| Version | Change log |
| Drupal 11.3.3 Feb 6, 2026 |
All changes since 11.3.2: task: #3566054 Add heddn as a maintainer of the Image subsystem task: #3566053 Add heddn as a maintainer of the Authentication and Authorization subsystem task: #3566049 Add amateescu as a maintainer of the Workflows subsystem test: #3571492 Several tests fail on PHP 8.1 on 10.6.x because of requirements issues fix: #3463524 editor_post_update_sanitize_image_upload_settings fails on missing text format Reapply "task: #3571196 Update symfony/process constraint" task: #3570133 PHPUnit security update Revert "task: #3571196 Update symfony/process constraint" task: #3571196 Update symfony/process constraint fix: #3567770 Media Library message persists after deselecting items to fix overflow docs: #3532469 Documentation mentions Drupal being fully "repaired" fix: #3566568 The short description for the DrupaluserAccountForm class is not correct fix: #3569778 Fix link in DrupalTestspackage_managerKernelTestSandboxManager::__sleep doc fix: #3564510 TypeError: DrupalCoreUtilityThemeRegistry::getGlobalPreprocess(): Return value must be of type array fix: #3570220 RoleSettingsForm::submitForm() should not load config overrides fix: #3570219 BlockListBuilder::submitForm() should not load config overrides fix: #3565213 Adjust contextual CSS for navigation module reset CSS fix: #3568141 Try to avoid style recalculation in Olivero's isDesktopNav fix: #3564880 BigPipe placeholders with identical IDs are not all replaced docs: #3563727 Fix PHPStan missingType.generics for ArrayIterator not specifying its types feat: #3535230 Reverted revision is not listed on the version history when using Set as current revision Revert "feat: #3535230 Reverted revision is not listed on the version history when using Set as current revision" feat: #3535230 Reverted revision is not listed on the version history when using Set as current revision feat: #3556794 preprocess_HOOK__candidates in themes can be assigned to module invoke maps |
| Drupal 11.3.2 Jan 9, 2026 |
All changes since 11.3.1: performance: #3566156 APCu FileCache can consume a ton of memory due to caching procedural hook data since Drupal 11.1 feat: #3563812 Top bar CSS does not set text colour task: #3565943 [security hardening] Update composer to 2.9.3 fix: #2339921 Undefined variable: groups in DrupalviewsPluginviewsfilterFilterPluginBase::groupForm Revert "fix: #2339921 Undefined variable: groups in DrupalviewsPluginviewsfilterFilterPluginBase::groupForm" perf: #3559030 Installing from existing config causes massive cache.config population and slow installs fix: #3516264 CKEditor 5 loads all plugin translations on AJAX operations fix: #3542774 The “reduce motion” setting in the operating system should be respected fix: #3564548 update_post_update_fix_update_emails() can fail on invalid config fix: #2339921 Undefined variable: groups in DrupalviewsPluginviewsfilterFilterPluginBase::groupForm fix: #3565218 [random test failure] ResponsiveImageFieldUiTest::testResponsiveImageFormatterUi() fix: #3564926 Fix the documentation for SystemAdminMenuBlockAccessCheck::access() first parameter fix: #3560690 Functional update tests consistently fail on mysqli task: #3562159 Make it easier to run test-only job against different PHP / DB combinations fix: #3562676 Fix type hints with wrong case in @param and @return annotations fix: #3553342 Race condition in LocalTaskManager::getLocalTasks() with fibers fix: #3555152 Move skip_procedural_hook_scan cleanup to HookCollectorKeyValueWritePass fix: #3551373 [random test failure] ManageDisplayTest testFormatterUI() and testWidgetUI() fix: #3557585 Update to Composer 2.9.2 Back to dev. |
| Drupal 11.3.1 Dec 19, 2025 |
All changes since Drupal 11.3.0: fix: #3562753 History module triggers ServiceNotFoundException for comment.manager when Comment module is not enabled fix: #3563876 TypeError: trigger_error(): Argument #2 () must be of type int, string given in trigger_error() |
