News Roundup

Avenue Group Australia has published a blog post on custom web development for Australian businesses. The post compares custom platforms with template-based websites and highlights scalability, security, automation, analytics, and integration. It reads partly as a service-positioning article and provides limited technical detail.

Open Source Summit Europe 2026 is accepting proposals for its October event in Prague. Submissions close on 24 June 2026 and cover open-source technology, governance, documentation, and community practice. The call is not Drupal-specific, but it offers Drupal contributors a wider open-source venue for talks, tutorials, panels, and lightning sessions.

Maintainers of ECA, FlowDrop, and Maestro are discussing a shared backend layer for Drupal automation. The planning-stage work focuses on common graph models, shared language, and reusable processor contracts. The projects would keep separate interfaces while testing whether backend interoperability can reduce duplicated development work.

John Locke’s Freelock essay argues that platform consolidation, proprietary SaaS dependency, and large-scale AI infrastructure are not inevitable outcomes of technology. It presents open source ownership, federated services, community forks, and small cooperating businesses as alternatives to vendor lock-in. The piece frames digital sovereignty as an organisational choice shaped by infrastructure, licensing, and control.

James Shields explains how Drupal module maintainers can automate tests for update hooks that change schema or stored configuration. The post uses Smart Trim to show how fixtures, functional update tests, and Drupal update paths can verify configuration changes after an upgrade. It also describes maintaining different database fixtures for supported Drupal versions when older dumps stop loading cleanly.

1xINTERNET has shared a post on digital sovereignty in critical infrastructure. The article explains how essential services increasingly depend on software, cloud services, data platforms, and operational technology. It highlights risks around foreign technology dependency, compliance, sabotage, espionage, vendor lock-in, and resilience, while presenting open source as one way to strengthen control.

Nadiia Nykolaichuk’s ImageX post highlights two Drupal modules for editorial workflows. Entity Display Modes Listing gives editors faster access to view modes and form modes from entity administration screens. Entity Confirmation allows custom confirmation messages for create, update, delete, and form-mode-specific content workflows.

AI Learners Club hosted a hands-on session with Mike Anello on setting up the Drupal AI module. The walkthrough covered provider configuration, API key handling, logging, model defaults, guardrails, and CKEditor tools. The session showed why Drupal teams should test providers and models before adding AI features to editorial workflows.

Lock Entity is a new Drupal contributed module for protecting selected entities from deletion. It supports nodes, taxonomy terms, users, media, and other entity types, with optional reasons shown when deletion is attempted. Drupal.org lists the project for Drupal 10 and 11, but notes that it is not covered by Drupal’s security advisory policy.

WebWash has shared Ivan Zugec’s comparison of Drupal Canvas and WordPress Gutenberg. The post builds a hero component as a custom Gutenberg block and as a Drupal Single Directory Component. It contrasts Gutenberg’s writer-focused block library with Canvas’s site-builder-focused component model.

F5 Labs has published sensor data on exploitation attempts against CVE-2026-9082 after its public disclosure on 20 May 2026. The report documents 576 attempts from nine source IPs between 20 May and 31 May 2026, with scanning beginning on 22 May 2026. It focuses on JSON:API endpoint probing, SQL injection confirmation patterns, web application firewall evasion signals, and defensive monitoring steps.

Drupal.org has published Drupal 11.4.0-rc1 as the release candidate for the next Drupal 11 minor release. The release includes new functionality, public API compatibility guidance, Standard profile changes, and fixes since Drupal 11.4.0-beta1. Contributors can support the release through testing, issue reporting, translation review, and compatibility checks.

Drupal community events from 16 June to 20 June 2026 include online, hybrid, and in-person sessions across Europe and North America. Topics include AI publishing workflows, Automatic Updates, favourite contributed modules, htmx, and decoupled Drupal development. The events include sessions hosted by Southwark Council, dugmuc, Fox Valley Drupal, Drupal Ottawa, and a decoupled Drupal meetup.

1xINTERNET has published a blog post on using Drupal AI for content governance at scale. The article says AI-generated content can increase risks around brand drift, compliance, and editorial review. It presents Drupal AI as a way to audit existing content, guide editors in real time, and apply governance checks before publication.

LakeDrops has published Jürgen Haas’s post on closing the feedback loop in ECA workflow development. The article explains how users can test workflows, replay recorded executions, and inspect token values inside the Workflow Modeler. It also covers in-context debugging, recording costs, planned conditional recording, and future export options.

