CombinaryStream

rss

#! code: Drupal 11: Building A Link Directory: Part 1

A problem I've been struggling with for a while now is managing my bookmarks. Every time I come across an interesting article I want to read, a good resource I want to keep, or a neat tool I want to try I create a bookmark.

Over time I have collected a large collection of bookmarks so when I add a new one to the list it gets lots in the pile. I've tried to create directories to keep "new" bookmarks or organise them into sections, but I always end up scrabbling to find them.

The problem is that web browsers don't allow you to categorise or search bookmarks so I can never find them again. Also when I swap browsers (which I have done twice this year) I end up having to migrate them over and set up synchronising between computers. This always removes the favicons of the sites so I have even more trouble finding the right link.

After losing yet another bookmark again recently I decided to do something about it. I realised that #! code was the best place for it as I'm always logged into the site, so I set about creating a link directory on the site. I didn't just want a big list of links though. In my mind a good link directory takes a screenshot of the site when the link is created so that it is easy to see what links are there from the screenshot of the original site.

In this article I will go through how I set up the link directory, how links are added, and how the site is able to take screenshots of the links as they are added to the directory.

Creating The Link Content Type

To store the links I created a content type called "Link" and added a few fields to it.

youtube

Drupal AI Learners Club: Using Claude Code for Drupal (Carlos Ospina)

Carlos Ospina walked through the Drupal Dev Framework, a Claude Code plugin he built to bring structure and oversight to AI-assisted Drupal development. Rather than relying on individual skills to guide the AI on specific APIs or patterns, Carlos designed a full-process framework that moves through distinct phases — scope alignment, research, architecture, and implementation — with checkpoints at each stage. The session used a real task as its example: adding an RSS feed endpoint to the Pulsera website so LinkedIn could pull in blog content as a source read more

rss

Freelock Blog: The Night the Internet Tried to Kill Your Website

The Night the Internet Tried to Kill Your Website John Locke Fri, 05/22/2026 - 11:30

May 2026

The rain had been falling on the city for weeks.

Not real rain. The kind that falls on the internet — a constant drumbeat of probes, scans, and automated fists rattling every doorknob on every block, every hour of the day. Most people don't hear it. That's fine. That's what we're here for.

My name doesn't matter. Call me the op. I run a small shop — we keep websites alive, patch the holes before the wrong people find them, and make sure that when something goes sideways, there's always a way back. It's not glamorous work. But this spring? This spring was something else.

rss

The Drop Times: Mike Gifford Says Accessibility Must Be Built Into Workflows Before AI Scales Bad Patterns

Drupal Core Accessibility Maintainer Mike Gifford says organisations risk accelerating inaccessible digital experiences when accessibility remains dependent on isolated advocates instead of embedded governance systems. Speaking as part of The DropTimes’ continuing Global Accessibility Awareness Day coverage, Gifford argued that sustainable accessibility depends on integrating accountability, workflows, testing, and organisational culture directly into development infrastructure before automated systems amplify poor practices at scale. read more

rss

Très Bien Blog: Visualization of Drupal Core Change records over the years

Visualization of Drupal Core Change records over the years

How many Drupal Core change records (CR) has there been over the years? Is it a manageable amount for contrib maintainers? How many are about something new or deprecated? This is what it looks like since 2018. For visual effect I grouped CRs in 4 buckets:

theodore May 22, 2026 read more

rss

1xINTERNET blog: AI Content Intelligence at Estate Scale

AI is accelerating content creation, making estate-scale governance critical. Learn the 5 dimensions of content governance and why it must live natively in your CMS.

rss

The Drop Times: Accessibility Contributors Discuss Continuity, Governance, and AI Ahead of GAAD

Ahead of Global Accessibility Awareness Day, contributors associated with A11yTalks and the Drupal community discussed how accessibility initiatives deteriorate when governance, training, and operational responsibility are not sustained over time. The discussions also examined the role of AI-assisted development workflows and why open-source communities often became early spaces for accessibility collaboration and inclusion. read more

rss

PreviousNext: Keywords to Context: Semantic Search and Retrieval-Augmented Generation with OpenSearch

Keyword search struggles with natural language and exploratory questions. Daniel walked the DrupalSouth 2026 audience through how OpenSearch and Skpr enable semantic search that understands intent and meaning, and how Retrieval-Augmented Generation (RAG) transforms results into clear, human-friendly answers grounded in your actual content.

by daniel.veza / 21 May 2026

rss

PreviousNext: PreviousNext wins four Splash Awards and a third consecutive Best in Show at DrupalSouth Wellington 2026

Last week, the PreviousNext team headed over to Wellington for DrupalSouth 2026, and what a week it was.

by ana.beltran / 21 May 2026

The highlight of the week was the Splash Awards - and this year, we are honoured to have won:

Best in Government with Cancer Australia for the GovCMS PaaS project we did in collaboration with Paper Moose
Best in Show with Cancer Australia
Community People's Choice Award - Adam Bramley (jointly awarded to Nicole Ritchie)
Hall of Fame - Lee Rowlands

Congratulations to Lee and Adam! Both deserved the recognition for their active work with the Drupal Community.

The Best in Show win for Cancer Australia makes this a remarkable run. PreviousNext has now won Best in Show three times back to back. Here's the full picture:

2024 - DrupalCon Singapore with the National Mental Health Commission for our work with the Mentally Healthy Workplaces platform
2025 - DrupalSouth Melbourne with a joint project with Folk, which transformed the Catholic Schools NSW website.
2026 - DrupalSouth Wellington with a joint project with PaperMoose, unifying Cancer Australia’s 11 websites in a single GovCMS PaaS solution.

Photo credit: Karl Hepworth - https://www.flickr.com/people/200855369@N08/ License: ShareAlike 2.0 https://creativecommons.org/licenses/by-sa/2.0/deed.en

Wellington was also a milestone for Skpr's, which officially launched in the New Zealand market at DrupalSouth. If you haven't seen or heard about Skpr yet, now is a good time!

From there, it was all about the Drupal community. We spent the week reconnecting with familiar faces, meeting new ones, and having the kinds of conversations that don't happen over email.

We had six PreviousNext team members take the stage this year:

Daniel Veza - Keywords to Context: Semantic Search and Retrieval-Augmented Generation with OpenSearch
Adam Bramley - The Pinto Module - Efficient Theming for Front and Back End Developers
Owen Lansbury - How Drupal is keeping pace with a changing digital market and how it can benefit your organisation
Michael Strelan - Recipes, Site Templates and the future of Drupal distributions
Nick Schuch - Practical Performance Testing
Nathan Ter Bogt - Security on Autopilot: Low-Touch Automated Security for Drupal Projects

We were also thrilled to have Lara Saunders from Bond University join us at DrupalSouth this year. It's always great to see clients engage with the broader Drupal community.

We're incredibly proud of the team - and grateful to the clients and community who make this kind of recognition possible. See you all next year on the Gold Coast!

Photo credit: Karl Hepworth - https://www.flickr.com/people/200855369@N08/ License: ShareAlike 2.0 https://creativecommons.org/licenses/by-sa/2.0/deed.en

rss

Security advisories: Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

Project:

Drupal core

Date:

2026-May-20

Security risk:

Highly critical 20 ∕ 25 AC:None/A:None/CI:All/II:All/E:Theoretical/TD:Uncommon

Vulnerability:

SQL injection

Affected versions:

>= 8.9.0 < 10.4.10 || >= 10.5.0 < 10.5.10 || >= 10.6.0 < 10.6.9 || >= 11.0.0 < 11.1.10 || >= 11.2.0 < 11.2.12 || >= 11.3.0 < 11.3.10

CVE IDs:

CVE-2026-9082

Description:

Drupal core includes a database abstraction API to ensure that queries executed against the database are sanitized to prevent SQL injection attacks.

A vulnerability in this API allows an attacker to send specially crafted requests, resulting in arbitrary SQL injection for sites using PostgreSQL databases. This can lead to information disclosure, and in some cases privilege escalation, remote code execution, or other attacks.

This vulnerability can be exploited by anonymous users.

This vulnerability only affects sites using PostgreSQL. However, the dependency updates in this release apply to all sites.

Upstream security advisories

The Drupal releases for supported branches (11.3, 11.2, 10.6, and 10.5) in this advisory also include security updates for Symfony and Twig. Those projects have released important Security Advisories that were coordinated with this Drupal release, and Drupal is affected by some of the vulnerabilities.

Depending on your site configuration and contrib modules, you may be vulnerable to one or more of these upstream issues, so updating these dependencies is highly recommended whether the SQL Injection vulnerability affects you or not. It is also recommended to review which user roles have the ability to update Twig templates, for example via Views or contributed modules.

Solution:

Install the latest version.

The following releases will be available as soon as automated release packaging is complete. You may receive a 404 in the interim. The updates may also be available on Packagist sooner.

Drupal 11

If you use Drupal 11.3.x, update to Drupal 11.3.10.
If you use Drupal 11.2.x, update to Drupal 11.2.12.
If you use Drupal 11.1.x or 11.0.x, update to Drupal 11.1.10.

Drupal 10

If you use Drupal 10.6.x, update to Drupal 10.6.9.
If you use Drupal 10.5.x, update to Drupal 10.5.10.
If you use Drupal 10.4.x or earlier, update to Drupal 10.4.10.

Drupal 9 and 8

If you use any version of Drupal 9, try manually applying the Drupal 9.5 patch for this issue.
If you use Drupal 8.9, try manually applying the Drupal 8.9 patch for this issue.

Drupal 11.1.x, Drupal 11.0.x, Drupal 10.4.x, and below are end-of-life and do not receive security coverage. (Drupal 8 and Drupal 9 have both reached end-of-life.) Due to this issue's severity, the unsupported releases and patches for unsupported versions are provided as a best effort. Those unsupported versions will still have other, previously disclosed security vulnerabilities.

Reported By:

Michael Maturi (michaelmaturi)

Fixed By:

Björn Brala (bbrala)
Benji Fisher (benjifisher) of the Drupal Security Team
catch (catch) of the Drupal Security Team
Lee Rowlands (larowlan) of the Drupal Security Team
Dave Long (longwave) of the Drupal Security Team
Drew Webber (mcdruid) of the Drupal Security Team
Jess (xjm) of the Drupal Security Team

Coordinated By:

Anna Kalata (akalata) of the Drupal Security Team
Benji Fisher (benjifisher) of the Drupal Security Team
catch (catch) of the Drupal Security Team
Damien McKenna (damienmckenna) of the Drupal Security Team
Neil Drumm (drumm) of the Drupal Security Team
Greg Knaddison (greggles) of the Drupal Security Team
Heine Deelstra (heine) of the Drupal Security Team
Tim Hestenes Lehnen (hestenet)
Dave Long (longwave) of the Drupal Security Team
Drew Webber (mcdruid) of the Drupal Security Team
Juraj Nemec (poker10) of the Drupal Security Team
Pierre Rudloff (prudloff) of the Drupal Security Team
Jess (xjm) of the Drupal Security Team
Cathy Theys (yesct) of the Drupal Security Team

rss

Jacob Rockowitz: Drupal (AI) Playground: AIs are eating our websites, and we need to adapt.

Recently, I contributed an AI-powered Schema.org JSON-LD module to Drupal that uses AI automators to generate Schema.org JSON-LD, building a knowledge graph that improves SEO/AEO by making it easier for machines to understand your website. The module was built with AI in 4 days, whereas the Schema.org Blueprints module with a similar goal took 4 years. I have been so shocked by how efficiently AI can code and build software that I realized, "AI ate my work, and I need to be okay with that." I wrote about how I am adjusting to this new "AI" normal.

A slightly different reckoning is unfolding for our websites because AI is consuming our content, thereby reducing traffic. Providing Schema.org JSON-LD is one way to feed the machines. AIs are becoming the front page of most websites. To adapt to this new "AI" normal, where an AI is the gatekeeper to your website, we need to evolve our approach to building and managing our websites.

Adaptation

Personally, "adaptation" feels like the right word to describe the challenge and change we, developers, site builders, managers, and owners, are facing right now. Adaptation is forced upon us by external constraints or opportunities, depending on your point of view, to evolve our approach to building and sharing information. There is a much larger discussion about the impact of AI on who we are, what we are building, and how we build. For now, I want to focus on what Drupal-built websites need to consider to adapt and keep up with the rapidly evolving digital landscape, which is largely out of our control.

Out of our control

How AIs are consuming our websites is out of our control. If you look back at how websites continually bent and tweaked to get a bump in page ranking, implementing now-defunct things like AMP (Accelerated Mobile Pages) because Google told us to,...Read More

rss

The Drop Times: Drupal Releases SA-CORE-2026-004 Fixing Critical Database Injection Vulnerability

The Drupal Security Team has released SA-CORE-2026-004, confirming that the highly critical issue previewed in yesterday’s advance advisory is an anonymous SQL injection vulnerability affecting Drupal sites running PostgreSQL databases. The flaw, tracked as CVE-2026-9082, exists in Drupal core’s database abstraction API and can lead to information disclosure, privilege escalation, and potentially remote code execution. The coordinated release also includes upstream Symfony and Twig security fixes, prompting update recommendations for all supported Drupal installations regardless of database configuration. read more

rss

Dries Buytaert: Why Drupal CMS matters

Last week at Drupal South, Pamela Barone delivered a keynote on Drupal CMS. Her talk is one of the clearest articulations I've seen of what Drupal CMS is, why it exists, and where it's headed. That shouldn't come as a surprise because Pam is the Product Lead for Drupal CMS.

Pam quoted a familiar Drupal saying: Drupal makes hard things possible, but it also makes easy things hard.. The room laughed because it's true.

Her keynote makes the case that Drupal CMS is making Drupal easier across the board: visual page editing, a gentler on ramp for new developers, and project economics that finally work for smaller budgets. Larger organizations such as universities, governments, and Fortune 2000 companies want those same advantages, which is why Drupal CMS matters at every scale.

Pam also explains how Drupal CMS sits on top of Drupal Core, why it is not a Drupal distribution, how it gives digital agencies leverage, what site templates unlock, and how Drupal Canvas reshapes the page building experience.

If you watch one Drupal video this week, make it Pam's!

rss

DrupalEasy: Getting comfortable with Gitlab and the Drupal issue queue

Now that some drupal.org projects are having their issue queues moved to Gitlab , this is probably a good time to start getting used to the new interface and all the new functionality. This quicktip covers two important bits that I think most Drupal contributors will want to take note of. Enable notifications If you're an active contributor, then you probably depend on the email notifications that have been sent out by drupal.org when an issue that you're involved in or following has an update. If you're expecting this to just work with Gitlab, you should probably be aware that by default , Gitlab notifications will be configured to be sent to a "no-reply.drupal.org" email address for your Drupal user account - in other words, you won't be getting any notifications. You can easily change this by visiting https://git.drupalcode.org/-/profile/notifications and changing your Global notification email : This page also has (much) more granular notification settings, but for most users

read more

rss

Freelock Blog: Your Website Will Be Attacked. Here's How We Make Sure You Survive It.

Your Website Will Be Attacked. Here's How We Make Sure You Survive It.

John Locke Tue, 05/19/2026 - 09:00

The question used to be whether your website would face a serious security threat. That question has been answered. The question now is whether you'll be ready when it happens — and whether you can recover cleanly when something gets through.

Sustainable/Open Business

rss

Drupal Association secures Alpha-Omega grant to future-proof Open-Source Security for the AI Era.

We are proud to share that the Drupal Association has been awarded a grant from the Alpha-Omega Project, a project of The Linux Foundation, which seeks to help open source projects identify and mitigate security vulnerabilities.

As AI-generated commits and AI-driven security threats become the norm, open-source ecosystems must evolve rapidly. This funding directly strengthens the already mature Drupal Security Team, ensuring our core ecosystem is hardened against the modern, AI-age vulnerabilities.

The funding provided by Alpha-Omega will enable the Drupal Security Team to build the program we need to stay ahead in this fast moving environment. Drupal’s already excellent security position will be even better going forward.

~ Tim Doyle, CEO at Drupal Association.

Security has been a defining pillar of the Drupal ecosystem. This collaboration with the Alpha-Omega Project underscores our ongoing commitment to open-source resilience, solidifying Drupal's position as the gold standard for secure enterprise content management.

Drupal is, and will continue to be, one of the most secure CMS platforms in the world.

rss

Drupal Association blog: Drupal Association secures Alpha-Omega grant to future-proof Open-Source Security for the AI Era.

We are proud to share that the Drupal Association has been awarded a grant from the Alpha-Omega Project, a project of The Linux Foundation, which seeks to help open source projects identify and mitigate security vulnerabilities.

As AI-generated commits and AI-driven security threats become the norm, open-source ecosystems must evolve rapidly. This funding directly strengthens the already mature Drupal Security Team, ensuring our core ecosystem is hardened against the modern, AI-age vulnerabilities.

The funding provided by Alpha-Omega will enable the Drupal Security Team to build the program we need to stay ahead in this fast moving environment. Drupal’s already excellent security position will be even better going forward.

~ Tim Doyle, CEO at Drupal Association.

Security has been a defining pillar of the Drupal ecosystem. This collaboration with the Alpha-Omega Project underscores our ongoing commitment to open-source resilience, solidifying Drupal's position as the gold standard for secure enterprise content management.

Drupal is, and will continue to be, one of the most secure CMS platforms in the world.

rss

The Drop Times: Python Ports of Drupal API Client and JSON:API Params Streamline AI Workflows

Python has become central to AI systems, automation workflows and data processing, increasing demand for reliable integrations between Drupal and external developer ecosystems. In this contributed article, Drupal architect Vincenzo Gambino discusses the Python ports of Drupal API Client and Drupal JSON:API Params, explaining how cross-language tooling can help Drupal integrate more effectively with AI applications, headless architectures and modern development workflows. read more

rss

Specbee: How to maintain a Drupal website for security, performance, and scalability

Is your Drupal website silently accumulating security, performance, or scalability risks? Check out the essential Drupal maintenance best practices enterprises use to keep Drupal 11 websites secure and efficient. read more

rss

Freelock Blog: The Rules Have Changed: Security in the Age of AI-Assisted Attacks

The Rules Have Changed: Security in the Age of AI-Assisted Attacks

John Locke Mon, 05/18/2026 - 19:00

Security is getting dramatically harder and more expensive. AI is simultaneously driving an explosion in vulnerability discovery and weaponizing the exploits that follow. The question for every organization with anything online is no longer whether to invest in resilience — it's whether that investment is already in place before the next incident arrives.

Dev Corner

rss

DDEV Blog: Upsun Completes DDEV Trademark Transfer to the DDEV Foundation - THANK YOU!

We're thrilled and thankful to announce that Upsun has completed the transfer of the DDEV trademarks to the DDEV Foundation.

The DDEV Foundation now owns the DDEV name outright, and DDEV's name and identity belong to its community.

A Long Story With a Happy Ending

When we were on the verge of losing the right to use the name "DDEV" several years ago, Platform.sh (now Upsun) stepped in to acquire and hold the trademark on the project's behalf. That act of generosity kept the project alive under its own name. Since then, as documented in our December 2025 post, Upsun had been in the process of transferring that trademark to the DDEV Foundation as the foundation matured into a stable home for the project.

