#drupalcore
LightNews LightNews
thedroptimes.bsky.social
Drupal’s security support window for minor releases is extending to eight months, giving site owners more time to plan upgrades while keeping supported branches covered for security fixes.

www.thedroptimes.com/73252/drupal...

#Drupal #DrupalSecurity #DrupalCore
Drupal security poster showing a calendar, padlock shield and a change from 12 months to 8 months of minor-release security support, under the headline “The Upgrade Window Is Shrinking.” | Beginning in 2027, standard Drupal core minor releases will receive eight months of security coverage instead of twelve, shortening the time available for site owners to upgrade between minor versions.
November 6, 2026 at 3:53 PM
thedroptimes.bsky.social
Drupal core has patched how PHP assertion configuration is handled, reducing the risk of environment-specific settings causing unexpected behaviour during development and testing.

www.thedroptimes.com/72972/drupal...

#Drupal #DrupalCore #PHP
Promotional graphic for Drupal 11.4.11, 11.3.20 and 10.6.20 maintenance releases, featuring a configuration checklist and magnifying glass, with the headline “Is Your Drupal Update Fully Complete?”
October 26, 2026 at 3:53 PM
thedroptimes.bsky.social
Drupal 12’s November development targets focus on code quality, with core contributors working through deprecations, static-analysis findings and other cleanup ahead of the next major release.

www.thedroptimes.com/72845/drupal...

#Drupal #Drupal12 #DrupalCore
A Drupal 12 graphic features layered gears in blue, charcoal and orange beneath the headline “Stricter Checks, Less Room for Disruption.” The illustration represents planned code-quality changes being coordinated ahead of Drupal's release-candidate phase.
October 16, 2026 at 12:00 PM
thedroptimes.bsky.social
Drupal core is changing how kernel tests isolate their environments, allowing more setup to be shared instead of rebuilt for every test. The work aims to reduce test overhead while preserving isolation where it matters.

www.thedroptimes.com/72834/drupal...

#Drupal #DrupalCore #Testing
A Drupal testing graphic shows rows of interconnected technical structures, with one highlighted in orange. The headline asks how much time is lost before tests run, reflecting a Drupal core change that allows kernel tests to reuse database environments.
October 16, 2026 at 11:47 AM
dynamosys.bsky.social
Drupal 11.4.10, 11.3.19 and 10.6.19 fix a critical remote code execution flaw. Update now, and check Gin and Entity List separately.
#Drupal #Drupal11 #DrupalSecurity #DrupalCore #SecurityUpdates #WebsiteMaintenance #Cybersecurity
Drupal 11.4.10: Critical Security Update | Dynamosys
Drupal 11.4.10 fixes a critical remote code execution flaw and two XSS vulnerabilities. Check affected versions, related updates, and next steps.
www.dynamosys.com
October 14, 2026 at 7:48 PM
dynamosys.bsky.social
Drupal 11.4.9 stops the admin sidebar shoving your page sideways, updates CKEditor 5, and lets recipes add several toolbar buttons at once. What changed and what to test.

#Drupal11 #DrupalCore #CKEditor5 #DrupalRecipes #WebsiteMaintenance #ContentEditing
Drupal 11.4.9: Sidebar and CKEditor Fixes | Dynamosys
Drupal 11.4.9 fixes navigation sidebar layout shifts, updates CKEditor 5, and improves recipe configuration. See what changed and what to test.
www.dynamosys.com
October 14, 2026 at 2:43 PM
ivanzugec.com
It's been a while since I installed just Drupal core, and it's quick and responsive.

Preparing for tomorrow's live stream.

