drupal 10.6.3

This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about the latest version of Drupal.

Drupal 10.6.x will receive security support until December 2026. Drupal 10.5.x will continue to receive security support until June 2026.

Drupal 10.4.x security support has ended. Sites on any Drupal version prior to 10.5.x should upgrade to a supported release as soon as possible.

All changes since 10.6.2

• task: #3566054 Add heddn as a maintainer of the Image subsystem
• task: #3566053 Add heddn as a maintainer of the Authentication and Authorization subsystem
• test: #3571492 Several tests fail on PHP 8.1 on 10.6.x because of requirements issues
• fix: #3463524 editor_post_update_sanitize_image_upload_settings fails on missing text format
• Reapply "task: #3571196 Update symfony/process constraint"
• task: #3570133 PHPUnit security update
• Revert "task: #3571196 Update symfony/process constraint"
• task: #3571196 Update symfony/process constraint
• docs: #3532469 Documentation mentions Drupal being fully "repaired"
• task: #3569877 Add PHP 8.4 and 8.5 end of life dates to PhpRequirements
• docs: #3559209 cache contexts should use `list` everywhere
• task: #3566060 Add smustgrave as a maintainer of the Menu UI subsystem
• task: #3566058 Add penyaskito as a maintainer of the Content Translation subsystem
• task: #3566059 Add penyaskito as a maintainer of the Language subsystem
• fix: #3561800 Using \Drupal\Core\Database\Query\Insert::from() on postgres on a table with a serial field can result in duplicate key error
• fix: #3327662 Deleting the system.site:page.front config results in a PHP deprecation
• fix: #3539508 form-data: Usage of unsafe random function
• fix: #3450792 Only set #group is status field exists in NodeForm
• fix: #3389633 SwitchShortcutSet form does not set access on machine name element
• test: #3520036 [random test failure] CKEditor5MarkupTest
• fix: #3550787 [random test failure] CKEditor5Test::testLanguageOfPartsPlugin
• fix: #3419203 ckeditor5_post_update_code_block() throws an error for format using CKE5 but with CKE4 settings
• fix: #3468180 Undefined array key "view_mode" in block_content_theme_suggestions_block_alter
• fix: #3566429 Update to 10.6.0 fails due to nodejs version incompatibility
• Back to dev.