That transfer is now complete.

What This Means

The DDEV Foundation is the independent, community-governed home for the DDEV project. With the trademark in the foundation's hands, DDEV's governance and identity are fully decoupled from any corporate sponsor.

This is exactly the kind of long-term resilience that open-source projects need to thrive across decades, not just years.

You can learn more about the foundation's structure, board, finances, and mission at ddev.com/foundation.

Thank You, Upsun

Upsun/Platform.sh has done so much for this project over the years:

Rescued the DDEV trademark when it was at risk
Sponsored DDEV at a lead level for several years, funding core development
Held and maintained the trademark until the foundation was ready to receive it
Completed this transfer now, with no strings attached
Continued sponsoring DDEV at $1,000/month level!

This is a real contribution to the open-source ecosystem, and we're grateful for it.

The Foundation Still Needs Your Support

Trademark ownership is a milestone, but it doesn't pay for development. The DDEV Foundation funds the developers who maintain the project you rely on every day — and we still have a funding gap.

We're excited that we've made it to 78% of our monthly sponsorship goal. Here's how you can help to get us over the top:

GitHub Sponsors — Fast and flexible, any amount, personal or organizational
Support contracts — Priority support while funding the project
Custom invoicing — We work with your procurement process
One-time contributions — Always welcome

Contact us to talk through what works for your organization, or join the conversation in Discord.

DDEV serves about 20,000 developers every week. Your sponsorship keeps it maintained, secure, and growing.

Claude Code assisted with editing for this post.

youtube

Drupal AI Learners Club — AI Security "Opportunities" (Marlene Wanberg, Randy Fay)

AI Security 'Opportunities': Guardrails, Sandboxes, and Keeping Your Agents on a Leash Marlene Wanberg (@mindewen on drupal.org) leads a structured walkthrough of AI security risks for Drupal developers, organized around three practical concepts: social engineering (malicious instructions injected into an agent's context), sniffing (what data the agent can access), and sending (what it can exfiltrate or act on). She grounds the talk with real-world horror stories — a production database wiped by an agent that decided deleting a volume was a reasonable fix, a Copilot experiment that base64-encoded API keys to evade secret scanners, and an agent that autonomously ordered eggs because a credit card was attached to the account. Randy Fay (@rfay on drupal.org), lead maintainer of DDEV, adds a focused look at DDEV-specific AI add-ons and their security trade-offs, flags supply chain risks in popular add-ons, and shares what a more security-conscious setup looks like in practice. The session closes with an honest discussion of reviewer fatigue — how large AI-generated pull requests make it easy to miss a malicious or broken line buried deep in a diff — and the uncomfortable asymmetry between how fast AI can generate code and how slowly humans (and other AI tools) can review it. Resources mentioned: Marlene's slides: https://mwanberg.github.io/ai-learners-security-talk/ Randy's AI security notes: https://rfay.github.io/ai-security-notes/ Session recap & link dump: https://www.drupal.org/docs/develop/development-tools/ai-coding-tools-for-drupal-development/drupal-ai-learners-club-sessions Join us for the next livestream: https://luma.com/drupal-ai read more

rss

May 2026 Drupal for Nonprofits Chat

Join us THURSDAY, May 21 at 1pm ET / 10am PT, for our regularly scheduled call to chat about all things Drupal and nonprofits. (Convert to your local time zone.)

We don't have anything specific on the agenda this month, so we'll have plenty of time to discuss anything that's on our minds at the intersection of Drupal and nonprofits. Got something specific you want to talk about? Feel free to share ahead of time in our collaborative Google document at https://nten.org/drupal/notes!

All nonprofit Drupal devs and users, regardless of experience level, are always welcome on this call.

This free call is sponsored by NTEN.org and open to everyone.

Information on joining the meeting can be found in our collaborative Google document.

rss

Nonprofit Drupal posts: May 2026 Drupal for Nonprofits Chat

Join us THURSDAY, May 21 at 1pm ET / 10am PT, for our regularly scheduled call to chat about all things Drupal and nonprofits. (Convert to your local time zone.)

We don't have anything specific on the agenda this month, so we'll have plenty of time to discuss anything that's on our minds at the intersection of Drupal and nonprofits. Got something specific you want to talk about? Feel free to share ahead of time in our collaborative Google document at https://nten.org/drupal/notes!

All nonprofit Drupal devs and users, regardless of experience level, are always welcome on this call.

This free call is sponsored by NTEN.org and open to everyone.

Information on joining the meeting can be found in our collaborative Google document.

rss

QED42: Create your own AI agents for Drupal Canvas

Build a custom AI agent in Drupal Canvas to score news article engagement and suggest readability improvements.

rss

Security public service announcements: Upcoming highly critical release on May 20, 2026 - PSA-2026-05-18

Date:

2026-May-18

Description:

There will be a Drupal core security release for all supported branches on May 20, 2026, between 17:00 and 21:00 UTC. (To see this in your local timezone, refer to the Drupal Core Calendar.) The Drupal Security Team urges you to reserve time for core updates at that time because exploits might be developed within hours or days.

The risk is currently rated as:
Highly critical 20 ∕ 25 AC:None/A:None/CI:All/II:All/E:Theoretical/TD:Uncommon.

Not all configurations are affected. Reserve time on May 20 during the release window to determine whether your sites are affected and in need of an immediate update. Mitigation information will be included in the advisory.

We recommend updating to the latest supported patch (bugfix) release for your site's version of Drupal before May 20, so that you can address any other upgrade issues before the security window. (Recommendations for specific Drupal versions follow.)

This issue is being protected by Drupal Steward. Sites that use Drupal Steward are already protected from known attack vectors, but should upgrade in the near future in case additional attack vectors are discovered.

Affected versions

Supported core versions

Security releases will be provided for all the currently supported branches of Drupal core, which are:

11.3.x
11.2.x
10.6.x
10.5.x

Sites on one of these supported versions should update to the latest patch release for the given branch now in preparation for the security window.

End-of-life minor core versions (Drupal 10 and 11)

While the Drupal Security Team does not normally provide security releases for unsupported releases, given the severity of the issue, we are providing 11.1.x and 10.4.x releases that include the fix for sites which have not yet had a chance to update. Therefore, in advance of the window:

Sites on Drupal 11.1 or 11.0 should update to at least Drupal 11.1.9.
Sites on Drupal 10.4, 10.3, 10.2, 10.1, or 10.0 should update to at least Drupal 10.4.9.

These sites should apply the security update as soon as it is released on May 20, then plan to update to Drupal 11.3 or 10.6 in the near future. (Two other recent security advisories, SA-CORE-2026-001 and SA-CORE-2026-002, will not be addressed for 11.1 or 10.4.)

End-of-life major core versions (Drupal 8 and 9)

These major versions are fully end-of-life, so no releases will be created for these branches. However, given the potential severity of this issue, we will provide patch files for Drupal 8.9 and 9.5.

These patches must be applied manually. They are not guaranteed to work correctly, and might introduce other bugs or regressions. However, they may help mitigate the vulnerability for sites still on these old major versions until they upgrade to a supported release.

For the best chance of the patches being applied successfully:

Sites on any version of Drupal 9 should update to Drupal 9.5.11.
Sites on any version of Drupal 8 should update to Drupal 8.9.20\.

We strongly recommend Drupal 8 or 9 sites update to at least Drupal 10.6 soon. Drupal 8 and 9 include numerous other, previously disclosed security vulnerabilities that will not be addressed by either Drupal Steward or the best-effort patch files.

Drupal 7 is not affected.

Disclosure policy

Neither the Security Team nor any other party is able to release any more information about this vulnerability until the announcement is made. The announcement will be made public at https://www.drupal.org/security, on Bluesky, Mastodon, X (formerly Twitter), and LinkedIn, and in email for those who have subscribed to our email list. To subscribe to the email list: log in on Drupal.org, go to your user profile page and subscribe to the security newsletter on the Edit » My newsletters tab.

Security release announcements will appear on the Drupal.org security advisory page which also has RSS feeds.

Coordinated By:

Benji Fisher (benjifisher) of the Drupal Security Team
catch (catch) of the Drupal Security Team
cilefen (cilefen) of the Drupal Security Team
Damien McKenna (damienmckenna) of the Drupal Security Team
Neil Drumm (drumm) of the Drupal Security Team
Greg Knaddison (greggles) of the Drupal Security Team
Tim Hestenes Lehnen (hestenet)
Lee Rowlands (larowlan) of the Drupal Security Team
Dave Long (longwave) of the Drupal Security Team
Drew Webber (mcdruid) of the Drupal Security Team
Juraj Nemec (poker10) of the Drupal Security Team
Jess (xjm) of the Drupal Security Team

rss

Talking Drupal: Talking Drupal #553 - Saving The Open Web

Today we are talking about The Open Web, What it means, and Why it's important with guest Alex Moreno. We'll also cover AI Schema.org JSON-LD as our module of the week.

For show notes visit: https://www.talkingDrupal.com/553

Topics

Defining the Open Web
Drupal in a Bubble
Marketing and PR Challenges
AI Bias Against Drupal
Why AI Won't Recommend Drupal
Is Drupal AI Native
Marketing Against Giants
Local Evangelism Push
Funding Outreach Trips
Drupal CMS PR Gap
Templates Lower Barriers
Need a Drupal Onramp
Speaking Beyond Drupal
Web Summit Lessons
Sell Problems Not Drupal
Rethinking DrupalCon
Camps and New Audiences
Marketplace Ecosystem Idea
Wrap Up and Contacts

Resources

Guests

Alex Moreno - alexmoreno

Hosts

Nic Laflin - nLighteneddevelopment.com nicxvan John Picozzi - epam.com johnpicozzi Bernardo Martinez - bernardm28

MOTW Correspondent

Jacob Rockowitz - jrockowitz.com jrockowitz

Brief description:
- The AI Schema.org JSON-LD module provides a straightforward way to send a prompt — including a webpage's content and data, along with instructions and requirements — to an AI provider and receive a response containing valid Schema.org JSON-LD for saving and embedding in a webpage. It's a "glue module" that combines AI Automators, Field Widget Actions, and JSON Field to create an AI-powered Schema.org JSON-LD field for content entities.
Module name/project name:
- AI Schema.org JSON-LD
Brief history
- How old: Created in April 2026 by jrockowitz (Jacob Rockowitz) of The Big Blue House
- Versions available: 1.0.0-alpha1 (requires Drupal ^11.3); 1.0.x-dev branch also available
Maintainership
- Actively maintained Yes — updated as recently as April 30, 2026
- Security coverage No — not currently covered by Drupal's security advisory policy; use at your own risk
- Test coverage The module notes that all contributed code must include test coverage, though it is early alpha
- Documentation Yes — the project page includes setup instructions, implementation guidance, philosophy, and a 2-minute demo video on YouTube
- Number of open issues: 0 open issues, 0 of which are bugs against the current branch
Usage stats:
- 1 site currently reporting use of this module
Module features and usage
- Adds a native JSON "Schema.org JSON-LD" field to content entities (nodes, media, taxonomy terms)
- Field is populated via an AI automator triggered by a Field Widget Action, keeping a human in the review loop before saving
- Stores Schema.org JSON-LD as native JSON data, creating a fully queryable knowledge graph for the site
- Works with complex nested content structures (paragraphs, components) by having AI parse and generate the structured data
- Includes an optional sub-module for logging prompts and AI responses for human and AI review and iterative improvement
- Configurable per entity type/bundle via UI, Drush, or Drupal recipe
- Philosophy: "Use AI to build a tool that helps AI understand your website while always keeping a human in the loop"
- Built using AI coding agents (Claude and Codex), with community contributions encouraged — especially around crafting and sharing optimal prompts

rss

The Drop Times: A Structural Shift in Drupal Funding

Among last week’s more closely watched Drupal business developments was a new initiative from Acquia that directs 2% of eligible partner-driven transactions to the Drupal Association. The contribution is built into Acquia’s updated partner programme and funded by the company itself, meaning partner incentives and customer pricing remain unchanged.

What drew attention across the community was not simply the contribution percentage, but the way the programme has been structured. Drupal funding conversations have often returned to the same pressure points around sponsorship cycles, institutional support, and long-term maintenance responsibilities. Acquia’s framing moves that discussion toward routine commercial activity rather than a separate community-facing commitment.

Both James Sims and Dries Buytaert described the initiative in terms of continuity and alignment rather than philanthropy. Their comments pointed to the same underlying argument: if commercial Drupal activity continues to scale, support structures around the project may also need models that scale more predictably alongside it.

Whether similar approaches emerge elsewhere remains uncertain. For years, much of Drupal’s organisational support has depended on periodic sponsorships and voluntary reinvestment. Acquia’s model, in contrast, ties funding directly to ongoing commercial activity, introducing a level of predictability that community funding discussions have often lacked.

With that said, here’s what else The Drop Times covered across the Drupal community last week.

DISCOVER DRUPAL

EVENT

Additional developments from across the Drupal ecosystem were published during the week. Readers can follow The Drop Times on LinkedIn, Twitter, Bluesky, and Facebook for ongoing updates. The publication is also active on Drupal Slack in the #thedroptimes channel.

Kazima Abbas
Sub-editor
The Drop Times

rss

The Drop Times: Ten Technical Areas Shaping Enterprise Drupal Workflows in 2026

Enterprise Drupal projects increasingly intersect with automation systems, cloud infrastructure, decoupled frontend development, and AI-assisted workflows as Drupal 11 adoption continues across larger platforms. Ongoing community discussions and architectural shifts around modern PHP, API-driven systems, and platform engineering also continue to expand the technical scope of Drupal development work. read more

rss

LakeDrops Drupal Consulting, Development and Hosting: The Architecture That Changed the Game: Modeler API

The Architecture That Changed the Game: Modeler API

Jürgen Haas Mon 18 May 2026 - 12:10

The Modeler API completes the architectural separation between model owners (systems like ECA and Migrate) and modelers (visual UIs like BPMN.iO and Workflow Modeler). Module maintainers can now offer visual configuration without building custom UIs. The API automatically provides routing, permissions, save orchestration, import/export, testing, and Drush commands. This is infrastructure that compounds: 4 model owners × 3 modelers = 12 working combinations with zero glue code. Each new model owner makes every modeler more valuable, and vice versa. Designed at DrupalCon Atlanta in early 2025 and developed in the following months, the Modeler API positions Drupal ahead of competitors with architecture for visual configuration of any complex system.

rss

DDEV Blog: Watch: DDEV From Scratch with macOS

TL;DR This 30-minute video shows DDEV from zero to everything on a completely blank new MacBook Neo (exactly the same on any macOS device.)

Using Windows or Linux? See DDEV on Windows in 10 Minutes, DDEV on WSL2 from Scratch, or DDEV on Linux in 10 Minutes.

DDEV is a local development environment based on Docker containers that gets you up and working on your project fast. When you’re ready for additional configuration and customization, you won’t be starting from scratch and can lean on the expertise of the DDEV community.

In this screencast we walk through installing Homebrew, setting up OrbStack as a Docker provider, installing DDEV, and getting started with a basic project — all on a brand-new MacBook Neo with only 8GB of RAM. We use a Composer-managed Drupal 11 project as an example, and also cover setting up Xdebug with both PhpStorm and VS Code. The presentation slides are also available.

After watching this tutorial, you’ll be able to run websites on your computer with minimal configuration and have multiple sites with different configurations available locally, all because Docker does the heavy lifting while DDEV does the simplifying. Whether you’re a solo engineer or a member of a team, DDEV will help you be more efficient.

This screencast references the regular DDEV documentation:

DDEV Installation
Using the CLI
Drupal 11 Quickstart
Step Debugging with Xdebug
Support: DDEV Discord, Drupal Slack #ddev channel: See Support docs
DDEV Project Repository and issue queue

Here’s the video table of contents (opens in YouTube):

What is DDEV (1:00)
Install Homebrew (3:01)
Install Docker provider (OrbStack) (5:07)
Install DDEV (7:54)
Create a trivial "junk" project (9:03)
Create a Drupal 11 project (11:42)
Learn a few DDEV commands (15:35)
Xdebug with PhpStorm (18:51)
Xdebug with VS Code (24:40)
DDEV Resources (30:40)

rss

Dries Buytaert: The gap between Drupal and its reputation

I saw two thoughtful posts in my LinkedIn feed over the last week that I wanted to reshare here before the LinkedIn feed buried them. Both were spot on, honest, and deserve a longer shelf life.

The first was from Hynek Naceradsky:

I'm pissed.

Not at Drupal. At the people confidently hating on it without ever having understood what it actually does.

"Drupal is outdated." "Drupal is too complex." "Nobody uses Drupal anymore."

Tell that to the EU institutions, governments, universities, and enterprises quietly running mission-critical platforms on it.

Here is what actually gets me though: the Drupal community lets this narrative win.

I am guilty of this too.

We literally have thousands of contributed modules, maintained for free, by people who owe you absolutely nothing. The security team responds faster than most paid vendors. The community has been showing up for 20+ years.

And yet we're somehow losing the PR war to frameworks that can't handle a proper content workflow without three paid plugins and a prayer.

Drupal people: talk louder. Write the posts. Go to the meetups. Tell the stories, fight for Drupal.

Because the Drupal community is honestly the best thing in Open Source, and both it and Drupal deserve way better than silence.

The second was from Thomas Scola, writing from a Drupal AI event in New York (lightly trimmed):

I overheard a couple people say, "Drupal? Is that still around?"

Hell yes it is.

And not only is it still around, I'd argue pretty heavily that Drupal is uniquely positioned for what comes next with the agentic web.

API-first before API-first was cool and trendy. Structured content that actually makes sense. Mature permissions, workflows, governance, integrations.

A lot of platforms are now scrambling to figure out how AI fits into what they already built.

Drupal doesn't have to force it. The architecture has been there.

But honestly, the tech is only part of it. The community is what always gets me. The people, passion and innovation. [...]

What comes next? Who knows.

But if I'm betting on a community to adapt, build, and help define that future, I'm putting my money on this one, and on what we've all built together.

For a platform people love to ask if it's "still around", it feels more relevant than ever.

I could not agree more with both posts. Drupal is one of the strongest Open Source platforms out there right now, but too few people realize it. The Drupal community has been modernizing the platform faster than its reputation evolves.

If the loudest narrative about Drupal is that it is outdated, people will keep repeating it, even when it is wrong. AI systems will too, because they absorb the same narratives, blog posts, forum threads, and social chatter the rest of the industry does.

The danger is not just that Drupal is misunderstood today. It is that the gap between what Drupal actually is and how people perceive it may be growing, not shrinking.

The narratives we reinforce today become part of how AI describes Drupal tomorrow. Drupal's silence today becomes tomorrow's AI consensus.

So if you're in the Drupal community, take Hynek's advice and help set the record straight. Not for AI, but for people. Write about the great work happening in Drupal: share the case studies, the technical breakthroughs, the AI innovation, and the hard problems being solved every day.

I know many people in Open Source dislike marketing or self-promotion. I do too, sometimes. But if we don't document what is great about Drupal, others will define Drupal for us.

Every accurate case study, technical blog post, demo, or success story helps future developers, evaluators, and AI systems understand what Drupal actually is.

