Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.Install
To start a new Drupal project with version 10.3.11:To update your site and all dependencies to the latest version of Drupal:
To update your site to this specific release:
Pinning to a specific release may make it more challenging to update your site in future, see composer documentation for managing pinned versions
Using Composer to manage Drupal site dependencies
Downloads
Download tar.gz
19.86 MB
MD5: 9716be6b1d00f9978d9f9a3c4834adb6
SHA-1: 0a290a06bfef3e02cb69a6466d523c971534195e
SHA-256: 70b786bf33b82171f316de910ade6feeb0ebc573fe525272daf55fb751d9a2c1
Download zip
32.37 MB
MD5: 6eb97c50cd49cd9ccb660334687354ce
SHA-1: d782b0da9222d54ad6ff8d111901fd9871c5f893
SHA-256: 43da5485f729e46fac509ce044498b2293f47380dda74f4c1c4134a5895d87b4
Release notes
This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.
Drupal 10.3.x will receive security coverage until June 2025.
All changes in this release
- Issue #3496405 by spokje: [random test failure] EditorSecurityTest::testEditorXssFilterOverride
- Issue #3477586 by spokje, catch, godotislate, berdir, dww, nicxvan: [random test failure] LayoutBuilderBlocksTest::testBlockPlaceholder failing
- Issue #3487371 by spokje, dww: [random test failure] ImageStylesPathAndUrlTest
- Issue #3478628 by oily, alexpott, catch, sheshsharma, osopolar, dunx, shane birley, joegl: Fatal error: Uncaught TypeError: Drupal\Core\Extension\ThemeHandler::addTheme()
- Issue #3484587 by daniel.j, joachim, catch: Document that invalid IDs are not present in the return array or EntityStorageInterface::loadMultiple
- Issue #3456417 by eugene bocharov, pablo_pukha, smustgrave, oily, andypost: [regression] DateHelper::dayOfWeekName() returns untranslated name
- Issue #3489022 by mondrake, larowlan, catch, el7cosmos, bbrala, alexpott, fjgarlin, longwave, xurizaemon, rosk0, poker10, mstrelan, nick_schuch: Remove drupalci.yml
- Issue #2533756 by quietone, jhodgdon, xjm: Revisit large numbers of @see in text element docs
- Issue #3480855 by mlncn, akulsaxena, smustgrave: Update lifecycle link for sdc
- Issue #3487488 by kim.pepper, mondrake, dakwamine, smustgrave: ExtensionMimeTypeGuesser::guessMimeType must support file names with "0" (zero) in the extension parts like foo.0.zip
- Issue #3491256 by amateescu: Improve the exception message for unsupported entity types in a workspace
- Issue #3482464 by nicxvan, berdir: Backport Hook and LegacyHook Attribute
- Issue #3490710 by mfb: Catch potential exception when calling Request::create() in PathBasedBreadcrumbBuilder
- Issue #3484365 by nexusnovaz, joachim: docs for EntityTypeInterface::getBundleOf() should say entity type *id*
- Issue #3484799 by vladimiraus: EntityAccessCheck documentation contains errors
- Issue #3486972 by catch, longwave, larowlan: DefaultExceptionHtmlSubscriber should not clone the request for 400/BadRequestException
- Back to dev.
What’s next?
- Learn how to install Drupal
- Learn how to update Drupal
- Extend Drupal to do more
- Get training
- Check out what others built
Bug fixes
Insecure