#drupalcore #drupal
October 7, 2026 at 8:07 PM
thedroptimes.bsky.social
Drupal 12.0.0-beta1 missed its scheduled September release week, with several release-preparation tasks still being closed out. No revised beta date is published, while November RC1 and December stable targets remain unchanged.

https://bit.ly/4dpg2yY
##Drupal #Drupal12 #DrupalCore #OpenSource
September 21, 2026 at 3:35 PM
thedroptimes.bsky.social
Drupal 11.5 adds a Views post-save API so plugins can request route rebuilds and discovery-cache clearing only when needed. The longstanding views_invalidate_cache() helper is now deprecated.

https://bit.ly/4gVKu62
##Drupal #Drupal11 #DrupalCore #DrupalDevelopment
TDT Discover Drupal card on Drupal 11.5, highlighting a new Views post-save API that makes route rebuilds more selective and deprecates views_invalidate_cache() for module developers.
September 16, 2026 at 6:15 PM
thedroptimes.bsky.social
Drupal 11.3 core can return reduced HTML for HTMX requests through HtmxRenderer. Developers can invoke it with an HTMX route option or the drupal_htmx wrapper format.

https://bit.ly/4zZh4eQ
##Drupal #HTMX #DrupalCore
Shawn Duncan Explains How Drupal 11.3 Renders HTMX Responses
An HTMX interaction does not always need Drupal's full page output. Duncan shows how core can return the requested content and required assets while keeping cache variants separate.
bit.ly
September 3, 2026 at 5:23 PM
thedroptimes.bsky.social
Drupal core could gain YAML-defined pluggable authentication flows supporting multiple login methods and ordered authentication steps. The architecture remains under review, with no implementation shipped.

https://bit.ly/4y0uIfH
##Drupal #DrupalCore #Authentication
Lucas Hedding Outlines AI-Assisted Proposal for Drupal Core Authentication
The experiment puts AI in a planning role rather than a code-writing one, using it to organise a large issue backlog before contributors commit to an implementation.
bit.ly
August 27, 2026 at 2:41 PM
thedroptimes.bsky.social
Symfony 7.4 and 8.1 received maintenance updates across branches relevant to Drupal core.

Drupal 11.4 uses Symfony 7.4, while Drupal 12 development currently tracks 8.1.

https://bit.ly/4xYR7ds
##Drupal #Symfony #DrupalCore
TDT card on Drupal 11.4 remaining on Symfony 7.4 LTS while Drupal 12 development uses Symfony 8.1 ahead of a likely Symfony 8.2 dependency.
August 24, 2026 at 3:20 PM
thedroptimes.bsky.social
PHP 8.6 Beta 1 is available for testing, not production. Drupal core testing has already exposed compatibility warnings, including the spl_object_hash() deprecation. Drupal still lists PHP 8.6 as unsupported. #Drupal #PHP86 #DrupalCore
https://bit.ly/4c5A40V
August 21, 2026 at 7:53 PM
thedroptimes.bsky.social
Canvas Icon Picker connects Drupal Canvas components to core’s Icon API.

Component authors can turn eligible string properties into a searchable picker with pack filtering, previews, and keyboard navigation.

https://bit.ly/4xc0K8w
##Drupal #DrupalCanvas #DrupalCore #UX
TDT security card on WordPress 7.0.3 fixing 12 vulnerabilities, including a high-severity login XSS flaw, with patches backported to security-eligible branches through WordPress 4.7.
August 20, 2026 at 3:33 PM
thedroptimes.bsky.social
Pierre Dureau is now a full Drupal core Frontend Framework Manager after over a year provisionally.

Full status removes provisional limits on framework-manager sign-offs and core governance permissions.

https://bit.ly/4xbj4Pj
##Drupal #DrupalCore #OpenSource
TDT card on Pierre Dureau moving from provisional status to full Frontend Framework Manager for Drupal core.
August 19, 2026 at 3:06 PM
thedroptimes.bsky.social
Drupal 11.4.5 fixes an AJAX regression that could block administrators creating new content Views. Drupal 10.6.15 also shipped with its own patch fixes.

https://bit.ly/4xpIPuP
##Drupal #Drupal11 #DrupalCore #Views
August 7, 2026 at 2:39 PM
thedroptimes.bsky.social
Drupal core 11.4.4, 11.3.14, and 10.6.13 fix two XSS issues and one information disclosure issue. Drupal 10’s HTMX change hardens affected contrib modules.

https://bit.ly/4hg6DMP
##Drupal #DrupalCore #DrupalSecurity
TDT security card titled “Update Drupal Core, Then Review Contributed Code,” covering three moderately critical advisories and possible hardening for contributed projects.
July 17, 2026 at 12:52 PM
thedroptimes.bsky.social
Drupal 11.4.3 fixes a route discovery regression in Drupal core.

