Digital Services Release 11.4.0.0
Annotated release notes. Full changelog on
GitHub
By role: Content Editors · Site Builders · Developers · Decision Makers
Full Changelog: https://github.com/YCloudYUSA/yusaopeny/compare/11.3.1.6...11.4.0.0
Summary
YMCA Website Services 11.4 moves the distribution to Drupal 11.4. These notes cover the changes from 11.3.1.6 up to 11.4.0.0. The current build is 11.4.0.0-rc5 (tagged 2026-11-04):
- Drupal Core 11.3.13 → 11.4.11 — 204 packages changed in a test upgrade (measured on 11.4.0.0-rc4)
- Security — a fresh
composer updateresolves current releases of core, webform, captcha, paragraphs, blazy, rabbit_hole, svg-sanitize, guzzle and symfony packages; the Security section lists the advisories and the constraint changes - GroupEx Pro removed from the distribution —
drupal/groupexprois no longer in the codebase; the Embedded GroupEx Pro Schedule continues as its own package ( SA-CONTRIB-2026-278 affectsgroupexprobefore 2.2.1) - Activity Finder 7.2 — Vue 3, Category Tags filter, “Filters on Top” layout, location and schedule fixes
- jQuery Migrate self-hosted — no more
code.jquery.comrequest on every page (removes a load-order race behindjQuery is not definederrors) - Alt text on the Small Y demo images
- Drupal 12 compatibility declared — Layout Builder blocks, themes and content types got releases that declare
^12(e.g. lb_cards 3.1.0, y_camp 3.1.0, ws_event 2.1.0)
Platform
| 11.3 site (11.3.1.5) | 11.4.0.0 | |
|---|---|---|
| Drupal Core | 11.3.x (<11.4) | 11.4.11 |
| Activity Finder | 6.2.1 | 7.2.1 |
Layout Builder (y_lb) | 5.0.4 | 5.2.1 |
| Carnation theme | 4.0.0-beta7 | 4.2.0 |
Group Schedules (openy_repeat) | 3.3.0 | 4.1.0 |
| Protected Pages | 1.9.0 | 3.0.0 |
| GroupEx Pro | drupal/groupexpro | ycloudyusa/embedded_groupexpro_schedule 1.0.0 (embed only) |
Highlights
Drupal 11.4 Support
drupal/core and drupal/core-composer-scaffold raised to ^11.4 (
#372).
Core release notes:
Drupal 11.4.0; every core release from 11.3.13 to 11.4.11 is under All Releases.
Breaking changes of core 11.4 fixed in the packages that hit them:
| Issue on 11.4 | Fix |
|---|---|
Strict config schema: legacy blazy formatter keys throw | Core image formatter instead of blazy, with update hooks for existing sites ( openy_features#122, y_lb#312) |
module_installer ProxyClass removed | Type hint ModuleInstallerInterface (
upgrade_tool!14,
confi!15) |
path.matcher decorated by AliasPathMatcher → HTTP 500 on every page with protected_pages 1.x | drupal/protected_pages ^3.0 (
#383) |
entity_type.manager decorated by Trash → TypeError in services typed with the concrete class | openy_repeat 4.1.0 (Group Schedules), openy_features 5.4.0 (Class Location block,
openy_features#128) |
GroupEx Pro removed from the distribution
The Drupal Security Team marked the drupal.org project groupexpro unsupported on 2026-10-28.
SA-CONTRIB-2026-278 (Critical, PHP object injection, affects versions before 2.2.1) was published on
2026-11-04. The project was restored the same day with the fix in 2.2.1. The distribution removed drupal/groupexpro
in 11.4.0.0-rc4 (
#393). It is not a direct requirement in composer.json.
drupal/groupexpro, itsdrupal/openy_gxppackage anddrupal/openy_pef_gxp_syncare removed from the distribution ( #393).- The Embedded GroupEx Pro Schedule (the paragraph that embeds the GroupEx schedule widget) keeps working: the
module moved to
ycloudyusa/embedded_groupexpro_schedule1.0.0 with the same module name. The account id is stored and output as a number.embedded_groupexpro_schedule_update_10001sets a stored id that is not a number to 0, so enter the account id again afterdrush updb. The widget scripts load over https only. openy_gxp,openy_group_schedules,groupex_form_cacheandopeny_pef_gxp_synccome as self-uninstalling stubs fromycloudyusa/useless_machines2.2.0 ( useless_machines#15, #394):drush updbdrops any remaining GroupEx Form Cache / GXP mapping data and tables, then uninstalls them.
Activity Finder 7.2
- Vue 3 for Activity Finder 4 and the Group Schedules dashboard (
openy_repeat4.x), loaded from the sharedopeny_system/vue3library (openy_custom3.2+) ( #384). - Category Tags — new filter mode in the AF4 block, Solr facet, wizard step and sidebar; needs
openy_node_session2.4 (Category Tags vocabulary and session field) ( AF#85, openy_node_session!5, #390). - Filters on Top layout style for the Activity Finder block.
- Fixes: “Limit by Location” dropdown no longer empty; location limits work as a constraint on the selection;
date-only sessions no longer show
6:00pm-6:00pm; results load when the page URL contains credentials. - Backend is now a plugin (
solr/mock);openy_activity_finder_update_9006converts the setting and enables the Solr submodule only on sites that havesearch_api_solr( AF#86).
jQuery Migrate self-hosted
The profile used to inject jquery-migrate-4.0.0-beta.1.js from code.jquery.com into core’s jQuery library. Under load
it raced ahead of jQuery (Uncaught ReferenceError: jQuery is not defined). Now jQuery Migrate
4.0.2 ships with the profile as openy/jquery_migrate with a dependency on core/jquery
(
#386).
Layout Builder Tables
drupal/lb_table 1.1.1+ (required by y_lb 5.2.1): tables without a <thead> are no longer turned into tablesaw
tables, so one header-less table no longer breaks the other tables on the page
(
lb_table!16,
y_lb#317).
Small Y demo images: alt text
The Small Y demo images get alt text on new installs; existing sites get it from ws_small_y_update_91009 after
drush updb (only where alt is empty) — ws_small_y 2.2.0 (
!85,
!86).
Font Your Face patch
drupal/fontyourface 4.3.0 moved its page_attachments hook into a hook class that runs last. The provider submodules
(local_fonts, google_fonts_api and others) run before it, find no fonts, and no font stylesheet is attached. The
distribution patches drupal/fontyourface with the upstream
merge request !20 for the open issue
#3630630 (
#398, 11.4.0.0-rc5).
- Sites that use
y_fontsare not affected: it has its ownpage_attachmentshook and nofontyourfacedependency. - If your root
composer.jsoncarries its own patch for #3630630, remove it.
Webform UI enabled with the Webform block
drupal/lb_webform 2.1.1 requires webform_ui, so the Webform UI is on wherever the Layout Builder Webform block is;
existing sites get it from lb_webform_update_10001
(
lb_webform!14).
Cleanup
- Stale composer patches dropped; the rabbit_hole patch that downloaded as an empty diff is fixed; direct
guzzlehttp/guzzlerequire removed (Guzzle is still installed because Drupal core requiresguzzlehttp/guzzle: ^7.10) ( #387). - CKEditor 4 library plugins removed:
library-ckeditor/font,colorbutton,panelbutton— CKEditor 5 only ( #374). - Minimums raised:
openy_carnation ^4.2( #389),openy_features ^5.2,y_lb ^5.1,confi ^4.2,upgrade_tool ^4.2,useless_machines ^2.2.0.
Security
55 advisories in 21 packages affect the lock of an 11.3.1.5 test site and not the lock of the same site upgraded to 11.4.0.0-rc4; advisories published later are not included (packages.drupal.org and packagist.org advisory APIs, matched against the locked versions):
Still open after the rc4 test upgrade: none.
Site packages (not required by the distribution), fixed by the site’s composer update -W when its own constraint allows it:
| Package | Advisory | Fixed in |
|---|---|---|
drupal/shield | SA-CONTRIB-2026-248 | 1.10 |
drupal/simple_oauth | SA-CONTRIB-2026-242 | 6.1.3 |
composer audit on a fresh install, as run for the rc4 test: 11.3.1.6 — SA-CONTRIB-2026-278; 11.4 — none. It was not re-run for rc5, and new advisories change the result.
Migration Guide
Composer: allow symfony/runtime
Drupal 11.4 core pulls symfony/runtime, whose Composer plugin is blocked unless the site allows it (root-only config):
"config": { "allow-plugins": { "symfony/runtime": true } }
GroupEx Pro
- Sites that use the Embedded GroupEx Pro Schedule paragraph: the module keeps its name;
updbconverts a stored account id to a number (embedded_groupexpro_schedule_update_10001). A stored id that is not a number becomes 0: enter the account id again at/admin/openy/integrations/groupex-pro/groupexpro. - Remove any root
requireofdrupal/groupexpro,drupal/openy_gxpordrupal/openy_pef_gxp_sync:useless_machines2.2.0 conflicts with them. openy_prgf_group_schedules(openy_features) depends onopeny_group_schedules; where it is still enabled, the stub uninstalls it together with itself.
Activity Finder
- Sites with Solr keep the Solr backend (submodule enabled by
openy_activity_finder_update_9006). - Sites on the Solr backend without
search_api_solrare switched to themockbackend. - Category Tags are opt-in per block: Activity Finder block → Location & Category filters → Category filters → Category Tag. The default stays Activity (Program Subcategory).
- Sites that run their own fork of Activity Finder or
openy_node_sessionas a path repository must drop it and move to the released packages.
Group Schedules (openy_repeat 4)
The distribution requires drupal/openy_repeat ^4.0.0. Remove a root require of drupal/openy_repeat: ^3.x, or the
update does not resolve.
CKEditor 4 plugins
If a custom module still references library-ckeditor/*, remove it; font family/size and colours come from
ckeditor5_plugin_pack_font.
Removed Modules
Extensions in the codebase before the upgrade and gone after it (drush pm:list, fresh extended 11.3.1.5 install of the site code, then the Upgrade Path):
None.
Uninstalled by drush updb:
The stubs openy_gxp, openy_group_schedules, groupex_form_cache and openy_pef_gxp_sync (see the table below)
uninstall themselves. openy_prgf_group_schedules (openy_features) is uninstalled together with openy_group_schedules:
check that no content depends on it before you update.
Same machine name, now shipped by another package (the old package is removed):
| Module | Was in | Now in |
|---|---|---|
embedded_groupexpro_schedule | modules/contrib/groupexpro | modules/contrib/embedded_groupexpro_schedule |
groupex_form_cache | modules/contrib/groupexpro | modules/contrib/useless_machines |
openy_group_schedules | modules/contrib/groupexpro | modules/contrib/useless_machines |
openy_gxp | modules/contrib/groupexpro | modules/contrib/useless_machines |
openy_pef_gxp_sync | modules/contrib/openy_pef_gxp_sync | modules/contrib/useless_machines |
New Modules
Extensions that the upgrade adds to the codebase:
| Module | Name | Package |
|---|---|---|
default_admin | Default Admin (default_admin) | Core |
lb_activity_finder_demo | LB Activity Finder Demo (lb_activity_finder_demo) | YMCA Website Services |
openy_activity_finder_solr | Activity Finder Solr Backend (openy_activity_finder_solr) | YMCA Website Services |
search_help | Search help (search_help) | Core |
search_node | Search node (search_node) | Core |
Installed by drush updb:
| Module | Name | Package |
|---|---|---|
webform_ui | Webform UI (webform_ui) | Webform |
Removed Packages
| Package | Version on the 11.3 site | Reason |
|---|---|---|
drupal/groupexpro | 2.1.0 | Retired from the distribution in rc4 (
SA-CONTRIB-2026-278 affects versions before 2.2.1); embed moved to ycloudyusa/embedded_groupexpro_schedule |
drupal/openy_gxp | 2.1.0 | Part of groupexpro; stub in useless_machines |
drupal/openy_pef_gxp_sync | 2.0.1 | Retired; stub in useless_machines |
library-ckeditor/colorbutton | 4.10.1 | CKEditor 4 only |
library-ckeditor/font | 4.12.1 | CKEditor 4 only |
library-ckeditor/panelbutton | 4.10.1 | CKEditor 4 only |
New packages: ycloudyusa/embedded_groupexpro_schedule, symfony/runtime, symfony/polyfill-php86, twig/html-extra,
justinrainbow/json-schema, marc-mabe/php-enum.
Updated Packages
A site on 11.3.1.5 updated to 11.4 (composer update -W): 204 (updated 192, added 6, removed 6) packages changed, measured on the 11.4.0.0-rc4 build (rc5 only adds the fontyourface patch to composer.json). dev-* packages show version@commit. Changes: advisories fixed, merged PRs/MRs (our packages), releases in the range (links to the release notes or the tag).
