| Version | Change log |
| Drupal 11.2.1 Jun 26, 2025 |
All changes since Drupal 11.2.0: Issue #3340142 by mstrelan, quietone, xjm: Convert testJail() to use expectException Issue #3525174 by benjifisher, smustgrave, greggles, catch, larowlan, mcdruid: Clean up unserialize() in the config system Issue #3494354 by catch, mstrelan, acbramley, smustgrave: AssetResolver::getJsAssets cache id doesn't consider attached settings, leads to ajax issues Issue #2987548 by alexpott, johnv, euphoric_mv, HbtTundar, cilefen, xjm, samlerner, pratip.ghosh, jrochate, alezu: LogicException: The database connection is not serializable Issue #3530730 by catch: Remove catch as maintainer of the 'path' and 'taxonomy' modules Issue #3531412 by alexpott, xjm, nicxvan, catch, longwave: New constants in DrupalCoreThemeRegistry are private but they are accessed with static:: Issue #3521884 by nigelcunningham, nod_, smustgrave, catch: tableresponsive.js causes huge page load time for extensions page Issue #3531044 by godotislate, nicxvan, zigazou: Unknown fieldViewsDataHelper method called from deprecated datetime_type_field_views_data_helper function Issue #2866619 by acbramley, kksandr, shabana.navas, hkirsman: Don't use link in message after node save if user doesn't have permissions Issue #3414173 by joelpittet, anybody, nicxvan: Add support for minified external CSS libraries Issue #1822440 by mohit_aghera, acbramley, smustgrave, dawehner, ezra-g, catch: "Content access" filter should check for node_grants implementations before adding node access grant queries Issue #3109284 by prudloff: locale_translation queue loop Issue #2776661 by brandonlira, ameymudras, er.pushpinderrana, quietone, joachim: incorrect uses of isRebuilding() in inline docs in processForm() Issue #3525031 by mondrake, andypost: [CI] Run PHPStan job on PHP 8.4 Issue #3530843 by catch, mondrake: Adjust performance test job for new phpunit discovery |
| Drupal 11.2.0 Jun 19, 2025 |
All changes since Drupal 11.2.0-rc2: Issue #3514262 by berdir, smustgrave, xjm, quietone: entity_browser_entity_form_field_widget_third_party_settings_form hooks can no longer return NULL Issue #3530363 by catch, smustgrave: Add @group #slow to some additional tests Issue #3526397 by catch: Split PackageInstallTest into two Issue #3497431 by mondrake, catch, larowlan, godotislate, jonathan1055, fjgarlin, xjm: Deprecate TestDiscovery test file scanning, use PHPUnit API instead Issue #3497647 by prudloff, xjm, quietone: StringDatabaseStorage::deleteStrings() does not work Issue #3529714 by mstrelan, xjm, smustgrave, acbramley: Add return types to EntityDefinitionTestTrait Issue #3476224 by pwolanin, heddn, bbrala, tstoeckler: JSON:API assumes entity reference field's main property must be the entity ID Issue #2473093 by acbramley, xjm: Node access default grant behavior is not clear Issue #3497431 by mondrake, catch, larowlan, godotislate, fjgarlin: Deprecate TestDiscovery test file scanning, use PHPUnit API instead |
| Drupal 11.1.8 Jun 12, 2025 |
All changes since Drupal 11.2.0-beta1: Issue #3526142 by mondrake, xjm: Update PHPStan to 2.1.17 Issue #3529504 by acbramley, cmlara, nicxvan: Fix phpstan errors in UpdatePathTestTrait Issue #3528998 by grimreaper, larowlan, pdureau, xjm, wim leers, catch, penyaskito: Follow-up: SDC `enum` props should have translatable labels: use `meta:enum` Issue #3527142 by andypost, catch, longwave, xjm: Update Composer and development dependencies for 11.2.0 Issue #3522406 by quietone, longwave, klausi, bbrala: Update Coder to 8.3.30 Issue #3523018 by godotislate, longwave, quietone, xjm, catch, salmonek, smustgrave: Update CKEditor 5 to 45.2.0 Issue #3528680 by godotislate, xjm, longwave: Update to Symfony 7.3.0 Issue #3523705 by amateescu, rkoller, poker10: InvalidComponentException when workspaces ui is installed Issue #3518273 by bbrala, wim leers, phenaproxima: The ConfigExists validation constraint should support dynamic type expressions Issue #3493070 by penyaskito, griffynh, wim leers, longwave, pdureau, effulgentsia, xjm, phenaproxima, mradcliffe, danielveza, lauriii, catch: SDC `enum` props should have translatable labels: use `meta:enum` Issue #3526266 by mherchel, finnsky, andy-blum: Navigation top bar should utilize Drupal.displace() Issue #3527518 by phenaproxima, tim.plunkett: Package Manager's direct-write mode still tries to check for rsync Issue #3527314 by amateescu: Stop creating a "Stage" workspace by default on module installation Issue #3519766 by amateescu: WorkspacesHtmlEntityFormController builds entity forms twice Issue #3429849 by longwave, andypost, spokje: Make doctrine/lexer:^3.0 compatible with DrupalComponentAnnotationDoctrine Issue #3521953 by tom konda, smustgrave, quietone: Existence check for JavaScript object and it's property across multi-lines can replace with optional chaining Issue #3526180 by mherchel, godotislate: Regression: Drupal.displace() not working on new Navigation module in 11.2 Issue #3523078 by sd9121, longwave, |
| Drupal 11.1.7 May 9, 2025 |
Issue #3161212 by joseph.olstad, acbramley, asubit, eduardo morales alberti, sandeepsingh199, berdir, catch: Node add/edit gives a Call to a member function getAccountName() on null when author is NULL Issue #3511434 by juandhr, [email protected], sivaji_ganesh_jojodae, alberto56, quietone, ghost of drupal past, quadrexdev: There are leftover references in comments to long ago renamed ListDefinitionInterface Issue #3512835 by nicxvan: [11.1.x] Add BC stubs for Hook ordering Issue #3511186 by grimreaper: Media Library currentSelection not reset properly Issue #3518952 by avpaderno, prabha1997, smustgrave: Fix grammar in FormattableMarkup::placeholderFormat() comments Issue #3411185 by govind_giri_goswami, brandonlira, santhosh@21, rodrigoaguilera, joachim, smustgrave, borisson_: docs for return values from various EntityDisplayRepositoryInterface() are unclear Revert "Issue #3478408 by jaydev bhatt, quietone, goonerw: Fix errors in update-countries.sh" Issue #3478408 by jaydev bhatt, quietone, goonerw: Fix errors in update-countries.sh Issue #3521438 by mstrelan: Bump php-tuf/composer-stager to 2.0.1 Issue #3424720 by vidorado, douggreen, immaculatexavier, smustgrave, uri_frazier: LanguageNegotiationUrl unnecessarily adds domain to outbound URL's Issue #3511566 by prudloff, smustgrave: Remove srcdoc attributes in Xss::filter() Issue #3518967 by quadrexdev, joachim: incorrect @return docs for ElementInfoManagerInterface::getInfo() Issue #2586483 by brandonlira, snehi, anil280988, rakesh.gectcr, David_Rothstein, jhodgdon, trobey, alexpott: Update documentation for project versions in DrupalCoreExtensionInfoParserInterface::parse Issue #3200162 by brandonlira, ksenzee, ultimike, larowlan, cecelias, xjm: Improve documentation for Graph component Issue #3498468 by nexusnovaz, avpaderno, wombatbuddy, poker10: The example code given for FormattableMarkup::placeholderFormat() contains typos and syntax errors Issue #3516253 by lostcarpark, mradcliffe, rachel_norfol |
| Drupal 11.1.5 Mar 20, 2025 |
Issue #3508733 by gábor hojtsy, griffynh: Add griffynh as provisional core team facilitator Issue #3498326 by rinku jacob 13, rkoller, smustgrave, ckrina: Focus outline has a too low color contrast and uses a different green than Claro Issue #3487014 by liam morland, nod_, smustgrave, quietone: Fix documentation for optional params in MessengerInterface Issue #3493858 by vidorado, xavier.masson, smustgrave: Extend ViewsBlockBase to merge cache metadata from display handler Issue #3496485 by annmarysruthy, wombatbuddy, thejimbirch, smustgrave: example recipe.yml has incorrect comment above "actions" section Issue #3490948 by rowrowrowrow, bbrala: Change hardcoded entity key 'uid' to getKey in ResourceTestBase Issue #3508028 by markconroy: Offer to become maintainer of Stable9 Merged 11.1.3. Issue #3499275 by acbramley: Remove --quiet from updatedb in Validatable config job Issue #3501237 by nikolay shapovalov, nicxvan: Improve HookCollectorPass test Issue #3056698 by mondrake, quietone: Sqlite Connection::createConnectionOptionsFromUrl should not convert relative paths to full Issue #3497758 by nicxvan, oily, alexpott, cilefen, catch, longwave, wlofgren, dries, wim leers, smustgrave: Regression: RssResponseCdata filtering out common