Europe’s digital sovereignty agenda has developed over more than a decade through privacy, cybersecurity, platform, data, AI, and cloud policy. These changes are reshaping how governments and regulated organisations assess digital infrastructure. The article explains why open-source platforms such as Drupal are part of that wider discussion.

The Drupal Association has launched the Drupal Sustaining Members program for organizations that use or depend on Drupal. The programme funds shared infrastructure, including Drupal.org, code repositories, packaging services, issue tracking, testing systems, security tooling, and community programmes. Annual donation tiers begin at $5,000 USD and extend to $100,000 USD or more.

Omitsis has shared a guide to troubleshooting programming errors. The article focuses on diagnosis before repair and presents methods such as axiom verification, bisection, stack trace analysis, debugging, online search, AI-assisted investigation, and rubber duck debugging. It also explains when to ask for help and why unresolved issues need a fallback plan.

Jeff McWherter discussed selling Drupal Canvas during a MidCamp 2026 session. He said agencies need to respond to client expectations shaped by visual builders, AI tools, and faster website delivery. The session focused on governance, delivery confidence, and client communication rather than Canvas configuration.

Apple has introduced MapKit JS 6 for adding Apple Maps to websites and web apps. The WebKit post highlights website-bound tokens, an npm loader, selective library loading, and Promise-based APIs. The update may interest frontend teams building map-based features such as store locators, travel planners, and companion web experiences.

Björn Brala has announced a refreshed Project Update Bot for Drupal 12 readiness. The bot uses Upgrade Status, Drupal Rector, and Project Analysis to scan contributed projects and open issues with patches for deprecated API uses. The update matters for maintainers because rule coverage now exceeds 80%, and submodule dependency handling has been improved to reduce failed scans and false errors.

Jacob Rockowitz has published a Drupal-focused reflection on AI and developer productivity. He argues that AI may amplify existing skill gaps while reducing opportunities for junior developers. The post calls on the Drupal community to treat AI-assisted development and vibe coding as onboarding challenges rather than threats.

Google has detailed WebMCP support for Chrome 149. The proposed browser API lets websites expose structured tools to AI agents through JavaScript and annotated HTML forms. Chrome DevTools adds experimental support for inspecting registered tools and testing tool calls.

The DropTimes will hold its June 2026 Open Townhall on 18 June at 20:30 IST. The online session will cover editorial updates, contributor coordination, and community feedback. Participants can join the session through Zoom.

A comparison between Drupal and EmDash shows two different models for content management. Drupal represents an established enterprise CMS ecosystem built around governance, workflows, permissions, and extensibility. EmDash presents a beta-preview, Astro-based CMS designed for serverless deployment, TypeScript development, and agent-assisted content operations.

Drupal.org’s core release schedule confirms key 2026 dates for Drupal 11, Drupal 12, and Drupal 10. Drupal 11.4.0 is listed for the week of 22 June 2026 UTC, and Drupal 12.0.0 is scheduled for the week of 7 December 2026 UTC. Drupal 10 reaches end of life on 9 December 2026.

Symfony published several technical updates across Twig 4.0 and Symfony 8.1. Twig 4.0 changes how template loops handle iterators, grouping, cycling, conditions, and recursion. Symfony 8.1 adds developer-experience improvements across debugging, accessibility, routing, testing, caching, webhooks, locks, and bundles.

Talking Drupal episode 556 features Moshe Weitzman discussing Drush, Drupal core command-line work, DDEV testing workflows, and Cache Metrics. The discussion explains which commands are moving toward core, why some Drush commands remain harder to migrate, and how database images can speed local and continuous integration testing. It also frames maintainer burnout and AI-assisted development as issues that still require human understanding of Drupal internals.

Drupal.org has announced a refreshed Project Update Bot for Drupal 12 readiness. The bot scans contributed projects, identifies deprecated API usage, and opens patch issues using Upgrade Status, Drupal Rector, and Project Analysis. The update expands automated coverage to more than 80% of deprecated API uses introduced for the Drupal 12 cycle.

Specbee has published a guide on optimising Drupal render cache for better site performance. Pragathi K explains how cache metadata, custom block implementations, debugging methods, and Redis or Memcache backends affect rendered output. The guide also shows how render cache supports Dynamic Page Cache and Internal Page Cache.

Drupal GovCon 2026 has opened its call for speakers. The free in-person event is scheduled for 11 to 13 August 2026 at the University of Maryland, College Park. Session proposals close at 23:59 EDT on 26 June 2026.

