Drupal CMS News Digest
developments tricks, articles and reviews from Drupal specialists
Droptica: Component mindset: teaching clients to think in components
The real deliverable of a component-based CMS is not the paragraphs. It is the moment your client stops asking for "a new page" and starts asking for "a new component."See the four phases of the component mindset shift, what changes in the agency relationship, and how Edenred Polska went from planning to abandon Drupal to commissioning new components on a regular basis.
https://www.droptica.com/blog/
Droptica: Drupal extranet: how to build a secure portal for clients, partners, and sales teams
Not every login wall is an intranet. Often the people you most want to serve privately are clients, partners, and sales agents - not employees.Learn how to architect a Drupal extranet with gated content, per-user dashboards, role-based access, and the security, caching, and SEO decisions that keep partner data private.
https://www.droptica.com/blog/
The Drop Times: Andy Marquis Outlines Custom Field’s Role Alongside Paragraphs in Drupal
When Paragraphs-based content models grow deep, Drupal teams can inherit slower rendering, heavier databases, and harder migrations. Custom Field maintainer Andy Marquis explains where field-based structured data offers a leaner alternative, and where Paragraphs still belongs.
https://www.thedroptimes.com/7
Centarro: How Centarro Handles Critical Drupal Security Releases
Critical security vulnerabilities don't wait for a convenient time. They arrive on their own schedule, and how quickly your team responds can mean the difference between a routine update and a serious exposure.A highly critical advisory with a 48-hour windowOn May 18, the Drupal Security Team issued PSA-2026-05-18, a pre-announcement for a highly critical security release affecting every supported branch of Drupal core. The advisory scored a 20 out of 25 on the security risk scale. No authentication required, no special access needed. The release window was two days later, on May 20, between 17:00 and 21:00 UTC.The Drupal Security Team urged site owners to reserve time for immediate updates because exploits could be developed within hours or days. They took the unusual step of providing best-effort patch files even for end-of-life versions of Drupal 8 and 9 because the potential impact was that significant.If you're running a site that processes orders and manages customer data, you can’t put something like this off until the next sprint.Coordinating across every clientWhen the pre-announcement landed, we reached out to all of our support clients and worked directly with their teams to determine priority, assess whether the vulnerability applied to each site's specific configuration, and plan accordingly.
Read more
https://www.centarro.io/blog/h
Droptica: Drupal Paragraphs spacing: solving the gaps in component-based layouts
You can build a beautiful paragraph system and still watch it fall apart the first time an editor stacks two white sections together. Spacing is the detail that quietly decides whether a component-based layout feels polished or broken.Compare three approaches to Drupal Paragraphs spacing, see a concrete Twig and CSS implementation with margin and padding controls, and learn which real-world scenarios editors run into on production sites.
https://www.droptica.com/blog/
Aten Design Group: Drupal Metatag Module Basics for Content Editors
Drupal Metatag Module Basics for Content Editors
Joel Steidl
Tue, 06/23/2026 - 14:38
Drupal Helping your website content be found, shared, and understood clearly and responsibly.When you publish website content, the work does not stop at the page itself. Search engines, social platforms, and browsers all rely on behind-the-scenes information to understand what your content is about and how it should appear to people looking for it.In Drupal, the Metatag module gives content editors a way to shape that understanding. You do not need to be a developer to use it effectively as part of your day-to-day content work. Editing and reviewing metatags is generally straightforward for content editors.Installing the module and establishing site-wide defaults typically requires a developer or someone with Drupal experience. Tasks such as adding the module, enabling it, and defining default values are usually handled during site setup. Once that foundation is in place, content editors can focus on the quality and context of their content rather than technical implementation details.This article explains the most common Metatag settings you...
https://atendesigngroup.com/ar
Droptica: Drupal Paragraphs: from unusable to empowering content editors
Having Drupal Paragraphs installed is not the same as having Paragraphs working. If your editors upload images instead of editing text and file developer tickets for every small change, the problem is usually the implementation - not the platform.See what separates broken setups from empowering component libraries, the five principles behind editor-friendly Paragraphs, and how proper configuration drove a ~24% conversion lift without a rebuild.
