Composer requirements
Last updated on
14 January 2026
Installation and updates of Drupal sites should be performed using the Composer dependency manager.
Drupal 10
Drupal 10 requires Composer 2.3.6 or higher, since this will be the requirement for using Automatic Updates. Composer can be updated by running composer self-update.
Drupal 11
Drupal 11 requires Composer 2.7.0 or higher; this change was made for the Composer security fix released in February 2024.
Drupal 12
Drupal 12 recommends the latest secure release of Composer, 2.9.3.
Older versions of Composer may continue to install or update Drupal successfully but bug reports will only be accepted for supported versions.
Help improve this page
Page status: No known problems
You can:
You can:
- Log in, click Edit, and edit this page
- Log in, click Discuss, update the Page status value, and suggest an improvement
- Log in and create a Documentation issue with your suggestion