News Roundup

Morpht has contributed Convivial for Gov to the Drupal Marketplace as a government-focused Drupal site template. Murray Woodman’s 17 June 2026 blog post explains how the agency approached marketplace requirements, Canvas support, accessibility, maintenance, and support expectations. The post also details technical decisions involving Single Directory Components, DaisyUI, CSS variables, and image handling across Canvas, Paragraphs, and Blocks.

Jeremy Andrews of Tag1 explains how Scolta can improve search on Drupal sites. The guide covers Search API, Pagefind, AI provider options, site presets, metadata, scoring, and sortable fields. It shows how site builders can connect conceptual search terms to relevant Drupal content without running Solr or Elasticsearch.

DrupalFit has published The State of Drupal Websites 2026, a whitepaper on accessibility, AI visibility, privacy readiness, and security risk across Drupal sites. The report says its dataset covers 850+ Drupal websites, with several findings calculated across 876 audited home pages. It reports WCAG AA errors on 84.2% of audited sites, detectable security risk on 94.6%, and an average 26% pass rate for critical GDPR and CPRA checks.

AI for Good will hold an in-person workshop on open source generative AI pilots on 9 July 2026 in Geneva. The session is connected to the GenAI for Good Challenge and will include winner announcements. The published listing identifies focus areas in health, agriculture, and climate resilience, but does not provide technical implementation details.

Drupal core committer Théodore Biadala has highlighted a request for support letters for the Triptych Project. The proposal seeks to add PUT, PATCH, and DELETE methods, button actions without forms, and partial page replacement to HTML. Biadala says the changes could reduce some JavaScript and simplify parts of Drupal’s frontend, form-handling, and BigPipe code.

CMS Report published a 16 June 2026 overview of AI agents in content management systems. The post covers agentic workflows for content creation, metadata, review, scheduling, analytics, and governance across platforms, including Drupal and Strapi. For Drupal teams, the main relevance is the shift from writing assistance to controlled publishing automation.

Alex Urevick-Ackelsberg argues that Drupal’s structured content model makes it suitable for agent-readable content. The Zivtech post covers GEO Starter, GEO Starter JSON-LD, Contentful Migration, and Content Packages as Drupal.org projects tied to that argument. It also notes that Drupal does not guarantee AI visibility and must prove its advantage through installable work, tests, and migrations.

Public Digital has opened UK pre-orders for Digital Sovereignty: The Power to Decide. London Publishing Partnership lists Mike Bracken, Andrew Greenway, James Stewart, Lauren Kahn, and Raine Lester as authors. The book frames digital sovereignty as institutional capacity, a topic relevant to open web governance and long-term technology dependency.

Drupal and open source events are scheduled from 23 June to 29 June 2026. The list includes meetups, training, accessibility discussion, contribution events, and DrupalCamp gatherings. Events take place online and in cities including New York, Tokyo, Turin, and Kortrijk.

NLnet has approved funding for Communia’s proposal to improve Drupal’s ActivityPub module. The work covers editor improvements, adaptable Fediverse workflows, Client-to-Server support, transport handling, an installation wizard, and automated documentation. Drupal.org currently lists the module as minimally maintained, with 48 reported installs and an alpha release compatible with Drupal 10 and 11.

DrupalCon Rotterdam 2026 will host a Government Summit on Monday 28 September 2026. The event will focus on public-sector Drupal use, shared digital infrastructure, open source reuse, and digital sovereignty. Session proposals close on Monday 29 June 2026.

TurboVec VDB Provider integrates a self-hosted TurboVec vector database with Drupal AI. The module supports semantic search through AI Search, CRUD operations, metadata queries, pagination, entity ID filtering, and optional bearer-token authentication. The project is available for Drupal 10.2 or Drupal 11, but Drupal.org states that it is not covered by Drupal’s security advisory policy.

The Enterprise Drupal AI Summit 2026 has opened its final call for AI case study submissions before the 28 June 2026 deadline. The event will take place on 28 September 2026 aboard the SS Rotterdam in Rotterdam as part of DrupalCon Rotterdam’s Summit Day. Organisers are seeking production Drupal AI cases with clear challenges, implementation details, measurable results, and lessons learned.

Specbee has published Priyanka Phukan’s overview of eight Drupal AI modules for 2026. The article explains how the core AI module supports provider configuration and connects with tools for search, alt text, editing, translation, automation, internal linking, and autonomous workflows. It also notes which tools are easier entry points and which require more technical setup or governance.

The Drupal Pune meetup on 20 June 2026 will run from 09:30 to 12:30 IST at Syngenta India HQ in Baner, Pune. The featured GeoSoil AI session will cover geotagged soil images, computer vision, structured data collection, and Drupal architecture for crop recommendations. A second session will focus on career resilience during AI-driven industry change before networking and snacks.

