News Roundup

Drupal.org’s core release schedule confirms key 2026 dates for Drupal 11, Drupal 12, and Drupal 10. Drupal 11.4.0 is listed for the week of 22 June 2026 UTC, and Drupal 12.0.0 is scheduled for the week of 7 December 2026 UTC. Drupal 10 reaches end of life on 9 December 2026.

Talking Drupal episode 556 features Moshe Weitzman discussing Drush, Drupal core command-line work, DDEV testing workflows, and Cache Metrics. The discussion explains which commands are moving toward core, why some Drush commands remain harder to migrate, and how database images can speed local and continuous integration testing. It also frames maintainer burnout and AI-assisted development as issues that still require human understanding of Drupal internals.

Drupal GovCon 2026 has opened its call for speakers. The free in-person event is scheduled for 11 to 13 August 2026 at the University of Maryland, College Park. Session proposals close at 23:59 EDT on 26 June 2026.

MonkeysCommerce is a new Drupal Commerce project maintained by Jorge Peraza. The project describes an API-first framework with order, cart, checkout, payment, shipping, tax, inventory, promotion, and storefront API features. The module is new and is not covered by Drupal’s security advisory policy.

The Drupal GraphQL project has issued a stable release for the current major branch of the module. The update supports Drupal 10 and Drupal 11 and adds stricter code typing, PHP attribute support, and an upgraded GraphQL engine. Developers with custom GraphQL integrations should review the API changes before upgrading.

Acquia and Esinergia will hold an AI-focused digital experience session in Santiago on 12 June 2026. The event will discuss artificial intelligence in web development, digital platforms, and organisational use cases. Public organiser material names speakers and themes, but does not provide technical implementation details.

A11yTalks will host a session called “The Myth of the Difficult User” on 24 June 2026. Angela Fowler will discuss how users who struggle with a product or process can reveal accessibility and usability problems. The session will explain why these users should be treated as signals for better design, not as the problem.

Namgay Tshering has shared a short list of Drupal tools used in larger web projects. The post covers modules and core features for content listings, forms, metadata, redirects, page building, media, editing, administration, and development support. It is a broad overview and does not include setup guidance or technical examples.

Dries Buytaert has written about how AI coding agents may choose software projects. He says agents are more likely to use tools that are easy to run, understand, change, and test. The post argues that open source has an advantage, but only when projects reduce friction and make success easy to verify.

Drupal.org has published two critical security advisories for contributed projects. The advisories affect the Composer project and the Brute force attack protection module, and both projects are now marked unsupported. Site administrators using either project are advised to uninstall it because no fixed release is available.

Dries Buytaert has published the results of an experiment examining how an AI coding agent evaluates Drupal. The test ranked Drupal behind Next.js-based solutions and WordPress despite recognizing Drupal's strengths in content modeling, permissions, and extensibility. Dries argues that improving Drupal's first-session experience could help the platform gain stronger recommendations from AI agents in the future.

LocalGov Drupal has released stable 5.0.0 versions of its Microsites packages with Drupal 11 support. The releases cover the composer scaffold project and the Drupal install profile. The Microsites platform helps councils manage multiple distinct websites from a single Drupal installation.

Hashbang Code has published Part 2 of Philip Norton’s Drupal 11 link directory series. The article replaces unreliable headless Chromium screenshot capture with a Chrome extension and custom REST resource workflow. It covers Key Auth, SecKit handling, Chrome debugger APIs, fixed-size screenshots, and known screenshot reliability issues.

Gordon Heydon has published a technical article on migrating large Drupal file stores. The approach first migrates file records and then moves file binaries separately using tools such as rsync. The post also covers HTTP HEAD checks, Stage File Proxy, private files, media conversion, CKEditor 5 embeds, and URI stability.

Jürgen Haas has detailed a rebuilt Workflow Modeler for Drupal’s ECA ecosystem. The React and TypeScript-based tool adds execution replay, live workflow testing, accessibility support, and multiple export formats. The release gives Drupal teams a modern workflow authoring option while keeping existing ECA models portable through the Modeler API.

The European Commission has set out an EU Open Source Strategy focused on digital sovereignty. The strategy covers procurement, public-sector adoption, critical technology areas, maintenance, skills, and international standards work. Its priorities are relevant to open-source ecosystems such as Drupal, although the document does not endorse any specific platform.

