Install
To start a new Drupal project with version 8.6.11:To update your site and all dependencies to the latest version of Drupal:
To update your site to this specific release:
Using Composer to manage Drupal site dependencies
Downloads
Release notes
Update: Drupal 8.6.12 is available and fixes a critical issue with 8.6.11 for some themes.
This is a patch release of Drupal 8 and is ready for use on production sites. Learn more about Drupal 8.
If you are upgrading to this release from 8.5.x, read the Drupal 8.6.0 release notes before upgrading to this release.
This release resolves two critical issues affecting Drupal 8 site updates:
-
The third-party Twig library, which powers Drupal 8's theme system, recently released a new minor version (1.38.0) that introduced a fatal error when used with Drupal 8. As a result, Drupal 8 sites managed with Composer encountered this fatal error when updating Twig to version 1.38.0 or 1.38.1. This release updates Drupal to require Twig 1.38.2, which resolves the fatal error.
-
The recent releases for SA-CORE-2019-003 introduced a serialized data integrity issue affecting some contributed and custom modules, including the Default Content and Paragraphs modules. This release resolves the issue for affected sites.
Additionally, this release resolves an administrator-only access bypass with the Layout Builder module. Previously, users who didn't have access to view individual entities were still granted access to configure the layout for that entity (if per-entity layout configuration was enabled) and therefore could view its content. This implicit access has been removed. Site owners should ensure that all content editor roles have access to view the content for which they are configuring the layout.
Known issues
- #3026560: After upgrade to 7.63, 8.5.10, 8.6.7, 9.4.0 get TYPO3 phar error for drush
- #3026443: \Drupal\Core\Security\PharExtensionInterceptor is incompatible with GeoIP and other libraries that use phar aliases or Phar::mapPhar()
- #3031128: Update from 8.6.7 to 8.6.8 warnings - Drupal\Core\Extension\Extension has no unserializer
- #3040210: Updating twig/twig to v1.38.2 (included in Drupal 8.6.11) causes fatal error when embed tags are used in templates
All changes since 8.6.10
- #3037970 by Berdir, Baysaa: Custom serialized field's data should be normalized even if it's empty
- #3039408 by vijaycs85, WidgetsBurritos, alexpott, phenaproxima, Joseph Zhao, tstoeckler, kfritsche, mikelutz, fabpot: Updating twig/twig to v1.38.0 or v1.38.1 causes fatal error
- Revert "Issue #2135445 by dww, Sam152, jessebeach, Mile23, Kristen Pol, Wim Leers, larowlan: Toolbar displays Manage tab even if the user is not permitted to see it"
- #2947517 by Lendude, jibran, alexpott, larowlan: Selenium driver: API to get remote file paths
- #2999723 by hiway, pawandubey, shaal, kjay, MaddieC, lauriii: Umami's card layout broken in IE11
- #3031710 by scor: Remove scor from MAINTAINERS.txt
- #3034913 by govind.maloo, wombatbuddy: Written 'Confuration' instead of 'Configuration' in the 'Typed Data API' article
- #3036197 by dww: REST FileUploadResource::streamUploadData() can call fclose(FALSE)
- #2975081 by alexpott, amateescu, larowlan, mtodor, catch: UpdatePathTestBase fails to re-initialize the test site (rebuild container, clear caches) after running the database updates
- #3035873 by Eli-T: Remove Eli-T from MAINTAINERS.TXT
- #2870458 by Lendude, alexpott, jibran, vijaycs85, Wim Leers, dawehner, Gábor Hojtsy: Convert web tests to browser tests for quickedit module
- Revert "Issue #2870458 by Lendude, jibran, alexpott, vijaycs85, Wim Leers, dawehner, larowlan: Convert web tests to browser tests for quickedit module"
- #2870458 by Lendude, jibran, alexpott, vijaycs85, Wim Leers, dawehner, larowlan: Convert web tests to browser tests for quickedit module
- #2937639 by hotwebmatter, hiway, andrewmacpherson, markconroy, shaal, cehfisher, mgifford, kjay, Eli-T, kbeck303: Umami Theme - a11y context is needed for read more links