The Metaverse Standards Forum has introduced Sneeze, an open-source metaverse browser engine developed through the Open Metaverse Browser Initiative. RP1 is the lead architect and maintainer of the engine, which is intended to support spatial services, multi-origin 3D scene composition, WebAssembly sandboxing, and shared presence across devices. The announcement also includes AWE 2026 sessions and a University of Rochester-led academic alliance connected to the project.

Drupal AI 1.4.0 has been released. The update adds chat normalisation, Views Bulk Operations support, developer tooling, and expanded guardrails. Paul Johnson said the 1.x branch will move toward a bi-monthly minor release cadence.

Talking Drupal episode 557 features Oliver Davies discussing the Test-Driven Drupal eBook. The episode covers automated testing, test-driven development, AI-generated tests, technical publishing, and keeping Drupal learning resources current. The module of the week is Juicer Social Feed, which embeds aggregated social feeds into Drupal as a configurable block.

UN Open Source Week 2026 will run from 22–26 June 2026 at United Nations Headquarters in New York. The programme covers artificial intelligence, Digital Public Infrastructure, Open Source Program Offices, and community-led open source initiatives. Drupal-relevant connections include Sachiko Muto on the speaker list, Maintain-a-thon sessions by Tim Hestenes Lehnen, Tiffany Farriss, and Mike Gifford, and a related Open Source Community Drinks NYC gathering.

Electric Citizen has published Dan Moriarty’s post on subsites and microsites. The article explains when organisations may need smaller web experiences with separate navigation, branding, design, or URLs. It compares several implementation options and highlights governance needs for ownership, access, security, costs, publishing dates, and archiving.

Dries Buytaert has published an article on how AI is reshaping the CMS market. He argues that AI is unbundling content creation from content control, making simple publishing easier while increasing the value of governed content systems. The article frames the CMS as a control layer for roles, approvals, revisions, reuse, trust, and multi-system workflows.

Jorge Tutor’s CKEditor5 Markdown module adds a toolbar dialog for converting Markdown to HTML inside Drupal’s CKEditor5 editor. The module uses the marked JavaScript library and avoids CKEditor5’s experimental Paste Markdown clipboard detection. Tutor told The DropTimes that the feature is meant for teams that draft in Markdown but publish through configured Drupal text formats.

Midgard has released its first public alpha on Drupal.org for Drupal 11. The module suite governs AI-driven configuration changes through review, risk scoring, approval, rollback, export, and audit logging. Because Midgard is a pre-1.0 alpha without Drupal security advisory coverage, it should be treated as a community evaluation release.

The Drupal Security Team published eight advisories on 17 June 2026 covering Drupal core and three contributed modules. The updates address PHP object injection conditions, oEmbed URL discovery controls, image-upload validation, a Host header flaw, and a gadget-chain issue. Supported Drupal 10 and 11 sites should update, review JSON:API write access, and check whether affected contributed modules are installed.

The June Drupal for Nonprofits chat is scheduled for 18 June 2026. The free call has no fixed agenda and is open to nonprofit Drupal developers and users at all experience levels. Participants can find joining details and add topics through the collaborative notes document.

By The Way Labs has published a post by Ted Benice on why the agency hosts Drupal projects on Pantheon. The post highlights Pantheon’s Drupal-oriented platform, three-environment workflow, performance features, backups, monitoring, and security scanning. It frames hosting as a risk-management decision rather than a routine infrastructure choice.

QED42 has opened a waitlist for EventHorizon, a Drupal code-intelligence suite. Its open-source EventHorizon CLI runs local static analysis for security, performance, caching, configuration, and code metrics. Souvik Pal says the CLI was built for audit settings where client code cannot be sent to external APIs or cloud services.

The Drupal Association has opened self-nominations for its 2026 At-Large Board Election. One community-elected seat is available as Alejandro Moreno’s current board term concludes. Nominations close on 30 June 2026, with voting scheduled from 22 July to 14 August 2026.

Drup-AID introduces an agent-based approach to AI-assisted Drupal administration. The first beta release includes a master agent, specialised sub-agents, an admin cockpit, and demo mode without an API key. The project is compatible with Drupal 10.3 and Drupal 11.

GitHub has released a new dataset to help researchers find public repositories with signs of non-English developer content. The dataset covers metadata from project documentation, issues, pull requests, and repository records across more than 40 million public repositories. GitHub says it is a discovery tool for multilingual AI and open-source research, not a definitive language benchmark.

Avenue Group Australia has published a blog post on custom web development for Australian businesses. The post compares custom platforms with template-based websites and highlights scalability, security, automation, analytics, and integration. It reads partly as a service-positioning article and provides limited technical detail.

