Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.Install
To start a new Drupal project with version 10.0.9:To update your site and all dependencies to the latest version of Drupal:
To update your site to this specific release:
Pinning to a specific release may make it more challenging to update your site in future, see composer documentation for managing pinned versions
Using Composer to manage Drupal site dependencies
Downloads
Download tar.gz
16.64 MB
MD5: d870e788eb9651dfc93fcff3e3636322
SHA-1: 0c7573c2a5d1651e14fb35355999cadda2104f26
SHA-256: fc456088ae680b99759eb1497c854f22f504b901a95e7510175b02b980fc1a7a
Download zip
27.52 MB
MD5: 39b6b1cfc80fb70b30bab55370eb8726
SHA-1: 44a10162db82d1edb735c2fa98bad87bbe6cc188
SHA-256: 2f528448a4cd390450a1d817cc9f14624621c29b86361b87740433821f66b368
Release notes
This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.
Drupal 10.0.x will receive security coverage until December 2023.
Important update information
If you are updating from Drupal 9, refer to Preparing your site to upgrade to a newer major version for tools you can use to check the Drupal 10 compatibility of modules, themes and sites. Then, upgrade from Drupal 9 to 10. You should also check the Drupal 10.0.0 release notes.
All changes since Drupal 10.0.8
- Issue #2985882 by tim.plunkett, Mirakolous, ravi.shankar, ayush9598, Rajab Natshah, andypost, Anybody, kattekrab, devarch, Freddy Rodriguez, adubovskoy, corneliusd, mradcliffe, longwave, lukasss, Pancho, Graber, dpi, joshf, lordzik, dorianwinterfeld, jacov, kdmdrupal, jlancaster, jborgesr, joarferme, tonytheferg, chrisrockwell, agilman, kducharm, Sam152, scotwith1t, labboy0276, Spokje, jazzfiction, Shrutidkadam, ab2211, Dave Kopecek, segx, alexmoreno, themaurice, the_glitch, NWOM, kwfinken, berliner, design.er, ouissla, zterry95, jamsilver, fonant, Rajendar Reddy, Christopher Riley, BramDriesen, webdrips: Workaround for "Call to a member function getLabel() after enabling layout_builder"
- Issue #3123060 by Spokje, quietone, longwave, ankithashetty, daffie, jungle, xjm: Enable 'Drupal.Commenting.DocComment.ShortSingleLine' coding standard
- Revert "Issue #3268833 by quietone, xjm, jungle, ravi.shankar, smustgrave, daffie, Spokje, DanielVeza: Fix method comments in tests for Drupal.Commenting.DocComment.ShortSingleLine"
- Issue #3268833 by quietone, xjm, jungle, ravi.shankar, smustgrave, daffie, Spokje, DanielVeza: Fix method comments in tests for Drupal.Commenting.DocComment.ShortSingleLine
- Issue #2692451 by neclimdul, tedfordgif, smustgrave, mikey_p, larowlan: Xss::filterAdmin() incorrectly filters datetime attribute
- Issue #3357114 by Spokje: Update mglaman/phpstan-drupal and help make daily "updated deps" QA jobs pass
- Issue #3357247 by Spokje: Update guzzlehttp/psr7
- Issue #3356337 by Spokje, mondrake: Fix incorrect type hint and make daily "updated deps" QA jobs pass
- Issue #3268833 by quietone, xjm, jungle, ravi.shankar, smustgrave, daffie, Spokje, DanielVeza: Fix method comments in tests for Drupal.Commenting.DocComment.ShortSingleLine
- Issue #3355139 by krystalcode: Method documented to raise error while it actually does not
- Issue #3354951 by Spokje: Update @todo comment in \Drupal\Core\Database\StatementInterface::fetchObject
- Issue #3175012 by anagomes, CurriedN, andregp, ptmkenny, longwave, klausi, mglaman, acbramley: Update PHPDoc for DataDefinition
