Quantcast
Channel: Releases for Drupal core
Viewing all articles
Browse latest Browse all 584

drupal 10.0.0-alpha6

$
0
0

This is an alpha release for the next major version of Drupal. This alpha release is intended for module or theme authors to test whether their code is compatible with recent significant changes in Drupal 10.0.x. Drupal 10 alpha releases should not be used in production. No upgrade path will be provided between Drupal 10 alpha releases, nor to Drupal 10.0.0-beta1.

This release fixes security vulnerabilities present in 10.0.0-alpha5. Sites are urged to update immediately after reading the notes below and the security announcements:

Many breaking changes will be added before Drupal 10.0.0-beta1

Drupal 10 alphas do not include all the breaking changes that will be included in 10.0.0. Any further alpha releases as well as the first beta release will include more dependency updates and remove more APIs that are (or that will be) deprecated in Drupal 9, including several core modules and themes that will be moved to contributed projects. Refer to How to prepare your Drupal 7 or 8 site for Drupal 9 for tools you can use to check the Drupal 10 compatibility of modules, themes, and sites.

Specific, highly disruptive changes that are not complete in 10.0.0-alpha5:

  1. CKEditor 4 will be removed from Drupal 10 core, and content created with CKEditor 4 might not work in CKEditor 5 because of upstream changes. You must either install the CKEditor 4 module in contrib (which will receive security fixes until Drupal 9's end-of-life in 2023), or update your site and content to CKEditor 5. There is a beta-stability CKEditor 5 module available for testing in Drupal 9 and 10.

  2. Various core modules and themes will be moved to contributed projects.

  3. Numerous JavaScript libraries and APIs will be removed, including the JavaScript build step.

There will be many other specific updates and deprecated API removals beyond this list. For more information on 10.0.x development, see #3118143: [meta] Release Drupal 10 on December 14, 2022.

The 10.0.x branch also includes all the latest commits that will be backported to 9.5.x and earlier branches. 10.0.x will be nearly identical to 9.5.x except for the following:

  1. Deprecated code will be removed, including entire deprecated modules.
  2. Dependencies will be updated to new major versions as appropriate.

For all other changes, refer to the 9.5.x branch.

Important update information

This alpha includes many changes that are also included in Drupal 9.4.0. For additional changes from Drupal 9, review the release notes of the previous alpha releases:

  1. Drupal 10.0.0-alpha1
  2. Drupal 10.0.0-alpha2
  3. Drupal 10.0.0-alpha3
  4. Drupal 10.0.0-alpha4
  5. Drupal 10.0.0-alpha5

Platform requirement changes

Composer 2.3.5 is required

Drupal 10 will require Composer version 2.3.5 or higher. Core developers must update to at least Composer 2.3.5 to work on Drupal core, and site owners may also receive a warning or error about older Composer versions in the future.

Composer plugin authorization change

Composer 2.2 introduced a new security feature that requires Composer projects to authorize plugins. This change means that Composer commands to install and update Drupal projects will fail unless either the required plugins are authorized in the project configuration or the user manually replies "y" to a prompt to authorize the plugin. The prompt can break continuous integration and deployment workflows, so it is recommended that projects authorize core's required plugins (and projects using development dependencies should authorize development plugins).

This release configures drupal/recommended-project to authorize core's required and development plugins by default. Existing projects may also need to update their configuration to authorize these plugins. For more information, review Composer 2.2+ authorized plugins.

Support removed for old versions of UC browser

Drupal has removed explicit support for older versions of UC browser that relied on a forked version of Chrome. Newer versions of the browser that rely on WebView should be unaffected.

CKEditor 5 API changes

The drupal.elements metadata in CKEditor 5 plugin definitions must now explicitly list which tags are creatable. Previously, any listed tag was assumed to be creatable by the CKEditor 5 module, even if it was only able to create attributes on an already existing tag. (Note that this change is also available in Drupal 9.4.0.)

Dependency updates

  • Drupal 10 now requires Symfony 6.1, and all Symfony components have been updated to 6.1.2.

  • guzzlehttp/guzzle 7.4.5 and guzzlehttp/psr7 2.4.0 are now required to address two upstream security advisories:

    1. CVE-2022-31090
    2. CVE-2022-31091
  • Psr/Log has been updated to version 3. All the methods that are on \Psr\Log\LoggerInterface have stricter typehints. Contrib and custom modules that provide logger implementations will need to be updated for Drupal 10.

  • Drupal core's pinned Composer dependency versions have been updated for the latest minor and patch releases and, where appropriate, constraints have been increased to require the latest minor versions.

    The composer/xdebug-handler and sebastian/type dependencies have received major version updates that remove support for PHP versions not supported by Drupal 10.

  • Chalk has been removed as a JavaScript development dependency.

Known issues

Search the issue queue for known issues.

All changes since Drupal 10.0.0-alpha5

Release type: 
Bug fixes
New features

Viewing all articles
Browse latest Browse all 584