Layout Builder Blocks — 23 packages
| Package | Old | New | Changes |
|---|---|---|---|
drupal/lb_accordion | 3.0.0 | 3.2.0 | 3 MRs; 3.1.0, 3.1.1, 3.2.0 |
drupal/lb_branch_amenities_blocks | 3.0.0 | 3.1.0 | 1 MR; 3.1.0 |
drupal/lb_branch_hours_blocks | 3.0.0 | 3.1.0 | 1 MR; 3.1.0 |
drupal/lb_branch_social_links_blocks | 1.0.7 | 1.1.0 | 1 MR; 1.1.0 |
drupal/lb_cards | 3.0.2 | 3.1.0 | 2 MRs; 3.0.3, 3.1.0 |
drupal/lb_carousel | 3.0.0 | 3.1.0 | 1 MR; 3.1.0 |
drupal/lb_grid_cta | 4.0.0 | 4.1.0 | 1 MR; 4.1.0 |
drupal/lb_hero | 2.0.3 | 2.1.0 | 1 MR; 2.1.0 |
drupal/lb_modal | 2.0.0 | 2.1.0 | 1 MR; 2.1.0 |
drupal/lb_partners_blocks | 2.0.0 | 2.1.0 | 1 MR; 2.1.0 |
drupal/lb_ping_pong | 2.0.0 | 2.1.0 | 1 MR; 2.1.0 |
drupal/lb_promo | 2.0.0 | 2.1.0 | 1 MR; 2.1.0 |
drupal/lb_related_articles_blocks | 2.0.0 | 2.1.0 | 1 MR; 2.1.0 |
drupal/lb_related_events_blocks | 2.0.0 | 2.1.0 | 1 MR; 2.1.0 |
drupal/lb_simple_menu | 2.0.0 | 2.1.0 | 1 MR; 2.1.0 |
drupal/lb_staff_members_blocks | 2.0.0 | 2.1.0 | 1 MR; 2.1.0 |
drupal/lb_statistics | 3.0.0 | 3.1.0 | 1 MR; 3.1.0 |
drupal/lb_table | 1.1.0 | 1.2.0 | 2 MRs; 1.1.1, 1.2.0 |
drupal/lb_testimonial_blocks | 2.1.0 | 2.2.0 | 1 MR; 2.2.0 |
drupal/lb_webform | 2.0.0 | 2.1.1 | 2 MRs; 2.1.0, 2.1.1 |
ycloudyusa/lb_claro | 3.0.2 | 3.1.1 | 2 PRs; 3.1.0, 3.1.1 |
ycloudyusa/y_lb | 5.0.4 | 5.2.1 | 4 PRs; 5.0.5, 5.1.0, 5.2.0, 5.2.1 |
ycloudyusa/y_lb_demo_content | 5.1.0 | 5.2.0 | 1 PR; 5.2.0 |
Website Services Themes and Small Y — 7 packages
| Package | Old | New | Changes |
|---|---|---|---|
drupal/openy_carnation | 4.0.0-beta7 | 4.2.0 | 2 MRs; 4.1.0, 4.2.0 |
drupal/ws_code_block | 1.1.0 | 1.2.0 | 1 MR; 1.2.0 |
drupal/ws_colorway_canada | 2.0.1 | 2.1.0 | 1 MR; 2.1.0 |
drupal/ws_event | 2.0.1 | 2.1.0 | 1 MR; 2.1.0 |
drupal/ws_lb_tabs | 3.0.0 | 3.1.0 | 1 MR; 3.1.0 |
drupal/ws_promotion | 2.0.0 | 2.1.0 | 2 MRs; 2.1.0 |
drupal/ws_small_y | 2.0.4 | 2.2.0 | 6 MRs; 2.0.5, 2.0.6, 2.1.0, 2.2.0 |
Content Types — 8 packages
| Package | Old | New | Changes |
|---|---|---|---|
drupal/y_branch | 1.1.1 | 1.2.0 | 1 MR; 1.2.0 |
drupal/y_branch_menu | 1.1.1 | 1.2.0 | 1 MR; 1.2.0 |
drupal/y_camp | 3.0.0 | 3.1.0 | 1 MR; 3.1.0 |
drupal/y_donate | 3.0.1 | 3.1.0 | 1 MR; 3.1.0 |
drupal/y_facility | 3.0.0 | 3.1.0 | 1 MR; 3.1.0 |
drupal/y_lb_article | 2.0.1 | 2.1.0 | 1 MR; 2.1.0 |
drupal/y_program | 2.0.0 | 2.1.0 | 1 MR; 2.1.0 |
drupal/y_program_subcategory | 2.0.0 | 2.1.0 | 1 MR; 2.1.0 |
YUSAOpenY Modules — 27 packages
| Package | Old | New | Changes |
|---|---|---|---|
drupal/openy_branch_selector | 1.1.2 | 1.2.0 | 1 MR; 1.2.0 |
drupal/openy_daxko2 | 1.0.7 | 1.1.0 | 1 MR; 1.1.0 |
drupal/openy_er | 1.1.1 | 1.2.0 | 1 MR; 1.2.0 |
drupal/openy_gtranslate | 2.0.0 | 2.1.0 | 1 MR; 2.1.0 |
drupal/openy_gxp | 2.1.0 | — | — |
drupal/openy_mappings | 1.1.1 | 1.2.0 | 1 MR; 1.2.0 |
drupal/openy_node_session | 2.2.0 | 2.4.0 | 3 MRs; 2.3.0, 2.4.0 |
drupal/openy_pef_gxp_sync | 2.0.1 | — | — |
drupal/openy_repeat | 3.3.0 | 4.1.0 major | 3 MRs; 3.4.0, 4.0.0, 4.1.0 |
drupal/openy_socrates | 1.1.0 | 1.2.1 | 2 MRs; 1.2.0, 1.2.1 |
open-y-subprojects/common_scss | dev-main@6c3bbed | dev-main@ecc3542 | 1 PR |
open-y-subprojects/openy_content_core | 3.3 | 3.4.0 | 1 PR; 3.4.0 |
open-y-subprojects/openy_custom | 3.1.5 | 3.3.0 | 4 PRs; 3.2.0, 3.3.0 |
open-y-subprojects/openy_daxko_gxp_syncer | 1.4.1 | 1.5.0 | 1 PR; 1.5.0 |
open-y-subprojects/openy_demo_content | 2.6.0 | 2.7.0 | 1 PR; 2.7.0 |
open-y-subprojects/openy_features | 5.1.4 | 5.4.0 | 4 PRs; 5.2.0, 5.3.0, 5.4.0 |
open-y-subprojects/openy_focal_point | 2.1.0 | 2.2.0 | 3 PRs; 2.2.0 |
open-y-subprojects/openy_hours_formatter | 3.0.2 | 3.1.0 | 2 PRs; 3.0.3, 3.1.0 |
open-y-subprojects/openy_map | 6.0.0-beta4 | 6.1.0 | 3 PRs; 6.0.1, 6.1.0 |
open-y-subprojects/openy_node_alert | 2.4.2 | 2.5.0 | 2 PRs; 2.4.3, 2.5.0 |
open-y-subprojects/ynorth_gxp_spots_proxy | 1.0.1 | 1.1.0 | 1 PR; 1.1.0 |
ycloudyusa/embedded_groupexpro_schedule | — | 1.0.0 | — |
ycloudyusa/useless_machines | 2.1.0 | 2.2.0 | 1 PR; 2.2.0 |
ycloudyusa/y_pef_schedule | 2.1.1 | 2.2.0 | 3 PRs; 2.2.0 |
ycloudyusa/yusaopeny | 11.3.1.5 | 11.4.0.0 | 18 PRs; 11.3.1.6, 11.4.0.0-rc1, 11.4.0.0-rc2, 11.4.0.0-rc3, 11.4.0.0-rc4, 11.4.0.0-rc5 |
ycloudyusa/yusaopeny_activity_finder | 6.2.1 | 7.2.1 major | 8 PRs; 7.0.0, 7.1.0, 7.2.0, 7.2.1 |
ycloudyusa/yusaopeny_ymca360 | 2.1.2 | 2.4.0 | 3 PRs; 2.2.0, 2.3.0, 2.4.0 |
Drupal Core, Drush, Symfony — 41 packages
| Package | Old | New | Changes |
|---|---|---|---|
composer/ca-bundle | 1.5.12 | 1.6.1 | 1.5.13, 1.5.14, 1.6.0, 1.6.1 |
composer/semver | 3.4.4 | 3.6.0 | 3.5.0, 3.5.1, 3.5.2, 3.6.0 |
drupal/core-composer-scaffold | 11.3.13 | 11.4.11 | 11.3.14 (security), 11.3.16, 11.3.17 (security), 11.3.18, 11.3.19 (security), 11.3.20, 11.4.0-beta1, 11.4.0-rc1, 11.4.0-rc2 (security), 11.4.0, 11.4.1, 11.4.2, 11.4.3, 11.4.4 (security), 11.4.5, 11.4.6, 11.4.7 (security), 11.4.8, 11.4.9, 11.4.10 (security), 11.4.11 |
drupal/core | 11.3.13 | 11.4.11 | fixes SA-CORE-2026-010, SA-CORE-2026-011, SA-CORE-2026-012, SA-CORE-2026-013, SA-CORE-2026-014, SA-CORE-2026-015, SA-CORE-2026-016; 11.3.14 (security), 11.3.16, 11.3.17 (security), 11.3.18, 11.3.19 (security), 11.3.20, 11.4.0-beta1, 11.4.0-rc1, 11.4.0-rc2 (security), 11.4.0, 11.4.1, 11.4.2, 11.4.3, 11.4.4 (security), 11.4.5, 11.4.6, 11.4.7 (security), 11.4.8, 11.4.9, 11.4.10 (security), 11.4.11 |
drush/drush | 13.7.3 | 13.8.0 | 13.7.4, 13.7.5, 13.7.6, 13.7.7, 13.8.0 |
symfony/console | v7.4.13 | v7.4.22 | v7.4.14, v7.4.15, v7.4.16, v7.4.17, v7.4.18, v7.4.19, v7.4.20, v7.4.21, v7.4.22 |
symfony/dependency-injection | v7.4.13 | v7.4.22 | v7.4.14, v7.4.15, v7.4.16, v7.4.17, v7.4.20, v7.4.21, v7.4.22 |
symfony/deprecation-contracts | v3.7.0 | v3.7.1 | v3.7.1 |
symfony/dom-crawler | v7.4.12 | v8.1.10 major | v7.4.17, v7.4.22, v8.0.0-BETA1, v8.0.0-BETA2, v8.0.0-RC1, v8.0.0, v8.0.1, v8.0.4, v8.0.6, v8.0.8, v8.0.12, v8.1.0-BETA1, v8.1.0-BETA3, v8.1.0, v8.1.1, v8.1.5, v8.1.10 |
symfony/error-handler | v8.1.0 | v8.1.10 | v8.1.2, v8.1.5, v8.1.8, v8.1.10 |
symfony/event-dispatcher-contracts | v3.7.0 | v3.7.1 | v3.7.1 |
symfony/event-dispatcher | v7.4.9 | v7.4.17 | v7.4.14, v7.4.15, v7.4.17 |
symfony/filesystem | v7.4.11 | v7.4.21 | v7.4.15, v7.4.17, v7.4.18, v7.4.21 |
symfony/finder | v7.4.8 | v7.4.22 | v7.4.14, v7.4.17, v7.4.19, v7.4.20, v7.4.22 |
symfony/http-foundation | v7.4.13 | v7.4.22 | fixes symfony/http-foundation/CVE-2026-108082.yaml; v7.4.14, v7.4.15, v7.4.16, v7.4.17, v7.4.18, v7.4.19, v7.4.20, v7.4.21, v7.4.22 |
symfony/http-kernel | v7.4.13 | v7.4.22 | v7.4.14, v7.4.15, v7.4.16, v7.4.17, v7.4.18, v7.4.19, v7.4.20, v7.4.21, v7.4.22 |
symfony/mailer | v7.4.12 | v7.4.22 | v7.4.14, v7.4.15, v7.4.17, v7.4.19, v7.4.22 |
symfony/mime | v7.4.13 | v7.4.22 | fixes symfony/mime/CVE-2026-45070.yaml; v7.4.15, v7.4.16, v7.4.17, v7.4.18, v7.4.19, v7.4.22 |
symfony/polyfill-deepclone | v1.40.0 | v1.43.2 | v1.42.0, v1.43.0, v1.43.1, v1.43.2 |
symfony/polyfill-iconv | v1.37.0 | v1.43.0 | v1.43.0 |
symfony/polyfill-intl-grapheme | v1.38.1 | v1.43.3 | v1.41.0, v1.43.0, v1.43.3 |
symfony/polyfill-intl-idn | v1.38.1 | v1.43.0 | v1.42.0, v1.43.0 |
symfony/polyfill-intl-normalizer | v1.38.0 | v1.43.0 | v1.42.0, v1.43.0 |
symfony/polyfill-mbstring | v1.38.2 | v1.43.3 | v1.43.0, v1.43.3 |
symfony/polyfill-php80 | v1.37.0 | v1.43.0 | v1.43.0 |
symfony/polyfill-php83 | v1.38.2 | v1.43.0 | v1.41.0, v1.43.0 |
symfony/polyfill-php84 | v1.38.1 | v1.43.0 | v1.43.0 |
symfony/polyfill-php85 | v1.38.1 | v1.43.0 | v1.41.0, v1.43.0 |
symfony/polyfill-php86 | — | v1.43.0 | — |
symfony/process | v7.4.13 | v7.4.22 | v7.4.17, v7.4.18, v7.4.19, v7.4.21, v7.4.22 |
symfony/psr-http-message-bridge | v7.4.8 | v7.4.21 | v7.4.21 |
symfony/routing | v7.4.13 | v7.4.22 | v7.4.15, v7.4.17, v7.4.18, v7.4.20, v7.4.21, v7.4.22 |
symfony/runtime | — | v7.4.22 | — |
symfony/serializer | v7.4.10 | v7.4.22 | v7.4.14, v7.4.15, v7.4.16, v7.4.17, v7.4.18, v7.4.19, v7.4.20, v7.4.21, v7.4.22 |
symfony/service-contracts | v3.7.0 | v3.7.3 | v3.7.1, v3.7.3 |
symfony/string | v7.4.13 | v8.1.10 major | v7.4.15, v7.4.19, v7.4.21, v7.4.22, v8.0.0-BETA1, v8.0.0-RC1, v8.0.0, v8.0.1, v8.0.4, v8.0.6, v8.0.8, v8.0.11, v8.0.13, v8.0.15, v8.1.0-BETA1, v8.1.0-BETA2, v8.1.0-RC1, v8.1.0, v8.1.2, v8.1.7, v8.1.9, v8.1.10 |