MonkeysCommerce is a new Drupal Commerce project maintained by Jorge Peraza. The project describes an API-first framework with order, cart, checkout, payment, shipping, tax, inventory, promotion, and storefront API features. The module is new and is not covered by Drupal’s security advisory policy.

The Drupal GraphQL project has issued a stable release for the current major branch of the module. The update supports Drupal 10 and Drupal 11 and adds stricter code typing, PHP attribute support, and an upgraded GraphQL engine. Developers with custom GraphQL integrations should review the API changes before upgrading.

Acquia and Esinergia will hold an AI-focused digital experience session in Santiago on 12 June 2026. The event will discuss artificial intelligence in web development, digital platforms, and organisational use cases. Public organiser material names speakers and themes, but does not provide technical implementation details.

A11yTalks will host a session called “The Myth of the Difficult User” on 24 June 2026. Angela Fowler will discuss how users who struggle with a product or process can reveal accessibility and usability problems. The session will explain why these users should be treated as signals for better design, not as the problem.

Namgay Tshering has shared a short list of Drupal tools used in larger web projects. The post covers modules and core features for content listings, forms, metadata, redirects, page building, media, editing, administration, and development support. It is a broad overview and does not include setup guidance or technical examples.

Dries Buytaert has written about how AI coding agents may choose software projects. He says agents are more likely to use tools that are easy to run, understand, change, and test. The post argues that open source has an advantage, but only when projects reduce friction and make success easy to verify.

Drupal.org has published two critical security advisories for contributed projects. The advisories affect the Composer project and the Brute force attack protection module, and both projects are now marked unsupported. Site administrators using either project are advised to uninstall it because no fixed release is available.

Dries Buytaert has published the results of an experiment examining how an AI coding agent evaluates Drupal. The test ranked Drupal behind Next.js-based solutions and WordPress despite recognizing Drupal's strengths in content modeling, permissions, and extensibility. Dries argues that improving Drupal's first-session experience could help the platform gain stronger recommendations from AI agents in the future.

LocalGov Drupal has released stable 5.0.0 versions of its Microsites packages with Drupal 11 support. The releases cover the composer scaffold project and the Drupal install profile. The Microsites platform helps councils manage multiple distinct websites from a single Drupal installation.

Hashbang Code has published Part 2 of Philip Norton’s Drupal 11 link directory series. The article replaces unreliable headless Chromium screenshot capture with a Chrome extension and custom REST resource workflow. It covers Key Auth, SecKit handling, Chrome debugger APIs, fixed-size screenshots, and known screenshot reliability issues.

Gordon Heydon has published a technical article on migrating large Drupal file stores. The approach first migrates file records and then moves file binaries separately using tools such as rsync. The post also covers HTTP HEAD checks, Stage File Proxy, private files, media conversion, CKEditor 5 embeds, and URI stability.

Jürgen Haas has detailed a rebuilt Workflow Modeler for Drupal’s ECA ecosystem. The React and TypeScript-based tool adds execution replay, live workflow testing, accessibility support, and multiple export formats. The release gives Drupal teams a modern workflow authoring option while keeping existing ECA models portable through the Modeler API.

The European Commission has set out an EU Open Source Strategy focused on digital sovereignty. The strategy covers procurement, public-sector adoption, critical technology areas, maintenance, skills, and international standards work. Its priorities are relevant to open-source ecosystems such as Drupal, although the document does not endorse any specific platform.

Pantheon has outlined several product updates in its second-quarter announcement. The changes include Next.js support, direct GitHub integration, Solr 9 beta availability, and Customer Scheduled Jobs. The update is relevant to Drupal teams using Pantheon for search, deployment workflows, decoupled builds, and recurring site automation.

DrupalRX has published an article on JSON:API performance in headless Drupal projects. The post identifies request design, large payloads, excessive includes, caching gaps, serialization costs, and frontend behaviour as common causes of slow responses. It recommends measuring the request path before adding infrastructure.

miniOrange has published a blog post on risk-based access control for Drupal login security. The article explains how contextual signals such as IP address, location, time, device identity, and network behaviour can influence access decisions. It is a conceptual overview and does not include implementation steps or version-specific configuration guidance.

Euro-Office has reached its first stable release after a 9 June rollout target. The web-based office suite is designed for integration into collaboration platforms rather than standalone desktop use. The project is backed by several European technology organisations, while ONLYOFFICE and Nextcloud continue to present opposing positions on licensing compliance.