Tessera
Folgen

Druid

@druid.fi

We are the uncompromising and uncomplicated software house. We design and implement high-quality digital solutions with passion and technological expertise. Open source, open attitude. https://druid.fi/en/ #Drupal #Mautic #Symfony

177 Posts183 Follower177 Folgt
The Drop Times@thedroptimes.bsky.social · 2mo ago

The Drupal AI Initiative has launched The AI Byte, a planned monthly newsletter. Its first issue curates Drupal AI 1.4.0, summit recordings, initiative workstreams, and upcoming learning sessions. https://bit.ly/4vLXBe6 #Drupal #DrupalAI #OpenSource #Newsletter

Drupal AI Initiative Launches The AI Byte as Monthly Newsletter

Drupal AI activity now spans releases, events, workstreams, and training sessions. The new briefing brings those updates into one recurring publication.

bit.ly

Kévin Dunglas@dunglas.dev · 2mo ago

FrankenPHP 1.12.5 is a security release. Upgrade if you run the official Docker images or the session extension as a shared module. Fixed: the default Docker welcome page ran phpinfo() (env vars, php.ini, system paths, all exposed). Now a static page with nothing to leak.

Bild
Druid@druid.fi · 3mo ago

Drupal 11.4.0 was released - Biggest performance improvement of the decade 🚀 - More with #PHP attributes - Utilize symfony/runtime and open way to use FrankenPHP - Gin administrative theme has been added to Drupal core - Improvements for faster security updates - CLI www.drupal.org/blog/drupal-...

Bild
Antoine Bluchet @soyuka@soyuka.me · 4mo ago

🔒 API Platform CVE-2026-49858: JSON:API & HAL normalizers cached components across users on long-running runtimes (FrankenPHP, RoadRunner, Swoole). Patched in 4.1.29 / 4.2.25 / 4.3.8 — upgrade now. github.com/api-platform...

Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate

### Impact `#[ApiProperty(security: ...)]` is evaluated per request to decide whether a property is exposed. The `componentsCache` arrays in `ApiPlatform\JsonApi\Serializer\ItemNormalizer` and `Ap...

github.com

Kévin Dunglas@dunglas.dev · 4mo ago

FrankenPHP 1.12.4 is out, a security hardening release. Underscore header spoofing is now blocked at the server layer (Caddy 2.11.4), bundled Mercure 0.24.2 security fixes land, plus worker-mode crash and race fixes. Every user should upgrade. github.com/php/frankenp...

Release v1.12.4 · php/frankenphp

FrankenPHP 1.12.4 is a hardening and stability release. It pulls in upstream security fixes from Caddy 2.11.4 and Mercure 0.24.2, closes a class of HTTP header spoofing, and fixes several crashes a...

github.com

@mautic.org · 4mo ago

🚀 Mautic 7.2.0 RC Lynx Edition is out. RC for testing only. Top 3: transactional emails ignoring DNC, better bot filtering, global defaults preference center and UTM. Release note: github.com/mautic/mauti... Feedback is welcome through GitHub or Slack channel (#mautic-7). #MauticUpdate

Blue graphic with the words 'Release Candidate' in white, featuring the Mautic logo and version number 7.2.0-RC in the corner.
@nicolasgrekas.bsky.social · 4mo ago

Be ready to update Twig and Symfony TODAY. Security issues are all the rage in the era of advanced LLMs! I’ve been deep in that tunnel for the past 10 days, finally seeing the light at the end 🥵

The Drop Times@thedroptimes.bsky.social · 5mo ago

Phil Norton has published a Drupal 11 tutorial demonstrating HTMX-based node view mode previews. The example combines entity rendering, HTMX requests, and partial page updates without relying on traditional AJAX callbacks. https://bit.ly/4uJa8in #Drupal #Drupal11 #HTMX

Phil Norton Demonstrates HTMX-Based Node View Mode Previews in Drupal 11

Dynamic node rendering and HTMX-driven form interactions are central themes in a recent Drupal 11 tutorial from Phil Norton exploring node display mode previews. The article demonstrates how Drupal forms, HTMX requests, and entity view builders can b...

bit.ly

Kévin Dunglas@dunglas.dev · 7mo ago

FrankenPHP v1.11.3 is now available! 🧟💜 This release focuses on stability and keeping you on the bleeding edge. We’ve upgraded the static binaries to PHP 8.5 and the internal core to Caddy 2.11. github.com/php/frankenp...

Release v1.11.3 · php/frankenphp

This release restores application stability by reverting the unreliable worker mode INI reset introduced in version 1.11.2, upgrades Caddy to 2.11, and bumps the PHP version included in static bina...

github.com