- Issue #3268835 by quietone, smustgrave, ravi.shankar, xjm, borisson_, catch: Fix method comments in non tests for Drupal.Commenting.DocComment.ShortSingleLine
- Issue #3356825 by Gábor Hojtsy, quietone, xjm, bnjmnm: Promote quietone and bnjmnm from provisional core committers to full core committers
- Issue #3159896 by mherchel, awset, srishtiiee, Gauravvvv, _utsavsharma, lauriii, pameeela, bnjmnm, Kristen Pol, kiran.kadam911, pradeepjha, Sakthivel M: Select form field values are hidden at narrow screen widths in Claro theme
- Issue #2911932 by bnjmnm, arnaud-brugnon, EthanT, leslie.cordell, smustgrave, nod_: Correct vertical tab does not focus on form validation
- Issue #3353096 by Spokje, catch, xjm: [random test failure] Try to un-skip and fix InlineBlockPrivateFilesTest::testPrivateFiles() in context of [#3353085]
- Issue #3353167 by Spokje: [random test failure] Try to un-skip and fix LayoutBuilderNestedFormUiTest::testAddingFormBlocksToOverrides in context of [#3353085]
- Issue #3353179 by Spokje: [random test failure] Try to un-skip and fix LayoutBuilderTest::testLayoutBuilderUi in context of [#3353085]
- Issue #3353153 by Spokje: [random test failure] Try to un-skip and fix LayoutBuilderNestedFormUiTest::testAddingFormBlocksToDefaults in context of [#3353085]
- Issue #3353088 by Spokje: [random test failure] Try to un-skip and fix BlockFormMessagesTest::testValidationMessage() in context of [#3353085]
- Issue #3353100 by Spokje, xjm: [random test failure] Try to un-skip and fix InlineBlockTest::testDeletion in context of [#3353085]
- Issue #3353103 by Spokje: [no random test failure] Try to un-skip and fix LayoutBuilderDisableInteractionsTest::assertContextualLinksClickable in context of [#3353085]
- Issue #3353092 by Spokje: [random test failure] Try to un-skip and fix ContextualLinksTest in context of [#3353085]
- Issue #3355301 by quietone, alexpott, smustgrave: Fix spellcheck:make-drupal-dict
- Issue #3355137 by Spokje: Update mglaman/phpstan-drupal and make daily "updated deps" QA jobs pass
- Back to dev.
- Merged 10.0.8.
- Issue #2188715 by penyaskito, amanshukla6158, mrinalini9, smustgrave, YesCT, quietone: Document return value in \Drupal\locale\LocaleTranslation::getStringTranslation
- Issue #3073518 by mohit_aghera, rkostov, Eugene Bocharov, rensingh99, wturrell, smustgrave, quietone, pameeela: 'Is not equal to' operator ignored on exposed, grouped filter
- Issue #3354385 by tstoeckler: Remove tstoeckler from MAINTAINERS.txt
- Issue #3222107 by codebymikey, bnjmnm, chandu7929, Shubham Chandra, jmickela, vipin.mittal18, trickfun, larowlan: Library order asset weights do not work properly when a large number of javascript files is loaded between two jQuery UI libraries
- Issue #3352524 by sleitner: Do not use direct configuration changes in LanguageNegotiationSessionTest
- Issue #3352548 by DanielVeza: Leftover D10 deprecations in the contextual module
- Issue #3346099 by rckstr_rohan, dww, joachim, smustgrave: @return docs for WorkflowTypeInterface::getTransitionsForState() are wrong
- Issue #3268838 by quietone, TR, smustgrave, xjm: Fix functions and test modules for Drupal.Commenting.DocComment.ShortSingleLine
- Issue #3268809 by quietone, Spokje, Rishabh Vishwakarma, ravi.shankar, mrinalini9, Medha Kumari, JatinGupta40, smustgrave, xjm, longwave, catch: Fix class comment doc blocks in tests for 'Drupal.Commenting.DocComment.ShortSingleLine'
