News
Updated 25 Oct, 05:30
79 articles · page 1 of 2
-
A Week of Symfony #1034 (October 19–25, 2026)
This week, development activity focused on polishing and fixing the new features of the upcoming Symfony 8.2 version. In addition, we showcased some of them, including the new JsonSchema component, signed Messenger transports, safer HTML…
-
Palantir: PHP2Shell: What Happened and How to Know Your Site Is Safe
PHP2Shell: What Happened and How to Know Your Site Is Safe demet Fri, 10/23/2026 - 10:18 A pair of critical PHP vulnerabilities affected much of the web this week. Here’s how they were fixed, how to check your site, and how to stay…
-
The Drop Times: Bringing Drupal Learning Closer to Home: Southwestern Ontario Drupal Camp 2026
Major Drupal conferences can be difficult to attend for people with limited budgets or family commitments. Megan McDermott explains why regional events matter and how local sponsorship helps bring learning opportunities within reach.
-
The Drop Times: Southwestern Ontario Drupal Camp 2026 Tackles AI Trust and Drupal 12 Readiness
How much should developers trust AI, and what changes will Drupal 12 demand of maintainers? Nine speakers share practical lessons on development, accessibility, infrastructure and governance ahead of Southwestern Ontario Drupal Camp.
-
SymfonyCon Warsaw 2026: You Are (Not) a Machine
Two days of sharing, learning, and catching up with friends in the ecosystem: SymfonyCon Warsaw 2026 arrives November 26-27 with 3 parallel tracks and community activities. 🎤 Speaker announcement We are honored to have Peter Dietrich…
-
DXPR: Drupal dropdown menus: how to build them in Drupal 11
Drupal dropdown menus: how to build them in Drupal 11 Jurriaan Fri, 10/23/2026 - 08:27 A dropdown menu in Drupal 11 always starts in the same place: the core menu system, where you nest links under a parent. What turns that structure into…
-
New in Symfony 8.2: More MongoDB Integrations
Symfony already supports MongoDB for storing sessions and managing locks. In Symfony 8.2, you can also use it to cache data and queue messages with Messenger. MongoDB Cache Adapters…
-
DXPR: Drupal 11 Layout Builder tutorial: sections, blocks and overrides
Drupal 11 Layout Builder tutorial: sections, blocks and overrides Jurriaan Fri, 10/23/2026 - 07:12 Layout Builder is Drupal's own page layout tool. It ships with Drupal 11 core, it works on any content type, and it lets a site builder…
-
DXPR: Drupal website examples: 16 sites running on Drupal in 2026
Drupal website examples: 16 sites running on Drupal in 2026 Jurriaan Fri, 10/23/2026 - 07:00 Drupal runs some of the busiest public websites in the world, and most of them do not look like each other. That is the point of this list. Every…
-
Stuart Clark (Deciphered): Druxt 0.25.0; caching and performance buffs
Druxt is the Fully Decoupled Drupal framework for Nuxt 2, and 0.25.0, the first Druxt release since 2023, makes it ask Drupal a lot less. On druxtjs.org, the Druxt docs site, a page render made 17 requests to Drupal. On 0.25.0 it makes 11…
-
Learn Model Context Protocol (MCP) Security
MCP bridges the gap between your AI agents and your external tools, allowing them to send Discord messages, read your emails, and interact with your environment. But this massive leap in capability co
-
Drupal Association blog: After the PHP security release: auditing your Drupal sites
First things first: if you have not yet updated PHP to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 (or your host's or distribution's patched build), do that right away. See PSA-2026-10-20 from the Drupal Security Team and the PHP project's security…
-
Talking Drupal: Talking Drupal #575 - The Drupal Advocacy Program
Today we are talking about Drupal Advocacy, Non-Code Contribution, and the future with guest Tiffany Farriss. We'll also cover Better Social Sharing Buttons as our module of the week. For show notes visit: https://www.talkingDrupal.com/575…
-
How bug bounty sharpens one researcher’s security skills
As Cybersecurity Awareness Month continues, the GitHub Bug Bounty team spotlights @r31n, diving into their research approach, favorite bug classes, and advice for aspiring hackers. The post How bug bounty sharpens one researcher’s security…
-
Drupal AI Initiative: Vibe Coding Drupal: The Pragmatic Middle Path
Author: Martin Anderson-Clutz (mandclu) Republished with permission from Acquia Vibe coding or AI rejection? Learn the pragmatic middle path for Drupal teams: what to delegate to AI, when, and how to verify it. At the Dev AI Summit at…
-
The Drop Times: Drupal 12 Upgrade Guide: Release Date, Requirements and Removed Modules
Drupal 12.0.0 is scheduled for the week of 7 December 2026, the same week Drupal 10 reaches end of life, and requires PHP 8.5 and at least Drupal 11.3.
-
Metadrop: Drupal CLI in core finally landed in 11.4, how and why we got here
Drush is part of almost every serious Drupal project: it rebuilds caches, runs database updates, imports configuration and drives deployments. With Drupal 11.4, core ships its own command-line tool, dr, and the initiative behind it openly…
-
Gábor Hojtsy: Who would have thought the Drupal plural translation experience can be this much better?
Who would have thought the Drupal plural translation experience can be this much better? Did you know that Drupal only learns how many plural variants a language has from imported .po files? It has a very fast lookup table to pick the…
-
SymfonyCon Warsaw 2026: Symfony UX + Symfony AI: Taking Agent Interactions to the Next Level
Warsaw is hosting this year’s global Symfony meetup on November 26-27! Come hang out at SymfonyCon Warsaw 2026 to learn, exchange ideas, and meet developers from around the world. 🎤 Speaker announcement Huge welcome to Mathéo Daninos, Core…
-
New in Symfony 8.2: HTTP Trailers
HTTP trailers are header fields that servers send after the response body. They are useful when a value is only known once the whole body has been generated, like a checksum of the content or the final status of a streamed operation. The…
-
Gspikes: Nonprofit Website Design: Lessons From 84 Nonprofit Drupal Projects
What 84 nonprofit Drupal projects prioritised, the eight homepage elements that turn visitors into supporters, how to design the donation path, and which platform fits your nonprofit.