Drupal does not need hype. It needs a better public record.

rss

PreviousNext: How Drupal is keeping pace with a changing digital market in 2026

I recently gave a talk at DrupalSouth Wellington 2026 covering something a lot of us in the Drupal community have been wrestling with: has the past couple of years been a market correction or something more fundamental? And more importantly - how can Drupal remain competitive in a CMS market that's changing quickly?

by Owen Lansbury / 17 May 2026

The downturn was real - and it was a global phenomenon

When I last spoke at DrupalCon Singapore I was very confident about PreviousNext's position after 15 years of stability. What followed was our business contracting through 2025 as clients reduced budgets, so it’s been a tough couple of years for many digital agencies.

But here's what gave me some comfort: we're not alone. Global digital holding companies like WPP, Publicis Groupe have seen their businesses shrink by around 30% and their share prices have seen corresponding falls. These aren't small Drupal shops. They employ thousands of developers across dozens of countries. The downturn has been a global phenomenon.

The single biggest reason is now clear. During COVID, organisations pulled forward years of digital transformation budgets to move services online quickly. By 2025, that spend had run dry. Enterprise marketing budgets generally halved and new projects froze. The good news, as of early 2026, is that the freeze is starting to thaw - projects that were put on hold still need to be completed.

Compounding this is AI. Companies have shifted budget toward AI investments, web traffic (Including Google search) is down around one third as people increasingly get information without visiting websites, and clients are questioning the ROI of large digital investments. This is real disruption - not incremental change.

Drupal's competitive position is stronger than the narrative suggests

With that context set, the more interesting question is: where does Drupal actually sit competitively?

When people talk about Drupal's "decline", they tend to cite overall install numbers. At its peak between 2014-2016, Drupal powered around 1.2 million sites. Today it's around 735,000 - a 40% fall on paper. But that framing misses the point entirely.

Drupal 8 made a deliberate strategic choice to cede the small-site market to SaaS platforms and focus on larger, more complex sites. What happened to those 500,000 sites that moved off older versions? Most were the exact sites Drupal had consciously repositioned away from. In their place, modern Drupal (version 8 and above) has grown to over 500,000 sites concentrated at the upper end of the enterprise market - exactly where the strategy aimed.

The data from builtwith.com is striking. Across the internet as a whole, Drupal sits in the top ten CMS platforms. Narrow it to the top million sites by traffic and Drupal is a clear second behind WordPress, with four times the presence of Adobe. Narrow further to the top 100,000 and Drupal is still second. In the top 10,000 - the sites that matter most - still second. For a product that critics routinely describe as being in decline, holding second place across every meaningful traffic tier is a remarkable result.

The CMS market itself is also growing, not shrinking. With around 900 CMS products for clients to choose from, it reached $30.9 billion in 2025 and is forecast to hit $45.7 billion by 2030 - 15-20% annual growth. There are still 250,000 websites launched every single day, generating 400 exabytes (400 million terabytes) of data annually for six billion internet users. The world's need to manage content isn't going away.

What about the impact of AI on the CMS market?

It's a fair question to ask whether AI will eventually replace the CMS entirely. The honest answer is: for basic brochureware sites, this is already happening. Tools like static site generators, SaaS website builders, and even WordPress sites at the simpler end of the market are genuinely at risk from AI that can generate and deploy a good-looking site quickly.

But Drupal is more insulated. A university platform with hundreds of content editors, 15 years of content governance, complex workflows, security requirements, and dozens of third-party integrations can't be vibe-coded overnight. The governance and institutional knowledge wrapped around these platforms isn't in the code - it's in the people, the processes, and the content structures that have evolved over time. That's not something AI replaces soon.

The bigger near-term pressure is client expectations. AI will accelerate Drupal development - modules, themes, migrations, custom functionality. Clients will start expecting projects to cost less and move faster. Agencies that adapt to this reality will thrive. Those that don't will find it a hard road.

How Drupal is keeping pace

Drupal competes across three distinct categories. DXP (Digital Experience Platform) competitors like Adobe and Sitecore offer monolithic, all-in-one platforms. Composable/MACH competitors like Contentful offer headless, API-first approaches. And then there's Drupal - which does both, often simultaneously.

When a client needs an enterprise-grade DXP, Acquia's stack, built on Drupal, competes directly with Adobe Experience Manager at substantially lower total cost of ownership. When a client wants API-first composable architecture, Drupal has been doing that since 2015 - not API-only, because you retain all of Drupal's power for user management, content modelling, and workflows while delivering content via headless interfaces. And for organisations that need a hybrid - vast content management capability combined with headless interfaces and third-party integrations - that's Drupal's genuine sweet spot.

Uniquely positioned to serve all three categories is not a weak compromise. It's a unique competitive advantage.

Drupal CMS changes the pitch

Where Drupal has historically struggled is in sales pitches. If you've ever had to spend weeks building a custom demo just to show a prospect what Drupal could do, or watched a client get dazzled by an proprietary CMS demo while yours involved explaining modules, you'll understand the problem. Drupal's out-of-the-box experience was, to be blunt, severely lacking.

The Starshot initiative launched in early 2024 to address exactly this problem. In under a year, Drupal CMS 1.0 shipped in January 2025. A year later, version 2.0. Achieving this in an open source project, coordinating volunteers across working groups while keeping Drupal Core stable, was remarkable to see unfold. If you or your organisation contributed, it deserves to be said: it wouldn't have happened without you.

Drupal CMS changes what's possible in a pitch. You can now install Drupal CMS, launch a polished, fully functional demo in minutes, and show a client exactly what they'll be working with. The days of "trust us, it can do that" are over.

The key feature releases in Drupal CMS 2.0 are worth highlighting:

Canvas - A WYSIWYG page building experience built from scratch, moving beyond the Paragraphs vs Layout Builder debate that's divided the community for years.
Recipes - One-click install for bundled feature sets. Want SEO tools? Find the recipe, click install, done. No more trawling 50,000 modules.
Site Templates - A modernised approach to Distributions, bundling a complete theme and feature set into a single install.
AI integration - Whether it's a chatbot helping users learn Drupal features, AI agents building functionality, or AI enhancing content, it's all available now.

Acquia Source also launched in late 2025, offering Drupal CMS as a SaaS product for organisations that want the power of Drupal without managing infrastructure.

Find out more about Drupal CMS »

Pamela Barone, the Drupal CMS Product Lead (sponsored by her employer Technocrat), gave a fantastic keynote at DrupalSouth Wellington that provides a much deeper dive into the rapid innovation that's been possible.

Five takeaways from my talk

For agencies and end-user organisations leaving this talk (or reading this post), here's what I'd ask you to take away.

One: The market opportunity is real. The web is still growing. Drupal is still dominant behind Wordpress at every tier that matters. Recent innovations have substantially strengthened the competitive position. There's a bright future ahead for organisations that lean into it.

Two: Leverage the hybrid CMS position. Drupal's ability to function as DXP, composable, or hybrid in a single platform is a genuine differentiator. Use it in client pitches. Most alternatives force a choice between these models.

Three: Drupal CMS changes what's possible. Use it for client demos and smaller projects. You can secure clients by building smaller projects faster while retaining Drupal Core's full power when clients need to scale.

Four: Adapt to AI now. It's the new operational reality. Agencies and organisations that maintain human accountability while using AI to increase speed and reduce cost will win.

Five: Invest in the open source technology your organisation relies on. Drupal is open source, which means there's no single company responsible for its future. The Drupal Association manages the infrastructure, coordinates initiatives, and facilitates the community that keeps it all going. If your agency makes money building on Drupal, or your organisation has saved hundreds of thousands of dollars in licensing fees by using it, supporting the Drupal Association is an investment in your own future - not a donation.

Get involved

A few specific actions worth taking:

If you're an agency that's not already a Drupal Certified Partner, the entry level requirements are minimal, so there really is no excuse. It's becoming a real differentiator in pitches - being able to say "we don't just use Drupal, we actively help build it" carries enormous weight with informed buyers.

The Drupal Marketing Initiativeis actively seeking involvement from Drupal Certified Partners. The DA is doing the top-of-funnel work for the community - helping expose Drupal to enterprise buyers who might not have considered it. That benefits every agency selling Drupal.

The Drupal AI Initiativehas 31 partners and $1.5 million in cash and in-kind contributions committed to defining how AI is integrated ethically and effectively into Drupal. Getting involved now gives you a seat at the table as those decisions are made.

The competitive opportunity is Drupal's to lose

The CMS market is still growing strongly and Drupal holds a unique competitive position. Recent product innovation has addressed legacy weaknesses and the community that builds and sustains Drupal is a benchmark that other open source projects to aspire to. Despite the recent digital market downturn and impact of AI, Drupal's future remains bright for agencies that build projects with it and for organisations that rely on it keeping pace with evolving requirements.

rss

Pixelite: Bots, scrapers, and proxies: defending Drupal sites in an automated internet

Over half of all web traffic in 2024 was automated. That is the headline number from the Imperva 2025 Bad Bot Report, and it is the first time bots have outnumbered humans in more than a decade. Drupal sites sit squarely in that traffic mix, and the old defensive playbook — block an IP, ban a user agent, drop a robots.txt entry, lean on Fail2ban — does not hold up anymore.

This is the companion post to my DrupalSouth Wellington 2026 talk, Bots, scrapers, and proxies: defending Drupal sites in an automated internet. The talk walked through the defences I actually use at amazee.io and recommend on client sites. The post covers the same ground, with a bit more room to show config and link out to the projects.

What actually changed

The technical context underneath bot defence has shifted in three ways that matter:

Residential proxy networks. Scrapers no longer come from a handful of cloud subnets you can block. They route through real consumer IP addresses, often unwittingly donated by free-VPN users or piggy-backed off shady SDKs in mobile apps.
Headless browsers everywhere. Playwright and Puppeteer have made it trivial to render JavaScript-heavy pages at scale. A page that needed a real human five years ago can be scraped today by anyone with a laptop.
AI-driven scraping. Volume is up sharply because every new LLM needs training data, and there is now a steady drip of new crawlers showing up. Meta's externalagent is one recent example. There will be more.

Mimicry is now the baseline, not the edge case. A modern scraper will rotate IPs, randomise user agents, replay realistic TLS fingerprints, and pace itself slowly enough to look like a real user. You cannot rely on signal that lives in one HTTP header.

The scale of it

If this still sounds like a niche problem, the numbers say otherwise.

51% - share of web traffic that was automated in 2024, per the Imperva 2025 Bad Bot Report.
+96% - year-on-year growth in some popular bot services across Pantheon's hosting fleet in their July 2025 data.
1B+ - unique monthly visitors Pantheon sees across its platform, which is the size of dataset those numbers are coming from.

On the amazee.io platform globally, 13% of incoming requests can be flagged as non-human based on the user agent alone. That is the lazy bots. The actual share of automated traffic is higher once you account for the ones that try to blend in. In absolute terms it adds up to hundreds of millions of requests every month.

The goal is not to block all bots

Before going through the defences, one thing I am careful to say up front, both on stage and here: the goal is not to block all bots. That is unwinnable, and the closer you get to it the more real users you break.

Search crawlers, RSS readers, uptime monitors, link-preview generators in Slack and iMessage, accessibility tooling - all bots, all wanted. The goal is to reduce abuse where it hurts most, on the endpoints that cost you real money or real performance, while leaving everything else alone.

Drupal-native defences

The defences closest to your application are the smartest. They can see the path, the user, the form, the cache state. They are also the most expensive per blocked request, because every block at this layer has already cost you a full PHP bootstrap.

Perimeter

The Perimeter module drops requests matching known-bad patterns: /wp-admin, /.env, xmlrpc.php, all the WordPress scanner noise that hits every Drupal site daily. It is the cheapest win on the list. It will not stop a serious scraper, but it will keep your logs clean and your error rate honest.

CrowdSec and AbuseIPDB

CrowdSec is a local agent plus a community blocklist. Every site running CrowdSec contributes detected attacks back to a shared signal, and pulls down the latest list of bad actors. It is the closest thing the open-source world has to a distributed reputation system.

AbuseIPDB is a reputation lookup service. You query an IP, you get a confidence score. It is most useful on the forms and login flows where you can afford the latency of an external API call. Both are available as Drupal modules.

Facet Bot Blocker

If you run Search API with facets, this is the single cheapest huge win available to you. Faceted search URLs are catnip for scrapers: every combination of filters is a new URL, every URL is uncached, every uncached request hits the database. A bot that crawls a faceted listing can take a site down without trying.

The Facet Bot Blocker module acts as a rate limit on requests that include at least one facet in the URL. Configure it to use Redis or memcache for the counter so you are not making the problem worse by hitting the database to record the request. On one of our hosting customers, this one module cut Search API load by more than half.

Form-side defences

Logins, registrations, password resets and contact forms all need their own treatment, separate from page-level defence:

Honeypot - invisible field plus a time-based check. Cheap, fast, surprisingly effective against the dumb half of form spam.
Antibot - requires JavaScript to submit, blocks the bots that do not run JS.
CAPTCHA, reCAPTCHA, or Cloudflare Turnstile - full challenge. Use the lightest option that works, and ideally only after Honeypot and Antibot have already rejected the easy cases.
Hidden CAPTCHA - bridges the gap when you want a CAPTCHA-style check without the accessibility cost of a visible challenge.

The trade-off the project pages don't mention

Every block at the Drupal layer has already cost you a PHP bootstrap. That is fine when the absolute volume is small. It is not fine when you are eating hundreds of millions of bot requests and bootstrapping PHP for each one. This is why you cannot stop at the application layer.

Web server and infrastructure

One layer out, the web server can drop requests before PHP ever runs. The trade-off flips: you save the bootstrap cost, but you lose access to application context.

Rate limiting and geo blocking

nginx ships with limit_req_zone, Apache has mod_ratelimit. Both are blunt but effective on volume. A starting point for nginx looks roughly like this:

limit_req_zone $binary_remote_addr zone=search:10m rate=10r/m;

location /search {
    limit_req zone=search burst=5 nodelay;
    proxy_pass http://drupal;
}

Ten search requests per minute, per IP, with a burst of five. Tune to taste. The $binary_remote_addr key is cheap on memory; a 10MB zone holds around 160,000 IPs.

Geo blocking is the other infrastructure-level lever. It is pragmatic and occasionally controversial. If your audience is the New Zealand public sector, blocking inbound from regions you do not serve is a defensible call. If your audience is global, it is not. Know your traffic before reaching for it.

ModSecurity and the OWASP CRS

ModSecurity with the OWASP Core Rule Set is a proper WAF you can self-host. Once tuned, it is real protection. The tuning is the catch — out of the box it will flag Drupal admin actions, file uploads, anything that looks like SQL in a body or a query string. Expect to spend real time pruning rules and adding exceptions for legitimate site behaviour before you stop generating false positives.

Cache discipline

A request that hits the cache costs you nothing. Whatever else you do, get your cache headers right. Vary on the bits that need to vary, cache aggressively on the bits that do not, and lean on the page cache or the reverse proxy in front of Drupal. The cheapest bot is the one that asks for a page you have already served.

(shamless plug) you can also use my site Caching Score to review your current caching setup, to see if there is anything better you can be doing.

Caching Score

Assess how strong the caching capabilities of any given site is.

Caching Scoresean.hamlinamazee.io

What this layer is bad at

Rate limits, ModSecurity rules and geo blocks are great at volume and bad at quality. They cannot tell a scraper trickling one request per minute apart from a real user. For that you need either the edge or the application.

Edge and paid bot management

The edge is where the big vendors live, and it is where you push the cheapest blocks. A scraper rejected by Cloudflare at the network edge never gets to your origin at all.

Cloudflare

The free tier already includes Bot Fight Mode, basic challenges, and Turnstile. For most small-to-medium Drupal sites, this is a good baseline at zero extra cost. The paid Bot Management product adds custom rule logic, JA3 and JA4 TLS fingerprinting, and machine-learning-based bot scoring you can wire into firewall rules. The jump from free to paid is significant in price; the jump in capability is also significant.

Fastly, Akamai, and the rest

Fastly offers the Next-Gen WAF (originally Signal Sciences) with a Bot Management add-on. Akamai sits at the enterprise tier with the most sophisticated fingerprinting available, and a price tag to match. Beyond those, there is AWS WAF with Bot Control, DataDome, HUMAN, and Imperva — all credible, all paid, all priced for sites where bot abuse is costing real money.

The trade-offs nobody puts on the sales deck

Bot Management at the edge solves real problems. It also comes with real costs that the vendor demos skip past:

Cost. Bot Management is almost always an add-on to the core WAF subscription, and the pricing escalates fast with traffic.
Vendor lock-in. Your rules, your dashboards, your observability all live in the vendor's UI. Migrating off is painful.
Accessibility and SEO. Aggressive challenges break real users, and search bots that fail a challenge will hurt your rankings. Test both before turning anything up.
Rules live outside your application codebase. They drift, they are not versioned alongside the code that depends on them, and a rule change can break a feature without any commit to point to.
False positives are invisible to you. By default, blocked requests do not reach your logs. You will not know which real users were turned away unless you specifically ask for that signal.

Anubis

The newest piece in the picture, and the one that has me genuinely interested.

What Anubis is

Anubis is an open-source reverse proxy (MIT licensed) that sits in front of your site and issues a proof-of-work challenge to clients before letting them through. It was built specifically for the AI scraper era — for the case where the scraper is mimicking a real browser well enough that classifying it on signal alone has stopped working.

Why proof-of-work, not CAPTCHA

The interesting move with Anubis is who pays the cost. A real user pays a few hundred milliseconds of CPU once when they first arrive, and never sees it again for the lifetime of the cookie. A scraper hitting you a million times pays the cost a million times.

That asymmetry is the whole point. CAPTCHAs put the cost on humans (the people who lose patience trying to identify traffic lights). Anubis puts it on whoever is doing the hammering. That is closer to the right shape of the trade.

Where to put it

You do not want Anubis in front of your whole site. You want it in front of the endpoints that are expensive and uncacheable. From the talk, my shortlist:

Search endpoints
Facet and filter URLs
Pagination tails - ?page=2348 is not a real user
Login, register, password reset
Spicy forms (contact, anything that triggers an email)
Authenticated user flows
Anything expensive and uncacheable

Static pages stay fast. The cache stays warm. The PoW cost only applies on the routes where it earns its keep.

But what about Googlebot?

This is the first question every site owner asks, and the answer is good. Anubis ships with allowlists for known good crawlers, matching IP ranges against the published lists from Google, Bing, and the rest. The allowlist is maintained upstream, which means you need to keep Anubis deployed on a reasonable cadence to pull in the latest changes. New legitimate crawlers do show up.

Demo site

You can see Anubis in action with a demo Drupal 11 site I put together, the login form has Anubis in front of it, the homepage does not.

Log in | Drush Site-Install

Drush Site-Install

Putting the layers together

None of these defences is a silver bullet on its own. Each layer is cheap at one thing and bad at another, and the trick is matching the layer to the threat.

Layered defence diagram showing requests flowing from clients through Edge/CDN, Anubis, web server, and Drupal, with cost-to-block increasing as you move closer to the application.