symfony/translation-contracts | v3.7.0 | v3.7.1 | v3.7.1 |
symfony/validator | v7.4.10 | v7.4.22 | v7.4.14, v7.4.15, v7.4.16, v7.4.17, v7.4.18, v7.4.19, v7.4.20, v7.4.21, v7.4.22 |
symfony/var-dumper | v7.4.8 | v7.4.22 | v7.4.14, v7.4.15, v7.4.17, v7.4.18, v7.4.21, v7.4.22 |
symfony/var-exporter | v8.1.0 | v8.1.10 | v8.1.1, v8.1.3, v8.1.4, v8.1.5, v8.1.6, v8.1.9, v8.1.10 |
symfony/yaml | v7.4.13 | v7.4.22 | fixes symfony/yaml/CVE-2026-109413.yaml; v7.4.14, v7.4.15, v7.4.17, v7.4.18, v7.4.20, v7.4.21, v7.4.22 |
Contrib Modules — 66 packages
| Package | Old | New | Changes |
|---|---|---|---|
drupal/activenet | 1.0.6 | 1.1.0 | 1.1.0 |
drupal/addtocal_augment | 1.2.5 | 1.2.6 | 1.2.6 |
drupal/advanced_help_block | 1.0.8 | 1.1.0 | 1.1.0 |
drupal/better_exposed_filters | 7.1.2 | 7.2.0 | 7.1.3, 7.2.0 |
drupal/blazy | 3.0.17 | 3.0.19 | fixes SA-CONTRIB-2026-104; 3.0.18 (security), 3.0.19 |
drupal/captcha | 2.0.10 | 2.0.12 | fixes SA-CONTRIB-2026-281; 2.0.11 (security), 2.0.12 |
drupal/ckeditor5_plugin_pack | 1.5.2 | 1.5.6 | 1.5.3, 1.5.4, 1.5.5, 1.5.6 |
drupal/ckeditor5_premium_features | 1.8.1 | 1.8.6 | 1.8.2, 1.8.3, 1.8.4, 1.8.5, 1.8.6 |
drupal/colorapi | 2.1.0 | 2.2.0 | 2.2.0 |
drupal/confi | 4.1.1 | 4.3.0 | 3 MRs; 4.2.0, 4.3.0 |
drupal/css_editor | 2.0.4 | 2.1.0 | 2.1.0 |
drupal/ctools | 4.1.0 | 4.1.1 | 4.1.1 |
drupal/ctools_views | 4.1.0 | 4.1.1 | metapackage: releases of drupal/ctools |
drupal/custom_formatters | 4.1.0-beta2 | 4.2.1 | fixes SA-CONTRIB-2026-225; 4.1.0-beta3, 4.1.0, 4.2.0, 4.2.1 (security) |
drupal/daterange_compact | 2.1.1 | 2.1.2 | 2.1.2 |
drupal/daxko | 1.0.5 | 1.1.0 | 1.1.0 |
drupal/diff | 2.0.0 | 2.1.1 | fixes SA-CONTRIB-2026-096; 2.0.1 (security), 2.1.0, 2.1.1 (security) |
drupal/draggableviews | 2.1.4 | 2.1.5 | 2.1.5 |
drupal/easy_breadcrumb | 2.0.9 | 2.0.11 | fixes SA-CONTRIB-2026-212; 2.0.10, 2.0.11 (security) |
drupal/entity | 1.6.0 | 1.8.0 | fixes SA-CONTRIB-2026-113; 8.x-1.7, 8.x-1.8 (security) |
drupal/entity_browser | 2.15.0 | 2.17.0 | fixes SA-CONTRIB-2026-094; 8.x-2.16 (security), 8.x-2.17 |
drupal/file_delete | 3.0.2 | 3.0.3 | 3.0.3 |
drupal/focal_point | 2.1.2 | 2.1.3 | 2.1.3 |
drupal/fontyourface | 4.2.0 | 4.3.1 | 4.3.0, 4.3.1; patched in the distribution for #3630630 |
drupal/geolocation | 3.14.0 | 3.15.0 | fixes SA-CONTRIB-2026-062; 8.x-3.15 (security) |
drupal/groupexpro | 2.1.0 | — | removed from the distribution; SA-CONTRIB-2026-278 affects versions before 2.2.1 |
drupal/hal | 2.0.4 | 2.0.5 | 2.0.5 |
drupal/jquery_ui_touch_punch | 1.1.1 | 1.1.2 | 1.1.2 |
drupal/layout_builder_restrictions | 3.0.4 | 3.0.6 | 3.0.5, 3.0.6 |
drupal/layout_builder_save_and_edit | 1.1.0 | 1.2.0 | 1.2.0 |
drupal/libraries | 4.1.1 | 4.2.1 | 4.2.0, 4.2.1 |
drupal/link_attributes | 2.1.2 | 2.1.3 | 2.1.3 |
drupal/link_attributes_menu_link_content | 2.1.2 | 2.1.3 | metapackage: releases of drupal/link_attributes |
drupal/media_directories | dev-2.2.x@1bcbfb5 | dev-2.2.x@6e50cb5 | — |
drupal/media_library_form_element | 2.1.4 | 2.1.5 | 2.1.5 |
drupal/menu_item_extras | 3.1.0 | 3.2.0 | 3.1.1, 3.1.2, 3.1.3, 3.2.0 |
drupal/metatag | 2.2.0 | 2.2.5 | 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5 |
drupal/migrate_plus | 6.0.10 | 6.0.11 | 6.0.11 |
drupal/migrate_tools | 6.1.4 | 6.1.5 | 6.1.5 |
drupal/paragraphs | 1.20.0 | 1.23.0 | fixes SA-CONTRIB-2026-060, SA-CONTRIB-2026-061; 8.x-1.21 (security), 8.x-1.22, 8.x-1.23 |
drupal/personify | 1.0.4 | 1.1.0 | 1.1.0 |
drupal/program_search | 2.0.0 | 2.1.1 | 2.1.0, 2.1.1 |
drupal/protected_pages | 1.9.0 | 3.0.0 major | 8.x-2.0, 3.0.0 |
drupal/rabbit_hole | 1.2.0 | 1.3.0 | fixes SA-CONTRIB-2026-252; 8.x-1.3 (security) |
drupal/recaptcha | 3.5.0-rc1 | 3.5.0 | 8.x-3.5 |
drupal/search_api | 1.40.0 | 1.43.0 | 8.x-1.41, 8.x-1.42, 8.x-1.43 |
drupal/search_api_solr | 4.3.10 | 4.4.0 | 4.3.11, 4.3.12, 4.3.13, 4.3.14, 4.4.0 |
drupal/seven | 2.0.0-beta7 | 2.0.0-beta8 | 2.0.0-beta8 |
drupal/simple_menu_icons | 3.1.0 | 3.2.0 | 3.2.0 |
drupal/slick | 3.0.7 | 3.0.8 | 3.0.8 |
drupal/smart_date | 4.2.5 | 4.3.0 | 4.2.6, 4.2.7, 4.2.8, 4.3.0-beta1, 4.3.0-rc1, 4.3.0 |
drupal/social_feed_fetcher | 3.1.1 | 3.2.1 | 3.2.0, 3.2.1 |
drupal/stage_file_proxy | 3.1.6 | 3.1.7 | fixes SA-CONTRIB-2026-286; 3.1.7 (security) |
drupal/svg_image | 3.2.2 | 3.2.5 | 3.2.3, 3.2.4, 3.2.5 |
drupal/token | 1.17.0 | 1.18.0 | 8.x-1.18 |
drupal/trash | 3.0.27 | 3.1.2 | 3.0.28, 3.0.29, 3.0.30, 3.0.31, 3.0.32, 3.0.33, 3.0.34, 3.0.35, 3.0.36, 3.1.0-beta1, 3.1.0-beta2, 3.1.0-beta3, 3.1.0-rc1, 3.1.0, 3.1.1, 3.1.2 |
drupal/tzfield | 1.13.0 | 1.14.0 | 8.x-1.14 |
drupal/upgrade_tool | 4.1.2 | 4.3.0 | 2 MRs; 4.2.0, 4.3.0 |
drupal/vendor_stream_wrapper | 2.0.5 | 2.1.0 | 2.1.0 |
drupal/verf | 2.1.0 | 2.2.0 | 2.2.0 |
drupal/video | 3.1.0 | 3.2.0 | 3.2.0 |
drupal/video_embed_field | 3.1.0 | 3.1.1 | 3.1.1 |
drupal/views_block_filter_block | 2.1.2 | 2.2.0 | 2.2.0 |
drupal/views_field_formatter | 4.1.1 | 4.2.0 | 4.2.0 |
drupal/webform | 6.3.0-beta9 | 6.3.1 | fixes SA-CONTRIB-2026-154, SA-CONTRIB-2026-155, SA-CONTRIB-2026-158, SA-CONTRIB-2026-159, SA-CONTRIB-2026-160, SA-CONTRIB-2026-161, SA-CONTRIB-2026-162, SA-CONTRIB-2026-163, SA-CONTRIB-2026-164, SA-CONTRIB-2026-165, SA-CONTRIB-2026-166, SA-CONTRIB-2026-167, SA-CONTRIB-2026-168, SA-CONTRIB-2026-169, SA-CONTRIB-2026-170, SA-CONTRIB-2026-171, SA-CONTRIB-2026-172, SA-CONTRIB-2026-173, SA-CONTRIB-2026-174, SA-CONTRIB-2026-175; 6.3.0-rc1, 6.3.0-rc2, 6.3.0, 6.3.1 (security) |
drupal/ymca_sync | 11.0.0 | 11.1.2 | 11.1.1, 11.1.2 |
Libraries — 32 packages
| Package | Old | New | Changes |
|---|---|---|---|
chi-teck/drupal-code-generator | 4.2.0 | 4.x-dev@ee02eb9 | — |
commerceguys/addressing | v2.2.5 | v2.3.2 | v2.3.0, v2.3.1, v2.3.2 |
consolidation/site-process | 5.4.2 | 6.1.0 major | 6.0.0, 6.0.1, 6.1.0 |
doctrine/lexer | 3.0.1 | 3.0.3 | 3.0.2, 3.0.3 |
enshrined/svg-sanitize | 0.22.0 | 1.1.1 major | fixes GHSA-m9xh-6747-9r6f, GHSA-9rjx-3jch-6vjf, GHSA-v383-3rw5-q8rf; 1.0.0, 1.1.0, 1.1.1 |
ezyang/htmlpurifier | v4.19.0 | v4.19.1 | v4.19.1 |
google/recaptcha | 1.5 | 1.5.2 | 1.5.1, 1.5.2 |
guzzlehttp/guzzle | 7.12.1 | 7.16.1 | fixes GHSA-f283-ghqc-fg79, GHSA-g446-98w2-8p5w, GHSA-f7vp-7xgx-4w4r, GHSA-h95v-h523-3mw8, GHSA-v5mv-p594-2x33, GHSA-94pj-82f3-465w, GHSA-wm3w-8rrp-j577; 7.12.2, 7.12.3, 7.13.0, 7.13.1, 7.13.2, 7.13.3, 7.14.0, 7.14.1, 7.14.2, 7.15.0, 7.15.1, 7.15.2, 7.15.3, 7.15.4, 7.15.5, 7.15.6, 7.16.0, 7.16.1 |
guzzlehttp/promises | 2.5.0 | 2.6.0 | 2.5.1, 2.5.2, 2.5.3, 2.6.0 |
guzzlehttp/psr7 | 2.12.1 | 2.13.2 | fixes GHSA-c2w2-prh8-qm98; 2.12.2, 2.12.3, 2.12.4, 2.12.5, 2.13.0, 2.13.1, 2.13.2 |
justinrainbow/json-schema | — | 6.14.0 | — |
laravel/prompts | v0.3.18 | v0.3.26 | v0.3.19, v0.3.20, v0.3.21, v0.3.22, v0.3.23, v0.3.24, v0.3.25, v0.3.26 |
league/csv | 9.28.0 | 9.29.0 | 9.29.0 |
league/oauth2-client | 2.9.0 | 2.9.1 | 2.9.1 |
library-ckeditor/colorbutton | 4.10.1 | — | — |
library-ckeditor/font | 4.12.1 | — | — |
library-ckeditor/panelbutton | 4.10.1 | — | — |
marc-mabe/php-enum | — | v4.7.2 | — |
masterminds/html5 | 2.10.0 | 2.12.0 | 2.10.1, 2.11.0, 2.12.0 |
mck89/peast | v1.17.6 | v1.18.1 | v1.17.7, v1.18.0, v1.18.1 |
myclabs/deep-copy | 1.13.4 | 1.14.0 | 1.14.0 |
nikic/php-parser | v5.7.0 | v5.9.0 | v5.8.0, v5.9.0 |
pear/archive_tar | 1.6.0 | 1.6.1 | 1.6.1 |
php-tuf/composer-stager | v2.1.0 | v2.1.1 | v2.1.1 |
phpstan/phpdoc-parser | 2.3.2 | 2.4.1 | 2.3.3, 2.3.4, 2.3.5, 2.3.6, 2.3.7, 2.3.8, 2.3.9, 2.3.10, 2.3.11, 2.3.12, 2.4.0, 2.4.1 |
psy/psysh | v0.12.23 | v0.12.24 | v0.12.24 |
sebastian/diff | 7.0.0 | 7.0.1 | 7.0.1 |
setasign/fpdi | v2.6.7 | v2.6.9 | v2.6.8, v2.6.9 |
solarium/solarium | 6.4.1 | 7.0.0 major | 6.4.2, 7.0.0-alpha.1, 7.0.0-alpha.2, 7.0.0 |
squizlabs/php_codesniffer | 3.13.5 | 3.13.6 | fixes squizlabs/php_codesniffer/CVE-2026-67434.yaml; 3.13.6 |
twig/html-extra | — | v3.29.0 | — |
twig/twig | v3.27.1 | v3.30.0 | v3.28.0, v3.29.0, v3.30.0 |
The after lock is one upgrade run (2026-11-03); a later run also brings newer releases inside the same constraints (a second run the same day resolved drupal/ckeditor5_premium_features 1.8.7 instead of 1.8.6).