Open Source Summit Europe 2026 is accepting proposals for its October event in Prague. Submissions close on 24 June 2026 and cover open-source technology, governance, documentation, and community practice. The call is not Drupal-specific, but it offers Drupal contributors a wider open-source venue for talks, tutorials, panels, and lightning sessions.

Maintainers of ECA, FlowDrop, and Maestro are discussing a shared backend layer for Drupal automation. The planning-stage work focuses on common graph models, shared language, and reusable processor contracts. The projects would keep separate interfaces while testing whether backend interoperability can reduce duplicated development work.

John Locke’s Freelock essay argues that platform consolidation, proprietary SaaS dependency, and large-scale AI infrastructure are not inevitable outcomes of technology. It presents open source ownership, federated services, community forks, and small cooperating businesses as alternatives to vendor lock-in. The piece frames digital sovereignty as an organisational choice shaped by infrastructure, licensing, and control.

James Shields explains how Drupal module maintainers can automate tests for update hooks that change schema or stored configuration. The post uses Smart Trim to show how fixtures, functional update tests, and Drupal update paths can verify configuration changes after an upgrade. It also describes maintaining different database fixtures for supported Drupal versions when older dumps stop loading cleanly.

1xINTERNET has shared a post on digital sovereignty in critical infrastructure. The article explains how essential services increasingly depend on software, cloud services, data platforms, and operational technology. It highlights risks around foreign technology dependency, compliance, sabotage, espionage, vendor lock-in, and resilience, while presenting open source as one way to strengthen control.

Nadiia Nykolaichuk’s ImageX post highlights two Drupal modules for editorial workflows. Entity Display Modes Listing gives editors faster access to view modes and form modes from entity administration screens. Entity Confirmation allows custom confirmation messages for create, update, delete, and form-mode-specific content workflows.

AI Learners Club hosted a hands-on session with Mike Anello on setting up the Drupal AI module. The walkthrough covered provider configuration, API key handling, logging, model defaults, guardrails, and CKEditor tools. The session showed why Drupal teams should test providers and models before adding AI features to editorial workflows.

Lock Entity is a new Drupal contributed module for protecting selected entities from deletion. It supports nodes, taxonomy terms, users, media, and other entity types, with optional reasons shown when deletion is attempted. Drupal.org lists the project for Drupal 10 and 11, but notes that it is not covered by Drupal’s security advisory policy.

WebWash has shared Ivan Zugec’s comparison of Drupal Canvas and WordPress Gutenberg. The post builds a hero component as a custom Gutenberg block and as a Drupal Single Directory Component. It contrasts Gutenberg’s writer-focused block library with Canvas’s site-builder-focused component model.

F5 Labs has published sensor data on exploitation attempts against CVE-2026-9082 after its public disclosure on 20 May 2026. The report documents 576 attempts from nine source IPs between 20 May and 31 May 2026, with scanning beginning on 22 May 2026. It focuses on JSON:API endpoint probing, SQL injection confirmation patterns, web application firewall evasion signals, and defensive monitoring steps.

Drupal.org has published Drupal 11.4.0-rc1 as the release candidate for the next Drupal 11 minor release. The release includes new functionality, public API compatibility guidance, Standard profile changes, and fixes since Drupal 11.4.0-beta1. Contributors can support the release through testing, issue reporting, translation review, and compatibility checks.

Drupal community events from 16 June to 20 June 2026 include online, hybrid, and in-person sessions across Europe and North America. Topics include AI publishing workflows, Automatic Updates, favourite contributed modules, htmx, and decoupled Drupal development. The events include sessions hosted by Southwark Council, dugmuc, Fox Valley Drupal, Drupal Ottawa, and a decoupled Drupal meetup.

1xINTERNET has published a blog post on using Drupal AI for content governance at scale. The article says AI-generated content can increase risks around brand drift, compliance, and editorial review. It presents Drupal AI as a way to audit existing content, guide editors in real time, and apply governance checks before publication.

LakeDrops has published Jürgen Haas’s post on closing the feedback loop in ECA workflow development. The article explains how users can test workflows, replay recorded executions, and inspect token values inside the Workflow Modeler. It also covers in-context debugging, recording costs, planned conditional recording, and future export options.

Europe’s digital sovereignty agenda has developed over more than a decade through privacy, cybersecurity, platform, data, AI, and cloud policy. These changes are reshaping how governments and regulated organisations assess digital infrastructure. The article explains why open-source platforms such as Drupal are part of that wider discussion.

The Drupal Association has launched the Drupal Sustaining Members program for organizations that use or depend on Drupal. The programme funds shared infrastructure, including Drupal.org, code repositories, packaging services, issue tracking, testing systems, security tooling, and community programmes. Annual donation tiers begin at $5,000 USD and extend to $100,000 USD or more.