News Roundup

AWS has outlined controls for workload location, data access, encryption, resilience, and sovereign infrastructure. The European Commission’s 2026 framework scores providers across 48 criteria grouped into eight sovereignty categories. For Drupal teams handling regulated sites, the practical question is whether evidence covers the full application stack, including access, keys, recovery, transfers, and exit planning.

The Drupal Association has appointed Tiffany Farriss as interim CEO after Tim Doyle stepped down. Farriss is expected to serve for six to 12 months while strengthening the organisation’s financial and operational foundation and preparing for a permanent leadership search. The transition matters to the Drupal community because the Association operates shared infrastructure and services that support the project.

DrupalCon Rotterdam 2026 organisers have published the session schedule for the event from 28 September 2026 to 1 October 2026. The programme lists summit programming, the Driesnote, Drupal CMS sessions, AI and agentic architecture sessions, digital sovereignty talks, accessibility topics, security coverage, and contribution activities. For the Drupal community, the schedule shows how product work, infrastructure concerns, and contribution programming are being grouped across the four-day event.

Juicer Social Feed lets Drupal site builders add hosted Juicer.io social feeds as configurable blocks. The module supports source filtering, post limits, layout controls, and pagination for feeds from multiple social platforms. For Drupal teams, it offers a Drupal-native placement path while Juicer handles aggregation and feed management outside the site.

The Enterprise AI Summit has highlighted three case-study sessions for its 28 September 2026 programme in Rotterdam. The sessions cover an EPSO candidate support system in 24 EU languages, American Diabetes Association editorial workflows on Drupal, and World Cancer Day moderation support for sensitive user-submitted stories. For the Drupal community, the update points to AI use cases in support, publishing, and campaign moderation, while the published material still leaves architecture and validation details to the sessions.

Roman Chekhaniuk has published Quiz Maker 2.0.0-beta1 on Drupal.org for Drupal 11 and Drupal 12. The beta adds staged quizzes, conditional flow, a visual editor, pluggable scoring, multilingual support, and portable quiz transfer. The release gives Drupal site builders a more structured way to create branching assessments while the 1.x branch remains available for older sites.

Drupal core maintainers released Drupal 11.4.3 on 14 July 2026 as a production-ready bugfix release for Drupal 11. The release fixes a route-discovery regression, stream-wrapper service errors, attribute route registration problems, and other core bugs. For Drupal teams on the 11.4 branch, it adds another maintenance point after earlier fixes for Composer scaffolding and Search update-path regressions.

Bert Boerland’s LinkedIn essay argues that sovereignty, governance, and cost are unresolved infrastructure problems for Drupal. Community replies connected his proposal to FAIR-style package federation, Drupal.org funding, public-sector procurement, and software supply-chain security. The debate frames resilience as a practical question of who funds, governs, and verifies the infrastructure Drupal depends on.

A Head in the Cloud panel brought Drupal, TYPO3, Contao and Neos representatives into one discussion on open source CMS sustainability. Martin Helmich’s account covered contributor pipelines, volunteer labour, corporate participation, regulation, PHP-based CMS ecosystems and digital sovereignty. For Drupal readers, the discussion connects contribution systems with public-sector questions about sustainable open digital infrastructure.

Canonical identifies persistent gaps in how organisations manage open source software supply chains. The research points to vulnerability concerns, fragmented dependency visibility, manual security checks, patching delays, and uneven team ownership. For Drupal teams, the findings reinforce the need to treat Composer packages, Linux platforms, containers, and deployment pipelines as part of site security governance.

ImageX has published an overview of colour management options for Drupal websites. The article covers theme CSS, admin theme settings, colour fields, Layout Builder styles, CKEditor tools, and Single-Directory Components. For Drupal teams, the practical issue is how to expose colour choices to editors without weakening brand consistency, accessibility, or maintainability.

Drupal 11.4 adds an experimental native command-line interface to the core, according to the Drupal 11.4 release announcement. The feature uses Symfony Console, so core and enabled modules can expose discoverable commands through Drupal itself. For the Drupal community, this marks a cautious transition toward core-supported command-line workflows, while Drush remains important for existing projects.

Steffen Rühlmann has published an undpaul Drupal tip on changing the length of a populated text field. The post explains why Drupal blocks standard Entity API updates when existing data could be affected. It outlines a lower-level post-update approach that widens the database column, aligns Drupal’s stored schema information, updates configuration, and clears cached definitions.

A Reddit discussion asked how programmers stand out when AI can generate working code. Jacob Rockowitz’s Drupal-focused blog argues that AI rewards curiosity and can widen the gap between developers who understand their output and those who do not. Drupal.org guidance, METR research, and GitLab’s 2026 survey point to the same pressure: code generation may get faster, but validation, security, and governance remain human responsibilities.