- Issue #3134349 by sleitner, yookoala, sharma.amitt16, Akram Khan, penyaskito, sahil.goyal, swatichouhan012, s_leu, larowlan, smustgrave, joachim: \Drupal\language\LanguageNegotiator does not handle PluginNotFoundException and break the site completely
- Revert "Issue #3191391 by Arantxio, larowlan, _utsavsharma, daffie: Schema::changeField() has bug when changing regular serial field to big serial field"
- Issue #3348381 by rckstr_rohan, joachim: incorrect example code in Token docs
- Revert "Issue #3134349 by sleitner, yookoala, sharma.amitt16, Akram Khan, sahil.goyal, swatichouhan012, s_leu, penyaskito, smustgrave, joachim, larowlan: \Drupal\language\LanguageNegotiator does not handle PluginNotFoundException and break the site completely"
- Issue #2927311 by DanielVeza, smustgrave, Gribnif, richard.thomas, larowlan: Contextual links are not sorted by weight, contrary to documentation
- Issue #3134349 by sleitner, yookoala, sharma.amitt16, Akram Khan, sahil.goyal, swatichouhan012, s_leu, penyaskito, smustgrave, joachim, larowlan: \Drupal\language\LanguageNegotiator does not handle PluginNotFoundException and break the site completely
- Issue #3238915 by Bhanu951, hooroomoo, bnjmnm: Refactor (if feasible) uses of the jQuery ready function to use VanillaJS
- Issue #2991686 by smustgrave, larowlan, Grayle: Enabling "Edit" to show all contextual links breaks tabbing in edit forms in the backend
- Issue #3352635 by Spokje: Run yarn build:css in core/scripts/dev/commit-code-check.sh whenever core/package.json and/or core/package.lock change
- Issue #3351607 by schlaukopf, xjm: Skip numerous functional JS tests that repeatedly break HEAD
- Issue #3351556 by longwave, Spokje, catch: Add deprecation silencer on Drupal 10.0
- Issue #3082032 by kristiaanvandeneynde: ToolbarController::preRenderGetRenderedSubtrees() deletes parent's cacheability
- Issue #3341448 by acbramley, fenstrat, Lendude, smustgrave: EntityReference ViewsSelection::stripAdminAndAnchorTagsFromResults() should call Element::children($results)
- Issue #3277784 by Tim Bozeman, mrinalini9, larowlan: copyRawVariables should support default route parameters
- Revert "Issue #3268809 by quietone, Rishabh Vishwakarma, ravi.shankar, Medha Kumari, mrinalini9, JatinGupta40, smustgrave, xjm, longwave: Fix class comment doc blocks in tests for 'Drupal.Commenting.DocComment.ShortSingleLine'"
- Issue #2849246 by catch, jp.stacey: HtmlResponseAttachmentsProcessor::processAttachments should reference processing placeholders
- Issue #3268809 by quietone, Rishabh Vishwakarma, ravi.shankar, Medha Kumari, mrinalini9, JatinGupta40, smustgrave, xjm, longwave: Fix class comment doc blocks in tests for 'Drupal.Commenting.DocComment.ShortSingleLine'
- Issue #3350972 by nod_: [random test failure] DrupalTestslayout_builderFunctionalJavascriptLayoutBuilderUiTest::testReloadWithNoSections
- Issue #3351961 by longwave, Spokje: Update webpack
- Issue #2866383 by sunlix, SAVEL, Nitin shrivastava, narendra.rajwar27, luizps, DieterHolvoet, Nikhil_110, Oscaner, rp7, Abhisheksingh27, smustgrave, dww: Readonly doesn't work on #States
- Issue #3010334 by xjm, Amber Himes Matz, catch, dww, Berdir, FeyP, Mixologic: Document how contrib hook_update_N() should be numbered now that modules can be compatible with multiple major branches and versioned semantically
- Issue #3002443 by markconroy, lauriii, smustgrave, larowlan: Improve preview usability