Distribution requirements (composer.json)
| Package | 11.3.1.6 | 11.4.0.0 |
|---|---|---|
drupal/core, drupal/core-composer-scaffold | >=11.3 <11.4 | ^11.4 |
ycloudyusa/yusaopeny_activity_finder | ^6.0 | ^7.2 |
drupal/openy_repeat | ^3.1.0 | ^4.0.0 |
drupal/protected_pages | ^1.4 | ^3.0 |
open-y-subprojects/openy_custom | ^3.1.5 | ^3.2.0 |
open-y-subprojects/openy_features | ^5.0 | ^5.2 |
ycloudyusa/y_lb | ^5.0 | ^5.1 |
drupal/openy_carnation | ^4.0.0-beta7 || ^4.0@rc || ^4.0.0 | ^4.2 |
drupal/confi | ^4.0.0 | ^4.2 |
drupal/upgrade_tool | ^4.1.0 | ^4.2 |
ycloudyusa/useless_machines | ^2.0.3 | ^2.2.0 |
ycloudyusa/embedded_groupexpro_schedule | — | ^1.0 |
drupal/openy_pef_gxp_sync | ^2.0.0 | removed |
guzzlehttp/guzzle | ^6 || ^7 | direct require dropped; Guzzle is still installed because Drupal core requires guzzlehttp/guzzle: ^7.10 |
library-ckeditor/colorbutton, font, panelbutton | pinned | removed |
Patches (diff of composer.json, 11.3.1.6 to 11.4.0.0): 3 drupal/core, 1 drupal/search_api and 1 drupal/webform patches removed; the drupal/rabbit_hole patch replaced; a drupal/fontyourface patch added (
merge request !20).
Bug Fixes
28 merged PR/MRs of our packages whose title says fix or bug:
- fix(ITCR-1271): widen module_installer typehint to ModuleInstallerInterface (D11.4) ( drupal/confi!15)
- Fix: run text format filters (media_embed) on accordion item body ( drupal/lb_accordion!30)
- Fix: Render field_block_item from block_content entity in accordion template ( drupal/lb_accordion!27)
- fix: prevent button gap in equal-height card rows ( drupal/lb_cards!58)
- D12: fix RangeAsteriksValidator::validate() signature for Symfony 8 ( drupal/openy_repeat!16)
- ITCR-1271: allow openy_carnation ^4.1 (D11.4 field media image fix) ( drupal/openy_repeat!15)
- D12: Attribute-based plugin discovery + config pre-existing names fix ( drupal/upgrade_tool!15)
- fix(ITCR-1271): widen module_installer typehint to ModuleInstallerInterface (D11.4) ( drupal/upgrade_tool!14)
- Fix: alert description hidden on all header/footer alerts ( drupal/ws_small_y!82)
- fix: replace min-height with aspect-ratio on card-img-wrapper (Safari fix) ( drupal/ws_small_y!81)
- openy_migrate: fix MigrateSkipProcessException removed in Drupal core 12 ( open-y-subprojects/openy_custom#100)
- Fix getDefaultOperations() missing CacheableMetadata param (core 12) ( open-y-subprojects/openy_daxko_gxp_syncer#18)
- fix(ITCR-1271): use core image formatter instead of blazy (D11.4 config schema) ( open-y-subprojects/openy_features#122)
- fix(ITCR-1347): Replace Request::get() in preview controller (removed in Symfony 8) ( open-y-subprojects/openy_focal_point#9)
- fix(ITCR-1344): Switch map elements to RenderElementBase (RenderElement removed in D12) ( open-y-subprojects/openy_map#99)
- fix(ITCP-730): do not load alert widget on backend routes ( open-y-subprojects/openy_node_alert#173)
- fix(ITCP-752): require drupal/lb_table ^1.1.1 for the tablesaw thead guard ( YCloudYUSA/y_lb#317)
- fix(ITCR-1271): use core image formatter instead of blazy (D11.4 config schema) ( YCloudYUSA/y_lb#312)
- fix/issue-310-incorrect-route-processing|Fix for the issue with incor… ( YCloudYUSA/y_lb#311)
- fix(ITCR-1346): Replace Request::get() in schedule controller (removed in Symfony 8) ( YCloudYUSA/y_pef_schedule#24)
- fix(ITCP-752): patch fontyourface 4.3.x so font stylesheets are attached again ( YCloudYUSA/yusaopeny#398)
- fix(ITCR-1336): drop stale composer patches, fix empty rabbit_hole patch ( YCloudYUSA/yusaopeny#387)
- fix(ITCP-741): self-host jQuery Migrate, drop code.jquery.com CDN ( YCloudYUSA/yusaopeny#386)
- fix: bump protected_pages to ^3.0 (Drupal core 11.4+ compat) ( YCloudYUSA/yusaopeny#383)
- fix: update 9006 enables the Solr submodule only when search_api_solr is enabled ( YCloudYUSA/yusaopeny_activity_finder#86)
- Category Tags, Filters on Top and location/fetch fixes for the AF4 app ( YCloudYUSA/yusaopeny_activity_finder#85)
- fix(ITCR-1345): Drop removed core cookie library dependencies ( YCloudYUSA/yusaopeny_activity_finder#81)
- fix: widen y360id from int to string, sync no longer aborts ( YCloudYUSA/yusaopeny_ymca360#21)
Contrib Changes
Release type terms, advisories and the issue count come from the drupal.org release pages; quoted text is the first line of a release’s notes. Security first.
Contrib modules — 60 packages
drupal/blazy3.0.17 → 3.0.19 — Security update, Bug fixes, New features; fixes SA-CONTRIB-2026-104; 3.0.18: “Blazy 3.0.x-dev, 2026-07-04”; 3.0.19: “Hot fix for Media player collapsed display regression”drupal/captcha2.0.10 → 2.0.12 — Security update, Bug fixes, New features; fixes SA-CONTRIB-2026-281; 24 issues resolved; 2.0.11: “This is a bugfix and security release for captcha”; 2.0.12: “This is a compatibility and bugfix release for CAPTCHA”drupal/custom_formatters4.1.0-beta2 → 4.2.1 — Security update, Bug fixes, New features; fixes SA-CONTRIB-2026-225; 4.1.0-beta3: “The third beta release of Custom Formatters 4.1.0 for Drupal 10 and 11, adding per-formatter configurable fields via Field UI, raw settings access across all engine plugins, and context-aware…”; 4.1.0: “First stable release of the 4.1.x branch”; 4.2.1: “Security release”drupal/diff2.0.0 → 2.1.1 — Security update, Bug fixes, New features; fixes SA-CONTRIB-2026-096; 9 issues resolved; 2.1.0: “Diff supports all entity types”; 2.1.1: “Minor bug fixes”drupal/easy_breadcrumb2.0.9 → 2.0.11 — Security update, Bug fixes; fixes SA-CONTRIB-2026-212; 47 issues resolved; 2.0.10: “Bugfix/small improvements release”; 2.0.11: “Bug fixes, tests, and code quality”drupal/entity1.6.0 → 1.8.0 — Security update, Bug fixes; fixes SA-CONTRIB-2026-113; 4 issues resolved; 8.x-1.7: “Minor maintenance release”; 8.x-1.8: “This release changes JSONAPI entity collection access control. In certain circumstances this may mean that JSONAPI clients can access less data than expected. Sites should carefully review their…”drupal/entity_browser2.15.0 → 2.17.0 — Security update, Bug fixes, New features; fixes SA-CONTRIB-2026-094; 19 issues resolved; 8.x-2.16: “Security release”; 8.x-2.17: “Drupal 12 compatibility, many bugfixes and improvements”drupal/geolocation3.14.0 → 3.15.0 — Security update, Bug fixes; fixes SA-CONTRIB-2026-062; 8.x-3.15: “140b7f35 Query issues”drupal/paragraphs1.20.0 → 1.23.0 — Security update, Bug fixes, New features; fixes SA-CONTRIB-2026-060, SA-CONTRIB-2026-061; 11 issues resolved; 8.x-1.21: “Security release”; 8.x-1.22: “Bugfixes, performance improvements and preparations for Drupal 12”; 8.x-1.23: “Fixes a regression with summaries on Drupal 10”drupal/rabbit_hole1.2.0 → 1.3.0 — Security update, Bug fixes; fixes SA-CONTRIB-2026-252; 5 issues resolved; 8.x-1.3: “This is a bugfix and security release for the rabbit_hole module”drupal/stage_file_proxy3.1.6 → 3.1.7 — Security update; fixes SA-CONTRIB-2026-286; 3 issues resolveddrupal/webform6.3.0-beta9 → 6.3.1 — Security update, Bug fixes, New features; fixes SA-CONTRIB-2026-154, SA-CONTRIB-2026-155, SA-CONTRIB-2026-158, SA-CONTRIB-2026-159, SA-CONTRIB-2026-160, SA-CONTRIB-2026-161, SA-CONTRIB-2026-162, SA-CONTRIB-2026-163, SA-CONTRIB-2026-164, SA-CONTRIB-2026-165, SA-CONTRIB-2026-166, SA-CONTRIB-2026-167, SA-CONTRIB-2026-168, SA-CONTRIB-2026-169, SA-CONTRIB-2026-170, SA-CONTRIB-2026-171, SA-CONTRIB-2026-172, SA-CONTRIB-2026-173, SA-CONTRIB-2026-174, SA-CONTRIB-2026-175; 314 issues resolved; 6.3.0: “Webform 6.3.0-rc2 released as 6.3.0. This is the first release with support for Drupal 11. There are some outstanding issues; see #3530589: Stable Version for Drupal 11. In particular, you may wish…”; 6.3.1: “Webform 6.3.1 for Drupal 11 contains a coordinated set of 22 security fixes with advisories and one additional hardening change. Sites using a supported Webform release should update”drupal/activenet1.0.6 → 1.1.0 — New features; 1.1.0: “Drupal 12 kick-off https://git.drupalcode.org/project/activenet/-/tags/1.1.0”drupal/addtocal_augment1.2.5 → 1.2.6 — no release type; 1.2.6: “This release marks the module as compatible with the forthcoming Drupal 12 release”drupal/advanced_help_block1.0.8 → 1.1.0 — New featuresdrupal/better_exposed_filters7.1.2 → 7.2.0 — Bug fixes, New features; 15 issues resolveddrupal/ckeditor5_plugin_pack1.5.2 → 1.5.6 — Bug fixes, New featuresdrupal/ckeditor5_premium_features1.8.1 → 1.8.6 — Bug fixes, New featuresdrupal/colorapi2.1.0 → 2.2.0 — New featuresdrupal/css_editor2.0.4 → 2.1.0 — New featuresdrupal/ctools4.1.0 → 4.1.1 — Bug fixes, New features; 7 issues resolved; 4.1.1: “This is a bugfix and compatibility release for ctools”drupal/daterange_compact2.1.1 → 2.1.2 — Bug fixes; 2.1.2: “Fix fatal error in admin UI due to non-existent “entity.daterange_compact_format.canonical” route (#3512773)”drupal/daxko1.0.5 → 1.1.0 — New featuresdrupal/draggableviews2.1.4 → 2.1.5 — New featuresdrupal/file_delete3.0.2 → 3.0.3 — Bug fixes; 