CI/CD

As autonomous AI agents become more common in development workflows, conventional testing approaches can struggle with behaviour that varies between runs while still producing correct results. GitHub engineers Gaurav Mittal and Reshabh Kumar Sharma have proposed a validation framework that identifies the states required for success and evaluates agents against those outcomes rather than a single prescribed execution path. ...more

A recent capability in Drupal testing allows Kernel tests to make HTTP requests, enabling developers to replace some Browser tests with faster alternatives. While not a complete substitute, this shift can reduce execution time, simplify debugging, and lower CI pipeline costs. The approach requires careful selection, as Kernel tests lack session handling and full browser simulation, but it signals a practical change in how Drupal test suites can be structured. ...more

A new rule in phpstan-drupal identifies unresolved @todo comments tied to active Drupal.org issues during merge requests. Introduced by Matt Glaman, it integrates with GitLab CI pipelines to prevent issue-specific placeholders from being merged into code. The update shifts todo management from manual review to automated enforcement within development workflows. ...more

Version 2.2.1 of the File Upload Secure Validator module introduces a maintenance-focused update aligned with Drupal 11 and upcoming Drupal 12 requirements. Maintainer Stefanos Petrakis reports that the release resolves CI failures, removes deprecations, and expands automated testing. The update reflects ongoing efforts to stabilise widely used security-related modules without introducing new features. ...more

amazee.io will host a webinar titled “Uncover Hidden Vulnerabilities with Dependency-Track” on 8 April 2026, focusing on continuous approaches to software supply chain security. The session will explore how Dependency-Track enables real-time visibility into vulnerabilities, supports SBOM-based monitoring, and integrates with CI/CD pipelines for automated policy enforcement. Featuring Sean Hamlin and Lauren Morris, the event situates dependency risk management within broader shifts toward continuous security practices. ...more

In a recent blog post, John Picozzi revisits Drupal’s configuration management system with a renewed focus on Config Split. He outlines how separating configuration by environment or feature supports more predictable deployments in CI/CD workflows. The post draws on training experience to reinforce structured configuration practices across multi-environment setups. ...more

Droptica highlights ten frequent maintenance issues that put Drupal sites at risk. The guide explains how weak processes, manual workflows, or missing audits lead to performance, security, and downtime problems. It also outlines actionable practices to prevent costly failures. ...more

In his blog post, Shibin Das explains the motivation behind building FlowDrop, a backend-agnostic visual editor for configurable workflows. Designed to let teams keep orchestration and execution in-house, FlowDrop helps reduce latency, improve compliance, and support safer iteration without vendor lock-in. ...more

Cheppers showcases how automation and AI can embed accessibility into the daily workflow of Drupal development. Their internal WCAG testing system identifies issues early, helps content teams act fast, and supports compliance with evolving accessibility standards like WCAG 2.2 and beyond. ...more

The ⁠Drupal Association has been awarded €201 000 by the ⁠Sovereign Tech Fund to upgrade its self‑hosted GitLab infrastructure—targeting enhanced security issue workflows, streamlined CI/CD testing across thousands of repositories, and improved UX/design contributor tooling for the global Drupal community. ...more

Cancer Australia's new website, built by PreviousNext, is the team's first live Drupal 11 project and showcases the capabilities of GovCMS PaaS. The project leverages a modern stack including OpenSearch, Vite, and Storybook, all tied into a streamlined GitLab CI pipeline. With innovations in local development, testing, and component architecture, it sets a new benchmark for Drupal-based government sites. ...more