HTML tags from RSS feeds Issue #3469116 by prashant.c, pameeela, kostask, shalini_jha, sagarmohite0031, benjifisher, mrdalesmith, smustgrave, kristiaanvandeneynde, quietone, b_sharpe, nod_: Logout confirmation form shows inappropriate confirmation description Issue #3504265 by finnsky, ksenzee, smustgrave: Yarn watch task broken Issue #3096570 by recrit, raman.b, ameymudras, ranjith_kumar_k_u, Oscaner, smustgrave, peterwcm, pameeela: Redirect correct language page after node save Issue #2927338 by berdir, anmolgoyal74, swatichouhan012, smustgrave, alexpott, gábor hojtsy: Ensure config entity langcode property does not change when installing, adding or editing a language Issue #3503190 by phenaproxima, thejimbirch: Allow recipe |
| Drupal 11.1.4 Mar 6, 2025 |
Issue #3508733 by gábor hojtsy, griffynh: Add griffynh as provisional core team facilitator Issue #3498326 by rinku jacob 13, rkoller, smustgrave, ckrina: Focus outline has a too low color contrast and uses a different green than Claro Issue #3487014 by liam morland, nod_, smustgrave, quietone: Fix documentation for optional params in MessengerInterface Issue #3493858 by vidorado, xavier.masson, smustgrave: Extend ViewsBlockBase to merge cache metadata from display handler Issue #3496485 by annmarysruthy, wombatbuddy, thejimbirch, smustgrave: example recipe.yml has incorrect comment above "actions" section Issue #3490948 by rowrowrowrow, bbrala: Change hardcoded entity key 'uid' to getKey in ResourceTestBase Issue #3508028 by markconroy: Offer to become maintainer of Stable9 Merged 11.1.3. Issue #3499275 by acbramley: Remove --quiet from updatedb in Validatable config job Issue #3501237 by nikolay shapovalov, nicxvan: Improve HookCollectorPass test Issue #3056698 by mondrake, quietone: Sqlite Connection::createConnectionOptionsFromUrl should not convert relative paths to full Issue #3497758 by nicxvan, oily, alexpott, cilefen, catch, longwave, wlofgren, dries, wim leers, smustgrave: Regression: RssResponseCdata filtering out common HTML tags from RSS feeds Issue #3469116 by prashant.c, pameeela, kostask, shalini_jha, sagarmohite0031, benjifisher, mrdalesmith, smustgrave, kristiaanvandeneynde, quietone, b_sharpe, nod_: Logout confirmation form shows inappropriate confirmation description Issue #3504265 by finnsky, ksenzee, smustgrave: Yarn watch task broken Issue #3096570 by recrit, raman.b, ameymudras, ranjith_kumar_k_u, Oscaner, smustgrave, peterwcm, pameeela: Redirect correct language page after node save Issue #2927338 by berdir, anmolgoyal74, swatichouhan012, smustgrave, alexpott, gábor hojtsy: Ensure config entity langcode property does not change when installing, adding or editing a language Issue #3503190 by phenaproxima, thejimbirch: Allow recipe |
| Drupal 11.1.3 Feb 20, 2025 |
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements: Drupal core - Critical - Cross-Site Scripting - SA-CORE-2025-001 Drupal core - Moderately critical - Access Bypass - SA-CORE-2025-002 Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-003 No other fixes are included. Drupal 11.1.x will receive security coverage until December 2025 when Drupal 11.3.0 is released. Sites on Drupal 11.0.x should update immediately to Drupal 11.0.12. Sites on Drupal 10.4.x should update immediately to Drupal 10.4.3. Sites on Drupal 10.3.x should update immediately to Drupal 10.3.13. Drupal 10.2.x and below are end-of-life and do not receive security coverage. |
| Drupal 11.1.2 Feb 7, 2025 |
All changes in this release: Issue #3495881 by godotislate, bkosborne, catch, kushagra.goyal: Firefox retains form_build_id on form reloads, causing old form cache entry to be used and creating weird behavior for the Media Library widget Issue #3503556 by tom konda: Wrong Regular Expression for string comparison in Nightwatch.js assertion Issue #3503195 by alexpott, longwave, loopy1492: Twig needs updating for CVE-2025-24374 Issue #3486797 by alecsmrekar, shalini_jha, smustgrave, amateescu: Updating path alias language in workspace does not work Issue #3502466 by alexpott, borisson_: Fix reference to core_field_views_data() Issue #3493410 by plopesc, catch, smustgrave: Consider a more substantial shortcuts placeholder Issue #3502487 by lauriii, oily, ckrina: Make the menu link form less verbose Issue #3485174 by fago, arthur_lorenz, alexpott, smustgrave: Menu APIs provide invalid CSRF tokens Issue #3502427 by alexpott, smustgrave: Fix references to DrupalTestsKernelTestBase Issue #3501059 by claudiu.cristea: Remove claudiu.cristea from MAINTAINERS.txt Issue #3501361 by chr.fritsch: Remove chr.fritsch from MAINTAINERS.txt Issue #3501210 by dawehner: Remove dawehner from MAINTAINERS.txt Issue #3489179 by godotislate, ghost of drupal past: Referring the same entity multiple times breaks _referringItem Issue #3462700 by niklan, richardgaunt, smustgrave, pdureau: Update ComponentValidator to always include the component ID Issue #3488293 by oily, maneesha binish, plopesc, m4olivei, pameeela: Help link always appears in navigation Issue #3367556 by vensires, danchadwick, detroz, g089h515r806, groendijk: SDC components CSS & JS generated wrong url in windows / XAMPP Issue #2886800 by jonathanshaw, claudiu.cristea, quietone, hctom, geek-merlin, larowlan, sam152, joachim, smustgrave: EntityAccessControlHandler::createAccess() returns false positive cache hits because it ignores context Issue #3500774 by kul.pratap, benjifisher: Fix errors in SourcePluginBase doc block Issue |
| Drupal 11.1.0 Dec 19, 2024 |
This is a a feature minor release of Drupal 11 and is ready for use on production sites. Learn more about Drupal 11 and the Drupal core release cycle. This minor release provides improvements and new functionality. It does not break backward compatibility (BC) for public APIs. There may be changes in internal APIs and experimental modules. If so, contributed and custom modules and themes may need updating. This is according to Drupal core's backward compatibility and experimental module policies. This release may include string changes and additions. Translators can review the latest translation status on localize.drupal.org. Drupal 11.1.x will receive security support until December 2025. Drupal 11.0.x will continue to receive security support until June 2025. 11.1.0 tag has been moved: Due to a packaging issue the 11.1.0 tag has been moved and recreated. This will not affect anything unless you fetched tags between Friday December 13th 2024 and Monday December 16th 2024. Changes to site-owner-managed files A directive has been added to the default .htaccess file that attaches the correct image/webp header for webp images when the MIME Apache module is enabled. This is needed for sites hosted on Apache web servers running on operating systems that do not support the webp image MIME type. These sites should update their .htaccess files to take advantage of this improvement. The sid_length and sid_bits_per_character configuration options are no longer supported in PHP 8.4 or Symfony 7.2, so they have been removed from default.services.yml. Sites should remove these settings from any services.yml files. The "Access the Content blocks overview page" permission is no longer required to create blocks. This means that roles that have "Create new content block" permission for a given block type will be able to create these blocks when they could not in previous releases. Site owners should audit their Block Content permissions to ensure that block creat |
| Drupal 11.0.9 Nov 23, 2024 |
All changes since 11.0.7: Issue #3487031 by larowlan, alexpott, themodularlab, ericgsmith, longwave, spokje: Performance Degraded after update to twig 3.14.2 Merged 11.0.8. Issue #3477324 by andypost, alexpott: Fix usage of str_getcsv() and fgetcsv() for PHP 8.4 Issue #3488179 by phenaproxima, thejimbirch: RecipeConfigurator::getIncludedRecipe() should statically cache recipe objects to avoid performance problems Issue #3487482 by amateescu, catch, benjifisher, ekes, finn lewis, fabianx, larowlan: Creating a published moderated entity in a workspace shouldn't make it published in Live Issue #3480293 by gapple: ConfigTarget::__construct() documentation references incorrect ToConfig enum name Issue #3483931 by mondrake: [CI] Use testdox and colors in tests spawned by run-tests.sh |