2 issues resolveddrupal/focal_point2.1.2 → 2.1.3 — Bug fixes; 6 issues resolveddrupal/fontyourface4.2.0 → 4.3.1 — New featuresdrupal/hal2.0.4 → 2.0.5 — no release type; 2.0.5: “#3601383: PHP 8.5: curl_close() is deprecated”drupal/jquery_ui_touch_punch1.1.1 → 1.1.2 — no release type; 1.1.2: “Drupal 12 compatibility”drupal/layout_builder_restrictions3.0.4 → 3.0.6 — no release type; 5 issues resolved; 3.0.5: “This release marks Layout Builder Restrictions as explicitly compatible with Drupal 12, while maintaining backwards support for Drupal 10.1+ and Drupal 11”; 3.0.6: “This release simply marks the module’s Composer dependency for Drupal core as compatible with version ^12; the previous release, 3.0.5, indicated general compatible with Drupal core version 12, which…”drupal/layout_builder_save_and_edit1.1.0 → 1.2.0 — New featuresdrupal/libraries4.1.1 → 4.2.1 — New featuresdrupal/link_attributes2.1.2 → 2.1.3 — no release type; 2.1.3: “#[3591563]”drupal/media_library_form_element2.1.4 → 2.1.5 — no release type; 1 issue resolved; 2.1.5: “This release provides nominal Drupal 12 compatibility”drupal/menu_item_extras3.1.0 → 3.2.0 — Bug fixes, New features; 3.1.1: “- Fixed PHP 8.4 compatibility in mie_demo_base”; 3.1.2: “Performance”; 3.1.3: “- #3615084: Reverted unsafe render-array caching introduced in 3.1.2. Fixes fatal errors, cross-user cache reuse, stale menu items, and missing children”drupal/metatag2.2.0 → 2.2.5 — Bug fixes; 52 issues resolved; 2.2.1: “This release includes support for Drupal 12 and resolves many bugs. Updating is recommended for all sites. As always, thanks to everyone who contributed to this release”; 2.2.2: “This release includes some critical fixes for the last one - apologies for releasing 2.2.1 with some serious bugs. Thanks to everyone who collaborated on the fix”; 2.2.3: “This fixes a bug in the update script from the last release. Sorry about that”; 2.2.5: “Happy Halloween!”drupal/migrate_plus6.0.10 → 6.0.11 — Bug fixes, New features; 5 issues resolved; 6.0.11: “Fixes/improvements and Drupal 12 / Drush 14 support”drupal/migrate_tools6.1.4 → 6.1.5 — no release type; 3 issues resolved; 6.1.5: “Fixes, improvements, maintenance. Drupal 12 & Drush 14 support”drupal/personify1.0.4 → 1.1.0 — New featuresdrupal/program_search2.0.0 → 2.1.1 — New featuresdrupal/protected_pages1.9.0 → 3.0.0 — Bug fixes; 8.x-2.0: “Maintenance fixes”; 3.0.0: “Protected Pages 3.0.0”drupal/recaptcha3.5.0-rc1 → 3.5.0 — Bug fixes; 3 issues resolved; 8.x-3.5: “recaptcha 8.x-3.5-rc1 released as 8.x-3.5”drupal/search_api1.40.0 → 1.43.0 — Bug fixes, New features; 21 issues resolved; 8.x-1.41: “This is release 1.41 of the Search API module, containing several bug fixes and new features”; 8.x-1.42: “This is release 1.42 of the Search API module, containing several bug fixes and adding compatibility with Drupal 12”; 8.x-1.43: “This is release 1.43 of the Search API module, containing one bugfix for a cache poisoning issue”drupal/search_api_solr4.3.10 → 4.4.0 — Bug fixes, New features; 4.3.11: “This release focuses on compatibility, indexing fixes, and several internal cleanups across Search API Solr, the drush commands, and Solr jump-start configuration”; 4.3.12: “Drupal 10 compatibility fix release, otherwise the same as 4.3.11”; 4.3.13: “This release focuses on compatibility, indexing fixes, and several internal cleanups across Search API Solr, the drush commands, and Solr jump-start configuration”; 4.3.14: “solr_text_unstemmed fields are no longer populated after updating Search API Solr from 4.3.10 to 4.3.11/4.3.12”; 4.4.0: “Release 4.4.0 is identical to 4.3.13. But 4.4.x drops support for Drupal 10 and Drupal < 11.3”drupal/seven2.0.0-beta7 → 2.0.0-beta8 — no release typedrupal/simple_menu_icons3.1.0 → 3.2.0 — New featuresdrupal/slick3.0.7 → 3.0.8 — Bug fixes, New features; 3.0.8: “Updated to Blazy 3.18 deprecation notices for Blazy 4.x compatibility”drupal/smart_date4.2.5 → 4.3.0 — Bug fixes, New features; 43 issues resolved; 4.2.6: “A couple of bugfixes, and a new README section”; 4.2.7: “Resolves a fatal error in Drupal 11.4 for sites using serialization”; 4.2.8: “Resolves an error on sites running Drupal <11.2”; 4.3.0-beta1: “This beta release introduces compatibility updates for upcoming Drupal versions, new migration paths, user experience enhancements, and important bug fixes. These include Drupal 12 readiness, the…”; 4.3.0-rc1: “Mostly smallish fixes and stability improvements as we edge closer to a stable release for the 4.3.x branch”; 4.3.0: “The most significant change in this specific release is improved support for paragraphs. Since the 4.2.8 release, however, significant additions include improved tokens support, improvements to the…”drupal/social_feed_fetcher3.1.1 → 3.2.1 — New featuresdrupal/svg_image3.2.2 → 3.2.5 — Bug fixes; 6 issues resolved; 3.2.3: “This release fixes a compatibility warning so the module keeps working smoothly on the latest version of PHP (8.5)”; 3.2.5: “Security update: svg_image now requires enshrined/svg-sanitize ^1.0, the library that sanitizes inline SVGs. Every 0.x release, up to and including 0.22.0, is covered by security advisories published…”drupal/token1.17.0 → 1.18.0 — Bug fixes, New features; 12 issues resolved; 8.x-1.18: “Drupal 12 compatibility, bugfixes”drupal/trash3.0.27 → 3.1.2 — Bug fixes, New features; 37 issues resolved; 3.1.0-beta1: “First beta of the 3.1.x branch. What’s new vs. 3.0.x:”; 3.1.0: “The first stable release of the 3.1.x branch! The main differences with 3.0.x are:”drupal/tzfield1.13.0 → 1.14.0 — no release type; 8.x-1.14: “Resolve phpstan warnings”drupal/vendor_stream_wrapper2.0.5 → 2.1.0 — New featuresdrupal/verf2.1.0 → 2.2.0 — New featuresdrupal/video3.1.0 → 3.2.0 — New featuresdrupal/video_embed_field3.1.0 → 3.1.1 — Bug fixesdrupal/views_block_filter_block2.1.2 → 2.2.0 — New featuresdrupal/views_field_formatter4.1.1 → 4.2.0 — New featuresdrupal/ymca_sync11.0.0 → 11.1.2 — Bug fixes, New features; 11.1.2: “Issue #3609993: Drupal 11 changes to ConfigFormBase constructor: Pass the typed config manager to ConfigFormBase in SettingsForm”
Upgrade Path
From 11.3.1.x or an 11.4.0.0 release candidate:
composer config allow-plugins.symfony/runtime true
composer require ycloudyusa/yusaopeny:^11.4@RC --no-update
composer update -W
drush updb -y --no-cache-clear
drush cr
Keep @RC while 11.4.0.0 is a release candidate; drop it after the stable release.
composer require without --no-update (or -W) fails on an 11.3 site — the locked dependencies (e.g. drupal/confi
4.1) block a partial update — and composer reverts composer.json.
All migrations run in drush updb: 34 updates on a fresh extended 11.3.1.5 install upgraded to 11.4.0.0-rc4 (measured on rc4, not re-run on rc5; sites
with more modules run more), among them the blazy→image display updates, the Activity Finder 6.2.1 → 7.2.1 backend
conversion (openy_activity_finder_update_9006), metatag 403/404 defaults, rabbit_hole and Trash storage updates,
lb_webform_update_10001; on sites that use them also the GroupEx Pro stub clean-up and uninstall, the embed account
conversion and ws_small_y_update_91009.
QA & Testing
- Upgrade test 11.3.1.5 (
extended) → 11.4.0.0-rc4 with the commands above: 34 updates, no errors (rc4 build; not re-run on rc5). - PR builder upgrade test and fresh install sandboxes green on #390.
- GroupEx Pro retirement: PR builder green on
#394 (composer removes
drupal/groupexpro,drupal/openy_gxp,drupal/openy_pef_gxp_sync); on a live-site copy with the old modules and data, oneupdbpass drops the storage and uninstalls the stubs, the embed renders with a numeric account. - Local upgrade of a live site copy from 11.4.0.0-rc2 to main:
updbclean,composer audit0 advisories (before SA-CONTRIB-2026-286;composer update -Wbringsstage_file_proxy3.1.7), nocode.jquery.comrequest, header-less tables not enhanced.
Statistics
128 PRs/MRs merged in our packages (63 GitHub + 65 drupal.org), counted from the tables below
541 releases between the old and new versions of the changed packages
204 packages changed: 192 updated, 6 added, 6 removed (rc4 build)
55 security advisories in the table above
Major version bumps (8):
consolidation/site-process5.4.2 → 6.1.0,drupal/openy_repeat3.3.0 → 4.1.0,drupal/protected_pages1.9.0 → 3.0.0,enshrined/svg-sanitize0.22.0 → 1.1.1,solarium/solarium6.4.1 → 7.0.0,symfony/dom-crawlerv7.4.12 → v8.1.10,symfony/stringv7.4.13 → v8.1.10,ycloudyusa/yusaopeny_activity_finder6.2.1 → 7.2.15 new and 0 removed Drupal extensions;
drush updb: 34 updates (rc4 build)16 PRs merged in yusaopeny between the tags 11.3.1.6 and 11.4.0.0 (50 commits as of rc5); 18 requirement changes in the distribution
composer.json
All Merged PRs/MRs
Every PR/MR merged into a commit between the two locked references of each of our packages (GitHub compare + commits/<sha>/pulls, GitLab compare + commits/<sha>/merge_requests).