- Issue #3338224 by mfb: .m4a files should use audio/mp4 MIME type, not audio/mpeg
- Issue #3347212 by miikamakarainen, sakthi_dev, Yogesh Sahu, lauriii, Nikhil_110, Wim Leers, smustgrave, borisson_: "Add or select media" not translated
- Issue #3316627 by bnjmnm, Gauravvvv, Sakthivel M, Akshay kashyap, Asha Nair, joachim, smustgrave: dropbuttons get weird white line when font size is changed and at at various zoom settings
- Issue #3078030 by danflanagan8, mottihoresh, Abhijith S, smustgrave, andypost, phenaproxima: Duplicated summary item when linking to content with the MediaThumbnailFormatter
- Issue #3350387 by Gauravvvv, Chi: Claro: fix size of H3 elements in status report
- Issue #3331870 by Chris64, PrabuEla, smustgrave, cilefen: Code error url fragment: wrong array key: key #fragment should be fragment
- Issue #2806009 by alexpott, JvE, Berdir, Dmitriy.trt, jhodgdon, lokapujya, VladimirAus, Gábor Hojtsy, Jose Reyero, Anybody, kristiaanvandeneynde, Sutharsan, casey, smustgrave, nod_: Installing a module causes translations to be overwritten
- Issue #3347480 by AndyF: Use temporary redirect for RFC5785 change password well known resource
- Issue #3335269 by Niklan: Entity stubs doesn't follows fallback logic from entities and leads to a broken migration
- Issue #3349028 by nod_, DuaelFr, smustgrave, bnjmnm: Improper use of aria-label in "System Powered By" block
- Revert "Issue #1148856 by drunken monkey, stefan.r, bzrudi71, xatoo, Ben Coleman, jyotisankar, daffie, mondrake, andypost, Damien Tournoud, alexpott: Postgres schema doesn't support keylength on a unique index"
- Issue #3351596 by dww, catch: Skip Drupal\Tests\ckeditor5\FunctionalJavascript\MediaLibraryTest
- Issue #3282451 by fanton, Bhanu951, andy-blum, nod_, mgifford, andrewmacpherson: Create a README.md file in Olivero theme to explain the name of the theme
- Issue #2264943 by FeyP, er.pushpinderrana, _pratik_, gauravkhambhala, Weilinggu, Nikhil_110, joachim, jhodgdon: Queue API topic and hook_queue_info() don't link to one another
- Issue #3351500 by catch: Skip Drupal\Tests\layout_builder\FunctionalJavascript\ContextualLinksTest
- Issue #3351494 by catch, Spokje: Skip Drupal\Tests\media\FunctionalJavascript\MediaSourceFileTest
- Issue #3323329 by alexander.levitsky, nayana_mvr, metalbote: Secondary tabs not accessible if more than X on screen size Y
- Issue #3347067 by danflanagan8, _pratik_, smustgrave, longwave: CsrfAccessCheck docblock extremely out of date
- Issue #3293855 by rkoller, rocketeerbkw, nitin_lama, Anchal_gupta, AaronMcHale, smustgrave, cutehair: Update the outdated user_help text for user.admin_permissions and the description of the select box on the role settings page
- Issue #3331397 by gcb, DanielVeza, Tatsiana, arisen: ListItemBase::generateSampleValue() white screen when options list is empty
- Issue #1148856 by drunken monkey, stefan.r, bzrudi71, xatoo, Ben Coleman, jyotisankar, daffie, mondrake, andypost, Damien Tournoud, alexpott: Postgres schema doesn't support keylength on a unique index
- Issue #3334907 by andy-blum, Gauravvvv, Guru2023, markconroy, shaal: Mobile menu is not positioned correctly when side canvas is open
- Issue #2745179 by juancasantito, heddn, dpi, acbramley, Xano, dawehner, alexpott, catch: Uncaught exception in link formatter if a link field has malformed data
- Issue #3086845 by jonathan1055, smustgrave: Module constraint checks fail incorrectly due to str_replace