https://www.droptica.com/blog/
Palantir: Freedom is Not Free: A Model for Open Source Sustainability
Freedom is Not Free: A Model for Open Source Sustainability
demet
Tue, 06/23/2026 - 11:49 How to align public policy and procurement to support the costs of our shared digital infrastructure The modern world runs on open source software—trillions in economic value, and growing more essential to digital sovereignty by the day. Yet, beneath this foundation, the projects producing it are starved of capital. Open source simply does not have the structural resources it needs to be sustainable. The code is free, but the human and technical infrastructure required to maintain it is not.A project like Drupal is no longer just a code repository; it is a full-scale utility provider. We deliver supply chain security, product management, and continuous integration pipelines. Our licenses waive all warranties and responsibilities—and yet enterprise scale demands we provide these services anyway, because no one else will. The core failure of our current model is that open-source funding is completely disconnected from these operational cost centers.Because we lack a built-in mechanism to capture the value open source creates, we have accidentally engineered an extractive system. The Takers who consume open source without paying their fair share of its operational footprint are not acting out of malice; they are simply doing exactly what the market currently...
https://www.palantir.net/blog/
Dries Buytaert: Drupal's role in agentic workflows
When we started working on the Drupal AI initiative in June 2025, I assumed most AI features would live inside Drupal.
By my DrupalCon Chicago keynote in March 2026, my thinking had changed. I framed the shift as "inside-out" versus "outside-in" and concluded that not every AI capability belongs inside Drupal. Some work is better done outside the CMS, where AI tools can move faster and connect back to Drupal when needed.
Last week, I explored these ideas in more detail in "AI and the great CMS unbundling". That post argued AI is making the CMS less central as a creation tool, but more important as a control layer: the place where content is structured, governed, reused, and published with trust.
This post picks up from there. If Drupal's role as the control layer is becoming more important, it needs to support AI-driven workflows that run inside Drupal, start outside Drupal, and move across both: external workflows that call into Drupal, and Drupal-native workflows that outside systems can safely rely on.
Drupal joins workflows beyond the CMS
First, Drupal needs to work well with tools outside the CMS: coding agents like Claude Code and Cursor, and orchestration platforms like Salesforce Agentforce, n8n, and Activepieces.
I actually showed what this could look like in my DrupalCon Vienna keynote in October 2025. Here is a short clip of that:
It...
https://dri.es/drupal-role-in-
Drupal's role in agentic workflows
When we started working on the Drupal AI initiative in June 2025, I assumed most AI features would live inside Drupal.
By my DrupalCon Chicago keynote in March 2026, my thinking had changed. I framed the shift as "inside-out" versus "outside-in" and concluded that not every AI capability belongs inside Drupal. Some work is better done outside the CMS, where AI tools can move faster and connect back to Drupal when needed.
Last week, I explored these ideas in more detail in "AI and the great CMS unbundling". That post argued AI is making the CMS less central as a creation tool, but more important as a control layer: the place where content is structured, governed, reused, and published with trust.
This post picks up from there. If Drupal's role as the control layer is becoming more important, it needs to support AI-driven workflows that run inside Drupal, start outside Drupal, and move across both: external workflows that call into Drupal, and Drupal-native workflows that outside systems can safely rely on.
Drupal joins workflows beyond the CMS
First, Drupal needs to work well with tools outside the CMS: coding agents like Claude Code and Cursor, and orchestration platforms like Salesforce Agentforce, n8n, and Activepieces.
I actually showed what this could look like in my DrupalCon Vienna keynote in October 2025. Here is a short clip of that:
It...
https://dri.es/drupal-role-in-
Talish Khan: I Keep Evaluating Alternatives to Drupal. I Keep Choosing Drupal. Here Is the Actual Reasoning.
I Keep Evaluating Alternatives to Drupal. I Keep Choosing Drupal. Here Is the Actual Reasoning. Why I Bother Looking at AllThere is a failure mode among experienced developers where they defend their stack because switching would invalidate years of accumulated expertise. The sunk cost is real and the bias is real. The antidote is to take the alternatives seriously when the opportunity comes, build something real with them, and see whether they have caught up.So when a project's requirements actually push me toward another tool, or when I am curious enough about a new one to spend real time on it, I do exactly that. I read the docs properly. I build a non-trivial prototype. I model a real content structure, not a blog with three fields. I look at what production would actually require. Then I compare honestly.This post is the result of those evaluations. It is not a Drupal sales pitch. It is the reasoning of someone who has genuinely used the alternatives and keeps finding that, for the work I do, the decision still holds.Where the Alternatives Are Genuinely BetterLet me start here, because a post that only praises Drupal is not credible.The modern headless stacks are genuinely better at greenfield speed. If I am starting a small-to-medium project with a clean content model and a React frontend, Sanity or Payload will get me to a working state faster than Drupal will. The...
https://talish.dev/blog/why-i-
Specbee: How to automate content publishing with the Drupal Scheduler module?