Pantheon has outlined several product updates in its second-quarter announcement. The changes include Next.js support, direct GitHub integration, Solr 9 beta availability, and Customer Scheduled Jobs. The update is relevant to Drupal teams using Pantheon for search, deployment workflows, decoupled builds, and recurring site automation.

DrupalRX has published an article on JSON:API performance in headless Drupal projects. The post identifies request design, large payloads, excessive includes, caching gaps, serialization costs, and frontend behaviour as common causes of slow responses. It recommends measuring the request path before adding infrastructure.

miniOrange has published a blog post on risk-based access control for Drupal login security. The article explains how contextual signals such as IP address, location, time, device identity, and network behaviour can influence access decisions. It is a conceptual overview and does not include implementation steps or version-specific configuration guidance.

Euro-Office has reached its first stable release after a 9 June rollout target. The web-based office suite is designed for integration into collaboration platforms rather than standalone desktop use. The project is backed by several European technology organisations, while ONLYOFFICE and Nextcloud continue to present opposing positions on licensing compliance.

TD Cafe 017 features Mike Anello and Rod Martin discussing beginner Drupal training. They cite falling demand across classes, camps, YouTube tutorials, and other training providers. The episode links the trend to AI tools, Drupal’s complexity for new users, and the need for wider community marketing.

Dries Buytaert has shared his thoughts on the Speculation Rules API and its impact on browser prefetching. He argues that the technology offers a more responsible approach by waiting for clear user intent before loading content. The post also reinforces his view that prefetching should complement, not replace, good website performance practices.

EvolveDigital Montréal26 takes place on 12 June 2026 at Montréal CoWork in Montreal, Quebec. John Doyle will discuss governed AI work inside Drupal, while Sébastien Lemieux will join HEC Montréal speakers for a French-language session on migration, redesign, and adoption. The article previews how both sessions address practical delivery choices for teams managing long-lived digital platforms.

ImageX has shared a tutorial on creating company contact details with a map in Drupal. The guide uses Drupal fields, the Address module, and the Simple Google Maps module to build a structured contact card. It also lists advanced mapping options for projects that need coordinates, multiple locations, or geocoding support.

Page Performance Insight adds Google Lighthouse reporting to Drupal’s admin interface. The module audits individual nodes and displays mobile, desktop, and Core Web Vitals data through dashboard views. It gives Drupal site teams a way to review page-level performance across content types and published pages.

Drupal CMS 2.1 introduces Site Templates for starting Drupal projects with pre-configured website foundations. Acquia’s Martin Anderson-Clutz says the feature can reduce early setup work without tying sites to older distribution models. Drupal.org release notes confirm that the 2.1.0 installer now includes a site template selection step and support for exporting a site as a template recipe.

Darrell Green has published a DrupalRX field note on nearly 18 years of Drupal contracting. The article examines how architecture, communication, technical debt, and organisational alignment influence project outcomes. It presents an experience-based view of how senior Drupal work often moves from coding toward risk management and decision-making.

Purple PHP SDK 0.1.0 introduces AI tooling for existing PHP applications. The release includes smart functions, chat sessions, agent workflows, policy controls, audit tooling, and optional provider integrations. The project keeps Composer-based adoption as the default and treats native runtime, sidecar, and cloud provider support as optional paths.

LocalGov Drupal Camp 2026 will take place on 11–12 June 2026 at Sheffield Hallam University. Speaker previews highlight sessions on project delivery, artificial intelligence governance and product-led service management. Several presenters also identified peer learning and community knowledge sharing as key reasons for attending the event.

Dan Frost reflects on organisational responses to a recent Drupal security advisory. The article argues that mature incident response depends on preparation, validation, and service continuity. It discusses inventory review, deployment planning, mitigation assessment, testing, rollback planning, and client communication.

Acquia will host a Drupal 11.4 and Drupal 12 readiness webinar on 17 June 2026. Tim Lehnen of the Drupal Association and Martin Anderson-Clutz of Acquia will discuss upgrade planning, AI-assisted code modernisation, and community features. The session is aimed at developers, technical teams, and digital leaders preparing Drupal upgrade roadmaps.

Dries Buytaert examines the European Commission’s European Technological Sovereignty Package and its proposed Open Source Strategy for Europe. The article discusses open source funding, public procurement, digital independence, and long-term maintenance. It argues that the package moves open source further into Europe’s sovereignty and competitiveness agenda.

