Contributed Modules

The Project Update Bot has begun posting Drupal 12 readiness patches for contributed projects, targeting deprecated API uses ahead of the next major release. Björn Brala says Drupal Rector rules now cover more than 80% of deprecated API uses introduced for the cycle, while updated submodule dependency handling should reduce failed scans and false errors. ...more

Drupal.org says the Project Update Bot has been refreshed for the Drupal 12 release cycle, with automated Rector rule coverage for more than 80% of deprecated API uses introduced in the release. The bot scans contributed modules and themes, opens patch issues, and now resolves submodule dependencies during analysis. The update gives maintainers a clearer path to review Drupal 12 compatibility fixes while retaining control over whether and how patches are applied. ...more

Drupal.org has advised sites to uninstall the Composer and Brute force attack protection contributed projects after two critical advisories marked them unsupported on 10 June 2026. Both advisories state that known security issues remain unfixed by the maintainers and list all released versions as affected. Drupal.org clarifies that the Composer advisory concerns a Drupal contributed project that uses Composer, not the Composer dependency manager itself. ...more

John Picozzi’s Drupal 11 upgrade post describes a site update where the core upgrade was straightforward after contributed module issues were resolved. The post covers Upgrade Status checks, PHP 8.4 as the recommended version for Drupal 11.3, Cloudflare and Mailgun compatibility work, Contact module migration, the switch from Juicer.io to Juicer, and a final Webform update before moving the site to Drupal 11.3. ...more

A proposal to introduce “Module Families” on Drupal.org aims to help users compare contributed modules that solve similar problems through structured comparison pages and ecosystem signals. The proposal argues that Drupal’s challenge is not excessive choice but insufficient context, an issue that becomes more important as Drupal CMS introduces curated module selections and opinionated workflows. ...more

Jacob Rockowitz has published a detailed account of building a Drupal contributed module using AI coding tools, outlining both the practical gains and the structural failures encountered during development. His experience with Claude Code and later OpenAI Codex highlights how AI-generated implementations can pass tests while failing in real use, requiring deeper testing strategies, revised workflows, and consistent human oversight to produce reliable Drupal code. ...more

A contributed module introduces multilingual support to Drupal Canvas by addressing issues that prevent the editor from functioning in language-prefixed environments. Developed by David Palmero Jara, the release resolves problems such as translation loss during autosave, broken editor loading, and missing assets. The module also implements an asymmetric translation model, allowing each language version to be edited independently while maintaining stability across multilingual sites. ...more

Most Drupal security advisories stem from preventable implementation mistakes rather than novel exploits. After reviewing two years of advisories and patches, Pierre Rudloff identified recurring patterns affecting contributed modules and documented them in the Drupal Security Tips repository. The findings offer maintainers a structured framework to audit their code and reduce avoidable risk. ...more

Search API Date Boost is a new Drupal module that improves search relevance by prioritising future and recent content using configurable date field boosting. Built for Drupal 11, it helps sites with event listings and time-sensitive content surface the most relevant results. ...more

Pivale has released Commerce Referral, a new Drupal module enabling configurable referral logic in Commerce sites. It allows distinct rewards for referrers and referees through full integration with Commerce Promotions. ...more

Timbers.Dev founder David Dowell highlights nine new Drupal contrib modules released in September 2025, ranging from polished UI enhancements to practical tools for security, automation, and AI-powered document workflows. ...more

A guest post by accessibility expert Mike Gifford explains how the European Accessibility Act (EAA) reshapes digital inclusion standards and highlights Drupal’s longstanding accessibility features, AI-assisted tools, and community practices designed to help organizations meet the new requirements. ...more