Block the cheap traffic at the edge. Block the lazy bots with rate limits and ModSecurity at the web server. Put Anubis in front of the endpoints that are expensive and uncacheable. Let Drupal-native modules handle the application-aware decisions where you actually need to see the user, the form, or the facet state.

Five things to take away

No single layer is enough. Stack them. The edge handles raw volume, the web server handles patterns, and the application is the only thing that can see real user and form context.
Match the protection to the threat. A login form needs different defence to a faceted search results page.
Measure before you defend. Look at your actual traffic. Find your most-hit uncacheable endpoints. Defend those first.
Watch accessibility and SEO. Every challenge you add is a tax on a real user or a real crawler. The cost of false positives is invisible unless you go looking.
Plan for adversarial improvement. Whatever you deploy today, the scrapers get a turn next. Pick defences you can iterate on.

One last thing

You do not need to win the bot war. You just need to make your site a worse target than the next one.

The slides from the talk are on the DrupalSouth schedule page. The recording will be posted here once the DrupalSouth team have edited and uploaded it — check back in a few weeks.

youtube

What is Drupal Steward?

Drupal Steward is a web application firewall that bridges the gap between the time when a security release is announced and when your site is fully updated with the new security patch. This globally distributed service from the Drupal Security Team and the Drupal Association provides immediate, affordable protection for your website, while giving your IT team the flexibility to implement site updates without disrupting other priorities. Please note: Not every vulnerability can be protected by the Drupal Steward program, but it is ideally suited to help protect you from those that are mass exploitable. Drupal Steward can only apply to vulnerabilities that involve exploiting a request to the web server, which may not apply to some security issues. Also, a zero-day vulnerability (one that is discovered and publicized without the security team's knowledge) is possible. Learn more and sign up at https://www.drupal.org/steward read more

youtube

Presentation: What is OpenClaw? (Dan Lemon)

This presentation by Dan Lemon of Amazee.io covers an overview of OpenClaw: what it is, what are its component parts, how to keep yourself safe, and some useful use cases for autonmous agents. read more

youtube

Demo: OpenClaw website building through Slack (Dan Lemon)

In this demo, Dan Lemon (Amazee.io) talks through how his team talks to OpenClaw in a private Slack channel and directs it to help with Drupal Mountain Camp planning. read more

youtube

Drupal AI Learners Club — Autonomous Agents: A Show and Tell of OpenClaw

The meeting focused on a demonstration of OpenClaw, an open-source framework that runs autonomous agents to perform tasks and interact with APIs. Dan Lemon of Amazee.io provided a live demo of how he's using OpenClaw to help organize the Drupal Switzerland Mountain Camp, showing its ability to create websites, manage GitHub repositories, and communicate through Slack. read more

rss

Call for Papers: Enterprise AI Summit Europe 2026

The Enterprise Drupal Summit Europe 2026 will take place on 28 September 2026 in the SS Rotterdam.

We are now accepting session proposals.

Focus of the summit

The program focuses on Drupal in enterprise contexts, with emphasis on:

Large-scale Drupal architectures
Digital experience platforms built on Drupal
AI use in enterprise content and delivery workflows
Composable and API-driven architectures
Governance, security, and compliance in regulated environments
Operating Drupal at scale in complex organizations

The event is aimed at practitioners and decision-makers working on enterprise digital platforms.

What we are looking for

We are prioritizing submissions that are based on real implementations.

Relevant topics include:

Case studies from enterprise or public sector deployments
Architecture decisions in complex Drupal systems
AI integration in content management or delivery
Multi-site and multi-brand Drupal setups
Sessions should be grounded in practical experience rather than product positioning.

Format

Accepted formats include:

20 minute talks (MAX)
Case study presentations (focus on the business side)
Architecture or strategy sessions

Selection criteria

Proposals will be evaluated on:

Relevance to enterprise Drupal use cases
Clarity of problem and solution
Evidence of real-world implementation
Transferable lessons for other enterprise organizations
Technical or organizational depth

Submit a proposal

Submissions are open via Pretalx.

Looking forward to seeing you there!

rss

The skills that matter for leaders, builders and doers in the age of AI

Article by: Aidan Foster, Foster Interactive

The three human skills that turn AI into a multiplier.

Creativity, strategic thinking, and articulation are the three skills that decide whether AI makes you better or just faster. - Aidan Foster

Strategic thinking comes from experience. There's no shortcut.
Creativity can be learned, but it's more like going to the gym than reading a book. You build it through reps.
Articulation lets you craft quality prompts and specs for AI, and it's the most trainable of the three. But it only matters when there's something worth articulating. The value lives in the other two.

What Everyone Is Getting Wrong

The AI discourse has one dominant message: automate faster, cut the grunt work, reduce headcount, ship more.

Most leaders are responding by getting better at execution. Better prompts. Faster workflows. More output per person.

Execution still matters. It's just not where the constraint is anymore. The leaders who pull ahead in the next three years won't be the ones who automated the most; they'll be the ones who understood where the real constraint moved.

The Bottleneck Moved

Think back to five years ago. A new landing page meant a brief, a copywriter, a designer, a developer, a round of revisions, and three weeks of calendar time. A campaign asset required coordinating four people across two time zones for something that might run for six days before you killed it.

That friction was real. Teams were sized around it. Agencies were built on it. Budgets accounted for it. That friction is gone.

A capable team can now produce a landing page in hours. Drafts, variants, and structured content at a pace that would have required six people two years ago. The execution ceiling collapsed.

The bottleneck didn't disappear. It moved upstream, to the quality of thinking that goes in before AI touches anything.

Strategic clarity. Creative direction. Precise articulation of what you actually want.

That's where the value lives now. That's where most teams are dangerously underprepared.

Strategic Thinking

A CMO walks into a strategy review and knows something is wrong. They've seen this pattern fail before, in a different market with a different product. They remember exactly how it ended.

That's not intuition in the mystical sense. It's pattern recognition built through immersion. You watch your confident calls go wrong, you figure out why, you adjust.

Strategic thinking requires experiencing consequences. You have to have been wrong, and had something depend on you being right.

Researchers studying scientists at the frontier of human knowledge found the same principle. The best of them use cultivated judgment to ask better questions, to know where to go next. AI needs to be pointed. It executes brilliantly within a defined frame. The frame has to come from somewhere.

Our sense for aesthetics, meaning and embodiment give us a vital advantage over our technological creations.

Why Human Intuition Is Still Science's Greatest Tool In The Age Of AI - Noema Magazine, 2026

Creativity

Most people believe creativity is an innate trait. Either you have it or you don't. That's wrong.

86% more ideas after 3 months of training. The untrained control group barely changed.

Creativity is a muscle. It responds to reps, to practice, to deliberate exposure to new inputs. A controlled study at Radboud University found that students who went through structured creativity training nearly doubled their ideation output in under a year. The untrained group stayed completely flat. (PLOS ONE, 2020)

You cannot read your way to it. You have to do the reps.

Research across Nobel laureates and major creative contributors identified two distinct types of creativity with two distinct peak ages. Conceptual innovators - the ones who execute one brilliant overarching idea - tend to peak young. Experimental innovators - the ones who synthesize across years of accumulated experience and observation - peak in their 50s. (Galenson and Weinberg, via Big Think)

The kind of creativity that matters most in marketing is the experimental kind. The kind that gets better the more you've seen.

The senior strategist who's been in the game 15 years isn't past their creative peak. The research says they may not have hit it yet.

Articulation

Articulation gets your thinking and creativity out of your head and into a form AI can use.

A VP with sharp strategic instincts and genuine creative range can still get generic output from AI if they can't extract what's in their head and structure it precisely.

Imprecise input produces generic output. Always.

The model doesn't know what your brand sounds like. It doesn't know who your buyers are, what language they use, or what keeps them up at night. It doesn't know what you've learned over three years about what actually converts.

All of that has to come from you, structured in a way AI can use. Articulation responds to deliberate practice faster than the other two. Most people never treat it as something worth developing. (Canadian Marketing Association AI Playbook, 2025)

Experience Is the Advantage If You Use It Correctly

The skills AI cannot replicate are the ones that take years to build. But knowing that doesn't help unless you act on it. Three things worth doing now:

Audit your process assumptions, not your expertise. The judgment you've built is the asset. The habits formed around the old production bottleneck are what need to change.

Treat articulation as a skill to develop deliberately. Document what you know about your buyers, your brand, your market. Structure it. That structured knowledge is what separates useful AI output from generic noise.

Do the creative reps. Consistent exposure to new inputs and new problems. New disciplines.

Give yourself and your team time to be creative. Whiteboard ideas as a group. Collect interesting work and express what specifically about it grabbed your attention.

Skip the reps and your creative edge fades.

Leaders who invest in all three first will pull ahead. The advantage compounds.

Where does your team sit?

Most teams I talk to are strong on execution. The upstream work - the strategic clarity, the creative direction, the structured articulation of what makes them different - is where the gap is.

That gap is also where the opportunity is.

Drop a comment. I'd like to hear how others are thinking through this.

Sources: Noema Magazine (2026), Radboud University / PLOS ONE (2020), Galenson and Weinberg / De Economist (via Big Think), Canadian Marketing Association AI Playbook (2025)

rss

Before the Incident Report: How We Are Collaborative

At DrupalCon Chicago, the Driesnote included a visualization with “community” as one of the three pillars of Drupal, along with “platform” and “agencies.” That framing felt memorable, and worth exploring further.

If you attended DrupalCon Chicago, you might have experienced a slightly differently shaped triangle. I don’t know the attendance numbers, but I saw technical sessions with packed rooms, while community-focused sessions had plenty of empty seats. That’s not new. It’s been true for years. People care about community, but when the schedule forces a choice between a session on AI integration and one on community health, most folks choose the technical session. I understand why. Technical work feels concrete. Community work is generally not why employers send folks to a DrupalCon.

This raises a question: how can all of us work together to close that gap without having to attend community sessions at DrupalCon?

Consulting our Code of Conduct

I serve on the Community Working Group (CWG), specifically on the Community Health Team. A lot of people don’t know there are two teams inside the CWG, so here’s the short version:

The Conflict Resolution Team handles incidents after they happen. If you file an incident report, they’re the ones who review it.
The Community Health Team works on everything that happens before an incident report, such as workshops, resources, and other preventive work. Our goal is to help the community build the kind of culture where fewer situations reach the reporting stage in the first place.

Both teams matter. And beyond the CWG, the DrupalCon Code of Conduct offers advice for all of us. It includes a section titled “We are collaborative,” which says:

If and when misunderstandings occur, we encourage people to work things out between themselves where this is practical. Where support is beneficial to achieve this, participants agree to ask for help. People are encouraged to take responsibility for their words and actions and listen to constructively-presented criticism with an open mind, courtesy, and respect.

I suspect that many people read the harassment list and the reporting email and stop there. That’s understandable. Those parts exist for a reason. But the passage above describes the wide middle ground where most friction in our community occurs.

The middle ground of community health

If the only two options we envision are “this is fine” and “file a report,” we end up with a lot of buried resentment, a few dramatic blowups, and not much in between. Most day-to-day friction doesn’t rise to the level of a Code of Conduct violation. It’s tone. Assumption. Misread intent. A comment in an issue queue from someone who didn’t scroll up to read what had already been said. A joke that came off differently than it was intended.

The Community Health Team’s work is to strengthen the middle. That means helping people develop the habits and skills to address friction directly, kindly, and early, so it doesn’t compound into something that needs the Conflict Resolution Team. The Code of Conduct invites everyone to do this work. Not just CWG members. Everyone.

Some ways we work things out

Here are four situations I’ve seen in the community, and in some cases been part of. None of these are scripts. They’re illustrations. The point is that the Code of Conduct invites you to try, and that you’re allowed to. You don’t need permission.

Late at night at a DrupalCon, after hours of sprinting and drinks in the hotel lobby, someone says something about another contributor that turns a few heads. That person might realize it the next day. The generous move, the one the Code asks for, is to find that person and say “I said something last night I want to walk back.” Not a grand apology. Just a small, honest correction. Most of the time, that’s the whole fix.
Someone drops a comment in an issue queue without reading the full thread above. Their comment reads as dismissive of work that’s already been done, or repeats a point that was already addressed, and it comes off as rude. They might not know that’s how it came across. A direct message from someone in the thread (“hey, I think you may have missed a few comments, here’s where we landed”) can turn that into nothing. A pile-on in the issue turns it into something else.
You witness an exchange between two people at DrupalCon that makes you wince. Maybe it’s cultural. The Drupal community spans continents, and directness that comes across as rude in one country seems normal in another. Maybe it’s a power dynamic, or a bad day, or both. Checking in with the person on the receiving end, just between the two of you (“I could not help but notice your conversation and I wanted to ask, are you doing okay?”), doesn’t escalate anything. It lets them know they weren’t invisible.
Someone keeps doing something that just doesn’t feel right. Not harmful, but grating. You can do your best to describe how it made you feel before it becomes a grudge you carry into every future interaction. “Hey, can I mention something? The way we’re doing X did not sit well with me, and I want to figure out how to talk about it.”

If you need help figuring out the best way to handle a situation like this, the Community Health Team is available. We can help you talk through a situation, decide whether a direct conversation is possible, or offer a second perspective. You can reach out at any time. We don’t investigate, and we don’t take sides. We think with you.

When it isn’t practical

The Code says “where this is practical.” Sometimes it isn’t.

We live in a world with power differences. If the person on the other side holds significant authority over your ability to contribute, a direct conversation may not be safe for you. Ongoing patterns of behavior are different from single incidents. Safety concerns are different from style concerns. And if the other person has shown they aren’t willing to engage in good faith, you are not obligated to keep trying.

Those are incidents for the Conflict Resolution Team. Those are the situations the people on that team signed up for, and you can reach them through the incident report form. Filing a report is not escalation for its own sake. It’s using the right tool for the situation.

The three-pillar framing

Returning to the Driesnote, if community is one of three pillars holding up Drupal, then the pillar can’t only be carried by the folks who show up to CWG sessions. The math doesn’t work. Community health has to happen in the rooms with the technical sessions, on the Slack channels where the code review happens, or at the dinner table where someone just got interrupted for the third time.

Most of the work the Community Health Team cares about isn’t work you need a whole session to learn. It’s work you’re already in a position to do. The next time something said in an issue queue doesn’t feel right, you catch yourself venting about someone, or you see a newcomer get talked over, you have a chance to support Drupal’s community.

Community is a pillar, which means it doesn't get held up by a small group of people with CWG in their session title. It gets held up, or it doesn't, by how we talk to each other on a Tuesday afternoon when no one's watching.

Drupal’s Code of Conduct doesn’t just give you a way to report harm. It also asks you to do the smaller, harder thing first. That’s where most community health happens.

File attachments:

pillars-of-drupal.png

rss

Drupal AI Learners Club Is Here. And You're Invited.

Article by: María Fernanda Silva

If you’ve spent any time around Drupal lately, you’ve probably noticed that AI is everywhere — in the keynotes, in the hallway conversations, in the issue queues. You may also have noticed that everyone else seems to know what they're doing, while you're still trying to figure out where to start.

You are not. Not even close.

Those questions — what is actually going on, and where do I even start? — are exactly what the Drupal AI Learners Club was built for.

Where it started

Angie Byron (webchick) has been part of the Drupal community since 2005: core committer, one of the driving forces behind Drupal 8, and one of those people everyone seems to know. She did not come to DrupalCon Chicago 2026 planning to start anything. She came to celebrate Drupal's 25th anniversary and catch up with old friends.

But somewhere between the hallway conversations and the late-night tables, she started picking up on something: a lot of people were anxious about AI, unsure what it meant for their work, their identity as Drupal developers, their community — and quietly terrified to admit they did not have it figured out.

"I don't know what is going on, and neither do you," she would later describe as the feeling she wanted to create space for. "It's fine. Nobody knows. It's changing too fast."

That feeling stuck with her. And the Drupal AI Learners Club was born. Not as a space to hype AI, and not as a space to condemn it, but as a place to cut through the noise and talk honestly about what these tools actually do, how people are using them, and where they fall short.

Just show up

The club runs on a simple premise: come as you are. Sessions are low-pressure, informal, and require no prepared presentation. Participants share their setups, their workflows, what is working, and what is not.

The first session launched on April 8, 2026, with the topic "Share Your Setup!" and brought together community members to walk through the models, modules, agents, IDEs, and tools they were actually using day-to-day.

Sessions happen whenever someone steps up to talk about something (currently, ~weekly) and are recorded, so anyone who cannot attend live can catch up afterward. And as Angie puts it, there are no stupid questions. Everyone is here to learn, including the people who have been doing this the longest.

Join the conversation

The Drupal AI Learners Club is not here to tell you AI is the future. It’s here to make sure that wherever this is going, the Drupal community goes together — developers, site builders, contributors, and everyone in between.

There are many ways to join the club: attend a session, suggest a topic, volunteer to present, or join the organizing team. Sessions are published to a playlist on the Drupal Association YouTube channel so you can catch up anytime, and the conversation keeps going in the #ai-learners channel on Drupal Slack.

And remember, as the Spanish proverb says: there is no silly question — only silly people who do not ask.

rss

Improvements to Drupal.org project maintainers syncing with GitLab project members

As we migrate more projects to GitLab on git.drupalcode.org, we have discovered improvements to make in the mapping of Drupal.org project maintainers to GitLab’s project members, ensuring that it is a 2-way synchronization.

The next time you update maintainers for your project on Drupal.org, this will update all maintainers’ access in GitLab. Please review project members in GitLab, and under Activity, the Team events. Syncing is now more thorough, so there might be more maintainership and member changes than you expect.

In the next few days we plan to bulk update GitLab project members for all projects that have maintainers with “Maintain issues” on Drupal.org, granting them the project planner role in GitLab. This will enable more access for them to manage issues and merge requests in GitLab.

We reviewed all the mappings and have settled on:

“Write to VCS” on Drupal.org grants the GitLab project developer role.
Having both “Administer maintainers” and “Write to VCS” grants the GitLab project maintainer role.
“Maintain issues” grants the GitLab project planner role.
Other Drupal project maintainership roles are not synced.

Syncing is two-way, so that saving maintainers in Drupal will keep choices made in GitLab.

Maintainer in GitLab grants “Write to VCS” and “Administer maintainers,” matching GitLab’s “Administer maintainers” permission on Drupal.org.
Developer grants “Write to VCS” and removes “Administer maintainers.”
Planner grants “Maintain issues” and removes both “Write to VCS” and “Administer maintainers.”
Reporter and Guest remove “Maintain issues,” “Write to VCS,” and “Administer maintainers.”

Reporter is very similar to planner, however it acts the same as guest for maintainership mapping. This preserves access when flipping between setting permissions in GitLab or Drupal. Access to “Maintain issues” in Drupal is mostly irrelevant with issues migrating.

Maintainer in GitLab previously did not grant “Administer maintainers.” It should because in GitLab, it allows the Manage project members permission, so it is a direct mapping.

Removing a maintainer in GitLab will

If they were the project node author on Drupal.org, assign authorship to another person with “Administer maintainers,” or fall back to Unsupported projects.
Remove “Maintain issues,” “Write to VCS,” and “Administer maintainers.”
Not change access to “Edit project” or “Administer releases.”
If they have no remaining Drupal.org project maintainership roles, completely remove them as a maintainer.

