drupal 9.5.9

This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites. Learn more about Drupal 9. Drupal 10.0.9 is also available.

Drupal 9.5.x will receive security coverage until November 2023.

If you are upgrading from Drupal 8, read upgrading a Drupal 8 site to Drupal 9, 9.0.0 release notes, and the 9.5.0 release notes before upgrading to this release.

Important changes in this release

• Improved support for PHP 8.2.
• laminas/laminas-diactoros has been forked to fix a security issue while retaining compatibility with PHP 7.3 and 7.4. The forked package is called longwave/laminas-diactoros.

All changes since 9.5.8

• Issue #3357881 by longwave, alexpott: Update composer.lock hash for 9.5.x
• Issue #3356283 by longwave, szato, catch, Dave Reid, Spokje, effulgentsia, joelpittet, cmlara: Fork laminas/laminas-diactoros
• Hotfix for #3123060 by dww, daffie: Fix hash for classy.theme.
• Issue #2985882 by tim.plunkett, Mirakolous, ravi.shankar, ayush9598, Rajab Natshah, andypost, Anybody, kattekrab, devarch, Freddy Rodriguez, adubovskoy, corneliusd, mradcliffe, longwave, lukasss, Pancho, Graber, dpi, joshf, lordzik, dorianwinterfeld, jacov, kdmdrupal, jlancaster, jborgesr, joarferme, tonytheferg, chrisrockwell, agilman, kducharm, Sam152, scotwith1t, labboy0276, Spokje, jazzfiction, Shrutidkadam, ab2211, Dave Kopecek, segx, alexmoreno, themaurice, the_glitch, NWOM, kwfinken, berliner, design.er, ouissla, zterry95, jamsilver, fonant, Rajendar Reddy, Christopher Riley, BramDriesen, webdrips: Workaround for "Call to a member function getLabel() after enabling layout_builder"
• Issue #3123060 by Spokje, quietone, longwave, ankithashetty, daffie, jungle, xjm: Enable 'Drupal.Commenting.DocComment.ShortSingleLine' coding standard
• Revert "Issue #3268833 by quietone, xjm, jungle, ravi.shankar, smustgrave, daffie, Spokje, DanielVeza: Fix method comments in tests for Drupal.Commenting.DocComment.ShortSingleLine"
• Issue #3268833 by quietone, xjm, jungle, ravi.shankar, smustgrave, daffie, Spokje, DanielVeza: Fix method comments in tests for Drupal.Commenting.DocComment.ShortSingleLine
• Issue #2692451 by neclimdul, tedfordgif, smustgrave, mikey_p, larowlan: Xss::filterAdmin() incorrectly filters datetime attribute
• Issue #3355675 by effulgentsia, longwave: Drupal 9 uses PHP syntax that's deprecated in PHP 8.2, so exclude that from error_reporting() and DeprecationListenerTrait
• Issue #3357247 by Spokje: Update guzzlehttp/psr7
• Issue #3268833 by quietone, xjm, jungle, ravi.shankar, smustgrave, daffie, Spokje, DanielVeza: Fix method comments in tests for Drupal.Commenting.DocComment.ShortSingleLine
• Issue #3355139 by krystalcode: Method documented to raise error while it actually does not
• Issue #3354951 by Spokje: Update @todo comment in \Drupal\Core\Database\StatementInterface::fetchObject
• Issue #3175012 by anagomes, CurriedN, andregp, ptmkenny, longwave, klausi, mglaman, acbramley: Update PHPDoc for DataDefinition
• Issue #3268835 by quietone, smustgrave, ravi.shankar, xjm, borisson_, catch: Fix method comments in non tests for Drupal.Commenting.DocComment.ShortSingleLine
• Issue #3355301 by quietone, alexpott, smustgrave: Fix spellcheck:make-drupal-dict
• Issue #3159896 by mherchel, awset, srishtiiee, Gauravvvv, _utsavsharma, lauriii, pameeela, bnjmnm, Kristen Pol, kiran.kadam911, pradeepjha, Sakthivel M: Select form field values are hidden at narrow screen widths in Claro theme
• Issue #3353096 by Spokje, catch, xjm: [random test failure] Try to un-skip and fix InlineBlockPrivateFilesTest::testPrivateFiles() in context of [#3353085]
• Issue #3353167 by Spokje: [random test failure] Try to un-skip and fix LayoutBuilderNestedFormUiTest::testAddingFormBlocksToOverrides in context of [#3353085]
• Issue #3353179 by Spokje: [random test failure] Try to un-skip and fix LayoutBuilderTest::testLayoutBuilderUi in context of [#3353085]
• Issue #3353153 by Spokje: [random test failure] Try to un-skip and fix LayoutBuilderNestedFormUiTest::testAddingFormBlocksToDefaults in context of [#3353085]
• Issue #3353088 by Spokje: [random test failure] Try to un-skip and fix BlockFormMessagesTest::testValidationMessage() in context of [#3353085]
• Issue #3353100 by Spokje, xjm: [random test failure] Try to un-skip and fix InlineBlockTest::testDeletion in context of [#3353085]
• Issue #3353103 by Spokje: [no random test failure] Try to un-skip and fix LayoutBuilderDisableInteractionsTest::assertContextualLinksClickable in context of [#3353085]
• Issue #3353092 by Spokje: [random test failure] Try to un-skip and fix ContextualLinksTest in context of [#3353085]
• Issue #3352548 by DanielVeza, Gauravvvv, larowlan: Leftover D10 deprecations in the contextual module
• Back to dev.