Christian López Espínola has published a technical post about JSON handling in Drupal Canvas. The post explains how different database engines changed JSON key order in ways that made some tests fail in continuous integration while passing locally. The issue gives Drupal developers a practical reminder to avoid order-sensitive comparisons when stored JSON data may move across database backends.

The DropTimes will host its July 2026 Open Townhall on 22 July 2026 at 15:30 UTC on Zoom. The session will cover editorial updates, contributor coordination, outreach priorities, and feedback from Drupal community members. The meeting gives contributors, readers, agencies, and organizers a practical way to follow and discuss TDT’s community-facing work.

DrupalForge has published a blog post arguing that cloud development can reduce first-start friction for Drupal users. The post connects browser-based development environments with Drupal CMS, Drupal Canvas, recipes, AI tools, templates, demos, training, and team collaboration. The story is relevant because Drupal’s onboarding work increasingly depends on people being able to try, build, and share Drupal without extensive setup.

DrupalACT has listed its July 2026 meetup for Wednesday 15 July 2026 in Canberra, with online access also available. The schedule includes a community update, a presentation by Al O'Neill, and a session by Brynn Briedis on theming for Drupal Canvas. For Drupal community members in Australia, the meetup provides a local forum for project updates, practical discussion, and in-person networking.

Pacific Northwest Drupal Summit has opened its 2026 call for speakers. Proposals are due by 31 July 2026 for the regional Drupal camp in Vancouver. The call gives Drupal community members a clear window to propose talks, panels, workshops, and training.

'Click Here Labs' has released the Entity Reference View Mode Selector (ERVMS) module for Drupal. The module lets editors choose the display view mode for each referenced entity directly from the content editing form using Drupal's existing view mode system. It gives editorial teams greater control over presentation while reducing the need for custom development and content duplication.

DrupalCamp Italy 2026 has extended its Call for Papers deadline to 31 July 2026. Organisers said some companies needed more time to submit proposals, while talks already received will move into review soon. The update gives Drupal speakers a longer proposal window before the in-person camp in Bologna on 22 October 2026.

Martin Anderson-Clutz has published an Acquia guide to the Drupal site templates marketplace. The post compares more than a dozen templates across nonprofit, healthcare, education, government, events, commercial, SaaS, and portfolio use cases. It advises teams to start with sector fit, then evaluate content architecture, design system approach, CSS stack, accessibility, support, and sandbox availability.

Drupal.org published ten contributed-project security advisories on 8 July 2026. The batch included three Critical unsupported-project advisories, a Critical SQL injection issue in Location Selector, and several active-project fixes involving cross-site scripting, cross-site request forgery, information disclosure, and access bypass. For Drupal site teams, the practical task is to remove unsupported projects, apply active-project updates, and review exposed input and rendering paths.

Drupal Pune Meetup is scheduled for 25 July 2026 at WPoets Technology LLP in Kalyani Nagar, Pune. The agenda includes coffee, networking, a session on modern multifactor authentication, a session on production AI agents, and a Birds of a Feather discussion on practical AI use. The meetup gives local Drupal practitioners a forum for technical learning, community exchange, and shared project experience.

Rector 2.5 adds Composer-based sets for Drupal. The feature lets Rector inspect a project’s installed Drupal version and dependencies, then choose matching refactoring rules automatically. The Drupal.org post connects the change to Drupal 12 readiness, Drupal Rector work, and improved automated deprecation coverage.

Red Hat’s Technically Speaking series published an episode on sovereign AI with Chris Wright and Jered Floyd on 1 July 2026. The discussion defines sovereignty through data, operational, technology, and assurance control, then applies those questions to black-box AI systems, open-weight models, and agentic workflows. The episode gives Drupal and open source readers a broader frame for thinking about vendor dependence, auditability, and control over AI-enabled platforms.

Block Content Explorer is a Drupal 11 contrib module for managing reusable and inline block content from a central admin page. It lists block content entities, shows reusable status and parent entity information, and supports filters for block type, reusable status, and published status. The module gives site builders and editors a clearer way to audit Layout Builder blocks without opening each layout individually.

Drupal Camp Asheville 2026 runs from 9 July to 12 July 2026 in Asheville, North Carolina, with trainings, conference sessions, and a Sunday community day. Speakers Chris O'Donnell, Dan Hansen, Will Jackson, and Matthew Saunders shared written responses with The DropTimes on storytelling for teams, Display Builder, Audit Export, and AI governance. Their sessions show how Drupal delivery depends on shared decision-making, site knowledge, layout consistency, and control over emerging AI workflows.

