Featured

Some event listeners belong to one task, while others serve every request. That distinction matters when reducing setup work. ...more

Cloudflare Purge 3.1.4 adds Drupal 12 support and fixes a failure path that could turn an unsuccessful API response into a fatal error. The update keeps Drupal 10 and 11 support and requires only a cache rebuild after installation. ...more

Australia's Department of Finance has extended the current GovCMS Drupal Services Panel to 30 September 2027. The replacement Drupal and DXP services tender closed on 7 October, with new services expected to begin in early 2027. ...more

The 7 October security batch spans 25 contributed projects, from remote code execution risk to access bypass and information disclosure. Several fixes require more than a package update. ...more

Solo 1.0.36 reverses a regression that could break every page on Drupal 10 and early Drupal 11 releases. Updating the parent theme is not enough for subthemes generated from 1.0.35. ...more

A Composer symlink flaw affects versions that still satisfy Drupal 11's minimum requirement. The fix is available in Composer 2.10.3 and 2.2.30. ...more

One guide focuses directly on Drupal security, while the other examines where decoupled CMS deployments fail in production. Together, they point to different parts of the operational work behind modern Drupal sites. ...more

Gemini Provider can now turn images into vectors for semantic search and RAG in Drupal. Existing sites also need to review model defaults and, in some cases, reindex AI Search. ...more

Drupal Patch Check identifies which patches still apply, which fixes are already upstream and which conflicts need developer attention. The Composer plugin can also test patch sets against a future Drupal core version. ...more

Three recent Drupal.org case studies place Drupal inside regulatory assessment, specialist commerce and screen-management workflows. The common thread is structured content supporting work that extends beyond conventional publishing. ...more

Drupal AI is extending beyond generated prose toward models that return bounded choices, scores and probabilities. Jev is an early example of that new decision-oriented model type. ...more

Campaign emails now respect intended local send times in a key timezone case. The release also fixes cross-instance forms, plugin compatibility and several production-installation problems. ...more

Drupal AI can keep control of providers and model settings while Neuron handles agents and workflows. The new bridge also brings Neuron objects into Drupal's plugin system. ...more

Drupal contributors can now earn credit for explaining the project beyond its usual community channels. The pilot rewards evidence-based advocacy without turning it into a marketing free-for-all. ...more

Cyber hygiene starts with knowing what an organisation owns and who maintains it. That makes fragmented public web estates a governance problem, not only a patching problem. ...more

Context Control Center has reached its first release candidate after five beta releases. RC1 concentrates on admin usability, context selection, upgrade stability and production testing before 1.0. ...more

Drupal is moving module logic out of a file that has defined extension development for years. The transition starts in 11.5, with automatic loading ending in Drupal 13. ...more

Mark Conroy tested Compound Field against a familiar Paragraphs-style authoring pattern. The experiment exposed both a workable nested-field model and an early editing limitation. ...more

Three module updates ask maintainers to look beyond version numbers. Upgrade order, migration behaviour and telemetry consent all need attention. ...more

Generated test classes now use PHPUnit attributes, while several fixes address crashes and invalid output in Drupal scaffold generation. ...more

Drupal communities in Edinburgh, the Eastern Time Zone and Germany gather this week for social meetups, lightning talks and technical discussions. ...more

A handwritten board at DrupalCon Rotterdam carried more than vacancy notices. Attendees could also recommend community members actively looking for their next Drupal role. ...more

Advanced Comment Threads has moved from alpha into beta, with recent releases refining progressive loading, cache behaviour, comment teasers and in-page discussion expansion. ...more

A new open-source knowledge platform combines Drupal 11, Nuxt, hybrid search and MCP access for teams where people and AI agents work from the same reviewed content. ...more

Drupal Live Update proposes one Drupal-controlled event layer for modules that need to refresh browser content without each building its own delivery mechanism. ...more

Japan's Drupal community now has a new voluntary association with a formal NPO application under review. Its first work begins before legal incorporation is complete. ...more

Drupal 12 now has a beta testing target, but site teams still need to account for Drupal 11 upgrade steps, removed extensions and higher platform requirements. ...more

A Drupal View does not have to end as a row of equal cards. Bento Showcase tests how far sorting, promotion, and image treatment can carry a structured content collection toward a composed page. ...more

Three early-stage projects are testing different boundaries around Drupal: the local runtime, executable automation and browser-side updates. Their approaches differ in maturity, making evaluation more appropriate than treating them as production defaults. ...more

Configuration screens do not always reveal how a rendered component behaves or how deeply content depends on other entities. Recent updates to Canvas Accessibility Checker and Entity Connections bring those problems closer to the point where teams inspect and troubleshoot them. ...more

Iggy’s experimental clustering path has become part of the standard server, but existing deployments face a breaking upgrade with incompatible storage and wire formats. ...more

Not every Drupal AI update calls for the same response. Recent releases may require teams to rebuild search indexes, update agent configuration or keep experimental Views changes under close human review. ...more

A cookie banner can stop a browser pixel while a backend conversion call follows a different path. Three Drupal releases show where that gap can appear and what site teams need to test. ...more

The winning projects span AI, public services, publishing, education, healthcare, commerce and other areas of Drupal implementation. ...more

A DrupalCon Rotterdam ceremony added three recipients to the five-year programme recognising women across the Drupal ecosystem. ...more

Sites relying on Joomla's Web Services API have an extra check to make after applying the latest security update. ...more

Acquia deliberately spent less on its Rotterdam booth and made that decision visible. Shawn Perritt then used the DrupalCon stage to challenge sponsors, agencies and competitors to find their own way to give back. ...more

The Drupal AI Initiative has designated DrupalEasy's 18-hour AIDE course as its official training program, covering human-reviewed workflows, agents, retrieval and local models. ...more

Technical progress only solves part of Drupal's problem if outside perceptions remain fixed on older versions. Rotterdam shifts attention to who can reach today's capabilities and who hears about them. ...more

Drupal is moving more essential services away from long-time donated hosting at OSUOSL while AWS credits support a cloud footprint that already handles millions of CI jobs each year. ...more

Database commits, broker delivery, and payload limits can fail at different points in an asynchronous workflow. Symfony's new Messenger options are designed to narrow two of those gaps. ...more

PHP branches used by supported Drupal 10 and 11 environments received security fixes, but determining exposure requires more than checking a version number. ...more

An AI feature can work on its own and still leave an important question unanswered: what happens when several of them have to work together on real content? ...more

A Drupal job title can conceal a much wider engineering remit in government work. The platform stays central, but the surrounding responsibilities span much more of the application lifecycle. ...more

Public signals can indicate an end-of-life Drupal release without showing whether a site receives commercial security coverage. That distinction shapes how the study's version findings should be read. ...more

A Drupal field automator can now delegate work to an AI agent that searches, calls tools and completes multiple steps before returning the value to be stored. ...more