The Drupal Scheduler module automates content publishing and unpublishing. Learn about the module setup, its cron dependency, workflow integration, and configuration.
https://www.specbee.com/blogs/
Salsa Digital: Defence Housing Australia — new GovCMS SaaS CivicTheme website
Overview Defence Housing Australia’s challenge The Defence Housing Australia website was on Sitefinity CMS, a proprietary content management system that was approaching end-of-life (EOL). DHA wanted to rebuild its website on the GovCMS SaaS platform, within a tight time frame of only 9-12 weeks to ensure that the replatforming was done prior to the EOL date. Defence Housing Australia’s transformation Salsa Digital started with an assessment to ensure GovCMS SaaS and CivicTheme would meet DHA’s needs. As part of the assessment (and in preparation for the content migration) Salsa mapped the existing content structures to CivicTheme. The mapping became a key input to the Figma designs, platform configuration and content uplift.
/case-studies/defence-housing-
Talking Drupal: Talking Drupal #558 - Agent Management System
Today we are talking about AI, Agents, and A System to manage them with guest Luke McCormick. We'll also cover AI Auto-reference as our module of the week. For show notes visit: https://www.talkingDrupal.com/558 Topics Introducing Agent Management Origin Story Claude Credits Scrum Meets AI Retention Handoff Protocol Filesystem Why Handoffs Work So Well Examples and Human Loop Agent Roles and Model Costs Choosing Models by Task Not Drupal Specific Works With Any Model Scrum Sprints For Agents Human Cognitive Overload Tuning Autonomy Levels Setup And Handoff File Updating Customized AMS Persistent Memory Artifacts Demand Better Summaries Solo Power With Agents Roadmap And AMS Trio Resources Stanford Web Camp - Agile for Agents – Managing Robots The Way We Manage Humans. AMS Robert Douglas spec kitty xdebug tui ams-trio Guests Luke McCormick - cellear Hosts Nic Laflin - nLighteneddevelopment.com nicxvan John Picozzi - epam.com johnpicozzi MOTW Correspondent Martin Anderson-Clutz - mandclu.com mandclu Brief description: Have you ever wanted to use AI to suggest related content on your Drupal site? There's a module for that. Module name/project name: AI Auto-reference Brief history How old: created in June 2023 by Scott Euser (scott_euser) or Soapbox Versions available: 1.0.0-rc4 Maintainership Actively maintained Security coverage - opted in, needs stable release...
https://sacstudio.libsyn.com/t
The Drop Times: Ecosystem Governance, Infrastructure Funding, and Core Readiness
Governance, infrastructure funding, and release maintenance define this week’s Editor’s Pick as the Drupal Association keeps self-nominations open for its 2026 At-Large Board Election and introduces the Drupal Sustaining Members Program. The updates connect elected representation, recurring support for shared project infrastructure, security remediation, and final testing for Drupal 11.4.0-rc2.The election will fill one community-elected seat on the Drupal Association Board. The seat opens as Alejandro Moreno completes their 2024–2026 term. Candidates must self-nominate, and nominations close on 30 June 2026 at 23:59 UTC.Candidates will be announced on 7 July 2026. The Get to Know the Candidates period runs from 7 July to 21 July 2026, followed by voting from 22 July 2026 at 00:00 UTC to 14 August 2026 at 23:59 UTC. The new board member will be announced on 26 August 2026.Voting eligibility depends on individual Drupal Association membership. Members must have an active membership by 21 July 2026 at 00:00 UTC, at least 24 hours before voting opens. The schedule gives prospective candidates and voters clear deadlines for participation before the election enters its voting phase.The Drupal Sustaining Members Program creates a recurring funding path for organisations that depend on Drupal. The association says contributions support Drupal.org, code repositories, software...
https://www.thedroptimes.com/n
The Drop Times: Ahead of DrupalCamp Tokyo 2026, James Abrahams Outlines Priorities for Drupal AI
Provider costs, agent behaviour and multilingual support are becoming practical governance questions for Drupal sites adopting AI workflows. In written responses facilitated by the DrupalCamp Tokyo 2026 organisers, James Abrahams told The DropTimes that Drupal AI is relying on pluggable governance, Drupal CMS-aligned work, outside-in agent workflows and collaboration with Symfony AI. His answers frame Drupal’s AI direction around maintainability, structured site building and multilingual production readiness rather than isolated feature development.
https://www.thedroptimes.com/i