GitHub — 61 PRs in 19 repositories
open-y-subprojects/common_scss (1 PR, 0 releases, dev-main@6c3bbed → dev-main@ecc3542)
| PR | Title | Merged |
|---|---|---|
| #4 | Declare Drupal core constraint ^10 // ^11 // ^12 | 2026-10-15 |
open-y-subprojects/openy_content_core (1 PR, 1 release, 3.3 → 3.4.0)
| PR | Title | Merged |
|---|---|---|
| #11 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
open-y-subprojects/openy_custom (4 PRs, 2 releases, 3.1.5 → 3.3.0)
| PR | Title | Merged |
|---|---|---|
| #102 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
| #101 | D12 compat: replace deprecated text_summary() with TextSummary service | 2026-10-08 |
| #100 | openy_migrate: fix MigrateSkipProcessException removed in Drupal core 12 | 2026-10-08 |
| #99 | feat(openy_system): add shared Vue 3 library (ITCR-1273 / ITCR-1301) | 2026-08-27 |
open-y-subprojects/openy_daxko_gxp_syncer (1 PR, 1 release, 1.4.1 → 1.5.0)
| PR | Title | Merged |
|---|---|---|
| #18 | Fix getDefaultOperations() missing CacheableMetadata param (core 12) | 2026-10-09 |
open-y-subprojects/openy_demo_content (1 PR, 1 release, 2.6.0 → 2.7.0)
| PR | Title | Merged |
|---|---|---|
| #33 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
open-y-subprojects/openy_features (4 PRs, 3 releases, 5.1.4 → 5.4.0)
| PR | Title | Merged |
|---|---|---|
| #128 | D12: pattern sweep leftovers (cookie, check_markup, EntityTypeManager, views.inc) | 2026-10-15 |
| #127 | D12: getOriginal() (CR 3295826) | 2026-10-08 |
| #125 | D12 compat: add ^12 and OOP hook / FileExists changes, with core floors | 2026-10-08 |
| #122 | fix(ITCR-1271): use core image formatter instead of blazy (D11.4 config schema) | 2026-08-07 |
open-y-subprojects/openy_focal_point (3 PRs, 1 release, 2.1.0 → 2.2.0)
| PR | Title | Merged |
|---|---|---|
| #11 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
| #10 | D12 compat: replace deprecated image_path_flush() with service call | 2026-10-08 |
| #9 | fix(ITCR-1347): Replace Request::get() in preview controller (removed in Symfony 8) | 2026-10-08 |
open-y-subprojects/openy_hours_formatter (2 PRs, 2 releases, 3.0.2 → 3.1.0)
| PR | Title | Merged |
|---|---|---|
| #13 | Parse only the leading time range in openy_hours tokens | 2026-10-07 |
| #12 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
open-y-subprojects/openy_map (3 PRs, 2 releases, 6.0.0-beta4 → 6.1.0)
| PR | Title | Merged |
|---|---|---|
| #100 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
| #99 | fix(ITCR-1344): Switch map elements to RenderElementBase (RenderElement removed in D12) | 2026-10-08 |
| #97 | Honor geolocation_google_maps.settings region/language config for the Maps API script | 2026-09-10 |
open-y-subprojects/openy_node_alert (2 PRs, 2 releases, 2.4.2 → 2.5.0)
| PR | Title | Merged |
|---|---|---|
| #174 | D12: core_version_requirement bump to add ^12, 1 file(s) | 2026-10-08 |
| #173 | fix(ITCP-730): do not load alert widget on backend routes | 2026-09-15 |
open-y-subprojects/ynorth_gxp_spots_proxy (1 PR, 1 release, 1.0.1 → 1.1.0)
| PR | Title | Merged |
|---|---|---|
| #3 | Drupal 12 readiness: core_version_requirement | 2026-10-09 |
YCloudYUSA/lb_claro (2 PRs, 2 releases, 3.0.2 → 3.1.1)
| PR | Title | Merged |
|---|---|---|
| #8 | composer.json: admit Drupal 12 in drupal/core constraint | 2026-10-15 |
| #7 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
YCloudYUSA/useless_machines (1 PR, 1 release, 2.1.0 → 2.2.0)
| PR | Title | Merged |
|---|---|---|
| #15 | Add stub modules for retired GroupEx Pro modules | 2026-11-02 |
YCloudYUSA/y_lb (4 PRs, 4 releases, 5.0.4 → 5.2.1)
| PR | Title | Merged |
|---|---|---|
| #317 | fix(ITCP-752): require drupal/lb_table ^1.1.1 for the tablesaw thead guard | 2026-10-28 |
| #315 | D12/Symfony 8: getSubscribedEvents() return type | 2026-10-08 |
| #312 | fix(ITCR-1271): use core image formatter instead of blazy (D11.4 config schema) | 2026-08-07 |
| #311 | fix/issue-310-incorrect-route-processing/Fix for the issue with incor… | 2026-06-23 |
YCloudYUSA/y_lb_demo_content (1 PR, 1 release, 5.1.0 → 5.2.0)
| PR | Title | Merged |
|---|---|---|
| #61 | D12/Symfony 8: getSubscribedEvents() return type | 2026-10-08 |
YCloudYUSA/y_pef_schedule (3 PRs, 1 release, 2.1.1 → 2.2.0)
| PR | Title | Merged |
|---|---|---|
| #25 | D12 compat: add ^12 to core_version_requirement | 2026-10-08 |
| #24 | fix(ITCR-1346): Replace Request::get() in schedule controller (removed in Symfony 8) | 2026-10-08 |
| #23 | Use official drupal/openy_repeat package instead of ynorth-projects | 2026-10-08 |
YCloudYUSA/yusaopeny (18 PRs, 6 releases, 11.3.1.5 → 11.4.0.0)
| PR | Title | Merged |
|---|---|---|
| #399 | chore: set distribution version 11.4.0.0-rc5 | 2026-11-04 |
| #398 | fix(ITCP-752): patch fontyourface 4.3.x so font stylesheets are attached again | 2026-11-04 |
| #395 | chore: set distribution version 11.4.0.0-rc4 | 2026-11-02 |
| #394 | chore(ITCP-752): require useless_machines ^2.2.0 | 2026-11-02 |
| #393 | Replace drupal/groupexpro with ycloudyusa/embedded_groupexpro_schedule | 2026-11-02 |
| #392 | chore: bump version to 11.4.0.3-dev in openy.info.yml | 2026-10-30 |
| #391 | chore: set distribution version 11.4.0.0-rc3 | 2026-10-30 |
| #390 | chore(ITCP-752): require yusaopeny_activity_finder ^7.2 | 2026-10-30 |
| #389 | feat(ITCP-592): bump openy_carnation minimum to ^4.2 | 2026-10-27 |
| #387 | fix(ITCR-1336): drop stale composer patches, fix empty rabbit_hole patch | 2026-10-08 |
| #386 | fix(ITCP-741): self-host jQuery Migrate, drop code.jquery.com CDN | 2026-09-18 |
| #384 | chore: bump openy_repeat, yusaopeny_activity_finder, openy_custom | 2026-09-03 |
| #383 | fix: bump protected_pages to ^3.0 (Drupal core 11.4+ compat) | 2026-09-03 |
| #377 | chore: post-release bump to 11.3.1.7-dev + docs | 2026-07-06 |
| #376 | chore: constrain drupal/core to <11.4 | 2026-07-06 |
| #374 | chore: remove deprecated CKEditor 4 library plugins | 2026-10-27 |
| #372 | feat: add Drupal 11.4 support | 2026-08-11 |
| #371 | chore: bump version to 11.3.1.6-dev | 2026-05-27 |
YCloudYUSA/yusaopeny_activity_finder (8 PRs, 4 releases, 6.2.1 → 7.2.1)
| PR | Title | Merged |
|---|---|---|
| #86 | fix: update 9006 enables the Solr submodule only when search_api_solr is enabled | 2026-10-29 |
| #85 | Category Tags, Filters on Top and location/fetch fixes for the AF4 app | 2026-10-29 |
| #84 | D12 compat: text_summary() fallback for Drupal < 11.4 | 2026-10-08 |
| #83 | D12 compat: require Drupal 11.4+ // 12 in core_version_requirement | 2026-10-08 |
| #82 | D12 compat: replace deprecated text_summary() with TextSummary service | 2026-10-08 |
| #81 | fix(ITCR-1345): Drop removed core cookie library dependencies | 2026-10-08 |
| #80 | docs(af): refine CHANGELOG to be more human-friendly | 2026-09-03 |
| #79 | AF4: Vue 2 to Vue 3 migration (ITCR-1273) | 2026-09-03 |
YCloudYUSA/yusaopeny_ymca360 (3 PRs, 3 releases, 2.1.2 → 2.4.0)
| PR | Title | Merged |
|---|---|---|
| #22 | D12 compat: add ^12 to core_version_requirement | 2026-10-08 |
| #21 | fix: widen y360id from int to string, sync no longer aborts | 2026-08-31 |
| #18 | Harden windowed pagination: page ceiling + no-progress guard | 2026-06-17 |
drupal.org — 65 MRs in 45 repositories
drupal/confi (3 MRs, 2 releases, 4.1.1 → 4.3.0)
| MR | Title | Merged |
|---|---|---|
| !17 | Use injected file_system service instead of \Drupal::service() | 2026-10-08 |
| !16 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
| !15 | fix(ITCR-1271): widen module_installer typehint to ModuleInstallerInterface (D11.4) | 2026-08-07 |
drupal/lb_accordion (3 MRs, 3 releases, 3.0.0 → 3.2.0)
| MR | Title | Merged |
|---|---|---|
| !31 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
| !30 | Fix: run text format filters (media_embed) on accordion item body | 2026-09-14 |
| !27 | Fix: Render field_block_item from block_content entity in accordion template | 2026-08-27 |
drupal/lb_branch_amenities_blocks (1 MR, 1 release, 3.0.0 → 3.1.0)
| MR | Title | Merged |
|---|---|---|
| !20 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/lb_branch_hours_blocks (1 MR, 1 release, 3.0.0 → 3.1.0)
| MR | Title | Merged |
|---|---|---|
| !37 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/lb_branch_social_links_blocks (1 MR, 1 release, 1.0.7 → 1.1.0)
| MR | Title | Merged |
|---|---|---|
| !12 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/lb_cards (2 MRs, 2 releases, 3.0.2 → 3.1.0)
| MR | Title | Merged |
|---|---|---|
| !59 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
| !58 | fix: prevent button gap in equal-height card rows | 2026-06-12 |
drupal/lb_carousel (1 MR, 1 release, 3.0.0 → 3.1.0)
| MR | Title | Merged |
|---|---|---|
| !34 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/lb_grid_cta (1 MR, 1 release, 4.0.0 → 4.1.0)
| MR | Title | Merged |
|---|---|---|
| !38 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/lb_hero (1 MR, 1 release, 2.0.3 → 2.1.0)
| MR | Title | Merged |
|---|---|---|
| !46 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/lb_modal (1 MR, 1 release, 2.0.0 → 2.1.0)
| MR | Title | Merged |
|---|---|---|
| !14 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/lb_partners_blocks (1 MR, 1 release, 2.0.0 → 2.1.0)
| MR | Title | Merged |
|---|---|---|
| !26 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/lb_ping_pong (1 MR, 1 release, 2.0.0 → 2.1.0)
| MR | Title | Merged |
|---|---|---|
| !35 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/lb_promo (1 MR, 1 release, 2.0.0 → 2.1.0)
| MR | Title | Merged |
|---|---|---|
| !22 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/lb_related_articles_blocks (1 MR, 1 release, 2.0.0 → 2.1.0)
| MR | Title | Merged |
|---|---|---|
| !21 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/lb_related_events_blocks (1 MR, 1 release, 2.0.0 → 2.1.0)
| MR | Title | Merged |
|---|---|---|
| !29 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/lb_simple_menu (1 MR, 1 release, 2.0.0 → 2.1.0)
| MR | Title | Merged |
|---|---|---|
| !16 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/lb_staff_members_blocks (1 MR, 1 release, 2.0.0 → 2.1.0)
| MR | Title | Merged |
|---|---|---|
| !30 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/lb_statistics (1 MR, 1 release, 3.0.0 → 3.1.0)
| MR | Title | Merged |
|---|---|---|
| !21 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/lb_table (2 MRs, 2 releases, 1.1.0 → 1.2.0)
| MR | Title | Merged |
|---|---|---|
| !17 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
| !16 | Guard tablesaw enhancement: only add markup to tables with header cells | 2026-09-14 |
drupal/lb_testimonial_blocks (1 MR, 1 release, 2.1.0 → 2.2.0)
| MR | Title | Merged |
|---|---|---|
| !28 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/lb_webform (2 MRs, 2 releases, 2.0.0 → 2.1.1)
| MR | Title | Merged |
|---|---|---|
| !14 | Add webform_ui as a dependency | 2026-11-03 |
| !13 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/openy_branch_selector (1 MR, 1 release, 1.1.2 → 1.2.0)
| MR | Title | Merged |
|---|---|---|
| !4 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/openy_carnation (2 MRs, 2 releases, 4.0.0-beta7 → 4.2.0)
| MR | Title | Merged |
|---|---|---|
| !127 | D12 compat: add missing description_classes on before branch (CR#3482370) | 2026-10-08 |
| !125 | ITCR-1271: keep field media images fluid after blazy->image swap | 2026-08-07 |
drupal/openy_daxko2 (1 MR, 1 release, 1.0.7 → 1.1.0)
| MR | Title | Merged |
|---|---|---|
| !9 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/openy_er (1 MR, 1 release, 1.1.1 → 1.2.0)
| MR | Title | Merged |
|---|---|---|
| !5 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/openy_gtranslate (1 MR, 1 release, 2.0.0 → 2.1.0)
| MR | Title | Merged |
|---|---|---|
| !7 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/openy_mappings (1 MR, 1 release, 1.1.1 → 1.2.0)
| MR | Title | Merged |
|---|---|---|
| !7 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/openy_node_session (3 MRs, 2 releases, 2.2.0 → 2.4.0)
| MR | Title | Merged |
|---|---|---|
| !5 | Add the Category Tags vocabulary and session tag field | 2026-10-29 |
| !4 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
| !2 | Drupal 11 upgrade: staged changes | 2025-05-29 |
drupal/openy_repeat (3 MRs, 3 releases, 3.3.0 → 4.1.0)
| MR | Title | Merged |
|---|---|---|
| !16 | D12: fix RangeAsteriksValidator::validate() signature for Symfony 8 | 2026-10-08 |
| !15 | ITCR-1271: allow openy_carnation ^4.1 (D11.4 field media image fix) | 2026-08-07 |
| !14 | Schedules Vue 2 to Vue 3 migration (ITCR-1301) | 2026-09-03 |
drupal/openy_socrates (2 MRs, 2 releases, 1.1.0 → 1.2.1)
| MR | Title | Merged |
|---|---|---|
| !4 | composer.json: admit Drupal 12 in drupal/core constraint | 2026-10-15 |
| !3 | Add Symfony 8 return type to OpenySocratesCompilerPass::process() | 2026-10-08 |
drupal/upgrade_tool (2 MRs, 2 releases, 4.1.2 → 4.3.0)
| MR | Title | Merged |
|---|---|---|
| !15 | D12: Attribute-based plugin discovery + config pre-existing names fix | 2026-10-08 |
| !14 | fix(ITCR-1271): widen module_installer typehint to ModuleInstallerInterface (D11.4) | 2026-08-07 |
drupal/ws_code_block (1 MR, 1 release, 1.1.0 → 1.2.0)
| MR | Title | Merged |
|---|---|---|
| !3 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/ws_colorway_canada (1 MR, 1 release, 2.0.1 → 2.1.0)
| MR | Title | Merged |
|---|---|---|
| !23 | Add ^12 to core_version_requirement (Drupal 12 readiness) | 2026-10-09 |
drupal/ws_event (1 MR, 1 release, 2.0.1 → 2.1.0)
| MR | Title | Merged |
|---|---|---|
| !97 | Allow drush/drush ^14 for Drupal 12 compatibility | 2026-10-08 |
drupal/ws_lb_tabs (1 MR, 1 release, 3.0.0 → 3.1.0)
| MR | Title | Merged |
|---|---|---|
| !17 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/ws_promotion (2 MRs, 1 release, 2.0.0 → 2.1.0)
| MR | Title | Merged |
|---|---|---|
| !14 | Add ^12 to core_version_requirement (Drupal 12 readiness) | 2026-10-09 |
| !13 | D12/Symfony 8: add missing return type to getSubscribedEvents() | 2026-10-08 |
drupal/ws_small_y (6 MRs, 4 releases, 2.0.4 → 2.2.0)
| MR | Title | Merged |
|---|---|---|
| !86 | Add alt text to existing Small Y demo media images | 2026-10-30 |
| !85 | Add alt text to Small Y demo media images | 2026-10-30 |
| !84 | Add ^12 to core_version_requirement (Drupal 12 readiness) | 2026-10-09 |
| !83 | D12/Symfony 8: add missing return type to getSubscribedEvents() | 2026-10-08 |
| !82 | Fix: alert description hidden on all header/footer alerts | 2026-08-04 |
| !81 | fix: replace min-height with aspect-ratio on card-img-wrapper (Safari fix) | 2026-07-17 |
drupal/y_branch (1 MR, 1 release, 1.1.1 → 1.2.0)
| MR | Title | Merged |
|---|---|---|
| !31 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/y_branch_menu (1 MR, 1 release, 1.1.1 → 1.2.0)
| MR | Title | Merged |
|---|---|---|
| !19 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/y_camp (1 MR, 1 release, 3.0.0 → 3.1.0)
| MR | Title | Merged |
|---|---|---|
| !54 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/y_donate (1 MR, 1 release, 3.0.1 → 3.1.0)
| MR | Title | Merged |
|---|---|---|
| !22 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/y_facility (1 MR, 1 release, 3.0.0 → 3.1.0)
| MR | Title | Merged |
|---|---|---|
| !12 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/y_lb_article (1 MR, 1 release, 2.0.1 → 2.1.0)
| MR | Title | Merged |
|---|---|---|
| !63 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/y_program (1 MR, 1 release, 2.0.0 → 2.1.0)
| MR | Title | Merged |
|---|---|---|
| !11 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
drupal/y_program_subcategory (1 MR, 1 release, 2.0.0 → 2.1.0)
| MR | Title | Merged |
|---|---|---|
| !8 | Add Drupal 12 (^12) to core_version_requirement | 2026-10-08 |
Ranges are the locked references, so yusaopeny starts at 11.3.1.5 and includes the 11.3.1.6 PRs (#371, #376).
