Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.Install
To start a new Drupal project with version 10.0.4:To update your site and all dependencies to the latest version of Drupal:
To update your site to this specific release:
Pinning to a specific release may make it more challenging to update your site in future, see composer documentation for managing pinned versions
Using Composer to manage Drupal site dependencies
Downloads
Download tar.gz
16.61 MB
MD5: e320edd164bd29f45f9f779549f270ff
SHA-1: 4632633de1cdfbb78e0af9eb32cf8819fce62007
SHA-256: a20449477f57d91f7515db539632ed87773bfe458970de2880aa0a0980988790
Download zip
27.47 MB
MD5: 1b0df4fc36350142ad5eb8846a345285
SHA-1: b133029bbf00960d49aa17822989a6b6c9bdda7e
SHA-256: 56f45a911ef4ade1136e28d4e1000f54ddfe7098f5cff82f0cdd1b401a748e5e
Release notes
This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.
Drupal 10.0.x will receive security coverage until December 2023.
Important update information
If you are updating from Drupal 9, refer to Preparing your site to upgrade to a newer major version for tools you can use to check the Drupal 10 compatibility of modules, themes and sites. Then, upgrade from Drupal 9 to 10. You should also check the Drupal 10.0.0 release notes.
All changes since 10.0.3
- Issue #3342891 by lauriii, smustgrave, andy-blum, catch: 'node' variable in page.html.twig is not available on preview node page
- Issue #3339373 by alexpott, andypost, mondrake: Drupal\migrate\Plugin\migrate\source\SourcePluginBase::rewind() is rewinding database statements
- Issue #2866811 by arunkumark, longwave, tar_inet, joelpittet, alexpott: Update stylelint rule function-linear-gradient-no-nonstandard-direction to be consistent with Drupal's CSS standards
- Issue #3185183 by philipnorton42, larowlan, bruno.bicudo, longwave, xjm, quietone: Refactor ContextualUnitTest to use a data provider
- Issue #3264167 by Spokje, neclimdul, heykarthikwithu, longwave: Remove use of final Guzzle client class
- Issue #2865401 by Berdir, yassin.barrani, ankithashetty, dxvargas, Hardik_Patel_12, ayushmishra206: Views pager is using exposed_raw_input instead of exposed_input
- Issue #3276939 by daffie, aziza_a, larowlan: The Symfony method Request::setTrustedHosts() is a static method, we use it as non-static
- Revert "Issue #3308920 by jungle, smustgrave, Lendude: Fix test performance of Drupal\Tests\user\FunctionalJavascript\UserPasswordResetTest"
- Issue #3341254 by Spokje, longwave: Fix failing "updated deps" test-runs on 10.x.x
- Issue #3308920 by jungle, smustgrave, Lendude: Fix test performance of Drupal\Tests\user\FunctionalJavascript\UserPasswordResetTest
- Revert "Issue #3091478 by Tim Bozeman, lauriii, malcomio, EclipseGc, larowlan, tim.plunkett, amateescu, dpi: Improve StringItem::generateSampleValue()"
- Issue #3091478 by Tim Bozeman, lauriii, malcomio, EclipseGc, larowlan, tim.plunkett, amateescu, dpi: Improve StringItem::generateSampleValue()
- Issue #2106939 by smustgrave, dawehner, catch, jungle, longwave, xjm: Improve test coverage of the flood memory backend test and convert it to a unit test
- Revert "Issue #2106939 by smustgrave, dawehner, jungle: Improve test coverage of the flood memory backend test and convert it to a unit test"
- Issue #2910181 by sarvjeetsingh, anmolgoyal74, apaderno, pameeela, jcalais: Update hook_node_grants docs to remove role ID reference, since it is no longer an integer
- Issue #3324726 by Akhil Babu, xjm, Gauravvv, joachim: #ajax 'options' property is undocumented
- Issue #2106939 by smustgrave, dawehner, jungle: Improve test coverage of the flood memory backend test and convert it to a unit test
- Issue #3343495 by alexpott: Fix commit-code-check.sh on DrupalCI
- Issue #3317744 by idebr, smustgrave: Bundle restrictions from a route do not apply to revisionable entities
- Issue #3216430 by Charlie ChX Negyesi: Improve documentation on $is_syncing
- Issue #2890726 by pooja saraah, poornachandran, quietone, alexpott, DanielVeza, borisson_, rdworianyn, smustgrave: Custom role with all numeric name results in fatal error after assigning to user
- Issue #3256002 by Gauravvv, ameymudras, vulcanr, DeepaliJ, Satyajit1990, Kristen Pol, bnjmnm, xjm, smustgrave, lauriii: Umami demo: Tour popup close button hover effect movement
- Issue #3181634 by Wongjn: States API: Empty/Filled state with number does not update when using spinner
- Issue #2738547 by smustgrave, mehul.gada, sahil.goyal, larowlan, BarisW, xjm: Contextual Links do not respect parameters in the destination
- Issue #3270378 by andregp, murilohp, Rinku Jacob 13, AaronMcHale, dww, alexpott, smustgrave: Promote non-stable modules to the top of the list at admin/modules/uninstall form
- Issue #3179850 by claudiu.cristea: EntityTestAccessControlHandler allows viewing an unpublished entity
