Europe is finally getting serious about digital sovereignty, and getting it half right. The instinct to “Buy European” is sound, but the frameworks being built around it are solving for the wrong variable. Ownership and headquarters are snapshots; they tell you where power sits today, not where it will sit after the next acquisition. Skype had every European credential imaginable. Microsoft shut it down in 2025.
The missing piece is durability. Dries and Nicholas argue, convincingly, that a sovereignty score without an open-source licensing requirement is a sovereignty score with an expiry date. The GPL licence did not stop Oracle from acquiring Sun Microsystems, but it ensured that MySQL could not be discontinued. MariaDB exists today because someone had the legal right to fork before the deal closed. That right is structural; it does not depend on which flag flies over the headquarters.
The forthcoming Cloud and AI Development Act is the real test. Europe can use it to define what makes sovereignty resilient: open licensing as a hard gate for mission-critical procurement, and supply chain assessments that distinguish between dependencies that can be replaced quickly and those that would take years to rebuild. Anything short of that risks becoming a checklist rather than a strategy.
With that, here are the key stories from the past week.
Additional developments from across the Drupal ecosystem were published during the week. Readers can follow The Drop Times on LinkedIn, Twitter, Bluesky, and Facebook for ongoing updates. The publication is also active on Drupal Slack in the #thedroptimes channel.
Drupal has defined two pathways for site template distribution: Marketplace and community projects. Marketplace templates follow review standards and Drupal CMS best practices, while community templates remain open to experimentation. The model allows community work to progress toward Marketplace inclusion over time.
Drupal’s Arabic translation has reached 42% completion, up from 37% in one month. The progress reflects ongoing community localisation efforts. No technical details on implementation or workflow were provided in the update.
AI Schema is a Drupal module that exports entity models into structured formats for AI tools. It generates schema definitions, relationships and SQL queries using Drush. The module is designed to simplify working with Drupal data in LLM workflows.
Dalia 1.0.0-beta3 introduces a Haiku-powered retrieval system for Drupal development workflows. The release expands validation, error handling and developer controls across multiple phases. It represents a significant step toward a stable 1.0 version.
LocalGov Bus Data is a Drupal module for integrating UK bus service data. It imports GTFS feeds and enriches stop data using NaPTAN. The module supports structured publishing for council websites.
Drupal Camp Asheville 2026 has announced sponsorship opportunities. The event will take place from 10 to 12 July at UNC Asheville. Sponsorship tiers and programme details have been outlined.
A11yTalks will host a session on sustaining accessibility beyond launch. AmyJune Hineline will discuss accessibility as an ongoing lifecycle practice. The talk references WCAG standards and regulatory frameworks.
erdfisch has expanded nerdfisch DevBits into a public archive of reusable Drupal code snippets. The collection preserves working solutions in their original form, prioritising implementation over explanation. The initiative originated from internal workflows and is now accessible to the broader community.
Drupal CMS has announced updates to its leadership team. Bálint Kléri joins as Frontend Lead and Pamela Barone becomes Product Lead. The changes come as the project defines its next development roadmap.
Drupal has published three security advisories affecting core versions across supported branches. The issues include a critical XSS vulnerability and two moderately critical risks. Users are advised to update to the latest patched versions immediately.
