Drupal Association

Delaying new package versions gives security systems more time to flag potential compromises. But cooldown policies can also postpone urgent fixes and affect existing dependency selections. ...more

A company’s contribution ranking can depend heavily on one maintainer. What else does the public record reveal? ...more

Organizations staying on a previous Drupal minor release will have roughly two months after its successor arrives before security coverage ends. The tighter window comes as maintainers confront rising vulnerability reports and shrinking release-management funding. ...more

A security fix can be ready before an installable update is. Public maintainer records show how branching, testing and packaging complicate the final stages of releasing Drupal security updates. ...more

Organisations without in-house developers may have a new way to support the maintainers behind the Drupal modules they depend on. How would that responsibility fit into certification? ...more

Companies already contributing to Drupal may find that their work carries more weight. A higher contribution score, however, does not automatically mean a higher Certified Partner tier. ...more

Drupal.org accepts AI-assisted work only from contributors who have checked it, can explain every change and say when a tool wrote a significant share. ...more

A patched server may still hold evidence of an earlier intrusion. Amazon's earliest reported PHP2Shell attack attempt occurred four days before public disclosure, raising questions about activity that preceded emergency updates. ...more

The proposed international federation already has a draft business model and a history of community consultation. Jürgen Haas argues that defining its purpose and governance should come before negotiating the interests of prospective members. ...more

Shared code creates shared security needs. European product rules raise a more specific question: who must act? ...more

Japan's Drupal community now has a new voluntary association with a formal NPO application under review. Its first work begins before legal incorporation is complete. ...more

Drupal is moving more essential services away from long-time donated hosting at OSUOSL while AWS credits support a cloud footprint that already handles millions of CI jobs each year. ...more