All Releases
Releases between the old and the new locked version (date = release date).
Layout Builder Blocks — 32 releases
drupal/lb_accordion: 3.1.0 2026-08-27, 3.1.1 2026-09-14, 3.2.0 2026-10-08drupal/lb_branch_amenities_blocks: 3.1.0 2026-10-08drupal/lb_branch_hours_blocks: 3.1.0 2026-10-08drupal/lb_branch_social_links_blocks: 1.1.0 2026-10-09drupal/lb_cards: 3.0.3 2026-06-12, 3.1.0 2026-10-08drupal/lb_carousel: 3.1.0 2026-10-08drupal/lb_grid_cta: 4.1.0 2026-10-08drupal/lb_hero: 2.1.0 2026-10-08drupal/lb_modal: 2.1.0 2026-10-08drupal/lb_partners_blocks: 2.1.0 2026-10-08drupal/lb_ping_pong: 2.1.0 2026-10-08drupal/lb_promo: 2.1.0 2026-10-08drupal/lb_related_articles_blocks: 2.1.0 2026-10-08drupal/lb_related_events_blocks: 2.1.0 2026-10-08drupal/lb_simple_menu: 2.1.0 2026-10-08drupal/lb_staff_members_blocks: 2.1.0 2026-10-08drupal/lb_statistics: 3.1.0 2026-10-08drupal/lb_table: 1.1.1 2026-09-14, 1.2.0 2026-10-08drupal/lb_testimonial_blocks: 2.2.0 2026-10-08drupal/lb_webform: 2.1.0 2026-10-08, 2.1.1 2026-11-03ycloudyusa/lb_claro: 3.1.0 2026-10-08, 3.1.1 2026-10-15ycloudyusa/y_lb: 5.0.5 2026-06-23, 5.1.0 2026-08-07, 5.2.0 2026-10-08, 5.2.1 2026-10-28ycloudyusa/y_lb_demo_content: 5.2.0 2026-10-08
Website Services Themes and Small Y — 11 releases
drupal/openy_carnation: 4.1.0 2026-08-07, 4.2.0 2026-10-08drupal/ws_code_block: 1.2.0 2026-10-08drupal/ws_colorway_canada: 2.1.0 2026-10-09drupal/ws_event: 2.1.0 2026-10-08drupal/ws_lb_tabs: 3.1.0 2026-10-08drupal/ws_promotion: 2.1.0 2026-10-09drupal/ws_small_y: 2.0.5 2026-07-17, 2.0.6 2026-08-04, 2.1.0 2026-10-09, 2.2.0 2026-10-30
Content Types — 8 releases
YUSAOpenY Modules — 43 releases
drupal/openy_branch_selector: 1.2.0 2026-10-08drupal/openy_daxko2: 1.1.0 2026-10-08drupal/openy_er: 1.2.0 2026-10-08drupal/openy_gtranslate: 2.1.0 2026-10-08drupal/openy_mappings: 1.2.0 2026-10-08drupal/openy_node_session: 2.3.0 2026-10-09, 2.4.0 2026-10-29drupal/openy_repeat: 3.4.0 2026-08-07, 4.0.0 2026-09-03, 4.1.0 2026-10-08drupal/openy_socrates: 1.2.0 2026-10-08, 1.2.1 2026-10-15open-y-subprojects/openy_content_core: 3.4.0 2026-10-08open-y-subprojects/openy_custom: 3.2.0 2026-08-27, 3.3.0 2026-10-08open-y-subprojects/openy_daxko_gxp_syncer: 1.5.0 2026-10-09open-y-subprojects/openy_demo_content: 2.7.0 2026-10-08open-y-subprojects/openy_features: 5.2.0 2026-08-07, 5.3.0 2026-10-08, 5.4.0 2026-10-15open-y-subprojects/openy_focal_point: 2.2.0 2026-10-08open-y-subprojects/openy_hours_formatter: 3.0.3 2026-10-07, 3.1.0 2026-10-08open-y-subprojects/openy_map: 6.0.1 2026-09-10, 6.1.0 2026-10-08open-y-subprojects/openy_node_alert: 2.4.3 2026-09-15, 2.5.0 2026-10-08open-y-subprojects/ynorth_gxp_spots_proxy: 1.1.0 2026-10-09ycloudyusa/useless_machines: 2.2.0 2026-11-02ycloudyusa/y_pef_schedule: 2.2.0 2026-10-08ycloudyusa/yusaopeny: 11.3.1.6 2026-07-06, 11.4.0.0-rc1 2026-08-11, 11.4.0.0-rc2 2026-09-03, 11.4.0.0-rc3 2026-10-30, 11.4.0.0-rc4 2026-11-02, 11.4.0.0-rc5 2026-11-04ycloudyusa/yusaopeny_activity_finder: 7.0.0 2026-09-03, 7.1.0 2026-10-08, 7.2.0 2026-10-29, 7.2.1 2026-10-29ycloudyusa/yusaopeny_ymca360: 2.2.0 2026-06-17, 2.3.0 2026-08-31, 2.4.0 2026-10-08
Drupal Core, Drush, Symfony — 230 releases
composer/ca-bundle: 1.5.13 2026-07-18, 1.5.14 2026-08-21, 1.6.0 2026-10-20, 1.6.1 2026-10-29composer/semver: 3.5.0 2026-09-24, 3.5.1 2026-10-05, 3.5.2 2026-10-22, 3.6.0 2026-10-29drupal/core-composer-scaffold: 11.3.14 (security) 2026-07-15, 11.3.16 2026-07-23, 11.3.17 (security) 2026-09-16, 11.3.18 2026-09-28, 11.3.19 (security) 2026-10-14, 11.3.20 2026-10-21, 11.4.0-beta1 2026-06-03, 11.4.0-rc1 2026-06-11, 11.4.0-rc2 (security) 2026-06-17, 11.4.0 2026-07-01, 11.4.1 2026-07-03, 11.4.2 2026-07-10, 11.4.3 2026-07-14, 11.4.4 (security) 2026-07-15, 11.4.5 2026-08-06, 11.4.6 2026-09-03, 11.4.7 (security) 2026-09-16, 11.4.8 2026-09-26, 11.4.9 2026-10-09, 11.4.10 (security) 2026-10-14, 11.4.11 2026-10-21drupal/core: 11.3.14 (security) 2026-07-15, 11.3.16 2026-07-23, 11.3.17 (security) 2026-09-16, 11.3.18 2026-09-28, 11.3.19 (security) 2026-10-14, 11.3.20 2026-10-21, 11.4.0-beta1 2026-06-03, 11.4.0-rc1 2026-06-11, 11.4.0-rc2 (security) 2026-06-17, 11.4.0 2026-07-01, 11.4.1 2026-07-03, 11.4.2 2026-07-10, 11.4.3 2026-07-14, 11.4.4 (security) 2026-07-15, 11.4.5 2026-08-06, 11.4.6 2026-09-03, 11.4.7 (security) 2026-09-16, 11.4.8 2026-09-26, 11.4.9 2026-10-09, 11.4.10 (security) 2026-10-14, 11.4.11 2026-10-21drush/drush: 13.7.4 2026-06-15, 13.7.5 2026-07-07, 13.7.6 2026-07-08, 13.7.7 2026-09-04, 13.8.0 2026-09-08symfony/console: v7.4.14 2026-06-16, v7.4.15 2026-07-27, v7.4.16 2026-07-31, v7.4.17 2026-08-21, v7.4.18 2026-08-25, v7.4.19 2026-09-13, v7.4.20 2026-09-18, v7.4.21 2026-10-12, v7.4.22 2026-10-28symfony/dependency-injection: v7.4.14 2026-06-24, v7.4.15 2026-07-22, v7.4.16 2026-08-06, v7.4.17 2026-08-21, v7.4.20 2026-09-29, v7.4.21 2026-10-13, v7.4.22 2026-10-25symfony/deprecation-contracts: v3.7.1 2026-06-05symfony/dom-crawler: v7.4.17 2026-08-21, v7.4.22 2026-10-25, v8.0.0-BETA1 2025-10-09, v8.0.0-BETA2 2025-11-01, v8.0.0-RC1 2025-11-01, v8.0.0 2025-11-01, v8.0.1 2025-12-06, v8.0.4 2026-01-05, v8.0.6 2026-02-17, v8.0.8 2026-03-30, v8.0.12 2026-05-20, v8.1.0-BETA1 2026-05-05, v8.1.0-BETA3 2026-05-20, v8.1.0 2026-05-29, v8.1.1 2026-06-05, v8.1.5 2026-08-21, v8.1.10 2026-10-25symfony/error-handler: v8.1.2 2026-07-22, v8.1.5 2026-08-21, v8.1.8 2026-09-22, v8.1.10 2026-10-25symfony/event-dispatcher-contracts: v3.7.1 2026-06-05symfony/event-dispatcher: v7.4.14 2026-06-06, v7.4.15 2026-07-21, v7.4.17 2026-08-21symfony/filesystem: v7.4.15 2026-07-22, v7.4.17 2026-08-21, v7.4.18 2026-08-23, v7.4.21 2026-10-06symfony/finder: v7.4.14 2026-06-27, v7.4.17 2026-08-21, v7.4.19 2026-09-10, v7.4.20 2026-09-26, v7.4.22 2026-10-19symfony/http-foundation: v7.4.14 2026-06-11, v7.4.15 2026-07-29, v7.4.16 2026-08-07, v7.4.17 2026-08-20, v7.4.18 2026-08-30, v7.4.19 2026-09-14, v7.4.20 2026-09-24, v7.4.21 2026-10-08, v7.4.22 2026-10-27symfony/http-kernel: v7.4.14 2026-06-27, v7.4.15 2026-07-29, v7.4.16 2026-08-07, v7.4.17 2026-08-22, v7.4.18 2026-08-30, v7.4.19 2026-09-15, v7.4.20 2026-09-29, v7.4.21 2026-10-14, v7.4.22 2026-10-28symfony/mailer: v7.4.14 2026-06-13, v7.4.15 2026-07-28, v7.4.17 2026-08-21, v7.4.19 2026-09-15, v7.4.22 2026-10-23symfony/mime: v7.4.15 2026-07-29, v7.4.16 2026-08-07, v7.4.17 2026-08-22, v7.4.18 2026-08-22, v7.4.19 2026-09-04, v7.4.22 2026-10-28symfony/polyfill-deepclone: v1.42.0 2026-08-07, v1.43.0 2026-09-30, v1.43.1 2026-10-06, v1.43.2 2026-10-14symfony/polyfill-iconv: v1.43.0 2026-09-29symfony/polyfill-intl-grapheme: v1.41.0 2026-07-28, v1.43.0 2026-09-25, v1.43.3 2026-10-15symfony/polyfill-intl-idn: v1.42.0 2026-08-24, v1.43.0 2026-09-23symfony/polyfill-intl-normalizer: v1.42.0 2026-08-07, v1.43.0 2026-09-23symfony/polyfill-mbstring: v1.43.0 2026-09-24, v1.43.3 2026-10-28symfony/polyfill-php80: v1.43.0 2026-09-25symfony/polyfill-php83: v1.41.0 2026-07-01, v1.43.0 2026-09-25symfony/polyfill-php84: v1.43.0 2026-09-23symfony/polyfill-php85: v1.41.0 2026-07-01, v1.43.0 2026-09-25symfony/process: v7.4.17 2026-08-21, v7.4.18 2026-08-21, v7.4.19 2026-09-02, v7.4.21 2026-10-08, v7.4.22 2026-10-25symfony/psr-http-message-bridge: v7.4.21 2026-10-07symfony/routing: v7.4.15 2026-07-21, v7.4.17 2026-08-17, v7.4.18 2026-08-17, v7.4.20 2026-09-28, v7.4.21 2026-10-11, v7.4.22 2026-10-26symfony/serializer: v7.4.14 2026-06-27, v7.4.15 2026-07-29, v7.4.16 2026-08-06, v7.4.17 2026-08-22, v7.4.18 