Needs review
Project:
Drupal core
Version:
11.x-dev
Component:
javascript
Priority:
Normal
Category:
Task
Assigned:
Unassigned
Reporter:
Created:
24 Sep 2026 at 14:33 UTC
Updated:
8 Oct 2026 at 13:36 UTC
Jump to comment: Most recent
We should ship 11.5.0 with some updated dependencies.
Update whatever we can without breaking changes.
Start within a Git clone of the project using the version control instructions.
Or, if you do not have SSH keys set up on git.drupalcode.org:
Comments
Comment #3
longwaveThis updates:
There was a problem in the build:
yarn install; yarn vendor-updateoverwrites CKEditor with 47.6.2 as 47.6.3 does not exist in npm. I manually reverted this but it will happen again if we update again.I also didn't update
transliterationhere as there is a breaking change - the global variable used to access the library has changed - and I don't think we should force that on 11.x users just in case they are using the library directly.Comment #4
godotislateOther than transliteration which was updated here per #3, I tried a vendor update locally and there were a few more that were not included:
postcss: 8.5.16 -> 8.5.28
postcss-import: 16.1.1 -> 17.0.0
jsdom : 27.4.0 -> 30.1.1
js-cookie: 3.0.5 -> 3.0.8
htmx.org: 2.0.10 -> 2.0.11
Some of these might just be new releases since the MR, but do we want to do the postcss and js-dom updates to match main?
Also, from Carson Gross in Slack:
Do we want to do this? Maybe in a separate issue?
One other thing is whether we want to update cspell to match main as well, since it looks like CI is running node 24 in the 11.x builds anyway, but could either be a new issue or we could re-open #3621993: Update Cspell for a backport.
Otherwise, if we're fine without updating these other libraries, this lgtm.
Comment #5
longwaveIn the 12.0.0 issue we deferred PostCSS and postcss-import to #3625308: Update postcss, and postcss-import for Drupal 12 as it causes a noisy diff.
Not sure how I missed jsdom here, we should update js-cookie and htmx as well. We might want a separate issue to add PHP support for
hx-partialif we need it as well.Drupal 11 only had Node 20 as the development requirements and I'm not sure we should bump that here, although I'm also not sure who it would affect outside of core developers.
Comment #6
godotislateUpdated additional packages per #5 and any outstanding since the original MR commits:
Updating js-cookie required changing the hash in its deprecation test.
I assume if we do this, it would need to be before we release 11.5 beta?
Comment #7
godotislateComment #8
godotislateLooks like there isn't anything on the PHP side to do for hx-partial support in 11.x/11.5.x, so we there's nothing to worry about for 11.5 beta.
Per @fathershawn on Slack: