The latest news from the world of Drupal

Joined November 2021
Compass is being extended to show which Drupal component makes a page uncacheable. Traces expose max-age, cache contexts, tags, and the responsible caller. Skpr CLI integration is still planned. bit.ly/46xWWmD #Drupal #DrupalPerformance #Caching
1
89
Entity Usage 5.0 adds stable Drupal 12 support, but upgrading from 2.x requires rebuilding all usage data. Custom tracking plugins may also need migration from annotations to PHP attributes. bit.ly/4xvNzP7 #Drupal #Drupal12 #DrupalModules
85
Drupal events from September 22–28 include community-safety training before DrupalCon Rotterdam opens September 28 alongside Government, Enterprise AI, and Drupal AI developer summits. bit.ly/4rn8IK1 #Drupal #DrupalCon #DrupalAI
1
89
Drupal 12 beta1 missed its scheduled September release week. No revised beta date is published, while RC1 remains scheduled for November and stable for December. Alpha1 remains the current Drupal 12 testing release. bit.ly/4yPjStl #Drupal #Drupal12 #DrupalCore
1
92
OpenKnowledgebase uses Drupal 11 for permissions, workflows, revisions and APIs, with Nuxt, OpenSearch and MCP supporting an AI-ready knowledge platform. Its first public beta is still forthcoming. bit.ly/3SWLFsS #Drupal #DrupalAI #MCP
1
55
Georgia will apply GovRAMP-aligned requirements to new cloud contracts from October 1, with full verification mandatory in July 2027. For Drupal suppliers, cloud services—not Drupal itself—are the key boundary. bit.ly/4yJdpjE #Drupal #GovRAMP #GovTech
49
OpenAI’s Agents API adds an MCP client path for testing Drupal Agent Access. Both support HTTP MCP and authentication, but no published end-to-end integration has yet been confirmed. bit.ly/4xummfF #Drupal #DrupalAI #MCP
41
Four reusable tender clauses help councils assess supplier collaboration, shared development, roadmaps, customer influence, and open standards. Craig Barker developed the wording shared by Will Callaghan. bit.ly/4AjXvOv #Drupal #LocalGovDrupal #Procurement
42
Werkzaak Rivierenland is tendering for a successor to its Drupal site, but Drupal remains eligible. Requirements include open source, lower custom complexity, accessibility, API-first design, and supplier transferability. bit.ly/4hbpozs #Drupal #OpenSource #GovTech
48
A rebuilt Drupal architecture separates imported data objects from public page nodes. Source updates no longer need to overwrite page titles, publication state, metadata, or Layout Builder configuration. bit.ly/4iDbvfN #Drupal #DrupalArchitecture #ContentModeling
67
Native Observability 2.0.0 replaces its fixed 10% overhead estimate with site-specific measurement. A new Drush command compares tracing on and off so Drupal operators can measure the actual cost. bit.ly/4yElvKq #Drupal #Observability #Performance
32
Drupal core updates fix a CKEditor 5 XSS flaw. Users who can create or edit content may target people who later open it through CKEditor. Update to 10.6.17, 11.3.17, or 11.4.7. bit.ly/4djDA8o #Drupal #DrupalSecurity #CKEditor
85
Revision Graph 4.0.0 now records which Drupal revision each new save came from. That gives reverts and multilingual branches stronger provenance, while existing history remains inferred. bit.ly/4rg3sHY #Drupal #DrupalModules #ContentGovernance
39
Researcher Matan Kotick says Claude found and validated a Critical SQL injection in the amazee[.]ai Drupal provider in about ten minutes. CVE-2026-87936 is fixed in 1.3.7 and 1.4.3. bit.ly/4ri7KOY #Drupal #DrupalSecurity #Claude
132
Path Alias Views exposes Drupal aliases as Views fields, filters, sorting, and entity relationships. Site builders can create content administration screens organized around URLs rather than titles or IDs. bit.ly/4Ai5kUT #Drupal #DrupalViews #DrupalModules
33
AI Context beta5 expands governed context beyond agents. AI Automators and CKEditor tools can now consume the same managed context, with configurable scopes and selection rules. bit.ly/3UYBxjV #Drupal #DrupalAI #AIContext
44
Larger Drupal advisory batches may reflect AI-assisted vulnerability discovery, not worsening contrib code. The initiative reported 30+ issues and contributions to 10+ advisories and CVEs in six weeks. bit.ly/4yF0IX7 #Drupal #DrupalSecurity #DrupalAI
57
AI Integration - ECA 1.0.0 is now stable. It exposes Drupal AI operations as actions inside ECA workflows and replaces the earlier AI-ECA integrations with one security-covered project. bit.ly/4xsR3lC #Drupal #DrupalAI #ECA
46
Drupal Canvas 1.11 replaces global regions with editable, theme-independent full-page templates. Existing regions can be migrated, while custom integrations should move from page regions to page variants. bit.ly/471Dlex #Drupal #DrupalCanvas #Drupal11
68