| Drupal 11.3.0 Dec 18, 2025 |
All changes since Drupal 11.3.0-rc2: Fix: #3446368 SymfonyMailer RfcComplianceException when sending to multiple comma-separated addresses Fix: #3558939 options_config_install_test has unnecessary Body field Fix: #3559059 Add UserAuthenticationInterface alias to user.auth service Docs: #3496417 Fix PHPStan missingType.generics for FieldItemListInterface not specifying its type Task: #3549727 Fix LongLineDeclaration in module Controller, Hook and Database directories |
| Drupal 11.2.10 Dec 16, 2025 |
Navigation is now stable: The Navigation module is now stable and safe for use on production sites. Navigation provides a collapsible, vertical sidebar for Drupal's administrative user interface. It is a significant improvement for Drupal's administrative user experience. Navigation will replace Drupal's existing Toolbar in the Standard profile in a future release, but there are known major and critical bugs that must be resolved first, including known accessibility issues: 3541728: Submenu opened with hover does not close by Escape key when another menu item has focus 3541910: Elements in closed sidebar are focusable 3443571: Mobile version of Navigation should have focus trap 3443830: Navigation layout Drag is not working in some browers 3542774: The “reduce motion” setting in the operating system should be respected PHP dependency changes: Symfony components have been updated to Symfony v7.4.0. Frontend (CSS and JavaScript) production dependency changes: CKEditor has been updated to CKEditor v47.3.0. All changes since Drupal 11.3.0-rc1: fix: #3274635 [upstream] Use CKEditor 5's native <ol type> and <ul type> UX revert: #3365985 Promote justinrainbow/json-schema from dev-dependency to full dependency task: #3502752 Deprecate migrate destination plugins needed only for site upgrades fix: #2550977 FileItem::generateSampleValue() should generate files with the actual allowed extensions fix: #3562009 Off canvas on the right is now always full-width fix: #3127026 Not possible to override an entity type class multiple times task: #3549630 Fix LongLineDeclaration in several core/tests/Drupal directories fix: #3562319 [regression] The installer does not properly load the theme task: #3549629 Fix LongLineDeclaration in Tests/Component task: #3551596 Add return types to core/tests code via Rector - round 1 fix: #3560833 Create better way to manage theme setting alters ci: #3559601 [CI] Group DB jobs differently to improve UI fix: #3555974 HttpExceptionNormal |
| Drupal 11.2.8 Nov 13, 2025 | This release fixes security vulnerabilities. |
| Drupal 11.2.7 Nov 6, 2025 | This release fixes a regression in Drupal 11.2.6 which caused an unintended backwards compatibility break with the webform module. There are no other changes compared to 11.2.6. |
| Drupal 11.2.5 Oct 3, 2025 |
All changes since 11.2.4: Issue #3522754 by hfernandes, catch, joaopauloc.dev, alexpott: Access to systemAdminMenuBlockPage is denied if it contains links using the url attribute Issue #3549023 by joachim, ishani patel: remove obsolete comment about issue 2513094 Issue #3532771 by jepster_, quietone, smustgrave, xjm, dcam, poker10: Misleading method parameter comment for Issue #3537413 by codebymikey, smustgrave, quietone: Add codebymikey as a subsystem maintainer for the Basic Auth module Issue #3541862 by avpaderno, smustgrave: The output shown for example code is wrong Issue #3408607 by larowlan, poker10, smustgrave, akhil babu, ghost of drupal past, chhavi.sharma, luismagr: Document that EntityAccessControlHandler::checkFieldAccess returns AccessResultAllowed by default Issue #3489026 by phenaproxima, ajinkya45: Document InputCollectorInterface Issue #3544005 by benjifisher, nicxvan, luismagr: hook_field_type_category_info_alter should not be in group field_purge Issue #3052479 by