In addition to filling the gaps in the mappings, updates to maintainership in GitLab were missed, we hadn’t implemented a listener for the user_update_for_team webhook. So updating maintainers on Drupal.org will catch up all project member roles in GitLab.

Once all issues are migrated, “Maintain issues” will be removed from Drupal, and GitLab itself will be the only way to manage access below developer.

You can find the full details in the issue at #3586519: Migrate maintainers from Drupal.org projects as GitLab members

For any specific implementation questions, please comment on the issue. For general feedback, post to Drupal Slack's #gitlab-issue-feedback channel.

youtube

Show & Tell: CMS Cultivator — Skills for both Drupal and WordPress sites (Jim Birch)

A walkthrough of the https://github.com/kanopi/cms-cultivator repo that contains several useful agent skills for folks building both Drupal and WordPress sites, along with agents to do QA and site audits. read more

youtube

Talk: Introduction to Agent Skills (Jim Birch)

In this talk, Jim Birch (Kanopi Studios) shares brief introduction to Agent Skills: What they are, how to use them, best practices in developing and distributing them. read more

rss

Webinar: How Southwark Council is Using AI to Transform PDF Publishing in Drupal

Join us to hear directly from the team behind an award-winning AI solution built for local government. What does genuinely useful AI in public services look like? Not a concept, not a pilot, but a working solution that saves hours of manual work, improves accessibility, and puts better content in front of citizens faster.

Southwark Council's AI-powered PDF importer for Drupal is exactly that, and it won the prestigious Digital Leaders AI Impact Award 2026.

We are delighted to invite you to a webinar where you can hear the story first-hand.

About the webinar

Date: Tuesday 16th June | 16:00 BST
Guest: Angie Forson, Web and Digital Programme Lead, Southwark Council
Host: James Hall, Product Lead, Websites at Everyone TV

This is a rare opportunity to hear directly from a senior stakeholder about how Drupal and AI are delivering real, measurable value in an area that truly matters: public services for the citizens of Southwark.

Angie will walk through the journey, the challenges, the outcomes, and what it means for the wider local government sector.

Register for the webinar →

The problem it solves

Manual PDF conversion has long been one of the most time-consuming tasks facing council web teams. Converting a single document can take hours. Multiply that across thousands of PDFs and the burden becomes significant, both in staff time and in the delay it creates before citizens can access accurate, accessible information.

The Southwark team, working with their partners at Chicken, built an AI-powered importer for the LocalGov Drupal Publication Module that reduces that process to minutes, often under one minute.

How it works

Each PDF passes through a three-step pipeline:

Extract - a PDF parser pulls the raw content from the document
Transform - AI converts it to properly structured, accessible HTML with logical pagination
Save - clean HTML pages are ready to review and publish directly in Drupal

The result is an HTML representation of the PDF content, saved into a Drupal Publication and ready for review before going live. Every import is logged, so errors can be identified and resolved efficiently.

The module uses a plugin architecture, meaning each step in the pipeline can be swapped out. Councils can use different extractors, AI models, or output to different Drupal content types, making the solution adaptable to a wide range of content and operational requirements.

Built the right way

The team delivered this project with an agile, user-centred approach, continuously refining requirements to ensure the tool meets real user needs rather than simply ticking a technical specification.

"This project is a great example of AI working alongside and empowering content creators, and Drupal as a platform supports this really well." - Farez Rahman, Drupal Developer

"I'm excited about the impact this product will have, not just for our users, but also in transforming how we design, build, and create content internally. We're shaping a future where services start with HTML-first thinking." - Evelyn Francourt, User Experience Lead

Why this matters beyond Southwark

Local government teams across the country face the same challenge. This solution, built on open source Drupal and the LocalGov Drupal ecosystem, is designed to be shared, not kept in one place.

If your organisation publishes PDFs, manages large volumes of content, or is exploring where AI can deliver practical value without unnecessary complexity, this webinar is for you. Tuesday 16th June | 16:00 BST | Online.

Register for the webinar →

youtube

Drupal AI Learners Club: Skills in Action

This session is all about Skills... Agent Skills, that is! We start with an introduction to Skills from Jim Birch, followed by a demo of skills in action by Eduardo Telaya. This was definitely a hot topic: expect more skills-related sessions in the future! read more

rss

GitLab issue migration: a contributor's perspective

This is the fourth post in our GitLab issue migration series. The earlier posts focused on what is changing and how maintainers should set up their projects. This one is for the rest of us — the people who file bugs, review code, push fixes, and triage queues without wearing a maintainer hat. If your favorite contrib project has just moved its issues to git.drupalcode.org, here's what you need to know.

What's changed at a glance

When a project's issues are migrated, they move from www.drupal.org/project/{name}/issues to git.drupalcode.org/project/{name}/-/work_items. Old URLs redirect to the new ones, and issue numbers (NIDs) are preserved as GitLab IIDs — so an #3409678: Opt-in GitLab issues you find in a commit message will still resolve to the same issue.

In GitLab, "issues" are technically a subtype of "work items," but the term issue still applies, and you'll see it throughout the UI. If you've worked on any GitHub or GitLab project before, the experience will feel familiar.

What still works the way you're used to

A lot has not changed:

You can still create issues without any special role.
The contribution credit system is unchanged. Every comment you make on a GitLab issue still syncs to its contribution record automatically. The credit UI itself still lives on drupal.org.
Shared issue forks are still the way to collaborate (on code). Drupal still doesn't use personal forks; collaboration on a single fork remains the model. The fork management UI also still lives on drupal.org.
The familiar workflow conventions can still apply — Needs work, Needs review, RTBC, priority levels, and so on. They were migrated as scoped labels (more on this below).
GitLab CI still runs your tests the same way it has for the past few years.
Your Drupal.org login still works. Single sign-on means no extra account to manage.
Cross-references and parent/child relationships still exist, just with slightly different syntax (more on that below).

Some things actually got better

It's worth naming a few real wins for contributors:

A modern issue editor with proper markdown, real code blocks, syntax highlighting, image paste, and a mobile-friendly UI.
Issues and merge requests now live alongside the code, pipelines, and CI logs on git.drupalcode.org — far less context-switching during code review.
Much better filtering, search, and saved queries on issue lists.
Issue boards (Kanban-style) are available for projects that want them.

Who can edit what

A few permission details are worth knowing up front, because they're tighter than what you may be used to on the old issue queue:

Anyone can comment on an issue.
Only the original author or project maintainers can edit the issue description. This is a real change — on drupal.org, any logged-in user could edit an issue summary. If you'd like a description updated and you're not the author, leave a comment with the suggested wording so the author or a maintainer can apply it.
Labels and other metadata (priority, version, category, component, tags) can only be edited by users with a Planner role or higher on the GitLab project.

That last point is real friction for contributors who triage and label issues, and we're addressing it directly. #3559846: Allow changing GitLab issues labels for all contributors is building a label-management UI that will live on drupal.org, alongside the existing contribution credit and issue fork management screens. Once it ships, any contributor will be able to manage labels on any issue without needing a project role on GitLab. This is also an upstream issue, but it doesn't seem to be worked on.

Until then, if metadata needs updating, leave a comment noting what should change. Maintainers and other contributors with the role can apply it.

Old workflow conventions can still apply

Good news for anyone with muscle memory for Drupal's NW / NR / RTBC dance: the conventions weren't dropped in the migration. They were preserved as scoped labels on GitLab issues — state::rtbc, the equivalent state labels for needs-work and needs-review, priority labels, and so on. Each project's setup may vary, but the familiar conventions carried over, and contributors can keep using them.

Convention	Now
Needs work	`state::needsWork` label (alternative: MR set to Draft)
Needs review	`state::needsReview` label (alternative: MR set to Ready)
RTBC	`state::rtbc` label (alternative: MR approval)
Needs reroll	Push a rebase to the issue fork branch

Two notes:

Applying these labels yourself currently requires the Planner+ role on the project, until #3559846 ships the contributor label UI. In the meantime, a comment indicating the status you'd assign is the right move.
Merge request states are a useful parallel signal: an MR's Draft / Ready toggle and approval status reflect the actual code change being reviewed, which often communicates more clearly than a label on the parent issue. Some projects lean heavily on MR state, some on labels, some use both — there's no single right answer.

Day-to-day: how to do common things

Create an issue

Navigate to the project, click Work items in the left sidebar, then New item. The form is just a title and description; labels and metadata are added afterwards by users with the appropriate role. If a project has set up issue templates (markdown files in the repo), you'll see them in a dropdown.

The first auto-generated comment

The first comment on every new issue is posted by DrupalBot. It's the bridge to the things that still live on drupal.org:

A link to the contribution record (where credit is tracked).
A link to the fork management page, where you can create or request access to a shared fork, view existing MRs, and open a new one.
Once #3559846 ships, a link to the contributor label management UI.

Forks and merge requests

The fork management screen on drupal.org works the same way for GitLab issues as it has for Drupal.org issues. From there, you can create a shared issue fork, request access if one already exists, push a branch, and open an MR. Branching and merging happen in GitLab's native UI, where they're already optimized.

Linking issues across systems

During the transition, contributors will be working with both Drupal.org issues and GitLab issues, sometimes in the same comment. The syntax differs by direction:

Drupal.org → Drupal.org issue Brackets around the issue number (without spaces): [ #123456 ] (unchanged)
GitLab → GitLab issue (same project): #123456 (no brackets)
Cross-platform (either direction): paste the full URL

For "related issues" entries on Drupal.org, always use the full URL when pointing at a GitLab issue.

Things you might notice on migrated issues

A few oddities are worth flagging if you're working through historical issues:

DrupalBot is listed as the author on every migrated issue. (Issues created after migration correctly show their actual creator.) The GitLab API forced a tradeoff between preserving the original author and preserving the issue ID. We chose to preserve the ID so that #123456 still maps to the same issue. The original author's name is preserved in the first line of the issue description.
Old drupal.org issue URLs redirect to their GitLab equivalents, so existing links in commit messages, blog posts, and external references continue to work.

Reporting bugs and getting help

Found a bug in the migration itself or in the integration between Drupal.org and GitLab? Please file it in the Drupal.org customizations issue queue.

Have a question, or want to share feedback on the new workflow? Join the #gitlab-issues-feedback channel on the Drupal community Slack.

We're actively iterating on this transition based on what we hear from contributors and maintainers in opted-in projects. The more feedback we get now — while we're still in the opt-in phase — the better the experience will be when the rest of contrib gets batch-migrated.

Reference: GitLab documentation

For more detail on any of the GitLab features mentioned in this post, the official GitLab documentation is the canonical source.

Issues and work items

Labels and permissions

Merge requests

Markdown

GitLab Flavored Markdown

Related blog posts in this series:

Related issues

Opt-in your project for migration to GitLab Issues. Eventually, all projects will be migrated.
Provide feedback on the GitLab issue migration.
General issue for the GitLab migration.

* We used Claude AI to refine our first draft and help link related materials like the GitLab documentation.

rss

From Leuven to Athens: Celebrating One Year Since the Drupal AI Initiative Took Shape

One year ago, at Drupal Developer Days in Leuven, something special happened.

The Drupal AI Initiative was not officially launched yet. That would happen later, in June. But Leuven was where the spark happened. It was where the first real momentum came together. Where conversations turned into commitment. Where a shared belief became a shared plan.

Five companies stepped up to kickstart the initiative: Dropsolid, Acquia, 1xINTERNET, FreelyGive, and Salsa Digital. Together, they helped turn an ambitious idea into the beginning of a movement.

Now, one year later, as we gather again at Drupal Developer Days in Athens, we celebrate one year since that moment of conception.

Leuven was where the initiative was kickstarted. June was when it officially went live. Athens is where we celebrate how far it has come.

A year of momentum, collaboration, and delivery

The Drupal AI Initiative was created with a bold ambition: to help Drupal become the leading open source CMS for AI-powered digital experiences.

But from the beginning, this was never just about adding AI features.

It was about building AI into Drupal in a way that reflects the values of the Drupal community: open, flexible, responsible, transparent, and collaborative. It was about giving organizations the tools to innovate with AI while keeping control over governance, content, security, editorial workflows, and long-term digital strategy.

Over the past year, the initiative has grown from a spark in Leuven into one of the most ambitious collaborative efforts in Drupal’s history.

What has been delivered?

Since the official launch of the Drupal AI Initiative, the team has made major progress. The amount of installs is growing significantly, 13980 at the time of writing. Adoption is accelerating. According to shared data we’re growing at about 260 sites per week and accelerating.

This is only the sites that share numbers, the real share is much higher.

Growing numbers of Drupal AI Partners

Between Drupal Con Vienna and Chicago, the initiative added 12 new partners, a total of 34, representing a 50% increase in participation. We are on track to match this growth in support between now and DrupalCon Rotterdam, a key goal for this year.

Delivering capabilities at scale

The initiative also successfully established and executed the delivery management RFP process, putting important operational frameworks in place, including:

Partner expectations documentation
Onboarding processes
Development sprint processes
Contribution tracking
Team planning sheets
Weekly status reporting

These may sound like operational details, but they are what make collaboration at scale possible. They help turn enthusiasm into structure, and structure into delivery.

The Drupal AI Initiative has become the largest multi-company collaboration in Drupal community history.

- Dries Buytaert

The initiative is now actively funding critical roles across multiple organizations, including product management, innovation management, technical leadership, and program management. This marks a major milestone: the Drupal AI Initiative has become the largest multi-company collaboration in Drupal community history.

The 2026 roadmap was finalised earlier this year, informed by customer demand and industry insight. Delivery is actively underway.

At the same time, marketing efforts have been elevated to position Drupal as the leading AI-powered open source CMS globally, supported by ongoing storytelling and visibility through the Drupal AI Initiative blog.

Significant rise contribution

Focused effort on strategically important features, combined with a growing number of partners committing resources and strong community participation, has driven a significant increase in momentum and impact.

The tag clouds below visually represent the many Drupal community members who in the past 12 months have contributed to the AI Initiative (sized according to number of fixed issues worked on). Includes code and non code contributions.

The following organizations have also contributed to the Drupal AI Initiative in the past year.

Marketing Drupal AI

From small beginnings with Paul Johnson and Frederik Wouters taking on marketing, we now have a cross disciplinary high performing team with 10 leads across areas of specialization.

Focussing on introducing Drupal to new audiences the emphasis has been on webinars, participating in external events and organising major new customer facing events of our own. These include Drupal AI Summit Paris and New York City (14th May 2026), The AI Summit London (10-11 June 2026) and the latest Enterprise AI Summit Rotterdam (28 September 2026).

Our work has included facilitating Southwark Council, London, winning Digital Leaders AI Impact Award 2026, producing video case studies and highlighting major new AI features announced during the DriesNote with social video content. All these activities have substantially raised Drupal’s profile to a wider audience.

Building toward Rotterdam

The next major milestone is already taking shape.

In Rotterdam, the initiative will launch an exclusive Drupal Enterprise AI event, available only to Drupal AI Initiative partners. The event will bring together European decision-makers aboard the SS Rotterdam for peer networking, customer case studies, and strategic conversations about building AI-powered content management solutions with Drupal.

Participation in this event is limited to partners who join the Drupal AI Initiative by June 30.

That creates a powerful moment for companies that want to be part of Drupal’s AI future. The initiative is scaling, the roadmap is active, the team is growing, and the opportunity to help shape what comes next is open now.

A strong foundation for what comes next

The Drupal AI Initiative is in a strong position.

With $380,000 in cash and $1.5 million in in-kind contributions, more than 50 contributors from partners, the initiative has the resources and commitment needed to continue scaling. The plan is to onboard an additional 12 partners by Rotterdam, further strengthening the team and accelerating delivery.

The message is clear: You counted on Drupal AI, and we delivered. Now we want to create more efficiency and scale.

That is what this next phase is about. More delivery. More visibility. More impact.

Thank you to the people who made this possible

This milestone belongs to many people.

It belongs to everyone who joined those early conversations in Leuven.

It belongs to Frederik Wouters, who brought the right people together at the right moment and helped create the spark that started it all.

It belongs to the five companies that kickstarted the initiative: Dropsolid, Acquia, 1xINTERNET, FreelyGive, and Salsa Digital.

It belongs to every partner, contributor, sponsor, strategist, developer, product thinker, marketer, and community member who has helped move this initiative forward.

And it belongs to the wider Drupal community, whose openness and willingness to collaborate make initiatives like this possible.

You can still join

The Drupal AI Initiative is growing, and companies can still become part of it.

If your organization believes in the future of Drupal, if you want to help shape responsible AI in open source, or if you want to be part of the group building the next generation of AI-powered content management, now is the time to join.

Become part of the 34 makers already helping to build Drupal’s AI future.

To join the Drupal AI Initiative as an organization and become a partner, contact Dominique at dominique@dropsolid.com.

From Leuven to Athens, this has been an incredible first year.

And the best part? We are only just getting started!

File attachments:

10.png

Powered By Combinary

youtube

Aftermovie Drupalcon Vienna 2025

DrupalCon Vienna was extraordinary. Let's remember together the best moments. read more

youtube

Weekend Hackery: Vibe Coding with Claude from Scratch

In this informal "pair programming" session, webchick and Amber Himes Matz use Claude Code to "vibe code" a plan on automated tool to cross-post announcements about new Drupal AI Learners Club events. We start from a "bare bones" Git repo and use a plan generated from Claude.ai to demonstrate building step by step. Exploration, learning, and hilarity ensues. :D 00:00: Intros / About the Club 01:48: Challenge we're tackling 03:21: Planning with Claude.ai 04:19: Side-Quest: Drupal.org Permissions 05:33: Back to the plan 06:21: Side-Quest: Additional channel — Luma 07:16: Let's YOLO! 08:45: Git clone an existing project 09:08: Side-Quest: Getting the plan from Claude 10:34: Side-Quest: .claude/ directory 12:30: Starting Claude Code 12:50: Aside about security 15:05: Claude Code first steps 15:30: Side-Quest: Costs between models 17:18: Claude Code first steps FOR REAL :D 18:24: Side-Quest: The many ways to run Claude 20:53: Checking in on Claude Code ...(more to come! :))... read more

youtube

Sponsor pre-recorded session - Tugboat

youtube

Demo: Using AI to solve a Drupal.org issue (Scott Falconer)

Scott demos how he solves a Drupal.org issue using OpenAI Codex, including summarizing the issue, generating a merge request, and asking it questions to verify its response. This clip is from the Drupal AI Learner's Club "From Autocomplete to Autopilot" meeting: https://www.youtube.com/watch?v=lNnbJQ6l2B4 read more

youtube

Drupal AI Learners Club: From Autocomplete to Autopilot

This session led by Scott Falconer of the Drupal AI Initiative, breaks down the current landscape of AI-assisted coding into clear, practical tiers: inline completions (think autocomplete on steroids), chat-in-your-IDE copilot workflows, and the newer "agentic" coding loops where AI plans and executes multi-step tasks with your oversight. We'll look at what each style is good at, where it falls down, and — critically — how much control you keep at each level. 10:30 Presentation: From Autocomplete to Agent Loops by Scott Falconer Slides: https://gamma.app/docs/From-Autocomplete-to-Agent-Loops-vb721nb8xh8ojpw 33:47: Demo: Solve a Drupal.org issue with OpenAI Codex read more

youtube

Drupal AI Learners Club: Share Your Setup!

