drupal 10.0.10

This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.

Drupal 10.0.x will receive security coverage until December 2023.

Important update information

If you are updating from Drupal 9, refer to Preparing your site to upgrade to a newer major version for tools you can use to check the Drupal 10 compatibility of modules, themes and sites. Then, upgrade from Drupal 9 to 10. You should also check the Drupal 10.0.0 release notes.

All changes in this release

• Issue #3367204 by JeroenT, smustgrave, neclimdul: [CKEditor5] Missing dependency on drupal.ajax
• Issue #3350973 by Spokje, acbramley: [random failure] Curl error thrown for http in JSWebAssertTest
• Issue #3367433 by Spokje: [random test failure] \Drupal\Tests\ckeditor5\FunctionalJavascript\MediaTest::testViewMode random fail
• Issue #3365567 by longwave, Darren Oh, Spokje, cilefen, Chi: Lock Drupal 10.0 on symfony/serializer and symfony/validator 6.2
• Issue #3361465 by Spokje: Remove outdated @todo's pointing to #3135457
• Issue #3360139 by bradjones1: Phpdoc for ResourceTypeRepositoryInterface::get return value is incomplete
• Issue #3366722 by Gábor Hojtsy, lauriii: Add Lauri Eskola to Drupal core product managers
• Issue #3309585 by Mingsong, Wim Leers, Chi: CKEditor 5 Style plugin configuration tab does not appear
• Issue #3366481 by cilefen, acbramley, phenaproxima, seanB: OEmbedIframeController returns an HTTP response code that can be cached by forward proxies when it is given illegal parameters
• Issue #3355122 by joachim, dww, D34dMan: ContentTranslationContextualLinksTest should use API calls to set up translation
• Issue #3366081 by Spokje: [random test failure] MediaTest:: testEditableCaption()
• Issue #3346560 by DieterHolvoet, smustgrave: Allow extending StatusMessages class
• Issue #3027705 by claudiu.cristea, Pancho, smustgrave: Allow ?edit[field_xyz] as query parameter in contextual filter
• Issue #3319184 by royalpinto007, bbombachini, sourabhjain, Rassoni, smustgrave, Chi, catch, mstrelan: hook_condition_info_alter is not documented
• Issue #3270647 by P44T, AndyF, Sander Edwards van Muijen, Nitin shrivastava, Albert Volkman, mr.baileys, jshimota01, catch, mpellegrin, poker10, alexpott: PhpMail : broken mail headers in PHP 8.0+ because of LF characters
• Issue #3332456 by Spokje, jastraat: [random test failure] MediaTest::testLinkManualDecorator()
• Issue #3358402 by totten, lisotton, jensschuppe, larowlan, znerol: [regression] route defaults are now automatically route parameters
• Issue #3048760 by Upchuk, ndobromirov, seanB, hchonov, bkosborne, Berdir: EntityCreateAnyAccessCheck::access() too restrictive
• Issue #3346748 by Lendude, borisson_: Entering a non-numeric value for a start row value in 'Multiple field settings' for a views field leads to a fatal error
• Issue #3363391 by webchick: Remove webchick from MAINTAINERS.txt
• Issue #3087950 by Utkarsh_33, swatichouhan012, komalk, Sivaji_Ganesh_Jojodae, Therapychild, bnjmnm, Sakthivel M, lauriii, thalles, shalinigaur, kostyashupenko, fhaeberle, amjad1233, sibustephen, Gauravvvv, pankaj.singh, KondratievaS, pranav.aeer, hooroomoo, ckrina, huzooka: Progress throbber position is incorrect
• Issue #3000717 by Grevil, Anybody, quietone, Gauravvvv, edysmp, benjifisher, larowlan: Missing mapping for "nodereference_url" widget
• Issue #3060626 by mohit_aghera, ranjith_kumar_k_u, Suresh Prabhu Parkala, aalin, Prem Suthar, cindytwilliams, larowlan, smustgrave, Kristen Pol: [needs backport] OptionsWidgetBase doesn't respect #required_error
• Issue #3278883 by vhin0210, longwave: TypeError: Argument 1 passed to Drupal\Core\Entity\EntityViewBuilder::view() must implement interface Drupal\Core\Entity\EntityInterface, null given, called in core/modules/node/node.module on line 559
• Issue #3361839 by BramDriesen, mherchel, rpayanm: Accidental use of CSS nesting in misc/dialog/off-canvas/css/details.css
• Issue #3359543 by Spokje: Update mglaman/phpstan-drupal and make daily "updated deps" QA jobs pass
• Issue #3358328 by alexpott, dww, mglaman: Improve how KernelTestBase manages its persistent key value storage
• Issue #3355449 by dww, smustgrave: Document that "Base system" is maintained by the framework managers
• Issue #3007424 by acbramley, Spokje, mbovan, narendra.rajwar27, AaronBauman, ravi.shankar, aleevas, geek-merlin, jibran, YurkinPark, daffie, larowlan, Berdir, alexpott, marcelovani, catch, Lendude, mstrelan, tar_inet, Honza Pobořil, seanB, andrewbelcher, danflanagan8, susgo, sylus, sjpeters79, yogeshmpawar, raman.b: Multiple usages of FieldPluginBase::getEntity do not check for NULL, leading to WSOD
• Issue #3358048 by mglaman, dww, amateescu: Do not use persist tag for keyvalue.memory in KernelTestBase
• Issue #3357825 by Spokje, Eric_A: Update guzzlehttp/psr7 constraint
• Issue #3331633 by Spokje, longwave, catch: Don't allow @inheritdoc (no curly braces) annotation in PHPDocBlocks
• Issue #3267401 by nils.destoop, acbramley, smustgrave: Media library is showing 'is required message' while the user has no access to the field
• Issue #3213745 by AlexGreen, mcdruid, dww, poker10, smustgrave: Add phtml files to the list of potentially malicious extensions
• Issue #3093973 by robindh, Diego_Mow, smustgrave, Grayle: Allow DELETE requests to return a response body
• Back to dev.