drupal 10.5.2

This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.

Drupal 10.5.x will receive security support until June 2026. Drupal 10.4.x will continue to receive security support until December 2025.

Drupal 10.3.x security support has ended. Sites on any Drupal version prior to 10.4.x should upgrade to a supported release as soon as possible.

All changes since 10.5.1

• Issue #3536190 by mherchel, griffynh, smustgrave, proeung, johnalbin: Remove proeung as maintainer for Olivero subsystem
• Issue #3536193 by griffynh, shaal, markconroy: Remove shaal as maintainer for Umami demo subsystem
• Issue #3536188 by ankusht1515, divyansh.gupta, smustgrave, griffynh, dcam, mac_weber: Remove Mac_Weber as maintainer for Link Field subsystem
• Issue #3534832 by xjm, griffynh, jelle_s, smustgrave: Remove Jelle_S as maintainer for Responsive Image subsystem
• Issue #3534831 by xjm, griffynh, dmsmidt, smustgrave: Remove dmsmidt as maintainer for Inline Form Errors subsystem
• Issue #3536751 by xjm, griffynh, yched, alexpott: Remove yched as maintainer for Field UI subsystem
• Issue #3489311 by xjm, bradjones1, smustgrave, alexpott, damiankloip: Remove damiankloip as subsystem maintainer
• Issue #3526769 by mcdruid, smustgrave: Avoid abuse of config sync import tarballs
• Issue #3539331 by dww, godotislate, nicxvan: Incorrect warning for system requirements for APCu memory
• Issue #3535351 by acbramley, nod_, mstrelan: [random test failure] ToolbarActiveTrail::testToolbarActiveTrail
• Issue #3534830 by Bojhan: Remove Bojhan as maintainer for Usability topic
• Issue #3536749 by xjm, griffynh, sun, smustgrave, larowlan: Remove sun as maintainer for Language subsystem
• Issue #3536189 by griffynh, mpdonadio: Remove mpdonadio as maintainer for DateTime and DateTime Range
• Issue #3536192 by rainbreaw, xjm: Remove rainbreaw as maintainer for Accessibility subsystem
• Issue #3536185 by ankusht1515, griffynh, david strauss: Remove David Strauss as maintainer for MySQL DB driver subsystem
• Issue #3537409 by andrewmacpherson, nicxvan: Remove accessibility topic maintainer - andrewmacpherson
• Issue #3537420 by dcam, smustgrave, larowlan: Add dcam as a subsystem maintainer of the Link module
• Issue #3534455 by juampynr: Remove juampynr from MAINTAINERS.txt
• Issue #3534386 by sijumpk, griffynh, benjy: Remove benjy as maintainer for Block subsystem
• Issue #3521081 by bircher: Deleting a config checkpoint breaks the checkpoint storage
• Issue #3535199 by alexpott, godotislate, catch: Saving untrusted config results in memory leak
• Issue #3533926 by alexpott: Config of the type plural_label can never be valid due to the label constraint
• Issue #3534893 by quietone: [regression] Wrong doc link on database update page
• Issue #3504582 by artem_sylchuk, nod_, smustgrave, reinfate, anjaliprasannan, alexdoma: [regression] Tags td, tr or th ignored by new parseHTML implementation
• Issue #3223147 by kentr, kostyashupenko, nikhil_110, smustgrave, hop, kristen pol: Claro breadcrumb doesn't meet minimum target-size
• Issue #3528994 by annmarysruthy, joachim: hook_views_query_alter() docs missing use QueryPluginBase import
• Issue #3238618 by gauravvvv, rpayanm, Harish1688, tauoms, roshanibhangale, mherchel, quietone: Olivero: Allow primary & secondary navigation focus outline to work with long text
• Issue #3182716 by thejimbirch, godotislate, phenaproxima, alexpott, primsi, berdir, smustgrave, larowlan, nicxvan: block_theme_initialize should not create blocks during config sync
• Issue #3278759 by mxr576, kristiaanvandeneynde, ericgsmith, acbramley, larowlan, danflanagan8, bbrala, rosk0, catch: Access cacheability is not correct when "view own unpublished content" is in use
• Issue #3473374 by mxr576, ericgsmith, bbrala, larowlan, kristiaanvandeneynde, rosk0: Improve Dynamic Page Cache header assertions in JSON:API tests
• Issue #3532704 by griffynh, yoroy: Remove yoroy as maintainer for Usability
• Issue #3532187 by sleitner, immaculatexavier, alexpott, catch, adrianm6254, xjm, sharif.elshobkshy: Composer issue when dealerdirect/phpcodesniffer-composer-installer update from v1.0.0 to v1.1.0
• Issue #3464426 by dcam, kksandr, alexpott: AutowireTrait and autowire for services behave differently for nullable types
• Issue #3529507 by nicxvan, xjm, alexpott: Allow setting memory limit to -1 for phpstan precommit hooks
• Issue #3530262 by mohit_aghera, kim.pepper, quietone, xjm: Add mohit_aghera as File sub-system co-maintainer
• Issue #3530149 by xjm, smustgrave, catch, benjifisher, bramdriesen, longwave, larowlan, alexpott, mcdruid: Add tests for SA-CORE-2025-004: Link field attribute XSS
• Revert "Issue #3527408 by prudloff, smustgrave, xjm, benjifisher, catch, kim.pepper, larowlan: Add test for SA-CORE-2024-002"
• Issue #3465041 by prudloff, xjm, smustgrave, larowlan: FormState::getTriggeringElement() behaves inconsistently when request is malformed
• Issue #3531978 by alexpott: \Drupal\jsonapi\Controller\FileUpload deprecation layer does not work
• Issue #3504265 by finnsky, smustgrave, ksenzee, nod_: Yarn watch task broken
• Issue #3527408 by prudloff, smustgrave, xjm, benjifisher, catch, kim.pepper, larowlan: Add test for SA-CORE-2024-002
• Issue #3386313 by kksandr, mxr576, smustgrave, xjm, catch, longwave, larowlan, fjgarlin, quietone: The entity link label formatter should check URL access
• Issue #3008943 by tim.plunkett, amateescu, brandonlira, sahil.goyal, yogeshmpawar, smustgrave, alexpott, ameymudras: Clean up todo in InlineBlockEntityOperations::handleEntityDelete()
• Issue #3531688 by gabesullice, griffynh: Remove gabesullice as maintainer for JSON:API
• Issue #3532532 by lauriii: Remove lauriii as subsystem maintainer of CKEditor 5 and Claro
• Back to dev.