Composer requirements

Last updated on
14 January 2026

Installation and updates of Drupal sites should be performed using the Composer dependency manager.

Drupal 10

Drupal 10 requires Composer 2.3.6 or higher, since this will be the requirement for using Automatic Updates. Composer can be updated by running composer self-update.

Drupal 11

Drupal 11 requires Composer 2.7.0 or higher; this change was made for the Composer security fix released in February 2024.

Drupal 12

Drupal 12 recommends the latest secure release of Composer, 2.9.3.

Older versions of Composer may continue to install or update Drupal successfully but bug reports will only be accepted for supported versions.

Help improve this page

Page status: No known problems

You can: