❌

Normal view

Why AI builds better and faster on the shoulders of giants

Why AI builds better and faster on the shoulders of giants

The best code your AI writes is the code it never has to write. When building on top of Drupal there is luckily a lot of that.

This post is about my experience with AI accelerated development and why I think it's such a good combo with Drupal.

https://fonsvandamme.com/insights/why-ai-builds-better-and-faster-shoulders-giants

submitted by /u/Fonucci
[link] [comments]

I make my AI agents fight in an arena, then let them dream. Here's my current Drupal setup

Same task, same prompt, Claude Code and OpenCode in separate worktrees. An orchestrator picks the winner and steals the best parts from the losers. Sometimes the winner is Qwen3.8-27B on my local server, not Opus.

After each task they "dream": they consolidate what they learned into skills and agents, pushed to a repo so every project gets it.

It burns more tokens, but I review a lot less. Full write-up here:

https://menetray.com/en/blog/how-i-work-ai-today-ddev-worktrees-and-arena-where-my-agents-fight-it-out

Anyone else running more than one harness on the same task?

submitted by /u/rmenetray to r/drupal
[link] [comments]

I make my AI agents fight in an arena, then let them dream. Here's my current Drupal setup

Same task, same prompt, Claude Code and OpenCode in separate worktrees. An orchestrator picks the winner and steals the best parts from the losers. Sometimes the winner is Qwen3.8-27B on my local server, not Opus.

After each task they "dream": they consolidate what they learned into skills and agents, pushed to a repo so every project gets it.

It burns more tokens, but I review a lot less. Full write-up here:

https://menetray.com/en/blog/how-i-work-ai-today-ddev-worktrees-and-arena-where-my-agents-fight-it-out

Anyone else running more than one harness on the same task?

submitted by /u/rmenetray
[link] [comments]

Migrating a website

Hey friends,

I inherited my predecessors drupal 8 website. I’ve found it to be difficult to debug and follow the structure that has been set up. Ultimately, I want to update the websites appearance and versioning to make it more modern. Would it be possible for me to create a fresh installation of drupal 11 and then import/migrate the old site’s database? Or should I try to upgrade the old site?

I have never used drupal before, so I’m thinking that going through a fresh installation will build familiarity and make the site easier for me to maintain. I would appreciate any advice or insights! Thank you!

submitted by /u/Old-Season-6791
[link] [comments]

Migrating a website

Hey friends,

I inherited my predecessors drupal 8 website. I’ve found it to be difficult to debug and follow the structure that has been set up. Ultimately, I want to update the websites appearance and versioning to make it more modern. Would it be possible for me to create a fresh installation of drupal 11 and then import/migrate the old site’s database? Or should I try to upgrade the old site?

I have never used drupal before, so I’m thinking that going through a fresh installation will build familiarity and make the site easier for me to maintain. I would appreciate any advice or insights! Thank you!

submitted by /u/Old-Season-6791 to r/drupal
[link] [comments]

Your Drupal Security Is Running on Volunteer Hours, and They Can't Keep Up

Drupal's security team calls itself "an all-volunteer group." Thirty people for thousands of projects. Their own PSA now admits fixes will ship slower, giving attackers "more time armed with LLMs," while the community debated banning AI contributions.

Meanwhile security firm reportedly built working exploit from a published patch in 51 minutes.

I'm not saying Drupal is insecure. I'm saying nobody is on the hook for enterprise security.

Read more : https://tanay.co.in/blog/your-drupal-security-is-running-on-volunteer-hours

submitted by /u/saitanay to r/drupal
[link] [comments]

Your Drupal Security Is Running on Volunteer Hours, and They Can't Keep Up

Drupal's security team calls itself "an all-volunteer group." Thirty people for thousands of projects. Their own PSA now admits fixes will ship slower, giving attackers "more time armed with LLMs," while the community debated banning AI contributions.

Meanwhile security firm reportedly built working exploit from a published patch in 51 minutes.

I'm not saying Drupal is insecure. I'm saying nobody is on the hook for enterprise security.

Read more : https://tanay.co.in/blog/your-drupal-security-is-running-on-volunteer-hours

submitted by /u/saitanay
[link] [comments]

State of CMS - 2026

State of CMS - 2026

Since 2016, the developer community has been conducting annual surveys on frameworks and programming languages. Many of you have probably participated in State of JS, State of HTML, or State of CSS. But what about those of us working with CMSs? There has been no equivalent survey for our community.

2026 has been a year of change for those of us who build and manage websites; I have a feeling that many of you are on the move, migrating websites from one CMS to another or building without it. AI is enabling rapid changes on all fronts. Broad market-share numbers tell us very little about your experiences building and managing websites with different tools; that is why I hope that we, as a community, can close this information gap with our own open-source State of CMS survey.

stateofcms.com

The anonymised results will be freely available on GitHub. I will also create and publish an interactive report, but I am especially excited to see what the community does with the data.

submitted by /u/kemnern to r/drupal
[link] [comments]

3 new components

Quick update; the Utility Components module now has 3 new components:

  • Styled text: Single line of text with support for font size, style and weight, letter spacing (tracking), line-height (leading), and capitalisation. It's good for those little colourful labels of all-caps text that AI likes to add to designs, or for extra large text (e.g. in a "key numbers" row).
  • Carousel: Displays multiple slides of content, one or more at a time. Choose between a "slide" and "fade" animation. Navigation between slides can be automatic, or controlled via swiping, scrolling, or arrow buttons. Built using Splide.
  • Marquee: Displays elements like images or text in a continuously-scrolling bar. Can be paused, and has controls for things like speed, gap, direction, etc. Built using Marquee6k.

They're vanilla and mostly independent, so you can just copy them into your existing theme if you want instead of installing the module. Just make sure to copy the relevant library if you do.

submitted by /u/dane_websites to r/drupal
[link] [comments]

State of CMS - 2026

State of CMS - 2026

Since 2016, the developer community has been conducting annual surveys on frameworks and programming languages. Many of you have probably participated in State of JS, State of HTML, or State of CSS. But what about those of us working with CMSs? There has been no equivalent survey for our community.

2026 has been a year of change for those of us who build and manage websites; I have a feeling that many of you are on the move, migrating websites from one CMS to another or building without it. AI is enabling rapid changes on all fronts. Broad market-share numbers tell us very little about your experiences building and managing websites with different tools; that is why I hope that we, as a community, can close this information gap with our own open-source State of CMS survey.

stateofcms.com

The anonymised results will be freely available on GitHub. I will also create and publish an interactive report, but I am especially excited to see what the community does with the data.

submitted by /u/kemnern
[link] [comments]

3 new components

Quick update; the Utility Components module now has 3 new components:

  • Styled text: Single line of text with support for font size, style and weight, letter spacing (tracking), line-height (leading), and capitalisation. It's good for those little colourful labels of all-caps text that AI likes to add to designs, or for extra large text (e.g. in a "key numbers" row).
  • Carousel: Displays multiple slides of content, one or more at a time. Choose between a "slide" and "fade" animation. Navigation between slides can be automatic, or controlled via swiping, scrolling, or arrow buttons. Built using Splide.
  • Marquee: Displays elements like images or text in a continuously-scrolling bar. Can be paused, and has controls for things like speed, gap, direction, etc. Built using Marquee6k.

They're vanilla and mostly independent, so you can just copy them into your existing theme if you want instead of installing the module. Just make sure to copy the relevant library if you do.

submitted by /u/dane_websites
[link] [comments]

Drupal minor versions will only get 8 months of security support from 2027, which in practice means 2 months to update

In case you missed PSA-2026-11-02 ( https://www.drupal.org/psa-2026-11-02 ): starting in 2027, each Drupal core minor version gets 8 months of security coverage instead of the 12 we've had since 8.6. The Security Team's reason is the flood of AI-generated security reports they can't keep up with on current funding. Fewer supported branches means less backporting.

The part that matters day to day: with a new minor every six months, when 11.6 / 12.1 comes out in June 2027, 11.5 / 12.0 only has two months of support left (until August 2027).

And Drupal 10 reaches EOL on December 9, the same week Drupal 12 (PHP 8.5 minimum) is released.

I'm migrating a few sites from 10 to 11 right now. Core isn't the issue. What eats the time is deprecated APIs in custom code, contrib modules several releases behind, the odd abandoned module, and patches in composer.json that no longer apply. Upgrade Status and Rector help, but the sites that were kept up to date are a completely different experience from the ones nobody touched for two years.

I wrote a longer post on what this means for site owners and what a maintenance budget should realistically cover now: https://menetray.com/en/blog/eight-months-drupal-shortens-security-support-and-your-site-cant-wait-year-anymore

Are your clients actually budgeting for regular updates, or are you still doing big catch-up jobs every couple of years?

submitted by /u/rmenetray
[link] [comments]

Drupal minor versions will only get 8 months of security support from 2027, which in practice means 2 months to update

In case you missed PSA-2026-11-02 ( https://www.drupal.org/psa-2026-11-02 ): starting in 2027, each Drupal core minor version gets 8 months of security coverage instead of the 12 we've had since 8.6. The Security Team's reason is the flood of AI-generated security reports they can't keep up with on current funding. Fewer supported branches means less backporting.