The bug affected Symfony-compatible route methods and schemes, and the release also includes additional routing and maintenance fixes.

https://bit.ly/4f4XhSH
##Drupal #DrupalCore #Drupal11 #Routing
TDT card on Drupal 11.4.3 fixing route discovery and adding maintenance fixes across the Drupal 11.4 branch.
July 15, 2026 at 3:54 PM
thedroptimes.bsky.social
Drupal 11.4 adds an experimental native CLI to core.

The new vendor/bin/dr entry point discovers Symfony Console commands from core and enabled modules, but it does not replace Drush for current projects.

https://bit.ly/4hb2Y2R
##Drupal #DrupalCore #Drush #CLI
TDT Discover Drupal card on Drupal 11.4’s experimental native CLI, titled “Core CLI Begins a Drush Transition.”
July 13, 2026 at 4:55 PM
thedroptimes.bsky.social
Drupal 11.4.0’s delay shows how dependency security updates can pressure core release planning.

The core-recommended change loosens minor pins for Twig, Guzzle, and Symfony polyfills.

https://bit.ly/4eUpSZs
##Drupal #DrupalCore #Composer #Security
Card reading “Why Drupal 11.4.0 Slipped,” noting that dependency security updates and patch work delayed the June release window.
July 2, 2026 at 6:27 PM
thedroptimes.bsky.social
Drupal 11.4.0 is now available with major core performance improvements.

The release adds faster recipe installs, Brotli support, an experimental ./vendor/bin/dr CLI, and the experimental Default Admin theme.

https://bit.ly/4yjusK3
##Drupal #DrupalCore #Drupal11 #Performance
Card for Drupal 11.4.0, highlighting performance gains, Brotli support, native CLI groundwork, and admin updates.
July 2, 2026 at 6:03 PM
thedroptimes.bsky.social
Drupal Security Team published eight advisories on 17 June: five for core, three for contrib.

Core fixes cover JSON:API, oEmbed, image upload validation, and deserialization risks.

https://bit.ly/4oBXorV
##Drupal #DrupalSecurity #JSONAPI #DrupalCore
Security card on Drupal advisories: update priority, JSON:API write access, and module-specific field handling.
June 18, 2026 at 2:45 PM
thedroptimes.bsky.social
Drupal.org’s 2026 core schedule sets key planning dates for Drupal 11.4, Drupal 12, and Drupal 10 support.

Drupal 10 reaches end of life on 9 December 2026.

https://bit.ly/43sFq1w
##Drupal #DrupalCore #Drupal12
Vertical TDT card: “Release Windows Shape Upgrade Planning” with deck on Drupal’s 2026 release milestones and support deadlines for Drupal 10 and 11 branches.
June 12, 2026 at 3:26 PM
thedroptimes.bsky.social
Drupal 12 plans to remove the Migrate Drupal and Migrate Drupal UI modules from core.

The modules supported migrations from Drupal 6 and Drupal 7, both now past end of life.

https://bit.ly/4uo2ryV
##Drupal #DrupalCore #Drupal12 #OpenSource
Drupal 12 plans to remove legacy migration modules from core
March 13, 2026 at 4:32 PM
thedroptimes.bsky.social
Drupal core has set the Navigation module as the default admin interface for new installations.

The change replaces the long-standing Toolbar module in the Standard profile and recipes.

https://bit.ly/40yUSaS
##Drupal #DrupalCore #DrupalDev #OpenSource
Drupal core sets Navigation module as default admin interface
March 13, 2026 at 3:53 PM