Drupal

Large organisations often need smaller web experiences for campaigns, departments, events, projects, or focused content areas, but each option creates long-term ownership and governance work. Dan Moriarty’s Electric Citizen post compares subsites, microsites, SaaS tools, existing CMS builds, new CMS installations, and simple redirects. The post is most useful for teams deciding whether a smaller site needs separate branding, navigation, design, or a domain, and how it will be managed after launch. ...more

Dries Buytaert argues that AI is not killing the CMS but separating content creation from content control. His article says AI tools may replace CMS platforms for simple publishing, while making content management systems more important wherever content must be structured, approved, reused, trusted, and distributed across teams, agents, and systems. ...more

Markdown has become a practical drafting format for Drupal teams working across notes apps, code editors, documentation systems, and AI-assisted writing tools. Jorge Tutor’s CKEditor5 Markdown module addresses the handoff into Drupal by converting pasted Markdown through an explicit editor dialog, then letting CKEditor5 enforce the active text format’s HTML rules. In written responses to The DropTimes, Tutor framed the module as a narrow fix for teams that want Markdown during drafting but not as the stored or rendered content format. ...more

Midgard arrives as an alpha-stage Drupal 11 module suite for a narrow but consequential problem: how to govern configuration changes made by AI agents. The project treats content types, Views, fields, and other site settings as operational changes that should be reviewable, risk-scored, approved, rolled back, and audited. Its reliance on existing Drupal projects, especially Config Guardian, gives the architecture concrete shape, but its pre-1.0 status and lack of security advisory coverage keep the story in evaluation territory for site teams. ...more

The June 2026 Drupal for Nonprofits chat is scheduled for 18 June at 17:00 UTC. The free call has no fixed agenda and is open to nonprofit Drupal developers and users at all experience levels, with joining details available through the group’s collaborative notes document. ...more

QED42 has opened a waitlist for EventHorizon, a Drupal-focused code-intelligence suite built on the scanning engine behind its open-source EventHorizon CLI. The CLI runs static analysis locally without AI, cloud upload, or telemetry, addressing audit environments where client code is covered by NDAs, data residency clauses, and security review. The broader suite adds visual dependency maps, code health views, and optional AI through user-controlled provider keys. ...more

Drup-AID 1.0.0-beta1 brings an agent-based model to Drupal administration, with a master agent coordinating sub-agents for content editing, knowledge base drafts, SEO review, security monitoring, leads, and analytics. The beta may interest teams testing AI-assisted operations inside Drupal, especially those already using provider-backed AI workflows, but the Drupal.org listing also states that the project is not covered by Drupal’s security advisory policy. The project page provides feature and installation details, including demo mode and Composer installation, but it does not include independent test results or detailed implementation examples. ...more

James Shields explains why update-hook testing for Drupal modules often needs database fixtures rather than ordinary test setup. Using Smart Trim as an example, the post shows how maintainers can dump a pre-update database, load it through functional update tests, run Drupal’s update path, and assert that stored configuration now matches the newer schema. It also covers fixture maintenance across Drupal versions, including separate database dumps for current, previous, and future major-version test targets, making the summary practical for maintainers responsible for upgrade compatibility. ...more

1xINTERNET examines why digital sovereignty has become a strategic concern for organisations operating critical infrastructure. The post connects foreign technology dependency, data governance, vendor lock-in, regulatory pressure, operational resilience, and open-source adoption, arguing that sectors such as water, energy, transportation, and manufacturing need deliberate technology strategies to reduce risk. ...more

Lock Entity adds per-entity deletion protection for Drupal sites that need to preserve selected records, such as nodes, taxonomy terms, users, or media items. The module lets administrators add locks from a configuration page, include an optional reason, prevent unpublishing of locked published entities, and export locks through configuration. Drupal.org notes that the project is not covered by Drupal’s security advisory policy. ...more

F5 Labs’ Sensor Intel report adds sensor-level evidence to the CVE-2026-9082 response, documenting how scanners probed Drupal JSON:API endpoints after disclosure rather than revisiting the advisory itself. Its useful contribution is the traffic pattern: 576 attempts from nine source IPs, common node endpoint rotation, correct JSON:API headers, blind SQL injection confirmation checks, and web application firewall evasion patterns that can help defenders tune monitoring beyond simple patch-status checks. ...more

Drupal events scheduled from 16 June to 20 June 2026 include webinars, online sessions, hybrid gatherings, and in-person meetups across Europe and North America. Topics include AI-assisted PDF publishing in Drupal, Drupal CMS discussions, Automatic Updates, favourite contributed modules, htmx, and decoupled site building with Drupal 11 and Next.js. ...more