The part that matters day to day: with a new minor every six months, when 11.6 / 12.1 comes out in June 2027, 11.5 / 12.0 only has two months of support left (until August 2027).

And Drupal 10 reaches EOL on December 9, the same week Drupal 12 (PHP 8.5 minimum) is released.

I'm migrating a few sites from 10 to 11 right now. Core isn't the issue. What eats the time is deprecated APIs in custom code, contrib modules several releases behind, the odd abandoned module, and patches in composer.json that no longer apply. Upgrade Status and Rector help, but the sites that were kept up to date are a completely different experience from the ones nobody touched for two years.

I wrote a longer post on what this means for site owners and what a maintenance budget should realistically cover now: https://menetray.com/en/blog/eight-months-drupal-shortens-security-support-and-your-site-cant-wait-year-anymore

Are your clients actually budgeting for regular updates, or are you still doing big catch-up jobs every couple of years?

submitted by /u/rmenetray to r/drupal
[link] [comments]

Vibing Drupal - My Tips and Tricks for 10x Drupal Development using AI

Vibing Drupal - My Tips and Tricks for 10x Drupal Development using AI

Here are my tips and tricks, highlighting those that can 2x productivity and lead you toward 10x productivity and beyond. I hope you'll scan or read this list, take something away, and keep up with our fast-moving times.

Below is a summary of the key tips that can help you reach 10x productivity

  • Harnesses: Use a desktop harness with an integrated browser so you can see what the AI sees and thinks.
  • Agent Skills: Capture any repeatable task or process in a skill, and have the agent refine it after each session.
  • Plans: Default to plan mode so you can review what the agent will do before it changes code and eats tokens.
  • CLI/Scripts: Have agents create and maintain custom CLI scripts, like a DDEV command that installs Drupal with the recipes you need.
  • Worktrees: Combine Git worktrees with DDEV to run multiple agents on multiple tasks in the same project.
  • Contribution: Use the Drupal.org CLI so an agent can create an issue, fork, and MR in minutes.
  • Drush: Have agents write custom Drush commands that expose the data and operations they keep needing.
  • Ask: Ask the AI to explain what it did and why, and use it as a learning tool before it does things for you.

What are your tricks and tips for using AI in Drupal development?

submitted by /u/jrockowitz
[link] [comments]

Vibing Drupal - My Tips and Tricks for 10x Drupal Development using AI

Vibing Drupal - My Tips and Tricks for 10x Drupal Development using AI

Here are my tips and tricks, highlighting those that can 2x productivity and lead you toward 10x productivity and beyond. I hope you'll scan or read this list, take something away, and keep up with our fast-moving times.

Below is a summary of the key tips that can help you reach 10x productivity

  • Harnesses: Use a desktop harness with an integrated browser so you can see what the AI sees and thinks.
  • Agent Skills: Capture any repeatable task or process in a skill, and have the agent refine it after each session.
  • Plans: Default to plan mode so you can review what the agent will do before it changes code and eats tokens.
  • CLI/Scripts: Have agents create and maintain custom CLI scripts, like a DDEV command that installs Drupal with the recipes you need.
  • Worktrees: Combine Git worktrees with DDEV to run multiple agents on multiple tasks in the same project.
  • Contribution: Use the Drupal.org CLI so an agent can create an issue, fork, and MR in minutes.
  • Drush: Have agents write custom Drush commands that expose the data and operations they keep needing.
  • Ask: Ask the AI to explain what it did and why, and use it as a learning tool before it does things for you.

What are your tricks and tips for using AI in Drupal development?

submitted by /u/jrockowitz to r/drupal
[link] [comments]

In the Open with Tiffany Farriss: Security in the age of AI | Drupal Association

In the Open with Tiffany Farriss: Security in the age of AI | Drupal Association

Drupal Association Interim CEO Tiffany Farriss on how AI is making vulnerabilities cheap to find, and what the Drupal community is doing to keep fixing them safely.

In this episode:
β€’ Why AI-assisted analysis is β€œan everyone problem” for open source security
β€’ What five months of Alpha-Omega funded SEIR work has meant for the Drupal Security Team and its volunteers
β€’ How site owners, hosts, and organizations can help, starting with Drupal Steward coverage

Read the full transcript: https://www.drupal.org/association/blog/in-the-open-security-in-the-age-of-ai

In the Open with Tiffany Farriss is a weekly series from the Drupal Association, the non-profit that maintains Drupal.org, coordinates Drupal security, and supports the global Drupal community. New episodes every week. Subscribe to follow along.

Produced with thanks to Stephen Cross of Second Signal Media.

submitted by /u/cmkn to r/drupal
[link] [comments]
❌