hart0554, longwave, andregp, catch, alexpott, pflora, asad_ahmed, smustgrave, dcam, abhijith s, pooja saraah, aarti zikre, ravi.shankar, xjm: ShortcutSetForm ID element description is wrong and misleads users Issue #3543939 by penyaskito, grimreaper, catch: SDC `ComponentRenderTest` is error-prone Issue #2334319 by joelpittet, berdir, fabianx, thenchev, calebtr, xjm, slashrsm, dawehner, andypost, alexpott, lauriii, webflo, duaelfr, godotislate, acbramley, wim leers, manuel garcia, quietone: {% trans %} does not support render array and MarkupInterface valued expressions Issue #3537382 by jurgenhaas, smustgrave: Link attributes in top bar are lost for featured links Issue #3542967 by dcam, smustgrave, mondrake: Bad test in LinkNotExistingInternalConstraintValidatorTest Issue #3269890 by prudloff, smustgrave, catch, shalini_jha, alexpott, oily: #date_year_range is not validated server-side Issue #3539537 by drunken monkey: Deprecation warning in DefaultPluginManager::__construct() is too |
| Drupal 11.2.1 Jun 26, 2025 |
All changes since Drupal 11.2.0: Issue #3340142 by mstrelan, quietone, xjm: Convert testJail() to use expectException Issue #3525174 by benjifisher, smustgrave, greggles, catch, larowlan, mcdruid: Clean up unserialize() in the config system Issue #3494354 by catch, mstrelan, acbramley, smustgrave: AssetResolver::getJsAssets cache id doesn't consider attached settings, leads to ajax issues Issue #2987548 by alexpott, johnv, euphoric_mv, HbtTundar, cilefen, xjm, samlerner, pratip.ghosh, jrochate, alezu: LogicException: The database connection is not serializable Issue #3530730 by catch: Remove catch as maintainer of the 'path' and 'taxonomy' modules Issue #3531412 by alexpott, xjm, nicxvan, catch, longwave: New constants in DrupalCoreThemeRegistry are private but they are accessed with static:: Issue #3521884 by nigelcunningham, nod_, smustgrave, catch: tableresponsive.js causes huge page load time for extensions page Issue #3531044 by godotislate, nicxvan, zigazou: Unknown fieldViewsDataHelper method called from deprecated datetime_type_field_views_data_helper function Issue #2866619 by acbramley, kksandr, shabana.navas, hkirsman: Don't use link in message after node save if user doesn't have permissions Issue #3414173 by joelpittet, anybody, nicxvan: Add support for minified external CSS libraries Issue #1822440 by mohit_aghera, acbramley, smustgrave, dawehner, ezra-g, catch: "Content access" filter should check for node_grants implementations before adding node access grant queries Issue #3109284 by prudloff: locale_translation queue loop Issue #2776661 by brandonlira, ameymudras, er.pushpinderrana, quietone, joachim: incorrect uses of isRebuilding() in inline docs in processForm() Issue #3525031 by mondrake, andypost: [CI] Run PHPStan job on PHP 8.4 Issue #3530843 by catch, mondrake: Adjust performance test job for new phpunit discovery |
| Drupal 11.2.0 Jun 19, 2025 |
All changes since Drupal 11.2.0-rc2: Issue #3514262 by berdir, smustgrave, xjm, quietone: entity_browser_entity_form_field_widget_third_party_settings_form hooks can no longer return NULL Issue #3530363 by catch, smustgrave: Add @group #slow to some additional tests Issue #3526397 by catch: Split PackageInstallTest into two Issue #3497431 by mondrake, catch, larowlan, godotislate, jonathan1055, fjgarlin, xjm: Deprecate TestDiscovery test file scanning, use PHPUnit API instead Issue #3497647 by prudloff, xjm, quietone: StringDatabaseStorage::deleteStrings() does not work Issue #3529714 by mstrelan, xjm, smustgrave, acbramley: Add return types to EntityDefinitionTestTrait Issue #3476224 by pwolanin, heddn, bbrala, tstoeckler: JSON:API assumes entity reference field's main property must be the entity ID Issue #2473093 by acbramley, xjm: Node access default grant behavior is not clear Issue #3497431 by mondrake, catch, larowlan, godotislate, fjgarlin: Deprecate TestDiscovery test file scanning, use PHPUnit API instead |