The inaugural gathering of the Drupal #ai-learners club, where we "show and tell" how we're using Drupal and AI together. In this edition: - 11:20 Jürgen Haas shows off the Agent Skills he's using to help LLMs be smarter about Drupal. - Repo: https://gitlab.lakedrops.com/ai/skills - 21:11 Mike Herchel demonstrates his use of AI for core development, including visual regression testing for theme-related work. - Repo: https://github.com/mherchel/ddev-drupal-admin-vrt - 47:00 Scott Falconer shows some sci-fi AI workflow stuff with Beads and gstack - Repo #1: https://github.com/gastownhall/beads - Repo #2: https://github.com/garrytan/gstack read more

youtube

Demo: Using Agent Skills (Jürgen Haas)

As part of the Drupal AI Learners Club Show Your Setup session, Jürgen Haas shows the Drupal and GitHub Agent Skills he is using for Drupal development. Repo: https://gitlab.lakedrops.com/ai/skills read more

youtube

Demo: Using AI for Visual Regression Testing (Mike Herchel)

As part of the Drupal Learners Club Show Your Setup session, Mike Herchel demonstrates a visual regression testing tool he's created and how he uses it to contribute to Drupal Core. Repo: https://github.com/mherchel/ddev-drupal-admin-vrt read more

youtube

Demo: Using Beads and gstack to supercharge your agentic AI setup (Scott Falconer)

As part of the Drupal AI Learners Club Show Your Setup session, Scott Falconer demonstrates his use of Beads to remind him where he left off, and gstack to guide his engineering in a direction of providing real value to users. Repos: - https://github.com/gastownhall/beads - https://github.com/garrytan/gstack read more

youtube

Drupal 25th Anniversary Gala | Chicago 2026

For 25 years, Drupal has been more than software. It's been careers launched, friendships formed, and a global community built around a shared belief in the Open Web. On March 24, 2026, that community came together at SIX10 in Chicago to celebrate — one night of connection, history, and joy. The Drupal 25th Anniversary Gala was held during DrupalCon Chicago 2026. 🔗 Learn more about Drupal: https://drupal.org 🔗 Learn more about the Drupal Association: https://www.drupal.org/association read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Drupal at 25: What does Drupal mean to you? | Drupal 25th Anniversary Gala

At the Drupal 25th Anniversary Gala in Chicago, we set up a selfie booth and asked the community about their Drupal story — how they got involved, how Drupal has shaped their life, what it means to them, and more. These are their answers. Voices from across the global Drupal community — developers, designers, site builders, agency owners, and contributors — sharing what 25 years of Drupal has meant to them. The Gala was held on March 24, 2026 at SIX10 in Chicago, as part of DrupalCon Chicago 2026. Thanks to Acquia for sponsoring the booth and bringing us these stories. read more

youtube

Sponsor pre recorded session Upsun

youtube

Sponsor Pre recorded session Hounder

youtube

Sponsor Pre recorded session Dropsolid

youtube

Sponsor Pre recorded session Promet Source

youtube

Drupal Canvas AI: Where Speed Meets Substance

The second half of the equation is Drupal Canvas AI, the next-generation page builder. Instead of dragging and dropping components, you can just tell the AI what you want with prompts that describe the page and content you want to produce. Canvas AI, in conjunction with the CCC, will create the page and include the components you need. As Dries noted, production is becoming a commodity, but judgment and strategy remain human. Drupal AI doesn’t replace your teams, it amplifies their capability to deliver ‘Quality at Scale.’ #MarketingTech #ContentStrategy #DrupalCMS #DXP #AI read more

youtube

The Context Control Centre (CCC): Institutional ‘Knowledge as a Service’

The most significant hurdle for AI today is a lack of context. Without it, AI simply gives you the "average response." The Context Control Centre changes this by allowing organizations to store their unique "DNA" directly within Drupal. The CCC organizes institutional knowledge into actionable data: Brand Guidelines: Specific rules for tone, voice, and formatting. Personas: Detailed profiles of target audiences (e.g., Controllers vs. IT Ops). Dynamic Context: A groundbreaking feature where the CCC connects to live data sources like Google Analytics 4 (GA4). Built into your Drupal CMS, AI tools don't just guess; they work within your specific business reality to ensure their output is always on brand, within guidelines, and relevant to the contextual nuances of the task at hand. #MarketingTech #ContentStrategy #DrupalCMS #DXP #AI read more

youtube

Drupal CMS Site Templates - Purpose-Built Templates for Your Industry

Getting started has neveGetting started has never been easier. Drupal CMS introduces purpose-built site templates designed for nonprofits, educators, event organizers, health providers, government agencies, and SaaS companies — all ready to customize out of the box. Browse free and premium templates at marketplace.drupal.org, or install directly from Drupal CMS. Premium templates like Meridian offer extended visual flexibility and dedicated product support, while every option connects you directly with the makers. And easy doesn't mean limited. Drupal CMS is built on the same open source foundation powering some of the world's most complex digital experiences — structured content, advanced workflows, airtight security, and access to 10,000+ extensions right from the UI. Easier than ever to start. Impossible to outgrow. 🔗 Browse templates: https://marketplace.drupal.org been easier. read more

Powered By Combinary

youtube

#Driesnote | DrupalCon Chicago 2026

Join us live for the #Driesnote at DrupalCon Chicago 2026! Drupal Founder Dries Buytaert will be presenting on the latest innovations in Drupal, with everything from Drupal CMS and Drupal Canvas improvements, innovation in AI, the Drupal.org site template marketplace and more. read more

youtube

Helping people tell their cancer stories using AI: Lessons from World Cancer Day

Every year, thousands of people around the world share deeply personal stories about their experiences with cancer through the World Cancer Day campaign. Behind the scenes, a small communications team reviews these submissions to ensure they are appropriate, relevant, and ready to be shared with the world. In this Drupal AI Initiative webinar, we explore how the World Cancer Day team introduced artificial intelligence into their Drupal platform to support this process. Rather than replacing human judgement, AI was used to assist with moderation so that stories could be reviewed faster and contributors could see their experiences published more quickly. Watch our conversation about: • The global storytelling effort behind World Cancer Day • The operational challenges of managing hundreds of story submissions • How AI can responsibly support human decision-making • Lessons for organisations exploring AI for the first time Speakers • Matthew Saunders — AI Ambassador, amazee.io • Charles Andrew Revkin — World Cancer Day Programme, UICC • Diego Costa — COO, 1xInternet This session was designed for organisational leaders, communications teams, and anyone interested in practical, responsible uses of AI. #Drupal #OpenSource #AI #Innovation #TechforGood #cancer read more

youtube

Dries: What's Coming at DrupalCon Chicago 2026 (+ a Special Announcement)

Drupal founder and project lead Dries Buytaert shares a personal preview of what's coming at DrupalCon Chicago 2026 — and why this year's event is something truly special. Drupal turned 25 in 2026, and the celebration is happening live in Chicago. In this video, Dries gives a sneak peek at his keynote, which will cover the latest Drupal innovations, the impact of AI on the platform, product and ecosystem evolution, and why he's more optimistic about Drupal's future than ever before — including a first look at new innovations he hasn't revealed yet. And there's more: this year DrupalCon is hosting a special gala in honour of Drupal's 25th birthday. It's a separate ticketed event, and one you won't want to miss. 🎟️ Get your DrupalCon tickets at https://events.drupal.org/chicago2026 and join Dries in Chicago. Gala tickets available here: https://www.zeffy.com/en-US/ticketing/drupal-25th-anniversary-gala read more

youtube

KEYNOTE: Neurodiversity: An Underrated Superpower in Business

Vera Herzmann In tech, some of the most innovative minds think differently – and that difference is often misunderstood. People with ADHD, Autism, or High Sensitivity bring unique strengths like deep focus, pattern recognition, creativity, empathy, and sharp intuition. Yet many workplaces still see neurodivergence as a challenge, rather than recognizing it for the powerful asset it truly is. This keynote challenges that mindset and reframes neurodiversity as a competitive advantage in business. Drawing from lived experience and years of organizational consulting, you’ll gain a science-backed understanding of neurodiversity, hear real-world stories from the workplace, and explore how recognizing and embracing neurodivergent talent can unlock hidden potential in teams. Whether you build, design, manage, or lead, this session will shift your perspective, spark meaningful dialogue, and leave you with practical tools to apply in your own professional setting. read more

youtube

AI Agents in Drupal CMS - Create your own agent

Speaker: https://www.drupal.org/u/vincenzo-gambino You’ve seen what AI Agents can do in Drupal. What if you could create your own Agents? What if this were so easy that every module across the Drupal ecosystem could have its agents, and they all worked together in harmony? What if, as a result, Drupal became the de facto place to build all AI applications, not just web publishing? If this is you, then this is the talk for you! This talk will teach you how to create agents from scratch using an existing Drupal module. We will explore: - How to code an agent using the framework in the Drupal ai_agents module. - Best practices and theory for splitting out functionality into multiple agents. - How can all those agents be brought together to effectively answer user queries and prove they work with the AI evaluations framework. read more

youtube

Declarative Shadow DOM and the future of Drupal Theming

Speaker: JohnAlbin Drupal's old school theming system is server-side rendering. And in the tech world, everything old is new again. In the last two years, modern frontend frameworks have been trying to figure out how to server-side render their client-side JavaScript. React v19 has figured out how to split its components into client and server parts. As of August 2024, this same "split component" capability is now a part of native Web Components with the introduction of Declarative Shadow DOM. Instead of being written in client-side JavaScript, web components with Declarative Shadow DOM can now be defined using HTML and CSS only. So if Drupal was server-side rendering before it was cool, can we leverage Declarative Shadow DOM inserted into Single Directory Components to make Drupal cool again? read more

youtube

Recipes: It's About Time!

Speaker: mandclu One of the key elements of the Starshot Initiative is the rapidly evolving system for Recipes. Designed to accelerate site-building, recipes will help people new to Drupal to solve for common needs, and for users of all skill levels to quickly build out content architectures using best practices. This talk will do a deep dive into the Events recipe and its available add-ons, allowing you meet even complex requirements quickly and without custom code. We'll discuss what capabilities are available out-of-the box in Drupal CMS, and the options available to extend them. We'll also talk about how you can add the same capabilities to a site not build with Drupal CMS. Best of all, during the session we'll do a live demonstration of adding capabilities to your site using Events and other recipes read more

youtube

"当たり前"を疑いましょ ~ フレームワークからドメインを守るDrupalアーキテクチャ ~

Speaker: umekikazuya 「Taxonomy便利ですよね。」って導入をいつもだったらするんですが、今回はできません。なぜなら私は、TaxonomyをCoreから外してほしいと思っているから。この冒頭で「何言ってるの？」って感じた方。Taxonomyの強みを言えますか？本セッションでは、「分類要件といえばTaxonomy！」というDrupalの常識(当たり前)にフォーカスをあてて、その“当たり前”や”習慣”が本当に合理的かを評価し、フレームワークとの向き合い方について、今までのDrupalからすると当たり前ではない提案をさせていただきます。 read more

youtube

大規模Drupalサイトの成功事例：全豪オープンが毎分53万リクエスト以上を処理する仕組み

Speaker: jimmycann テニスの全豪オープンは3週間の開催期間中に100万人を超える観客が来場し、さらに世界中から数百万人がウェブサイトやモバイルアプリを通じてアクセスする世界的なイベントです。この巨大なデジタル体験を支えているのが大会の情報、選手データ、コンテンツ管理、イベント予約などを統合的に扱う高度なDrupalサイトです。本セッションでは世界でも有数のアクセス数を誇るDrupalサイトをどのように準備し、安定的に運営しているかをご紹介します。Drupalの強力なキャッシュ機能を最大限に活用し、リスクを適切に管理し、万が一の事態に備える方法について詳しく解説します。 Drupalがどんな規模でも優れたデジタル体験を実現できることを学び、自社サイトで「コストを抑えながら楽にスケールする」実践的なノウハウを得られます。 read more

youtube

Drupal in the Loop: チームで育てる学習データ

Speaker: umekikazuya, sachikonitta 数年前まで、機械学習やファインチューニングは、一部の研究機関やAIスタートアップの専有領域でした。しかしこの数年、さまざまなツールやプラットフォームの登場によって、それが少しずつ、私たちにとっても身近なものになりつつあります。学習データは、モデルの「知性」を決める最も重要な基盤です。けれど、そのデータをチームで育てるための仕組みである、バージョン管理、ワークフロー、セキュリティ、アクセス制御、監査ログ出力などの要素を包括的にカバーできるツールは、まだ多くありません。本セッションでは、Drupalを活用し、研究者やエンジニアだけでなく、コンテンツ制作者や企画担当者も含めたチーム全体で学習データを「育てていく」仕組みを提案します。 read more

youtube

One kilobyte of JS is enough to make a decoupled FE block in Drupal. And no Babels required!

Speaker: murz To make a Drupal website modern we usually bring there interactive frontend components in JavaScript. But not only just components! Together with them, we have to bring a couple of more things: - A pretty heavy framework: React, Angular, Vue, etc. - Typescript transpiled to JavaScript. - Something like Babel to pack all your JS dependencies into one large bundle. - Rebuild the whole bundle after every change in any TS file! And, suddenly, to display a simple frontend component, your Drupal webpage should download and execute hundreds of kilobytes, or even megabytes of large JS bundles! What if I tell you, that you can simply get rid of all these, and just write a kilobyte of a pure and compact JS code? And with no dependency on any JS framework! So, come and see how it works! read more

youtube

Smart Search, Safe Search: How Drupal + AI Work Together

Speaker: sachikonitta AI search is powerful—but without access control, it can leak private content. This beginner-friendly session introduces RAG (Retrieval-Augmented Generation) and shows how Drupal can sit between users and AI to enforce roles and permissions. The session will include these topics: - What AI search and RAG really are - Why just embedding content in a vector database isn’t enough - Drupal as truth for permissions - How to connect Drupal with vector DB and AI - PoC (How a safe AI search looks like) read more

youtube

デジタル庁が取り組むDrupalを活用した共通CMSの構築

Speaker: Akihiko Sakamoto, Hirokazu Awaji Drupalを活用して構築した共通CMSの歩みそのプロトタイプとしてのデジタル庁ウェブサイトの取組アクセシビリティに対応するためのデジタル庁デザインシステムとの親和性向上の取組等 read more

youtube

I’m Not a Front-End Dev: Building Clean UI in Drupal with SDCs and Shoelace

Speaker: yi_jiang As a full-stack Drupal developer, I’ve often found front-end frameworks too opinionated or hard to plug into Drupal cleanly. With Single Directory Components (SDCs) and Web Components like Shoelace, we now have a scalable, framework-free way to build modern UI — without needing React or Vue. This session shows how to use Web Components inside SDCs to create reusable, maintainable elements that integrate easily with Twig, Layout Builder, or Paragraphs. I’ll walk through practical examples and share trade-offs from real projects. This talk is for developers who live in Drupal, not Figma — and want a sustainable, future-friendly UI approach that doesn’t require becoming a front-end specialist. read more

youtube

The Future of Workflow Optimization with AI & Drupal Canvas

Speaker: Maggie Schroeder, shumpei AI is no longer a “nice-to-have” but a necessity for businesses looking to maintain a competitive edge. By identifying inefficiencies and integrating AI solutions from Drupal, organizations can create more collaborative, efficiency, and optimize workflows and the content creation process. Join us to learn the top 5 ways you can start leveraging AI today with Drupal & Acquia. read more

youtube

Drupal の拡張性を強化する Fastly 〜AI 時代のトラフィック増加に柔軟に対応する次世代 CDN〜

Speaker: 晋平加藤, 俊平詫間 AI 活用が急速に進む中、Web サイトはこれまで以上に高速性・安定性・セキュリティを求められています。本セッションでは、次世代 CDN/WAF である Fastly を活用し、Drupal サイトのパフォーマンスと拡張性をどのように最大化できるのかを、現場の事例や最新トレンドを交えながらご紹介します。特に、以下のポイントにフォーカスして解説します：高速なキャッシュ処理と柔軟なエッジ制御による Drupal 運用の最適化 AI 時代に増加する画像生成・API リクエストなどの新種トラフィックへの対応方法セキュリティ脅威の高度化に対抗するための最新WAF・Bot対策開発者が最小限の手間でモダンなインフラを実現するためのアーキテクチャやベストプラクティス Fastlyを活用することで、Drupalサイト運用は「速く・安全で・管理しやすい」環境へと進化します。 read more

youtube

Epic things you built with Drupal AI

Speaker: schnitzel Curious about how AI is actually being used in the wild? Join Michael for an in-depth look at the awesome things that have been built with Drupal AI. This session gives an overview of actual running Drupal AI Implementations, how they work, and what we can learn from them. Whether you're a developer, architect, or strategist, you'll walk away with actionable insights and inspiration for your next project. read more

youtube

Don’t Write Code, Start Prompting! AI Orchestration of Digital Experiences

Speaker: yas We introduce the architecture of a technology-agnostic workflow engine that defines human-readable decision rules in YAML, ingests them into a RAG datastore, and leverages an LLM to retrieve relevant rules and instantly determine and execute the next approver. First, we’ll demonstrate the end-to-end flow from rule definition through prompt design to datastore registration. Then, we’ll share production-ready best practices for maximizing retrieval accuracy, using GenAI to extract structured request data from unstructured documents, and keeping workflows current. Attendees will leave with guidance on expressing approval workflows, practical techniques for structuring decision rules for optimal retrieval, and a roadmap for embedding AI-driven innovation into Drupal or any platform. read more

youtube

Next steps for Drupal Canvas

Speaker: lauriii Drupal Canvas initiative aims to revolutionize how content creators and site builders create digital experiences. While there has been significant progress already, the journey is far from over. This session dives into the exciting next steps for Drupal Canvas, outlining the vision and roadmap on the horizon. You'll leave with concrete understanding of when specific features will be available, how to prepare your projects for Drupal Canvas adoption, and whether it's the right fit for your team's use cases. read more

youtube

Inside Sharp: How a Global Brand Powers Digital Innovation with Drupal

Speaker: Jason Cort The Day 2 keynote at DrupalCon Nara 2025 shines a spotlight on how one of the world’s most recognised brands is using Drupal to drive digital success. On Tuesday 18 November at 9:15am JST, Jason Cort, European Director of Product Management and Marketing at Sharp Europe, will share how this division of the renowned Japanese multinational has embraced Drupal to power its digital ecosystem. From their flagship website to a vital partner portal, Sharp has built a dynamic and resilient digital presence on Drupal. In this keynote, you’ll hear how open source enables a global corporation to scale with confidence, stay secure, and innovate at speed. read more

youtube

Migrate APIで移行 (イコー)

