Issue 754 - October, 22nd 2026
If you enjoy this newsletter I'd appreciate it if you shared it with your friends and colleagues.
If you are interested in sponsorships simply send an email to bob@theweeklydrop.com to learn more.
~ Bob Kepford - EditorHeadlines
Security Public Service Announcements: Critical PHP Update on Wednesday, October 21, 2026 (14:00 UTC) - PSA-2026-10-20
Security Advisories: Drupal Core - Moderately Critical - Cross-Site Scripting - SA-CORE-2026-015
Security Advisories: Drupal Core - Moderately Critical - Cross-Site Scripting - SA-CORE-2026-016
From Our Sponsor
Sponsor TheWeeklyDrop
For over 14 years TheWeeklyDrop has been a community fixture sending news and resources to the community every week. If you would like to get your message in front of the Drupal community TheWeeklyDrop is the right medium for you. Simply email bob@theweeklydrop.com to learn more.
AI
Lucius Digital: AI / Agentic Drupal Development: PhpStorm Junie en Claude Code
PreviousNext: AI Accelerates Drupal Development. Here’s Why Human Review Still Comes First
Ronald Te Brake: MCP Apps in Drupal: From Reusable Tools to Reusable Components
The Drop Times: Pantheon P1 Brings AI Agents to Web Building Without Replacing Drupal
Core
Assertions Options Usage Is Deprecated
Form Structure of Bundle Entity Delete Forms Has Changed
form_select_options() and form_get_options() Have Been Deprecated
getModulesToUninstall() and getThemesToUninstall() Added to the Installer Interfaces
New Generic BundleEntityDeleteForm Class
robots.txt Does Not Block Search Pages with Query Parameters Anymore
Articles
Centarro: Drupal Commerce vs. BigCommerce
DDEV Blog: PHP2Shell: What DDEV Users Need to Know
Dries Buytaert: One Description, inside and Outside Drupal
Drupal 10 Security Coverage Ends in December
Drupal 10 security coverage ends in December, and delivery capacity is already tightening as everyone discovers the same deadline at once. If scoping your upgrade has felt impossible, we will scan your site free and hand back a fixed price with a committed date, the process that already took a complex municipal government site cleanly to 11.4.
Drupal Association Blog: The Work That Just Happens: The DA Insider for September 2026
DrupalEasy: Removing Most Embeds and Tracking Scripts from DrupalEasy.com That We Don't Control
Omega8.cc: The Ninety-Minute Recall
Tag1 Insights: PHP2Shell: What PHP Site Owners Should Do Today
Releases
Ai 1.3.15
Ai 1.4.10
Ai 1.5.1
Commerce 3.3.11
Commerce 3.3.12
Docker4drupal 6.2.13
Drupal 10.6.20
Drupal 11.3.19
Drupal 11.3.20
Drupal 11.4.11
entity_list 3.0.10
Gin 4.1.4
Gin 5.0.16
Profile 8.x-1.15
Podcasts
Talking Drupal: Talking Drupal #574 - UN Open Source Week
Events
Mountain Camp 2027 Sponsorships Open, Call for Sessions Extended
Sponsorship packages are open and the session deadline has been extended to November 1. Dries Buytaert will be joining us in Davos. Submit a session now or explore our sponsor packages.