-
The Drop Times: DrupalCamp Italy 2026 Speakers Preview AI Migrations, Civic Platforms and Enterprise Security
Behind some of Drupal's most demanding projects are difficult decisions about scale, security and legacy systems. Six speakers reveal what they have learnt, what surprised them and what they will bring to the stage in Bologna.
-
PreviousNext: How we secured our clients’ Drupal sites with critical PHP security updates
On Tuesday 20 October (Wednesday morning in Australia), the PHP Foundation announced the pending release of fixes for two critical security vulnerabilities in PHP, the language Drupal is written in. The release was scheduled for 14:00 UTC…
-
Dynamosys Insights: PHP2Shell: Updating Drupal Won’t Fix These Critical PHP Flaws
Drupal has issued a security alert following the discovery of two critical PHP vulnerabilities. Patches are now available, and site owners should confirm that their hosting environment has received both fixes, even if Drupal itself is…
-
Drupal Association blog: Contribution credit updates: higher weights for core and core security work
We've changed how contribution credit is weighted on Drupal.org, and the changes are now live. If you watch the Drupal Marketplace you may have noticed some organizations shift position as a result; this post explains what changed and why…
-
Omega8.cc: The Ninety-Minute Recall
On Tuesday PHP's security team gave notice of two critical bugs, both scored 9.2, with the fixes due on Wednesday at 14:00 UTC. By Wednesday morning every BOA server, PHP 5.6 to 8.6, had switched off one setting which neither Drupal nor…
-
Darren Oh: Bring hands-on demos to your content with Drupal Forge
Bring hands-on demos to your content with Drupal Forge Marketing and training often ask people to imagine what a product or process can do. A screenshot, video, or live presentation helps. But there is a real difference between seeing a…
-
What Is Model Distillation? A Guide for Developers
Over time, knowledge has been passed down in various forms. Before writing was invented in ancient Mesopotamia (modern-day Iraq), laws, history, myths, songs, and other information were all transferre
-
Centarro: A Shared Cart Across Brands Is Only Half a Feature
When a company sells under several brands, someone eventually asks the obvious question: why can't customers put products from every brand into one cart and check out once? It sounds like a small improvement to the shopping experience, but…
-
How to Diagnose vite: not found After npm ci in a Container Build
I recently worked on a project where a Node.js application used Vite to compile its frontend. It worked in a browser-hosted development environment, but its image build failed after the move to Azure
-
The bridge to agent-scale Git infrastructure
We moved a copy of 99.99999% of GitHub's repositories to Azure. Here's how per-reference quorums will bring over the rest, and how object storage lets reads scale independently. The post The bridge to agent-scale Git infrastructure…
-
Gspikes: HIPAA-Compliant Website on Drupal: What It Actually Takes
What makes a healthcare website HIPAA compliant on Drupal: the three places patient data gets in, the BAA question, the tracking-pixel rules after AHA v. Becerra, the module stack, and what 46 healthcare Drupal projects actually prioritise.
-
Nuvole: PHP-first AI agents for Drupal, built on Neuron AI
We're introducing AI Neuron, a module that bridges Drupal with Neuron AI, a PHP framework for building agents, tools and multi-step workflows. When you’re building AI features in Drupal, the AI module is the obvious place to start. It…
-
Aten Design Group: Mercury Editor 3: A Better Visual Editing Experience for Drupal
Mercury Editor 3: A Better Visual Editing Experience for Drupal Justin Toupin Wed, 10/21/2026 - 07:29 Drupal Mercury Editor Last week, I pushed a stable release for Mercury Editor 3. It's been a long time coming, and I'm excited to share a…
-
SymfonyCon Warsaw 2026: Your Parents Holidayed in Yugoslavia
Whether you've been using Symfony for years or just started, SymfonyCon Warsaw 2026 is a great place to connect. Join us in Poland on Nov 26-27 for 3 tracks of community talks and side events. 🎤 Speaker announcement We're happy to confirm…
-
Giorgio Pagano: How do you declare AI-generated audio or a cloned voice on a Drupal site, with AI Disclosure?
Audio has no picture to put an icon on, so the European Code of Practice asks for it to be declared by voice. Here I follow how version 1.0.0-beta1 of AI Disclosure, the module I created on drupal.org within the Drupal AI Initiative, does…
-
Build a Hybrid Search Engine in PostgreSQL: BM25 + Vector Retrieval
Most application search setups force a trade-off: settle for simple text filters, or manage a separate search cluster like Elasticsearch with complex synchronization pipelines. In a new video course o
-
Fragments: October 21
Gergely Orosz is frustrated at those that entered his explicitly “No AI” essay competition and used AI. He goes on to say: When I start to suspect some part is AI about someone I don’t know: how can I tell how much of it is? And how much…
-
New in Symfony 8.2: Signed Transports and Secret Rotation
Symfony 7.4 introduced signed messages in the Messenger component, so a forged message injected into your queues can't trigger sensitive handlers, like the ones that run commands or processes. Symfony 8.2 moves signing from handlers to…
-
How Neural Networks Work: Why Straight Lines Aren't Enough
A straight line equation is a good place to start understanding how a neural network works. It's what we explored in my previous article, How Neural Networks Work – Explained Using the Straight Line E