❌

Normal view

Do you like having secure Drupal sites? Help fund xjm. | xjm

Funding for essential roles is falling, when we need it more than ever.

Here's the hard truth: Funding for Drupal core's stability and security is at its lowest since 2012,** **while our needs (especially for core security) are at an all-time high.

Some quick facts:

- Core release management funding is currently at less than half its 2013-2023 levels.
- In 2022 and 2026, respectively, two organizations that had each sponsored a Drupal core release manager for a decade ended their respective sponsorships.
- Release timelines for Drupal 11.4, 11.5, and 12.0 have all slipped well past their planned schedules. This is the first time this has happened since Drupal 8 development in 2013-2015*.*
- Before 2026, the all-time maximum of Drupal core security advisories in a single year was 15. The Drupal Security Team has issued 16 already this year… and there will likely be more.
- In August, September, and October 2026 alone, we issued 198 contributed project security advisories. This is more advisories than any entire year before 2026… and there will absolutelybe more.

submitted by /u/cmkn to r/drupal
[link] [comments]

Do you like having secure Drupal sites? Help fund xjm. | xjm

Funding for essential roles is falling, when we need it more than ever.

Here's the hard truth: Funding for Drupal core's stability and security is at its lowest since 2012,** **while our needs (especially for core security) are at an all-time high.

Some quick facts:

- Core release management funding is currently at less than half its 2013-2023 levels.
- In 2022 and 2026, respectively, two organizations that had each sponsored a Drupal core release manager for a decade ended their respective sponsorships.
- Release timelines for Drupal 11.4, 11.5, and 12.0 have all slipped well past their planned schedules. This is the first time this has happened since Drupal 8 development in 2013-2015*.*
- Before 2026, the all-time maximum of Drupal core security advisories in a single year was 15. The Drupal Security Team has issued 16 already this year… and there will likely be more.
- In August, September, and October 2026 alone, we issued 198 contributed project security advisories. This is more advisories than any entire year before 2026… and there will absolutelybe more.

submitted by /u/cmkn
[link] [comments]

In the Open with Tiffany Farriss: Sustaining the Drupal commons | Drupal Association

In the Open with Tiffany Farriss: Sustaining the Drupal commons | Drupal Association

Drupal Association Interim CEO Tiffany Farriss on why Drupal’s commons is under pressure, how the Drupal Certified Partner program is evolving, and what it takes to keep free software running for the next 25 years.

In this episode:
• What the ecosystem and business surveys revealed
• Why the Drupal Certified Partner program is becoming the Drupal Certified program
• The $40 in donated services every Drupal site receives each year, and who shoulders that cost
• Making contribution visible, expected, and recognised

In the Open with Tiffany Farriss is a weekly series from the Drupal Association, the non-profit that maintains Drupal.org, coordinates Drupal security, and supports the global Drupal community. New episodes every week. Subscribe to follow along.

Produced with thanks to Stephen Cross of Second Signal Media.

submitted by /u/cmkn to r/drupal
[link] [comments]

In the Open with Tiffany Farriss: Sustaining the Drupal commons | Drupal Association

In the Open with Tiffany Farriss: Sustaining the Drupal commons | Drupal Association

Drupal Association Interim CEO Tiffany Farriss on why Drupal’s commons is under pressure, how the Drupal Certified Partner program is evolving, and what it takes to keep free software running for the next 25 years.

In this episode:
• What the ecosystem and business surveys revealed
• Why the Drupal Certified Partner program is becoming the Drupal Certified program
• The $40 in donated services every Drupal site receives each year, and who shoulders that cost
• Making contribution visible, expected, and recognised

In the Open with Tiffany Farriss is a weekly series from the Drupal Association, the non-profit that maintains Drupal.org, coordinates Drupal security, and supports the global Drupal community. New episodes every week. Subscribe to follow along.

Produced with thanks to Stephen Cross of Second Signal Media.

submitted by /u/cmkn
[link] [comments]

Navigating Drupal’s AI Contribution Policy: A View from the Review Queue · Zoom · Luma

Navigating Drupal’s AI Contribution Policy: A View from the Review Queue · Zoom · Luma

Contribution using LLMs, the policy, and etiquette around it is a topic that has come up in some recent posts here as well as in other places such as in the Drupal community Slack and the issue queue. So it’s quite serendipitous that a session touching on this is coming up soon, on Wednesday, November 4, 2026 at 2:00pm Eastern Standard Time.

Figured it’s worth sharing here for those who might be interested.

