Composer

PHPverse 2026 will bring PHP ecosystem contributors together for a free online programme on 9 June 2026. The agenda includes sessions on Drupal, Symfony project governance, Composer and Packagist supply chain security, PHP RFCs, The PHP Foundation, WordPress, Laravel, and AI-assisted development. For Drupal readers, Mike Herchel’s session situates recent Drupal developments within a broader discussion of modern PHP workflows and platform adoption. ...more

Composer 2.10 has been released with native malware filtering enabled by default for Packagist users, expanding the project's software supply-chain security capabilities. The update also introduces a unified dependency policy framework, new package-management controls, and workflow improvements aimed at helping developers manage software risk more effectively. ...more

An introductory Drupal 11 course by Peter Majmesku is listed on Udemy, covering installation, dependency management, and configuration basics. The material targets developers and site builders seeking a structured entry point into Drupal workflows rather than advanced implementation guidance. ...more

A new Drupal AI Playground entry by Jacob Rockowitz explores how agent-based workflows and Composer can assist in managing large sets of contributed modules. The post shifts focus from module creation to maintenance, outlining how AI can handle repetitive tasks such as cloning repositories and organising dependencies. It also highlights practical considerations around tooling reliability and infrastructure load. ...more

Version 2.0.0 of composer-drupal-lenient introduces support for Composer’s why-not and prohibits commands, along with a runtime hook to bypass core version checks. Announced by Matt Glaman, the update allows developers to install and test modules that would otherwise be blocked by strict compatibility declarations. The release targets upgrade scenarios where version constraints prevent otherwise functional code from being used. ...more

James Shield’s Advent Day 19 post features Carlos Ospina’s DrupalCamp Asheville talk on mastering Drupal updates. With a structured, confident approach and smart use of tools like Upgrade Status, site maintainers can navigate version bumps, custom code, and API changes without fear. ...more

The BEE Hotel module for Drupal has released version 2.25.8, marking a major architectural update. A new service-oriented design streamlines the reporting system and enhances maintainability. This release introduces responsive UI improvements, internationalization readiness, and improved guest tracking, delivering immediate benefits for hotel management operations. ...more

Composer 2.9 is now available, featuring automatic security blocking, CLI repository tools, lock file conflict recovery, and several performance boosts. The update enhances package safety and simplifies workflows for PHP developers. ...more

Mohammad Zomorodian, Lead Support Engineer at Acquia, shares lessons from DrupalCon Vienna on the most common Composer issues encountered in enterprise Drupal sites—from PHP mismatches to vendor directory confusion. Based on real support cases, this guide outlines practical fixes to streamline builds and reduce deployment errors. ...more

Composer Patches 2.0.0 introduces a patches.lock.json file for reproducible builds, Git-based patching for consistency, and a plugin API for extensibility. Developed by Cameron Eagans, the update enhances patch workflows across PHP ecosystems like Drupal, Magento, and TYPO3. Dependency patch resolution returns by popular demand. ...more

The Halloween Lights module has been updated for Drupal 11 by Justin Keiser, letting site builders easily add glowing pumpkin decorations to non-admin pages. Inspired by festive modules from past years, the project now offers greater compatibility while keeping its playful, seasonal charm. ...more

Coder, the foundational coding standards tool for Drupal, has entered a new development phase with version 9.0.0-alpha1. Maintainer Klaus Purer is updating the module for compatibility with PHP CodeSniffer 4 and is actively seeking community feedback on API-breaking changes. Developers are encouraged to test the release and contribute to the ongoing refinement. ...more