projects? ...more

A locked dependency can fail to install even when its Git commit remains accessible. A documented Drupal hosting case shows why Composer's choice of download method matters. ...more

PHP developers have until 22 November to test AI agents, MCP integrations and working applications while the underlying tools remain open to changes ahead of their stable releases. ...more

A second workplace platform may help governments survive a technology disruption. Whether it also gives them the freedom to leave a dominant supplier is a harder test. ...more

A translation import can change a language's plural rules even with overwriting disabled. A contributed Drupal update addresses that risk. ...more

Nearly two decades after development began, Outer-Core is evolving without starting over. Alessandro Feijó explains the decisions behind its revival. ...more

Existing GovCMS customers will not all face higher charges on 1 November. The financial impact depends on their renewal dates and the hosting services they use. ...more

Drupal.org accepts AI-assisted work only from contributors who have checked it, can explain every change and say when a tool wrote a significant share. ...more