#Drupal module release: editoria11y 3.0.11 (2026-10-09) #PHP. See https://www.drupal.org/project/editoria11y/releases/3.0.11

#Drupal module release: editoria11y 3.0.11 (2026-10-09) #PHP. See https://www.drupal.org/project/editoria11y/releases/3.0.11
#Drupal module release: commerce_license 3.1.0 (2026-10-09) #PHP. See https://www.drupal.org/project/commerce_license/releases/3.1.0
#Drupal module release: ai_vdb_provider_weaviate 1.0.0 (2026-10-09) #PHP. See https://www.drupal.org/project/ai_vdb_provider_weaviate/releases/1.0.0
The Drupal Security Team published 26 contrib advisories across 25 projects, including a highly critical Block AJAX flaw and seven critical notices. Several fixes also require follow-up steps beyond updating packages.
#Drupal module release: add_content_by_bundle 2.0.2 (2026-10-09) #PHP. See https://www.drupal.org/project/add_content_by_bundle/releases/2.0.2
#Drupal theme release: bootstrap 8.x-3.43 (2026-10-09) #PHP. See https://www.drupal.org/project/bootstrap/releases/8.x-3.43
#Drupal module release: state_machine_automated_transition 1.0.0 (2026-10-09) #PHP. See https://www.drupal.org/project/state_machine_automated_transition/releases/1.0.0
#Drupal module release: commerce_ajax_atc 3.0.x-dev (2026-10-09) #PHP. See https://www.drupal.org/project/commerce_ajax_atc/releases/3.0.x-dev
Solo 1.0.36 fixes a fatal regression introduced in 1.0.35 that affected Drupal 10 and Drupal 11.0–11.2. The follow-up release also adds Drupal 10 CI coverage to help prevent similar breakage.
#Drupal module release: typed_data_plus 2.0.x-dev (2026-10-09) #PHP. See https://www.drupal.org/project/typed_data_plus/releases/2.0.x-dev
#Drupal module release: config_transfert 1.0.0-alpha1 (2026-10-09) #PHP. See https://www.drupal.org/project/config_transfert/releases/1.0.0-alpha1
#Drupal module release: emporiqa 1.1.2 (2026-10-09) #PHP. See https://www.drupal.org/project/emporiqa/releases/1.1.2
#Drupal module release: commerce_shipping_carrier 3.0.x-dev (2026-10-09) #PHP. See https://www.drupal.org/project/commerce_shipping_carrier/releases/3.0.x-dev
Henadzi Koltun, founder and CEO of Attico, discusses why Drupal’s value lies in sustainable growth rather than quick wins. He also weighs the business case for headless architecture, long-term engineering discipline and human oversight in AI adoption.
#Drupal module release: basket_novaposhta 1.1.11 (2026-10-09) #PHP. See https://www.drupal.org/project/basket_novaposhta/releases/1.1.11
Pierre Rudloff, Joseph Zhao, Bram Driesen and Swan Kalata are now full members of the Drupal Security Team after provisional service.
#Drupal theme release: wadokai_parallax 1.0.3 (2026-10-09) #PHP. See https://www.drupal.org/project/wadokai_parallax/releases/1.0.3
#Drupal module release: fontyourface 4.3.0 (2026-10-09) #PHP. See https://www.drupal.org/project/fontyourface/releases/4.3.0
If you maintain a #Drupal site 💧, then you probably use the Webform module 📋, then you probably recently applied the big security update 🔒 (you did, right?), then you probably have Jacob Rockowitz to thank/blame 😁
He explains the #AI assisted process 🤖 he used: www.jrockowitz.com/blog/vibing-...
New #Drupal module: Config Transfer (2026-10-09) #PHP. See https://www.drupal.org/project/config_transfert