- #3021406 by ApacheEx, Lendude: Convert \Drupal\Tests\quickedit\FunctionalJavascript\QuickEditLoadingTest::testDisplayOptions to a kernel test
- #3030929 by kiwimind, Kavichandran P, c.nish2k3, quietone: User migrations tests in wrong directory
- #3008030 by quietone, masipila, maxocub: Migrate D7 i18n fields label and description
- #3032376 by alexpott, dww, Berdir: Files renamed by \_file_save_upload_single() do not have the correct filename on the File entity
- #3032620 by alexpott, dww: \Drupal\file\Plugin\rest\resource\FileUploadResource uses basename() when it needs to use the Drupal version
- #3033494 by alexpott, dww, tim.plunkett: SiteConfigureForm can install the file module without the field module
- #3035318 by mpdonadio: `DateFormatter()` assumes 30 days per month, while February only has 28 days. Causes fails in tests
- #2995200 by Sam152, sjancich: Defaults for publishing options do not save when workflow is enabled
- #3029661 by Lendude, dawehner: Move BrowserTestBase tests out of modules/simpletest into /tests
- #3027745 by claudiu.cristea, idimopoulos, wengerk, alexpott: UniqueFieldConstraint doesn't work for entities with string IDs
- #2903322 by gaurav.kapoor, levmyshkin: Change FAPI Container example class to an array
- #3034695 by xjm, neclimdul: Fix coding standard errors from SA-CORE-2019-003
- #2994550 by tedbow, tim.plunkett, gapple, johndevman, Wim Leers, neclimdul, EclipseGc, catch: Filtering block plugins by context is slow
- #3028490 by tim.plunkett, Kristen Pol, xjm, tedbow, r.aubin, phenaproxima: Users with "configure any layout" can see entities they don't have "view" access to
- #3032869 by alexpott, tim.plunkett, dww, tacituseu, xjm, Mixologic: \Drupal\Core\Update\UpdateKernel::fixSerializedExtensionObjects() caused test runs to double in duration
- Merged 8.6.10.
- Revert "Issue #3031740 by alexpott, tmanhollan, catch, collinhaines: Updating to 8.6.8 or 8.6.9 with Drush 8 causes data loss via update_fix_compatibility()"
- Revert "Issue #3032869 by alexpott, tim.plunkett, dww, tacituseu, Mixologic: \Drupal\Core\Update\UpdateKernel::fixSerializedExtensionObjects() caused test runs to double in duration"
- #2672950 by Vj, ilya.no, Krzysztof Domański, elandirayan, Rijidij, amateescu, shahgm, larowlan: Notice: Undefined index: #default_value in Drupal\Core\Datetime\Element\Datetime::valueCallback() (line 103
- #3032869 by alexpott, tim.plunkett, dww, tacituseu, Mixologic: \Drupal\Core\Update\UpdateKernel::fixSerializedExtensionObjects() caused test runs to double in duration
- #3019333 by tim.plunkett, julenmelgar, Ismail Cherri: If you translate the literal "inline blocks" to another language in the layout builder, it stops working
- #2992580 by Vj, Arez, andypost, jhedstrom: Custom callbacks doesn't work
- #3031740 by alexpott, tmanhollan, catch, collinhaines: Updating to 8.6.8 or 8.6.9 with Drush 8 causes data loss via update_fix_compatibility()
- #2135445 by dww, Sam152, jessebeach, Mile23, Kristen Pol, Wim Leers, larowlan: Toolbar displays Manage tab even if the user is not permitted to see it
- #2964777 by tim.plunkett, tedbow: Method comment for \Drupal\layout_builder\Plugin\SectionStorage\DefaultsSectionStorage::getDisplay is wrong
- #3029614 by cdykstra, cilefen, andrewmacpherson, jrockowitz: Fix aria-required in states.js
- #3027236 by rachel_norfolk, kjay, tonypaulbarker, akshay_d, shaal, Eli-T, Not Real, babusaheb.vikas: Umami - hero block is identical on Home and Recipe pages, so potentially confusing
- #3023729 by tim.plunkett, bkosborne, xjm: LayoutBuilderController should iterate over components in a region using Element::children()
- #3025865 by quietone, xurizaemon, mikelutz: i18ntaxonomy should be an array in d6 VocabularyPerType source plugin
- #3030781 by shaal, mcannon, andrewmacpherson, Gábor Hojtsy: Umami - icon misaligned on warning and error messages