- Issue #1956466 by smustgrave, Chi, sahil.goyal, dawehner, Lendude: TimeInterval plugin should not handle empty values
- Issue #3039499 by alexpott, acbramley: Role permissions not sorted in config export
- Issue #3328694 by murilohp, rpayanm, jonathan1055, xjm, cilefen: Incorrect sprintf parameter usage
- Issue #2498791 by awset, ameymudras, balis_m, PQ, Kristen Pol, dww, morbiD, alexpott, smustgrave: #states defaultTrigger oldValue is out of date if values are updated via a state trigger
- Issue #3283930 by chaubeyji: Fix comment with a plural possessive typo in PluginBase.php
- Issue #3312883 by smavri, rpayanm, smustgrave: Update variable type PHPDoc in _responsive_image_build_source_attributes function
- Issue #3154084 by amateescu, mheip, smustgrave: Warning when building an empty workspace tree
- Issue #3300957 by smustgrave, catch, jungle, joachim: Potentially speed up LinkFieldTest
- Issue #3077646 by danflanagan8, kkalashnikov, kaszarobert, priyanka.sahni, Sam152: Increase the delta of the "weight" field to support reordering more than 20 blocks in a section
- Issue #3209468 by joaopauloc.dev, pooja saraah, joachim: DrupalKernelInterface methods & DrupalKernel::sitePath should document the format of a site path
- Issue #3209468 by joaopauloc.dev, pooja saraah, joachim: DrupalKernelInterface methods & DrupalKernel::sitePath should document the format of a site path
- Issue #2985165 by Liam Morland, ayushmishra206, nbaosullivan, AkashKumar07, valthebald, mathieso, Sutharsan: Improve documentation for BookManagerInterface::saveBookLink()
- Issue #3281193 by neclimdul: Improve GenerateThemeTest
- Issue #3283351 by Sweetchuck: PHP 8.1 Return type of DeprecatedArray::unserialize() and ::serialize()
- Issue #3103240 by oknate, smustgrave, quietone, jungle: MultiFormTest not executing
- Issue #3255895 by jrb, murilohp, harshitthakore, xjm: HTML entities in Tour tip labels get double-escaped
- Issue #3337195 by Spokje: Rename test theme test_legacy_theme
- Issue #3261347 by noorulshameera, pflora, Johnny Santos, neclimdul, alexpott: Incorrect EntityType::$label_count type documentation
- Issue #3326493 by Patrick R., webflo: Fix inaccurate return types in user module
- Issue #3096546 by jungle, smustgrave, amjad1233, Neslee Canil Pinto, alexpott: Add sorting configuration to composer.json
- Issue #3339251 by MegaKeegMan, mlncn, wolcen: Fix descriptive text in Depth view filter
- Issue #3332630 by mxr576, smustgrave: Correct return typehint on BlockPluginTrait::blockAccess()
- Issue #3333664 by joelpittet, lauriii: Claro: Undefined array key "expose_button"
- Issue #3231184 by mglaman, smustgrave, longwave: ResourceTestBase::setUpAuthorization references wrong permission grant methods
- Issue #3228531 by joachim: document run-tests.sh as not intended for public consumption
- Issue #3324574 by Prem Suthar, andypost, seanhellwig, _pratik_, trickfun, longwave: Deprecated function: strpos() in layout_builder_entity_view_alter
- Issue #3132334 by mstrelan, quietone: Add documentation for path_processing option to URLGeneratorInterface
- Issue #3181439 by tstoeckler, Gauravvv, Tomefa, Sam152, smustgrave, larowlan: Content Moderation fatals when a moderated entity is re-saved on hook_insert()
- Issue #3339400 by gxleano, royalpinto007, VladimirAus, fjgarlin, longwave: Incorrect use of FormattableMarkup in logger messages
- Issue #3336586 by Spokje: Fix failing "updated deps" test-runs by upping mglaman/phpstan-drupal to latest
- Issue #3247553 by alexpott, realityloop: $install_state['settings_verified'] incorrectly set when config_sync_directory is missing
- Issue #3328711 by mtift: Remove mtift from MAINTAINERS.txt
- Issue #3219967 by gxleano, bernardm28, benjifisher, joachim: Allow authors and editors to edit page layouts in Umami
- Issue #3099085 by krystalcode: EntityDefinitionUpdateManagerInterface docblock improvement
- Issue #3326378 by Spokje: Fix PHPStan L1 error "Instantiated class Foo\Bar not found."
- Issue #2822575 by martin107, lucassc, pooja saraah, Shubham Chandra, rodrigoaguilera, smustgrave, larowlan: LibraryDiscoveryParser::buildByExtension() is missing @throws tags
- Issue #3336828 by voleger, longwave, Spokje: File dictionary.txt is not sorted
- Revert "Issue #3333401 by nicxvan, bnjmnm: Pager h4 causes accessibility flag on many pages"
- Back to dev.
- Drupal 10.0.3
- Issue #3152943 by bbombachini, rocketeerbkw, huzooka, chandrashekhar_srijan, ayushmishra206, nikitagupta, abhisekmazumdar, Wim Leers, mikelutz, larowlan: Remove migration of shortcuts from menu_link migration
What’s next?
- Learn how to install Drupal
- Learn how to update Drupal
- Extend Drupal to do more
- Get training
- Check out what others built
Bug fixes
Insecure
