Install

Works with Drupal: ^9.3 || ^10 || ^11

Using Composer to manage Drupal site dependencies

Alternative installation files

Download tar.gz 507.15 KB
MD5: 0c5187e01c9715e0bacae965e310010f
SHA-1: 4fbe85859dc3d618bc98791f470df3b196186c61
SHA-256: 526d75f234fb110cfc0b9e8bd19c42c6b46f626718cdf5569bc302b71abd92c7
Download zip 692.47 KB
MD5: 7a084ca4daad01fe67bb83532dac99b1
SHA-1: d854f72c0dab27c9158a2b04e4fbf90cae1ab4ae
SHA-256: c9b50817940a6dba026e59965074d935b1286661cfd94b501ea38ecdcdfacfa0
Downloads are for manual installation, which is not recommended when using Drupal 8 or later.

Security issues fixed

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the following security announcements and release notes:

Release notes

This is a security release. Sites using the "User Login" schema extension should update right away. See the security advisory: https://www.drupal.org/i/3632497

Security

  • Fixed an access bypass in the GraphQL API.

Bug fixes

  • #3617845: Tests fail on Drupal 11.4: missing cache context "user"
  • #3617844: LanguageSwitchLinks throws MethodNotAllowedException for GET-only routes when the GraphQL request is a POST
  • Added the missing "schema" annotation key in LanguageExtension.

Tasks

  • #3617846: Replace deprecated builder callbacks in ViewsExtension
Created by: ayalon
Created on: 11 Nov 2026 at 09:31 UTC
Last updated: 11 Nov 2026 at 17:35 UTC
Git tag 1.0.29
Security update

Other releases