2026-08-30, v7.4.19 2026-09-08, v7.4.20 2026-09-28, v7.4.21 2026-10-12, v7.4.22 2026-10-25symfony/service-contracts: v3.7.1 2026-06-16, v3.7.3 2026-07-27symfony/string: v7.4.15 2026-07-28, v7.4.19 2026-09-11, v7.4.21 2026-10-03, v7.4.22 2026-10-23, v8.0.0-BETA1 2025-09-11, v8.0.0-RC1 2025-09-11, v8.0.0 2025-09-11, v8.0.1 2025-12-01, v8.0.4 2026-01-12, v8.0.6 2026-02-09, v8.0.8 2026-03-30, v8.0.11 2026-05-13, v8.0.13 2026-05-23, v8.0.15 2026-07-28, v8.1.0-BETA1 2026-05-05, v8.1.0-BETA2 2026-05-13, v8.1.0-RC1 2026-05-23, v8.1.0 2026-05-29, v8.1.2 2026-07-28, v8.1.7 2026-09-11, v8.1.9 2026-10-03, v8.1.10 2026-10-23symfony/translation-contracts: v3.7.1 2026-06-05symfony/validator: v7.4.14 2026-06-27, v7.4.15 2026-07-28, v7.4.16 2026-08-06, v7.4.17 2026-08-22, v7.4.18 2026-08-30, v7.4.19 2026-09-09, v7.4.20 2026-09-29, v7.4.21 2026-10-13, v7.4.22 2026-10-27symfony/var-dumper: v7.4.14 2026-06-08, v7.4.15 2026-07-21, v7.4.17 2026-08-21, v7.4.18 2026-08-30, v7.4.21 2026-10-13, v7.4.22 2026-10-25symfony/var-exporter: v8.1.1 2026-06-27, v8.1.3 2026-07-29, v8.1.4 2026-07-30, v8.1.5 2026-08-13, v8.1.6 2026-08-29, v8.1.9 2026-10-07, v8.1.10 2026-10-22symfony/yaml: v7.4.14 2026-06-08, v7.4.15 2026-07-21, v7.4.17 2026-08-21, v7.4.18 2026-08-30, v7.4.20 2026-09-26, v7.4.21 2026-10-12, v7.4.22 2026-10-18
Contrib Modules — 129 releases
drupal/activenet: 1.1.0 2026-10-08drupal/addtocal_augment: 1.2.6 2026-06-25drupal/advanced_help_block: 1.1.0 2026-10-08drupal/better_exposed_filters: 7.1.3 2026-07-25, 7.2.0 2026-10-09drupal/blazy: 3.0.18 (security) 2026-08-26, 3.0.19 2026-08-26drupal/captcha: 2.0.11 (security) 2026-10-28, 2.0.12 2026-11-03drupal/ckeditor5_plugin_pack: 1.5.3 2026-06-03, 1.5.4 2026-07-29, 1.5.5 2026-09-16, 1.5.6 2026-10-14drupal/ckeditor5_premium_features: 1.8.2 2026-06-03, 1.8.3 2026-07-29, 1.8.4 2026-09-16, 1.8.5 2026-09-30, 1.8.6 2026-10-14drupal/colorapi: 2.2.0 2026-10-08drupal/confi: 4.2.0 2026-08-07, 4.3.0 2026-10-08drupal/css_editor: 2.1.0 2026-10-09drupal/ctools: 4.1.1 2026-07-24drupal/custom_formatters: 4.1.0-beta3 2026-06-07, 4.1.0 2026-07-31, 4.2.0 2026-10-08, 4.2.1 (security) 2026-10-20drupal/daterange_compact: 2.1.2 2026-07-25drupal/daxko: 1.1.0 2026-10-09drupal/diff: 2.0.1 (security) 2026-08-11, 2.1.0 2026-06-10, 2.1.1 (security) 2026-08-11drupal/draggableviews: 2.1.5 2026-10-09drupal/easy_breadcrumb: 2.0.10 2026-08-28, 2.0.11 (security) 2026-10-06drupal/entity: 8.x-1.7 2026-08-14, 8.x-1.8 (security) 2026-08-26drupal/entity_browser: 8.x-2.16 (security) 2026-08-05, 8.x-2.17 2026-08-11drupal/file_delete: 3.0.3 2026-06-17drupal/focal_point: 2.1.3 2026-09-23drupal/fontyourface: 4.3.0 2026-10-09, 4.3.1 2026-10-15drupal/geolocation: 8.x-3.15 (security) 2026-06-21drupal/hal: 2.0.5 2026-06-29drupal/jquery_ui_touch_punch: 1.1.2 2026-07-31drupal/layout_builder_restrictions: 3.0.5 2026-07-23, 3.0.6 2026-08-17drupal/layout_builder_save_and_edit: 1.2.0 2026-10-09drupal/libraries: 4.2.0 2026-10-08, 4.2.1 2026-10-08drupal/link_attributes: 2.1.3 2026-06-20drupal/media_library_form_element: 2.1.5 2026-08-07drupal/menu_item_extras: 3.1.1 2026-06-05, 3.1.2 2026-08-02, 3.1.3 2026-09-28, 3.2.0 2026-10-08drupal/metatag: 2.2.1 2026-10-24, 2.2.2 2026-10-27, 2.2.3 2026-10-27, 2.2.4 2026-10-29, 2.2.5 2026-10-31drupal/migrate_plus: 6.0.11 2026-11-02drupal/migrate_tools: 6.1.5 2026-11-02drupal/paragraphs: 8.x-1.21 (security) 2026-06-24, 8.x-1.22 2026-08-02, 8.x-1.23 2026-08-05drupal/personify: 1.1.0 2026-10-09drupal/program_search: 2.1.0 2026-10-08, 2.1.1 2026-10-15drupal/protected_pages: 8.x-2.0 2026-07-17, 3.0.0 2026-07-17drupal/rabbit_hole: 8.x-1.3 (security) 2026-10-21drupal/recaptcha: 8.x-3.5 2026-08-10drupal/search_api: 8.x-1.41 2026-06-08, 8.x-1.42 2026-10-11, 8.x-1.43 2026-10-28drupal/search_api_solr: 4.3.11 2026-07-17, 4.3.12 2026-07-18, 4.3.13 2026-07-18, 4.3.14 2026-08-11, 4.4.0 2026-07-28drupal/seven: 2.0.0-beta8 2026-07-23drupal/simple_menu_icons: 3.2.0 2026-10-08drupal/slick: 3.0.8 2026-08-26drupal/smart_date: 4.2.6 2026-06-17, 4.2.7 2026-06-19, 4.2.8 2026-06-19, 4.3.0-beta1 2026-06-30, 4.3.0-rc1 2026-07-03, 4.3.0 2026-07-12drupal/social_feed_fetcher: 3.2.0 2026-10-08, 3.2.1 2026-10-15drupal/stage_file_proxy: 3.1.7 (security) 2026-10-28drupal/svg_image: 3.2.3 2026-06-20, 3.2.4 2026-07-02, 3.2.5 2026-10-09drupal/token: 8.x-1.18 2026-10-30drupal/trash: 3.0.28 2026-06-05, 3.0.29 2026-07-02, 3.0.30 2026-07-16, 3.0.31 2026-08-03, 3.0.32 2026-08-06, 3.0.33 2026-08-28, 3.0.34 2026-09-18, 3.0.35 2026-10-13, 3.0.36 2026-10-24, 3.1.0-beta1 2026-07-16, 3.1.0-beta2 2026-07-28, 3.1.0-beta3 2026-08-06, 3.1.0-rc1 2026-08-28, 3.1.0 2026-09-18, 3.1.1 2026-10-13, 3.1.2 2026-10-24drupal/tzfield: 8.x-1.14 2026-08-14drupal/upgrade_tool: 4.2.0 2026-08-07, 4.3.0 2026-10-08drupal/vendor_stream_wrapper: 2.1.0 2026-10-09drupal/verf: 2.2.0 2026-10-08drupal/video: 3.2.0 2026-10-08drupal/video_embed_field: 3.1.1 2026-09-30drupal/views_block_filter_block: 2.2.0 2026-10-09drupal/views_field_formatter: 4.2.0 2026-10-09drupal/webform: 6.3.0-rc1 2026-06-04, 6.3.0-rc2 2026-06-22, 6.3.0 2026-07-07, 6.3.1 (security) 2026-09-23drupal/ymca_sync: 11.1.1 2026-10-09, 11.1.2 2026-11-02
Libraries — 88 releases
commerceguys/addressing: v2.3.0 2026-08-23, v2.3.1 2026-08-23, v2.3.2 2026-10-09consolidation/site-process: 6.0.0 2025-11-14, 6.0.1 2026-03-28, 6.1.0 2026-06-07doctrine/lexer: 3.0.2 2026-06-14, 3.0.3 2026-10-01enshrined/svg-sanitize: 1.0.0 2026-09-01, 1.1.0 2026-10-19, 1.1.1 2026-10-20ezyang/htmlpurifier: v4.19.1 2026-09-15google/recaptcha: 1.5.1 2026-09-22, 1.5.2 2026-09-22guzzlehttp/guzzle: 7.12.2 2026-06-23, 7.12.3 2026-06-23, 7.13.0 2026-06-29, 7.13.1 2026-06-29, 7.13.2 2026-07-05, 7.13.3 2026-07-08, 7.14.0 2026-07-08, 7.14.1 2026-07-13, 7.14.2 2026-07-14, 7.15.0 2026-07-17, 7.15.1 2026-07-18, 7.15.2 2026-07-26, 7.15.3 2026-08-05, 7.15.4 2026-08-24, 7.15.5 2026-08-24, 7.15.6 2026-10-18, 7.16.0 2026-10-18, 7.16.1 2026-10-25guzzlehttp/promises: 2.5.1 2026-07-08, 2.5.2 2026-08-05, 2.5.3 2026-08-24, 2.6.0 2026-10-18guzzlehttp/psr7: 2.12.2 2026-06-23, 2.12.3 2026-06-23, 2.12.4 2026-07-08, 2.12.5 2026-07-13, 2.13.0 2026-07-16, 2.13.1 2026-08-24, 2.13.2 2026-10-17laravel/prompts: v0.3.19 2026-06-23, v0.3.20 2026-06-24, v0.3.21 2026-06-26, v0.3.22 2026-08-04, v0.3.23 2026-08-11, v0.3.24 2026-08-20, v0.3.25 2026-10-06, v0.3.26 2026-10-09league/csv: 9.29.0 2026-10-28league/oauth2-client: 2.9.1 2026-09-16masterminds/html5: 2.10.1 2026-06-23, 2.11.0 2026-08-18, 2.12.0 2026-10-25mck89/peast: v1.17.7 2026-07-21, v1.18.0 2026-08-19, v1.18.1 2026-09-15myclabs/deep-copy: 1.14.0 2026-08-11nikic/php-parser: v5.8.0 2026-07-04, v5.9.0 2026-09-13pear/archive_tar: 1.6.1 2026-08-19php-tuf/composer-stager: v2.1.1 2026-07-07phpstan/phpdoc-parser: 2.3.3 2026-07-08, 2.3.4 2026-08-30, 2.3.5 2026-08-31, 2.3.6 2026-09-27, 2.3.7 2026-10-26, 2.3.8 2026-10-26, 2.3.9 2026-10-27, 2.3.10 2026-10-28, 2.3.11 2026-10-28, 2.3.12 2026-10-28, 2.4.0 2026-10-28, 2.4.1 2026-10-30psy/psysh: v0.12.24 2026-06-29sebastian/diff: 7.0.1 2026-08-25setasign/fpdi: v2.6.8 2026-06-11, v2.6.9 2026-10-13solarium/solarium: 6.4.2 2026-07-17, 7.0.0-alpha.1 2025-10-18, 7.0.0-alpha.2 2026-01-06, 7.0.0 2026-04-27squizlabs/php_codesniffer: 3.13.6 2026-08-06twig/twig: v3.28.0 2026-07-03, v3.29.0 2026-09-18, v3.30.0 2026-09-25
No release data: drupal/ctools_views (metapackage: releases of drupal/ctools); drupal/link_attributes_menu_link_content (metapackage: releases of drupal/link_attributes)