- Issue #3341737 by acbramley, lauriii, gordon, jptaranto, Wim Leers: CKEditor 5 content squashed in off-canvas sidebar
- Issue #3336463 by sleitner, recrit, catch: Htaccess rewrite rules for gzipped CSS and JavaScript aggregates never match
- Issue #2911379 by Spokje, ProFire, mstrelan: Unneccessary bitwise operation for file permissions check on Windows
- Issue #3350977 by dww: Remove stale Quick Edit section from MAINTAINERS.txt in 10.0.x and up
- Issue #3351113 by a.milkovsky, mostepaniukvm, daffie: Not optimal query in DatabaseBackend::garbageCollection()
- Issue #3327848 by rishu_kumar, Gauravvvv, lauriii, _utsavsharma, ameymudras, smustgrave: Claro: Wrong background for active vertical tab
- Issue #3351004 by Natallia: Deprecations for PHP 8.1 get_class() and get_called_class() without argument
- Revert "Issue #3306554 by andypost, mondrake: InvocationMocker::withConsecutive() is deprecated in PHPUnit 9.6 and removed from PHPUnit 10 - easy replacements"
- Issue #2977785 by acbramley, ameymudras, mrinalini9, Hardik_Patel_12, Berdir, sourabhjain, ravi.shankar, Deepak Goyal, Prem Suthar, TanujJain-TJ, kishor_kolekar, snehalgaikwad, nghai, larowlan, Lendude, smustgrave, Sam152, quietone: No error messages are shown for applied validation on a view exposed filter with on "AJAX"
- Issue #2758915 by mdupont, darvanen, -enzo-, Amber Himes Matz, smustgrave: AJAX commands documentation is misleading when working with render arrays
- Issue #3145850 by smustgrave, natedouglas, nod_, Gauravvvv, s_leu, amateescu, pankaj.singh, Abhijith S, quietone, jungle: Required summary element hidden when other text-with-summary fields do not require summary
- Issue #2505579 by dpi, NivethaSubramaniyan, smustgrave, ian.mahoney, amwhalen, Medha Kumari, Chi: Improve handling of invalid input in time zone abbreviation to TZID route
- Issue #2567745 by mohit_aghera, smustgrave, quietone, andypost, dww, alexpott: \Drupal\taxonomy\Plugin\views\field\TermName::getItems should work with links
- Issue #2911377 by smustgrave, ProFire, MerryHamster, ranjith_kumar_k_u, Medha Kumari, Spokje, neclimdul, a.dmitriiev, quietone, catch, Gábor Hojtsy: Fix for Unit Test on Windows
- Issue #3221633 by bircher, lind101, smustgrave, quietone, Zemelia: BatchNegotiator tests for an invalid route
- Issue #3348686 by james.williams, FeyP, kunal_sahu, larowlan, alexpott: [regression] Inaccessible language switcher links are removed before alternatives can be provided
- Issue #3281557 by smustgrave, ipo4ka704, acbramley, ravi.shankar, benjifisher, Sardis, ameymudras, adeshsharma, Rishabh Vishwakarma, rollins, TanujJain-TJ, larowlan, catch, igorbiki: DateTime::__construct(): Passing null to parameter #1 ($datetime) of type string is deprecated
- Issue #2958649 by acbramley, moshe weitzman, fenstrat: Incorrect totals count when importing config that contains a theme uninstall
- Issue #3191391 by Arantxio, larowlan, _utsavsharma, daffie: Schema::changeField() has bug when changing regular serial field to big serial field
- Issue #3307409 by mherchel, heddn, gquisini, Phoenixbros, bbu23: Setting media field to loading="eager" doesn’t work when using the media_thumbnail field formatter
What’s next?
- Learn how to install Drupal
- Learn how to update Drupal
- Extend Drupal to do more
- Get training
- Check out what others built
Bug fixes
Insecure
Insecure