Speaker: Matthew Messmer, aniketto Drupalコアの優れた機能の一つであるMigrate APIは、サイトのバージョンアップはもちろん、さまざまなデータ移行のケースで活用できます。本セッションでは、その具体的な活用例をいくつかご紹介します。 read more

youtube

Brilliant, But Doubting: Imposter Syndrome and the Experience of Women in Tech

Speaker: gargsuchi, JCT321 Despite increasing participation of women in the technology sector, many continue to grapple with imposter syndrome, a psychological pattern marked by persistent self-doubt and a fear of being exposed as a fraud, despite evident competence and achievements. This session explores the impact of imposter syndrome among women in tech. Drawing on research, lived experiences, and industry data, the session identifies the different factors that contribute to imposter syndrome and explores strategies to foster inclusive environments that support confidence, belonging, and professional growth. By addressing imposter syndrome not as a personal failure but as a cultural and structural issue, this work aims to contribute to more inclusive and psychologically safe workplaces in the tech industry. read more

youtube

The future of Drupal core and the ecosystem in the age of Drupal CMS

Speaker: gábor hojtsy The introduction of Drupal CMS has created a buzz in the Drupal community, redefining how we think about building with Drupal. Its flexible, modern approach to development has opened up new possibilities for innovation. By the time DrupalCon Nara takes place, Drupal CMS 2.0 will have been released with Drupal Canvas and site templates. But what does this mean for the future of Drupal core and the ecosystem? Especially for those people not using Drupal CMS (yet)? How will Drupal still cater for key use cases, such as headless architectures, social, and e-commerce? What can different personas not in the focus of Drupal CMS (such as developers) expect? Let's discuss how Drupal CMS may shape the broader ecosystem, and consider the long-term implications for the community. read more

youtube

Further Empowering Drupal with Single Directory Components using UI Suite

Speaker: drupak UI Suite is a powerful set of Drupal modules comprising of modules like UI Patterns, UI Patterns Layouts, UI Patterns Block, UI Patterns Field Formatters, UI Patterns Views, UI Styles, UI Skins, UI Icons etc. All these modules empower site builders to use Single Directory Components in a powerful way. These modules add extra metadata to Single Directory Components which can then be used in block, views, field formatters, layouts. This session is about all this. read more

youtube

奈良市進出企業インタビュー/奈良市企業誘致PR動画

#DrupalConNara2025 #NaraCity #OpenSource DrupalCon Nara 2025に向けて、奈良市から公式ウェルカムメッセージをお届けします。日本最古の都・奈良。「伝統と革新」が交わるこの場所で、世界中のDrupalistをお迎えする準備が進んでいます。この動画では、奈良市がどのようにIT企業の誘致支援に取り組んでいるのか、そしてDrupalConを通じて未来へつなげていきたい想いを、奈良市に進出した企業のインタビューを通してご紹介しています。【動画目次】 00:00｜奈良市進出企業インタビュー：進出の決め手は？ 00:08｜Ironstar Japan株式会社 01:08｜ジェネロ株式会社 ◆Why Nara × Drupal? ・古都の文化 × グローバルなOSSコミュニティ・集中しやすい落ち着いたワーク環境・奈良市としてオープンソース文化を応援・持続可能なIT産業の定着を目指した取り組み ◆DrupalCon Nara 2025 世界のDrupalコミュニティが奈良に集結する特別な日。オープンソース × 地方都市の未来を、ここから一緒に育てていきましょう。 ▼奈良で新しい働き方をつくりたい方へ奈良市企業誘致公式サイト https://www.city.nara.lg.jp/site/ricchi/ ▼事業展開・拠点づくりのご相談はこちら相談窓口 https://www.city.nara.lg.jp/site/ricchi/247901.html #Drupal #DrupalCommunity #企業誘致 #奈良市 #TechInJapan #RemoteWork #IT企業 #地方創生 read more

youtube

Global Reach, One Platform: The Journey to Implementing Multilingual in Drupal CMS

Speakers: anjali-rathod, ygoex After the release of Drupal CMS 1.0, a language selector was introduced but it was later removed due to technical limitations. Today, multilingual support is more essential than ever. Organizations need to deliver content in multiple languages to expand their global reach, foster trust, and increase user engagement. To align Drupal CMS with the multilingual features already built into Drupal Core, a dedicated team of experienced contributors kicked off the multilingual initiative in February 2025. Join us to explore: - The approach to move beyond an English-only installation, the technical challenges faced to embed multilingual support. - Research and design process behind the multilingual UI/UX. - A glimpse into ongoing work, and how future of multilingual looks like in the Drupal CMS. read more

youtube

Drupal の拡張性を強化する Fastly 〜AI 時代のトラフィック増加に柔軟に対応する次世代 CDN〜

Speakers: 晋平加藤, 俊平詫間 AI 活用が急速に進む中、Web サイトはこれまで以上に高速性・安定性・セキュリティを求められています。本セッションでは、次世代 CDN/WAF である Fastly を活用し、Drupal サイトのパフォーマンスと拡張性をどのように最大化できるのかを、現場の事例や最新トレンドを交えながらご紹介します。特に、以下のポイントにフォーカスして解説します：高速なキャッシュ処理と柔軟なエッジ制御による Drupal 運用の最適化 AI 時代に増加する画像生成・API リクエストなどの新種トラフィックへの対応方法セキュリティ脅威の高度化に対抗するための最新WAF・Bot対策開発者が最小限の手間でモダンなインフラを実現するためのアーキテクチャやベストプラクティス Fastlyを活用することで、Drupalサイト運用は「速く・安全で・管理しやすい」環境へと進化します。 read more

youtube

ネスレグループ日本拠点のDrupal導入の事例：　グローバル戦略と現場の運用を繋いでいく

Speakers: taishi, Kozo Takada 前半では日本拠点でのDrupal導入における課題や取り組みを紹介し、後半はグローバルDXPにおけるアジリティ実現をテーマにネスレ日本の担当者の方と対談します。実務担当者の視点からの知見を共有します。 read more

youtube

Kintsugi for the Web: Repairing, Rebuilding, and Reimagining with Drupal

Speaker: dreambubbler Join Dallas Ramsden on a journey connecting personal resilience with Drupal's transformative power through science, culture, and community. Learn how historical figures like Mo Tzu and the scientific method parallel the "Open Web" and "Open Source" movements, demonstrating how openness drives innovation and freedom. Having recently relocated to Okinawa, Dallas celebrates DrupalCon Japan by exploring how the island's rich cultural tapestry mirrors Drupal's diverse community. Discover how embracing different perspectives strengthens the Drupal ecosystem and ensures its relevance through forward-thinking solutions. read more

youtube

CMSに留まらない - AIを操るDrupalの新たな可能性

Speakers: Masami, Akihito.Kimura@ntt.com Drupalはもはや単なるCMSではありません。AIの一部として機能しながら、同時にAIを操り、対話し、共に進化していく存在へと変わりつつあります。このセッションでは、DrupalがどのようにAIと共に進化し、新たな可能性を切り拓いていくのかを紹介します。 read more

youtube

改めて振り返るDrupalのモジュール/テーマのデバッグ方法

Speaker: otofu Drupalでモジュールやテーマを開発する際や動作の中で気になる挙動を見つけた際の原因特定を行う為のデバッグ方法について普段私がどのように行っているかをハンズオンを交えて紹介します。主な内容は以下の通りです。・デバッグ環境の整え方・デバッグに便利なコントリビュートモジュールの紹介(Devel, Web Profiler) ・IDE(PhpStorm)とXdebugを組合せたデバッグ方法 read more

youtube

Drupalプロジェクトの成功は、プロジェクトマネージャー・スクラムマスター・UXデザイナーの力で加速する―多様な視点を巻き込むMeetupNaraの挑戦―

Speakers: Miki Yoshida, Misako Fukagawa Drupalは高機能なCMSとして多くの実績を持つ一方で、日本では「技術者向け」「専門的すぎる」という印象を持たれがちです。しかし実際には、プロジェクトマネージャー（PM）、スクラムマスター（SM）、UXデザイナー、コンテンツプランナーなど、多様な職種が関わり合いながらプロジェクトを成功に導いています。私たちは「Drupalは特定の人だけのものではない」と感じられるようなMeetupを毎月企画しています。このMeetupでは、これまでにのべ人数100人以上のご参加をいただいており、技術的な知識よりも、「なぜDrupalを使うのか」「それぞれの職種がどう関わるのか」「多様なチームでどんな可能性が生まれるか」といった視点を重視。誰もが自分の立場からDrupalに関われるイメージを持てることを目指しています。本セッションでは、こうしたMeetupを立ち上げた背景や運営の工夫、これまでに寄せられた参加者の声を交えながら、プロジェクトの現場におけるPM・SM・デザイナーの価値を再発見する機会を提供します。Drupalとの関わりに新しい視点を加えたい方に、ヒントや気づきを持ち帰っていただける内容です。 read more

youtube

Lessons from Integrating AI Into Real Marketing Teams

Speaker: saxenaakansha30 I’ve been working directly with AI to help solve real challenges faced by marketing teams, improving workflows, reducing manual effort, and supporting better decision-making. In this session, I’ll share lessons learned from trying out different approaches in real marketing use cases. We’ll talk about what worked, what didn’t, and how to introduce AI into a team without disrupting how people already work. Whether you’re leading a team, building marketing tools, or just curious about how AI fits into day-to-day work, this session will offer real, honest insights from the field. read more

youtube

That's Not a Theme, It's a Template

Speaker: elliott.mower The Drupal Canvas design system for Drupal CMS: one system, three site templates, and a streamlined path to low-code site creation—launching together to guide site builders, themers and designers. read more

youtube

Drupal Commerce's Starshot Roadmap

Speaker: zaporylie The vision for Drupal CMS (née Starshot) is bold and inspiring, inviting everyone in the Drupal community to consider how they might help end users accomplish even more with Drupal. Hear from the Drupal Commerce maintainers how they revised their roadmap to incorporate Starshot initiatives and to rethink key elements of Commerce Core in line with the Drupal Starshot product strategy. Recent, pending, and future features include: * Commerce recipes to solve common eCommerce use cases * AI agents that help merchants with complex configuration tasks * Experience Builder support for product and order pages You will leave ready to evaluate the platform afresh yourself, contribute to these and other initiatives, and implement it for your next merchant client. read more

youtube

Zero-downtime Drupal deployment with Kamal

Speaker: hktang You've built an amazing Drupal site ready to deploy. You want your deployments zero downtime, error-free, scalable, and future-proof. Yet, you are almost on your own, and Kubernetes is quite a beast to tame! You don’t want to be overwhelmed by the complexities of container orchestration, nor do you want to gamble with a shaky base system. You need a deployment workflow that’s reliable and stress-free, with a gentle learning curve. If this resonates with your experience, join this session to explore Kamal — a deployment tool that helps achieve these goals with greater simplicity. I will share my journey of setting up a Kamal-based deployment workflow dedicated for Drupal, and the lessons learned along the way, including on configuration, networking, file system, search API, caching, and more. The code introduced in the presentation is available at https://github.com/hktang/drupal-kamal read more

youtube

Beyond Iframes: Modern Embedding in Drupal with Media and oEmbed

Speaker: pcambra oEmbed is a well established format, however ever evolving content usage policies and security restrictions are preventing site builders from using iFrames to inject external content from sources such as YouTube, Instagram, X, and many social networks and content providers. By using oEmbed standard practices, external content can be safely embedded to a Drupal website by using core tools such as the Media module and contributed modules such as oEmbed Providers. In this session we will cover: - What is oEmbed format and how does it work under the hood. - What Drupal modules can be leveraged to embed content from third parties. - CKEditor best practices for embedded objects. - How to enhance embeds with auth or privacy controls - How to build your own resources to embed custom content. read more

youtube

長期運用のためのDrupal開発入門

Speaker: kazukomurata このセッションでは、Drupalを使い始めた開発者の方に向けて、長期運用を見据えたDrupal開発の実践的なトピックを紹介します。 Drupalはセキュリティや拡張性に優れ長期プロジェクトに適したCMSですが、継続的な運用には工夫やノウハウが必要です。本セッションでは以下のトピックを取り上げます： - Drupalが長期運用に適している理由 - モジュール選定の考え方 - サイト構成管理のベストプラクティス - アップデート戦略 - CI/CDによる自動化 read more

youtube

First things to keep in mind when building a worldwide multi-site, multilingual site with Drupal

Speaker: ken_taguchi Drupal is so popular in the enterprise market that there is no single Drupal development project that is easy for developers. One of the biggest challenges is the global project of deploying multiple sites in multiple languages in so many regions and countries. In such projects, we have to create a consistent platform while considering the requirements of multiple stakeholders, legal systems, network environments, etc. in each region and country. As a Drupal agency in Japan, we have helped large Japanese companies build websites around the world with Drupal in many projects. In this session, we will share some of the key ideas and points to keep in mind when using Drupal to deploy digital marketing in countries and regions around the world. read more

youtube

Backwards and in High Heels: Early adopter insights on Drupal in Japanese academia

Speaker: shinmaikeru Fax machines for marketing? Carved ivory seals for bank accounts? These aren't just "WTF Japan" memes; they grew out of the context of the bureaucracy, language, society, and culture. The better you understand this context, the more effective you will be here. Drawing on over 30 years living in Japan and 20 years working in Japanese universities, I will offer a perspective on the technical and administrative challenges facing Japanese educational institutions. I will also offer context on the challenges Japan has faced in using the web. I believe that Drupal is a valuable tool for organizations like mine, and I want to help you understand Japanese organizations better so you can help them benefit from Drupal. read more

youtube

How to sell Drupal in AI times

Speaker: nielsaers AI is reshaping buyer expectations faster than any CMS trend we’ve seen. Prospects now ask: “How will your platform harness my data for AI without locking me in?” This session arms agency leads, sales engineers, and product owners with a pitch that lands. We’ll map the AI conversation to Drupal’s core strengths—its open-source DNA, composable architecture, and unrivaled content-model flexibility—showing how those translate into faster model training, lower TCO, and freedom from black-box SaaS traps. You’ll leave with a jargon-free narrative, fresh proof points (from real AI-enabled Drupal builds), and a one-page value-matrix you can drop into your next proposal. read more

twitter

RT @TalkingDrupal: On episode #390, Employee Owned Business with Seth Brown, CEO @lullabot. https://t.co/KiYM6Zwz5C #drupal read more

twitter

Nonprofit Drupal posts: March Drupal for Nonprofits Chat https://t.co/uJq3iqKikr #drupal read more

twitter

Community Working Group posts: Call for creators for crafting future Aaron Winborn Awards https://t.co/JqGX6q9W1M #drupal read more

twitter

Community Working Group posts: Nominations are now open for the 2023 Aaron Winborn Award https://t.co/wrYfMue23T #drupal read more

twitter

The Drop Times: Just Keep Showing Up, and the Job Is Yours: Chris Wells | DrupalCamp NJ https://t.co/FL1c6MdS9Z #drupal read more

twitter

RT @ironstar_io: The 2023 Drupal Local Development Survey has now been translated into French, Japanese, and Traditional Chinese. We are ve… read more

twitter

The 2023 Drupal Local Development Survey has now been translated into French, Japanese, and Traditional Chinese. We are very grateful to @mupsigraphy for her work on this French translation. If you would like to add a translation, please let us know as there's still time! read more

twitter

RT @e14t: Mastering Drupal 9 Layout Builder: A Comprehensive Guide to Effortlessly Customize Your Website's Design #drupal https://t.co/veg… read more

twitter

Mastering Drupal 9 Layout Builder: A Comprehensive Guide to Effortlessly Customize Your Website's Design #drupal https://t.co/vegAGDzSdh read more

Powered By Combinary

twitter

RT @Drupalcameroun: How #Drupal communities on the #African continent can help their governments in their #digitalization process. @_Africa… read more

twitter

Chapter Three: where we celebrate National Pi Day with forward-thinking NextJS and Drupal expertise, and National Potato Chip Day with an unparalleled snacking prowess. What is your favorite chip flavor? 🥧 🍟 🤓#PiDay #PotatoChipDay #drupal #nextjs read more

twitter

Pues me está gustando mucho lo de hacer directos en #twitch sobre desarrollo en #Drupal, le estoy cogiendo el gusto. read more

twitter

Drupal has offered top-notch no-code/low-code site building functionalities long before these two terms even existed. You can learn more about Drupal as a no-code/low-code tool in this @agiledrop article: https://t.co/TDwJn5DT6r #Drupal #NoCode #LowCode https://t.co/tGVQhtdtvH read more

twitter

I spent the last week doing #peformance #optimization of our #drupal 9 application infrastructure. I learned a lot about #PHP #opcache #profiling and Drupal's internal caching systems. #webprofiler module was a big help, too! read more

twitter

The Drop Times: A Stitch in Time Saves Nine https://t.co/VMWANTSAUe #drupal read more

twitter

One of our Back-end Developers, Greg Carlson has officially been with Aten for one year! Greg's favorite project this year was creating a #Drupal module to easily import CSV files to create content for @C4LPreK. In his free time, Greg follows the KU Jayhawks in his hometown. https://t.co/CN5QDULccA read more

twitter

RT @nmdmatt: .@phpstan's new not-deprecated annotation #drupal https://t.co/To2MLb1hpw read more

twitter

RT @nmdmatt: .@phpstan's new not-deprecated annotation #drupal https://t.co/To2MLb1hpw read more

twitter

Matt Glaman: PHPStan's new @not-deprecated annotation https://t.co/Idxe5nlpQV #drupal read more

twitter

Session submission: »The Ten Ways of Trust in Communication« by @kanadiankicks | @open_strategy https://t.co/HpYj8309le #dcruhr23 #Drupal (tf) https://t.co/zkzLT1BNJZ read more

twitter

#Drupalcamp Colorado has dates! Aug 4 and 5. We want YOU to speak! Your topic doesn't have to be Drupal specifically but should be Drupal adjacent. #drupal #camp #opensource @drupalcolorado Please share this post liberally! https://t.co/Yb1x3vxmQ5 https://t.co/jMBQUq2hPu read more

twitter

Wozu braucht man Drush bei #Drupal 9? Module lassen sich direkt updaten. Drupal Update mit Drush hat einen Aufkleber "deprecated". read more

twitter

RT @SamHuskey: Attention #Drupal developers: @scsclassics is hiring! Details at https://t.co/3lTYHaQys3 read more

twitter

Why join the Acquia's Headless Developer Advisory Board? This board is an opportunity to have your say. Provide feedback into our headless products an roadmaps. Check it out! #Drupal #DrupalHeadless #Decoupled #Developers #Technology #Leadership https://t.co/HJVa4aEinQ read more

twitter

RT @TalkingDrupal: On episode #390, Employee Owned Business with Seth Brown, CEO @lullabot. https://t.co/KiYM6Zwz5C #drupal read more

twitter

Olivero is the new default theme in #Drupal10 & 9 – and the most accessible one yet. Learn more about this modern theme’s best features, as well as its notable namesake. https://t.co/JHwH3hexgq #Drupal https://t.co/zTEKd7wOMa read more

twitter

Are you a developer looking to stay ahead of the game? Then mark your calendars for March 19th and join us for the #Drupal Meetup at Zain Zinc! Don't miss out on this opportunity to enhance your skills and connect with fellow professionals! Register Now! https://t.co/0HwzZfdoR6 read more

twitter

What Is a Content Management System (#CMS)? https://t.co/4Pd3JMXeKS #Wordpress 'joomla #Drupal read more