Ryan Szrama examines how Drupal Commerce sites should approach recurring payments. The article compares Commerce Recurring with gateway-managed subscription systems such as Stripe. It highlights data ownership, billing complexity, cart integration, dunning workflows, and hybrid implementation models.

A range of Drupal events are taking place from 8 to 14 June 2026. These include a Drupal Commerce performance webinar on 9 June, the Women in Drupal meetup on 10 June, LocalGov Drupal Camp in Sheffield on 11–12 June, a Drupal User Group Ruhr barbecue on 11 June, and the EvolveDigital Montréal summit on 12 June. These events offer education, networking, and collaboration opportunities.

CivicActions has published the second part of its website performance series. The post explains how caching and load testing were used on a government Drupal website hosted in an Amazon Web Services environment. It also identifies future work around query parameter handling, static content delivery, and infrastructure bottlenecks.

PHPverse 2026 will take place online on 9 June 2026. The programme includes sessions from speakers connected to Drupal, Symfony, Composer, Packagist, WordPress, Laravel, and The PHP Foundation. Topics include open-source governance, software supply chain security, PHP RFCs, artificial intelligence, and recent Drupal developments.

Miggo Security reported that researchers used Claude to generate a proof-of-concept exploit for Drupal CVE-2026-9082 within 51 minutes of patch detection. The vulnerability affects Drupal sites using PostgreSQL and was addressed through SA-CORE-2026-004 on 20 May 2026. The study adds to wider concern about shrinking response windows after public security disclosures.

The Drupal Association has welcomed Acquia’s Fair Trade Initiative. The programme directs 2% of eligible Drupal deals to the Drupal Association through the Acquia Partner Program. The funding is intended to support Drupal.org infrastructure, security work, events, and community programmes.

DrupalCon Rotterdam 2026 has published its full conference program. The schedule includes summits, technical sessions, workshops, contribution activities, and community events. Early Bird registration remains open until 8 June 2026.

DrupalCamp Italy 2026 is scheduled for 22 October 2026 at Savoia Hotel Regency in Bologna. The event website lists ticketing, sponsorship, venue, and call-for-papers information, with 150 seats available. Stefano Mainardi said the event builds on the 2025 Rome edition and called for wider participation from Italy’s Drupal ecosystem.

ImageX has updated a guide on higher education website strategy, design, and development. The guide covers performance signals, student journeys, personas, stakeholder approval, accessibility, and Drupal for institutional websites. It presents university websites as long-term digital platforms that require governance, measurement, and sustainable content workflows.

James Williams has documented a recursive router rebuild error found during Drupal 11 upgrade testing. The investigation used stored stack traces to identify an earlier rebuild attempt that was no longer visible in the active call stack. The issue involved configuration imports, entity deletion, and Drupal core’s menu link cleanup during installation.

Priyanka Phukan has published a Specbee guide on Drupal performance optimisation and Core Web Vitals. The guide covers caching, image handling, content delivery networks, hosting, module audits, and Drupal 11.3 performance improvements. It presents performance work as an ongoing maintenance practice rather than a one-time launch task.

Drupal Ottawa has announced its June 2026 meetup featuring a presentation on htmx by Steven Stapleton of Coldfront Labs. The session will explore how htmx can simplify front-end development while supporting dynamic user experiences. Attendees can participate in person or through an online meeting option.

At Drupal AI Summit NYC 2026, Jeroen Spitaels described how EPSO added AI search to the EU Careers portal. The system uses retrieval-augmented generation, cited source material, feedback signals, and observability controls to support candidates and contact-centre teams. Spitaels said most routine questions are now handled by AI search, while more complex cases continue to reach human agents.

A post-mortem describes a Drupal 11 production incident involving high CPU usage, bot traffic, and cache misses. The scenario identifies missing rate limits, weak Varnish query-string normalization, and absent saturation controls as contributing factors. It recommends rate limiting, cache miss alerts, revised VCL rules, runbooks, and regular load testing.

John Locke has described a workflow for organising AI-assisted development across multiple repositories. The Argo approach uses shared instruction files, repository hierarchies, and context markers to improve agent awareness. Locke frames the system as machine-readable project documentation rather than a change in AI capability.