Frontend teams no longer have to patch Druxt to expose additional Drupal configuration resources, but administrators still need to treat each enabled resource as broadly readable to permitted clients.
...more
Teams with long-running FlowDrop installations now get a clearer view of accumulated execution history, but version 2.6 stops at reporting rather than automatic deletion.
...more
The affected project remains unnamed, and the first advisory may not be the last one published that evening. The practical question is what operators can prepare before the module itself is disclosed.
...more
Diagnostic tools can add work while they investigate what a website is doing. Native Observability 2.0.0 now measures that added cost on the Drupal site where it runs instead of asking administrators to rely on a general estimate.
...more
Drupal is building one governed route for compatible external agents rather than separate integrations for each AI platform. OpenAI's new API provides another environment in which that approach can be tested.
...more
Georgia's Drupal-based GovHub shows why cloud-security procurement rules can matter beyond the CMS itself. Hosting and other managed service layers may carry verification requirements of their own.
...more
Large advisory batches can resemble a sudden decline in contributed-project security. Digital Matters argues that Drupal’s recent numbers should instead be read alongside changes in how vulnerabilities are being discovered.
...more
Editors may identify content by URL long before they think about node titles or IDs. Path Alias Views gives Drupal site builders a way to build administration interfaces around that path-first workflow.
...more
Rockowitz’s experience with AI coding tools raises a broader question about whether an agent could understand Drupal’s code while reflecting the community’s values.
...more