Updated as new information comes in (D8 and D9 patch at the end of the page) The Drupal security team announced it on October 12 with PSA-2026-10-12: the critical core security update was released on Wednesday, October 14, 2026, with…
Following a discussion with Clément (@shikiryu) about putting composer.lock under version control (or "versioning" it), I asked the question on Twitter: Petite discussion avec @shikiryu, on est d'accord : le composer.lock on le commit…