Whether it’s your employer, your clients, or your favorite open source project, we all have AI policies to navigate now. Drupal has one too, and it was written with a lot of care for both contributors and the people who review their work.

In this session, Stephen Mustgrave joins us to introduce the policy on the use of AI when contributing to Drupal. Stephen has led the Needs Review Queue Initiative for several years, checking in on Drupal core issues as they reach “needs review.” That gives him a front-row view of what helps an issue move forward and what slows it down.

We’ll start with the why. Committers are responsible for the codebase, and they need to understand every change they commit. Every contribution to an issue should help clarify the problem and the proposed solution. AI-generated summaries can add cognitive load for reviewers and, even when the contributor understands the change perfectly well, they don’t show it. The result is that the work of understanding shifts onto someone else.

Then we’ll get practical:

What the policy asks of contributors
- The updated issue summary templates, including the new section for AI output
- Why reviewers ask for summaries written in your own words, and what makes a good one
- How to ask AI to explain a solution so you understand it well enough to describe it yourself

We’re coming at this from a place of enthusiasm. AI tools have made it possible for more people to contribute to Drupal, and that energy is a good thing. Let’s talk about how to channel it into contributions that move issues forward and keep everyone in the chain, from contributor to reviewer to committer, on the same page.

Bring your questions and your own policies too. If you maintain contributed projects, we’d love to hear how you’re handling AI-assisted contributions.

submitted by /u/cmkn
[link] [comments]

Friendly reminder: fill out and share the first-ever Drupal Ecosystem Retrospective survey by September 20!

The Drupal Association is conducting its first-ever Drupal Ecosystem Retrospective. This is a good opportunity to directly give the Drupal Association your candid feedback and thoughts about what you feel is going well and what needs improvement in the Drupalverse.

The due date for filling this out is September 20, 2026 (I have no idea if there’s a specific time; I’m just a random Drupaler who wants as many people in our community to be heard). The due date happens to be the weekend before the Drupal Association’s board retreat and shortly before DrupalCon Rotterdam.

Anyways, please consider filling this out and/or sharing with other fellow Drupalists!

https://docs.google.com/forms/d/e/1FAIpQLSdgHEgx9QbutXygHlgxcJjgLn24gMQok2h2ujB9ePH_JpH9dg/viewform?usp=send_form

submitted by /u/cmkn
[link] [comments]

2026 Drupal Association At-Large board election extension to August 17 at 23:59 UTC

@here Board Election Extension

We've discovered that our voting platform, Helios, had a mail delivery outage or queue delay, resulting in the final two reminder messages not being delivered until after the deadline for some voters.

Therefore, we have extended the election.

The Board Election is now closing Monday 17 August, 23:59 UTC

That is:

- 7:59pm Eastern, Aug 17
- 4:59pm Pacific, Aug 17
- 05:30am on 18 Aug - India time
- 9:59am on 18 Aug - Australia time

Search for messages from "[[email protected]](mailto:[email protected])"to find your ballot

Learn about the candidates and the election timeline here:

https://www.drupal.org/association/board/elections/election-2026-dates-and-candidates

This election uses approval voting: rather than picking just one candidate, you may vote for every candidate you approve of, and the candidate approved by the most voters wins. More on how approval voting works:

https://en.wikipedia.org/wiki/Approval\_voting

Questions or trouble voting? Contact [[email protected]](mailto:[email protected])

submitted by /u/cmkn
[link] [comments]

2026 Drupal Association At-Large board election closing today 14 August, 23:59 UTC

🗳️ Board Election Reminder: Voting is currently open for the 2026 Drupal Association At-Large board seat! The Board Election is closing today 14 August, 23:59 UTC

That is:
- 7:59pm Eastern, Aug 14
- 4:59pm Pacific, Aug 14
- 05:30am on 15 Aug - India time
- 9:59am on 15 Aug - Australia time

Search for messages from "[[email protected]](mailto:[email protected])"to find your ballot

If you were signed up as a Ripple Maker (Drupal Association member) as of 24 hours before the election opened you should have received a ballot from Helios Voting. ( [[email protected]](mailto:[email protected])).

Voting began 22 July at 00:00 UTC and closes 14 August at 23:59 UTC.

Learn about the candidates and the election timeline here:
drupal.org/association/board/elections/election-2026-dates-and-candidates

This election uses approval voting: rather than picking just one candidate, you may vote for every candidate you approve of, and the candidate approved by the most voters wins. More on how approval voting works:
en.wikipedia.org/wiki/Approval_voting

Questions or trouble voting? Contact [[email protected]](mailto:[email protected])

submitted by /u/cmkn
[link] [comments]
❌