DrupalCon Orlando 2027 has opened volunteer applications for its Marketing & Outreach Committee and Photographer roles. The official volunteer page lists applications opening on 1 July 2026, closing on 5 August 2026, and notification on 10 August 2026 for both roles. The openings give Drupal community members an early opportunity to support conference outreach and documentation before the event, taking place from 22–25 March 2027 in Orlando, Florida.

Yii3 was released on 31 December 2025 with an architecture built around official packages, dependency injection, and PHP standards. Drupal 11 follows a different model, using Symfony components and content-focused APIs to support editorial and site-building workflows. For Drupal teams, the comparison is useful when a project combines structured content management with custom application services.

The Drupal Association has announced the candidates for its 2026 At-Large Board election. Eight community members are standing for one open board seat as Alejandro Moreno completes a two-year term. The election forms part of the association's staggered board renewal process.

Matthew Saunders has connected UN Open Source Week 2026 discussions on artificial intelligence to Drupal’s governance strengths in a Drupal.org post. He argues that AI systems need verified data, provenance, human review, open-source control, and structured workflows rather than models alone. For Drupal teams, the post frames content architecture, moderation, permissions, and revision history as useful foundations for accountable AI work.

LakeDrops author Jürgen Haas explains how the ECA Guide has been made readable for AI agents. The guide uses a public context server, an LLM index, Markdown pages, and an agent skill to expose ECA concepts, plugin references, token guidance, and examples. The setup gives Drupal teams a model for turning complex configuration documentation into usable support for AI-assisted workflow building.

DrupalCamp Spain 2026 has opened Early bird ticket sales for its November event in Madrid. The €60 ticket covers Friday and Saturday conference access, workshops, Thursday training, meals, and coffee breaks. The camp gives Drupal users, contributors, students, freelancers, and companies in Spain a scheduled community gathering before the end of 2026.

Google Open Source has published feedback from a GitHub Maintainer Month meetup on corporate support for open source maintainers. Maintainers pointed to predictable funding, conference access, communication norms, and clearer programme records as areas where companies can reduce friction. For Drupal, the discussion connects to sustaining membership, sponsored contribution, and AI-assisted contribution policy.

Dropsolid AI has launched a renewed brand and website focused on a sovereign Open Digital Experience Platform. The company says the platform brings content operations, trusted answers, knowledge navigation, personalisation, integrations, and infrastructure into a governed AI layer. For the Drupal community, the update matters because it places Drupal, Mautic, and open source within a broader enterprise AI and digital sovereignty message.

Colorado Drupal Meetups will host the Denver Drupal Meetup – AI Tools Show and Tell on 8 July 2026. The in-person session will run from 18:00 to 20:00 MDT at denhac in Denver and will focus on AI coding assistants, administrative automation, IDE extensions, and workflow tools. The meetup gives Drupal practitioners a local forum to compare practical AI use, ask questions, and learn from working examples.

Drupal Mastodon is a community-run Mastodon instance for Drupal-focused discussion on the Fediverse. It lets Drupal users follow project accounts, hashtags, and wider federated conversations from a Drupal-centred server. Its moderation, administrators, and Open Collective funding records make the infrastructure easier to evaluate before joining or contributing.

Schleswig-Holstein is advancing an open-source migration across core state administration systems. Official updates confirm LibreOffice adoption, the completed move to Open-Xchange and Thunderbird, licensing-cost savings of more than €15 million, and a new AI pilot called LLMoin. For the Drupal community, the case offers a public-sector example of how open-source policy can move from principle to operating infrastructure.

Drupal’s May 2026 core security advisory provides a practical case for examining governance around AI-generated code in production systems. Research from Miggo Security, Escape.tech, and Veracode points to faster exploit development and security weaknesses in generated applications and code samples. For Drupal teams, the lesson is that AI-assisted development still depends on secure architecture, patch readiness, and accountable maintenance.

This week’s events roundup covers open-source and Drupal community activity from 7 July 2026 to 14 July 2026. Featured events include an AI for Good workshop on generative AI pilots, a Drupal Zurich meetup on agentic CMS use cases, Drupal User Group Ruhr’s July session, and Drupal Camp Asheville 2026. The events span AI, Drupal development, community discussion, training, and regional networking.

ECA has crossed 20,000 reported Drupal site installations, according to Jürgen Haas and Drupal.org project data. The module lets site builders automate Drupal workflows using events, conditions, and actions instead of custom code. In a written response to The DropTimes, Jürgen said the number changes how he thinks about commits, API decisions, and compatibility promises.

Drupal Camp Asheville 2026 will feature sessions on accessible social media, Drupal Canvas-ready components, accessible AI workflows, and local development environments. AmyJune Hineline, Michael Anello, Carie Fisher, and Dan Gurin shared written responses with The DropTimes about their sessions and expected takeaways. The sessions place practical Drupal work alongside communication, inclusion, automation, and developer tooling.