drupal 10.5.0-rc1

This is a release candidate for the next maintenance minor version of Drupal 10. Release candidates are not supported for production sites, but they are intended for widespread testing in preparation for the upcoming stable release. More information on release candidates.

This maintenance minor provides important dependency updates and API additions for Drupal 10 sites to provide the best forward-compatibility with Drupal 11. It does not not break backward compatibility (BC) for public APIs. This is according to Drupal core's backward compatibility and experimental module policies.

Drupal 10.5.x will receive security support until June 2026. Drupal 10.4.x will continue to receive security support until December 2025.

Drupal 10.3.x security support has ended. Sites on any Drupal version prior to 10.4.x should upgrade to a supported release as soon as possible.

Important update information

• CKEditor5 is updated from v44.0.0 to v45.2.0, which includes a number of improvements and bug fixes. If you have any custom integrations with CKEditor, see the v45 release notes for breaking changes. If you were using the provided CKEditor5 icon set, the icons have been renamed. Drupal has added an icon name backward compatibility layer for this specific change.

• Composer has increased its minimum requirement for the justinrainbow/json-schema package to version 6, and as a result, Drupal core's lockfile and metapackage now pin this development dependency to version 6 as well. Modules using this package should read the version 6 upgrade notes as there are breaking changes. If your contributed or custom project relies on an older version of justinrainbow/json-schema, you should declare a conflict with the 6.x branch in your composer.json.

• Several PHP and JavaScript development dependencies have received minor- and patch-level updates to the latest versions.

Known issues

Search the issue queue for known issues.

All changes since Drupal 10.5.0-beta1

• Issue #3527142 by andypost, catch, longwave, godotislate, xjm: Update Composer and development dependencies for 11.2.0 and 10.5.0
• Issue #3529592 by lussoluca, znerol, kristiaanvandeneynde: Wrong alias for access_policy_processor service in core.services.yml
• Issue #3523018 by godotislate, longwave, catch, quietone, xjm, acbramley, idebr, smustgrave, justcaldwell, salmonek, larowlan: Update CKEditor 5 to 45.2.0
• Issue #3522356 by quietone, longwave: Update JavaScript dependencies for 10.5.0
• Issue #3516558 by plopesc, smustgrave, m4olivei, nod_, cb_govcms, tarawij, pdureau: Settings is not a valid render array in navigation module
• Issue #3094817 by nicxvan, quietone, prudloff: Add a SECURITY.md explaining how to report security vulnerabilities properly
• Issue #3524613: Add Cristina Chumillas as UX Manager, Emma Horrell as provisional UX Manager to Drupal core