twitter

Le connecteur officiel #ONLYOFFICE pour #Drupal est est disponible dans le répertoire officiel de Drupal. En savoir plus : https://t.co/UuUhlOteJn https://t.co/ENue19M7aN read more

twitter

.@phpstan's new not-deprecated annotation #drupal https://t.co/To2MLb1hpw read more

twitter

RT @drupalfr: 🔍 Vous avez peut-être vu passer une enquête sur les environnements de développement locaux avec #Drupal récemment ? Elle es… read more

twitter

RT @drupalfr: 🔍 Vous avez peut-être vu passer une enquête sur les environnements de développement locaux avec #Drupal récemment ? Elle es… read more

twitter

RT @DrupalCampRuhr: Wir danken unserem Bronze-Sponsor @arocom_GmbH! 🥰 "Sie suchen eine auf das CMS #Drupal spezialisierte Internetagentur… read more

twitter

RT @drupalasheville: If you have an amazing training idea for #Drupal Camp #Asheville, remember to submit by March 28. That’s in two weeks!… read more

twitter

If you have an amazing training idea for #Drupal Camp #Asheville, remember to submit by March 28. That’s in two weeks! If you are an expert in #SEO, #accessibility, #front-end technology, etc. our attendees would love to learn from you. Learn more at https://t.co/kOg4BLfyXq. https://t.co/IBB17YWptn read more

twitter

The latest Drupal Review! https://t.co/AWLDaVGtYD Thanks to @laravel_101 #drupal #developer read more

twitter

RT @DrupalCampRuhr: Wir danken unserem Bronze-Sponsor @arocom_GmbH! 🥰 "Sie suchen eine auf das CMS #Drupal spezialisierte Internetagentur… read more

twitter

Dziś chcemy przedstawić Wam ciekawe oferty na: 𝗗𝗮𝘁𝗮 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿𝗮 𝗶 𝗣𝗛𝗣/𝗗𝗿𝘂𝗽𝗮𝗹 𝗗𝗲𝘃𝗲𝗹𝗼𝗽𝗲𝗿𝗮🔥 𝗣𝗛𝗣/𝗗𝗿𝘂𝗽𝗮𝗹 𝗗𝗲𝘃𝗲𝗹𝗼𝗽𝗲𝗿 👇 https://t.co/INoX6d6iSQ 𝗗𝗮𝘁𝗮 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿 👇 https://t.co/9VmiuyNKZ6 #dataengineer #php #Drupal https://t.co/3lW6NZBTPn read more

twitter

Wir danken unserem Bronze-Sponsor @arocom_GmbH! 🥰 "Sie suchen eine auf das CMS #Drupal spezialisierte Internetagentur? Dann sind Sie bei der arocom GmbH genau richtig. Wir entwickeln individuelle Internetauftritte, Portale, Shops und Intranetlösungen." (gs) #dcruhr23 https://t.co/eR7Ql6Tmns read more

twitter

Join us April 27 for the Drupal Zurich Meeting with talks about Ting, AI-Powered-Search-Indexes as well as @SplashAwards_CH 2023 #Drupal #DrupalZH #DrupalSwitzerland https://t.co/HICNsoGSuv read more

twitter

I love all my Drupal and Magento projects I developed in the past 😁🙌 especially Shutterstock from the USA liked it #drupal read more

twitter

RT @drupalfr: 🔍 Vous avez peut-être vu passer une enquête sur les environnements de développement locaux avec #Drupal récemment ? Elle es… read more

twitter

🔍 Vous avez peut-être vu passer une enquête sur les environnements de développement locaux avec #Drupal récemment ? Elle est désormais disponible en français, et vous avez jusqu'au 17 avril pour participer ! 🇫🇷 https://t.co/bvGG2Mh0cI read more

twitter

On episode #390, Employee Owned Business with Seth Brown, CEO @lullabot. https://t.co/KiYM6Zwz5C #drupal read more

twitter

Specbee: Mastering Drupal 9 Layout Builder: A Comprehensive Guide to Effortlessly Customize Your Website's Design https://t.co/J3m41Xemep #drupal read more

twitter

In this blog's category, you’ll learn about useful features of Droopler - our #Drupal distribution for building websites/creating landing pages for #marketing campaigns 👨‍💻 Check the #SEO and navigation functionalities, and the web pages built on Droopler https://t.co/CeicqTnTad read more

twitter

RT @ultimike: I am not surprised by these new #drupal modules, and I welcome our new AI-based content overlords with peace and love 😜 http… read more

twitter

¿Instalar #Drupal con un solo click? Si es posible con nuestros planes de #Hosting (Hospedaje Web), Contrata tu plan ¡Ahora! https://t.co/UyteHPrXCq read more

twitter

ちょっと時間があったので、https://t.co/Fa5p1pcDT8 Blueprintsを触ってみた。Add https://t.co/Fa5p1pcDT8 content typeでレストランとかパン屋を定義してみて、結構ワクワクした。UIが良く属性定義のベストプラクティスが出てくる感じ。 #Drupal https://t.co/mkd5ciBgLy read more

twitter

RT @volkswagenchick: Want to learn how to contribute to #Drupal? Join me at @FoxValleyDrupal next month to learn the ins and outs of the is… read more

twitter

RT @volkswagenchick: Want to learn how to contribute to #Drupal? Join me at @FoxValleyDrupal next month to learn the ins and outs of the is… read more

twitter

RT @ultimike: I am not surprised by these new #drupal modules, and I welcome our new AI-based content overlords with peace and love 😜 http… read more

twitter

RT @opensourceway: Want to learn how to contribute to #Drupal? Join @opensourceway's @volkswagenchick at @FoxValleyDrupal next month to l… read more

twitter

RT @ultimike: I am not surprised by these new #drupal modules, and I welcome our new AI-based content overlords with peace and love 😜 http… read more

twitter

With our #webhosting plans, #webdev create your awesome #website with #drupal a #Free content management system (cms) https://t.co/HbNxEroF4h read more

twitter

RT @volkswagenchick: Want to learn how to contribute to #Drupal? Join me at @FoxValleyDrupal next month to learn the ins and outs of the is… read more

twitter

Want to learn how to contribute to #Drupal? Join @opensourceway's @volkswagenchick at @FoxValleyDrupal next month to learn the ins and outs of the Drupal issue queue. Spoiler alert: you don't have to be a coder to give back to open source. … https://t.co/yi56be3YUR read more

twitter

The latest The drupal Daily! https://t.co/EXg9Mjai8k Thanks to @laravel_101 #drupal #wordpress read more

twitter

@bretwp I recommend #Drupal for sites that have the need to tie together dynamic content in a plethora of ways. Good for HighEd or government sites. read more

Powered By Combinary

twitter

opensourceway: Want to learn how to contribute to #Drupal? Join @opensourceway's @volkswagenchick at @FoxValleyDrupal next month to learn the ins and outs of the Drupal issue queue. Spoiler alert: you don't have to be a coder to give back to open sour… https://t.co/POww6YqRQP read more

twitter

Want to learn how to contribute to #Drupal? Join @opensourceway's @volkswagenchick at @FoxValleyDrupal next month to learn the ins and outs of the Drupal issue queue. Spoiler alert: you don't have to be a coder to give back to open source. https://t.co/G3dSaUzV5r read more

twitter

Want to learn how to contribute to #Drupal? Join me at @FoxValleyDrupal next month to learn the ins and outs of the issue queue. Spoiler alert: you don't have to be a coder to give back to open source. read more

twitter

RT @mikeherchel: #Drupal I wrote a blog post on how I migrated an Olivero component to use Drupal's new Single Directory Components archite… read more

twitter

RT @boshtian: Drupal 10 upgrade: Custom code upgrades, post by @darthsteven of @computerminds https://t.co/StelwGvv96 #Drupal read more

twitter

@iansvo @bretwp Not in the recommendation business anymore but here is how it normally goes - @rootswp for those who love #WordPress + #Laravel. @drupal for those who love @symfony I personally prefer #Drupal these days. read more

twitter

RT @boshtian: Drupal 10 upgrade: Custom code upgrades, post by @darthsteven of @computerminds https://t.co/StelwGvv96 #Drupal read more

twitter

RT @mikeherchel: #Drupal I wrote a blog post on how I migrated an Olivero component to use Drupal's new Single Directory Components archite… read more

twitter

#365daysOfCode Day 356 1. Anki 2. Reading: Javascript Security 101 3. #Drupal : Block Views, built my first one! Still need to push more on drupal it's tough (anyone know any good resources?) 4. #100Devs Standup 5. PoW Dev Hangout 6. Codewars 6th read more

twitter

Attention #Drupal developers: @scsclassics is hiring! Details at https://t.co/3lTYHaQys3 read more

twitter

RT @volkswagenchick: Are you ready to be part of the most exciting European #Drupal event of the year? @DrupalConEur Lille's CFPs is now o… read more

twitter

RT @mikeherchel: #Drupal I wrote a blog post on how I migrated an Olivero component to use Drupal's new Single Directory Components archite… read more

twitter

Talking Drupal: Talking Drupal #390 - Employee Owned Companies https://t.co/fUCxjhpPb5 #drupal read more

twitter

RT @volkswagenchick: Are you ready to be part of the most exciting European #Drupal event of the year? @DrupalConEur Lille's CFPs is now o… read more

twitter

RT @DrupalContract: Now #hiring ➡️ We’re looking for a #Drupal Redesign Project Manager who is skilled with managing project development, d… read more

twitter

RT @DrupalContract: Now #hiring ➡️ We’re looking for a #Drupal Redesign Project Manager who is skilled with managing project development, d… read more

twitter

Now #hiring ➡️ We’re looking for a #Drupal Redesign Project Manager who is skilled with managing project development, defining project scope, goals, and deliverables, and estimating project resource requirements. Learn more & apply here: https://t.co/TqBE9ftdtR #techishiring read more

twitter

Want to learn more about what Contribution Day at #MidCamp 2023 is going to involve? Have we got a meetup for you on April 19th! Thanks to @FoxValleyDrupal https://t.co/ROnSakuIlZ read more

twitter

In the previous versions of #Drupal, you used the #rules module to trigger an action upon an event. In #durpal8 #drupal9 / #drupal10, you subscribe to events and dispatch your own. read more

twitter

Excited to guest host this webinar and chat with some really great security experts to talk about #security in #Drupal read more

twitter

Start taking digital security more seriously! Come see our webinar as guests from @ciandt and the @drupalassoc share insights on pressing security concerns for businesses and provide practical tips for protecting against emerging threats. Join us: https://t.co/E6pvqu2mWO https://t.co/TQcrqAxH5u read more

twitter

Drupal 10 upgrade: Custom code upgrades, post by @darthsteven of @computerminds https://t.co/StelwGvv96 #Drupal read more

twitter

By not upgrading your #Drupal websites to the latest version of #Drupal, you're making it difficult for yourself in the future. read more

twitter

I am not surprised by these new #drupal modules, and I welcome our new AI-based content overlords with peace and love 😜 https://t.co/gXLVYFZ19q Thanks, @kevinquillen, for giving me something new to be distracted by. read more

twitter

Looking to scale up a Drupal site? Or test its capacity to handle surges in volume? Promet’s Josh Estep reviews four load-testing tools for Drupal. https://t.co/6mrfGgWghg #drupal #drupaldeveloper #drupal9 #drugdevelopment #training https://t.co/bKFDuBbrOb read more

twitter

Sprawdź, który system CMS jest dla Ciebie najlepszy! 🤔👨‍💻 Czy to WordPress, Joomla, Drupal, Shopify czy Magento, znajdziesz tu informacje, które pomogą Ci podjąć najlepszą decyzję.📝💻 https://t.co/c17hggTOsB #CMS #WordPress #Joomla #Drupal #Shopify #Magento read more

twitter

To compete with some of the largest companies on the web, independent bookstores need a platform with all of the e-commerce features people have come to expect. See how we helped create a full-featured alternative to platforms like Shopify. https://t.co/A6ApsA1LWP #drupal read more

twitter

Are you ready to be part of the most exciting European #Drupal event of the year? @DrupalConEur Lille's CFPs is now open https://t.co/rz4OkhIZhU read more

twitter

Are you ready to be part of the most exciting European #Drupal event of the year? @DrupalConEur Lille's CFPs is now open https://t.co/6rFNhpIiwJ read more

twitter

Are you ready to be part of the most exciting European #Drupal event of the year? @DrupalConEur Lille's CFPs is now open https://t.co/tVmHJ7JO2a read more

twitter

This #WomensHistoryMonth, support #womenintech by sponsoring the Women in Drupal event at @drupalcon Pittsburgh! Grow and diversify talent in your organization by showcasing the #Drupal project and community at its best: https://t.co/j3fGMwOqyy https://t.co/GZUo6uBrlu read more

twitter

You can write documentation and examples about that documentation. This is also considered a contribution towards the #Drupal project. read more

twitter

I’ll be speaking at @drupalcampnj this week - who else is going? read more

twitter

Yesterday we released #GinAdminTheme RC2. Get it while it's hot: https://t.co/O7ItwDngLu #Drupal read more

twitter

RT @mikeherchel: #Drupal I wrote a blog post on how I migrated an Olivero component to use Drupal's new Single Directory Components archite… read more

twitter

RT @specbee: Did you know #Drupal offers almost 50,000 modules for you to use in your projects?! All of these modules are creations of the… read more

twitter

RT @specbee: Read our detailed blog on the must have Drupal modules for your Drupal project - https://t.co/TJXt8BGS1h read more

twitter

Attending @DrupalCampNJ in Princeton? Then you won't want to miss @aburke626's session, "Creating a Culture of Documentation,” on Friday, March 17th from 14:30 - 15:15 EST. For more on Alanna's session, check out: https://t.co/1NztgYY9ps #OpenSource #DrupalCamp #Drupal https://t.co/67kIG6IVcn read more

twitter

@somnana555 @RMCSportCombat @RMCsport BIG PROMOTION ( Free Trial ) IP TV: 40 € / 12 months : 30 € / up to 6 months IP TV is over 18,000 live channels - 𝐒𝐏𝐎𝐑𝐓 https://t.co/EcsCMBEzEL #Encodage/ #H264 / #x264 / #x265 / #VOD / #OTT / #IPTV / #HEVC / #av1 / #MotionDesign / #VR / #Drupal / #caméraVR #livestream360 read more

twitter

@steven_reyes_va @CSEmelec BIG PROMOTION ( Free Trial ) IP TV: 40 € / 12 months : 30 € / up to 6 months IP TV is over 18,000 live channels - 𝐒𝐏𝐎𝐑𝐓 https://t.co/EcsCMBEzEL #Encodage/ #H264 / #x264 / #x265 / #VOD / #OTT / #IPTV / #HEVC / #av1 / #MotionDesign / #VR / #Drupal / #caméraVR #livestream360 read more

twitter

@Transports2K @Panamza BIG PROMOTION ( Free Trial ) IP TV: 40 € / 12 months : 30 € / up to 6 months IP TV is over 18,000 live channels - 𝐒𝐏𝐎𝐑𝐓 https://t.co/EcsCMBEzEL #Encodage/ #H264 / #x264 / #x265 / #VOD / #OTT / #IPTV / #HEVC / #av1 / #MotionDesign / #VR / #Drupal / #caméraVR #livestream360 read more

#! code: Drupal 11: Building A Link Directory: Part 1

Creating The Link Content Type

Drupal AI Learners Club: Using Claude Code for Drupal (Carlos Ospina)

Freelock Blog: The Night the Internet Tried to Kill Your Website

The Drop Times: Mike Gifford Says Accessibility Must Be Built Into Workflows Before AI Scales Bad Patterns

Très Bien Blog: Visualization of Drupal Core Change records over the years

1xINTERNET blog: AI Content Intelligence at Estate Scale

The Drop Times: Accessibility Contributors Discuss Continuity, Governance, and AI Ahead of GAAD

PreviousNext: Keywords to Context: Semantic Search and Retrieval-Augmented Generation with OpenSearch

PreviousNext: PreviousNext wins four Splash Awards and a third consecutive Best in Show at DrupalSouth Wellington 2026

Security advisories: Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

Upstream security advisories

Drupal 11

Drupal 10

Drupal 9 and 8

Jacob Rockowitz: Drupal (AI) Playground: AIs are eating our websites, and we need to adapt.

Adaptation

Out of our control

The Drop Times: Drupal Releases SA-CORE-2026-004 Fixing Critical Database Injection Vulnerability

Dries Buytaert: Why Drupal CMS matters

DrupalEasy: Getting comfortable with Gitlab and the Drupal issue queue

Freelock Blog: Your Website Will Be Attacked. Here's How We Make Sure You Survive It.

Drupal Association secures Alpha-Omega grant to future-proof Open-Source Security for the AI Era.

Drupal Association blog: Drupal Association secures Alpha-Omega grant to future-proof Open-Source Security for the AI Era.

The Drop Times: Python Ports of Drupal API Client and JSON:API Params Streamline AI Workflows

Specbee: How to maintain a Drupal website for security, performance, and scalability

Freelock Blog: The Rules Have Changed: Security in the Age of AI-Assisted Attacks

DDEV Blog: Upsun Completes DDEV Trademark Transfer to the DDEV Foundation - THANK YOU!

A Long Story With a Happy Ending

What This Means

Thank You, Upsun

The Foundation Still Needs Your Support

Drupal AI Learners Club — AI Security "Opportunities" (Marlene Wanberg, Randy Fay)

May 2026 Drupal for Nonprofits Chat

Nonprofit Drupal posts: May 2026 Drupal for Nonprofits Chat

QED42: Create your own AI agents for Drupal Canvas

Security public service announcements: Upcoming highly critical release on May 20, 2026 - PSA-2026-05-18

Affected versions

Supported core versions

End-of-life minor core versions (Drupal 10 and 11)

End-of-life major core versions (Drupal 8 and 9)

Disclosure policy

Talking Drupal: Talking Drupal #553 - Saving The Open Web

The Drop Times: A Structural Shift in Drupal Funding

DISCOVER DRUPAL

ORGANIZATION NEWS

OBITUARY

BLOG

EVENT

The Drop Times: Ten Technical Areas Shaping Enterprise Drupal Workflows in 2026

LakeDrops Drupal Consulting, Development and Hosting: The Architecture That Changed the Game: Modeler API

DDEV Blog: Watch: DDEV From Scratch with macOS

Dries Buytaert: The gap between Drupal and its reputation

PreviousNext: How Drupal is keeping pace with a changing digital market in 2026

The downturn was real - and it was a global phenomenon

Drupal's competitive position is stronger than the narrative suggests

What about the impact of AI on the CMS market?

How Drupal is keeping pace

Drupal CMS changes the pitch

Five takeaways from my talk

Get involved

The competitive opportunity is Drupal's to lose

Pixelite: Bots, scrapers, and proxies: defending Drupal sites in an automated internet

What actually changed

The scale of it

The goal is not to block all bots

Drupal-native defences

Perimeter

CrowdSec and AbuseIPDB

Facet Bot Blocker

Form-side defences

The trade-off the project pages don't mention

Web server and infrastructure

Rate limiting and geo blocking

ModSecurity and the OWASP CRS

Cache discipline

What this layer is bad at

Edge and paid bot management

Cloudflare

Fastly, Akamai, and the rest