• Merged 9.5.8.
• Issue #2188715 by penyaskito, amanshukla6158, mrinalini9, smustgrave, YesCT, quietone: Document return value in \Drupal\locale\LocaleTranslation::getStringTranslation
• Issue #3073518 by mohit_aghera, rkostov, Eugene Bocharov, rensingh99, wturrell, smustgrave, quietone, pameeela: 'Is not equal to' operator ignored on exposed, grouped filter
• Issue #3354385 by tstoeckler: Remove tstoeckler from MAINTAINERS.txt
• Issue #3350013 by sbrenner02, _utsavsharma, _KASH_, sahil.goyal: Olivero: Toggle Nav does not always open and produces error Uncaught TypeError: Cannot read properties of null (reading 'classList') in console
• Issue #3352524 by sleitner: Do not use direct configuration changes in LanguageNegotiationSessionTest
• Issue #3346099 by rckstr_rohan, dww, joachim, smustgrave: @return docs for WorkflowTypeInterface::getTransitionsForState() are wrong
• Issue #3268838 by quietone, TR, smustgrave, xjm: Fix functions and test modules for Drupal.Commenting.DocComment.ShortSingleLine
• Issue #3268809 by quietone, Spokje, Rishabh Vishwakarma, ravi.shankar, mrinalini9, Medha Kumari, JatinGupta40, smustgrave, xjm, longwave, catch: Fix class comment doc blocks in tests for 'Drupal.Commenting.DocComment.ShortSingleLine'
• Issue #3134349 by sleitner, yookoala, sharma.amitt16, Akram Khan, penyaskito, sahil.goyal, swatichouhan012, s_leu, larowlan, smustgrave, joachim: \Drupal\language\LanguageNegotiator does not handle PluginNotFoundException and break the site completely
• Issue #3348381 by rckstr_rohan, joachim: incorrect example code in Token docs
• Issue #3350972 by nod_, Spokje, xjm, quietone, lauriii: [random test failure] Drupal\Tests\layout_builder\FunctionalJavascript\LayoutBuilderUiTest::testReloadWithNoSections()
• Issue #2927311 by DanielVeza, smustgrave, Gribnif, richard.thomas, larowlan: Contextual links are not sorted by weight, contrary to documentation
• Revert "Issue #3350972 by nod_: [random test failure] DrupalTestslayout_builderFunctionalJavascriptLayoutBuilderUiTest::testReloadWithNoSections"
• Issue #3350972 by nod_: [random test failure] DrupalTestslayout_builderFunctionalJavascriptLayoutBuilderUiTest::testReloadWithNoSections
• Issue #3352635 by Spokje: Run yarn build:css in core/scripts/dev/commit-code-check.sh whenever core/package.json and/or core/package.lock change
• Issue #3351494 by catch, Spokje: Skip Drupal\Tests\media\FunctionalJavascript\MediaSourceFileTest
• Issue #3351596 by dww, catch: Skip Drupal\Tests\ckeditor5\FunctionalJavascript\MediaLibraryTest
• Issue #3351500 by catch: Skip Drupal\Tests\layout_builder\FunctionalJavascript\ContextualLinksTest
• Issue #3351607 by schlaukopf, xjm: Skip numerous functional JS tests that repeatedly break HEAD
• Issue #3082032 by kristiaanvandeneynde: ToolbarController::preRenderGetRenderedSubtrees() deletes parent's cacheability
• Issue #3341448 by acbramley, fenstrat, Lendude, smustgrave: EntityReference ViewsSelection::stripAdminAndAnchorTagsFromResults() should call Element::children($results)
• Issue #3277784 by Tim Bozeman, mrinalini9, larowlan: copyRawVariables should support default route parameters
• Revert "Issue #3268809 by quietone, Rishabh Vishwakarma, ravi.shankar, Medha Kumari, mrinalini9, JatinGupta40, smustgrave, xjm, longwave: Fix class comment doc blocks in tests for 'Drupal.Commenting.DocComment.ShortSingleLine'"
• Issue #2849246 by catch, jp.stacey: HtmlResponseAttachmentsProcessor::processAttachments should reference processing placeholders
• Issue #3268809 by quietone, Rishabh Vishwakarma, ravi.shankar, Medha Kumari, mrinalini9, JatinGupta40, smustgrave, xjm, longwave: Fix class comment doc blocks in tests for 'Drupal.Commenting.DocComment.ShortSingleLine'
• Issue #3351961 by longwave, Spokje: Update webpack
• Issue #3316627 by bnjmnm, Gauravvvv, Sakthivel M, Akshay kashyap, longwave, Asha Nair, joachim, larowlan, smustgrave: dropbuttons get weird white line when font size is changed and at at various zoom settings
• Revert "Issue #3316627 by bnjmnm, Gauravvvv, Sakthivel M, Akshay kashyap, Asha Nair, joachim, smustgrave: dropbuttons get weird white line when font size is changed and at at various zoom settings"
• Issue #3010334 by xjm, Amber Himes Matz, catch, dww, Berdir, FeyP, Mixologic: Document how contrib hook_update_N() should be numbered now that modules can be compatible with multiple major branches and versioned semantically
• Issue #3002443 by markconroy, lauriii, smustgrave, larowlan: Improve preview usability
• Issue #3338224 by mfb: .m4a files should use audio/mp4 MIME type, not audio/mpeg
• Issue #3347212 by miikamakarainen, sakthi_dev, Yogesh Sahu, lauriii, Nikhil_110, Wim Leers, smustgrave, borisson_: "Add or select media" not translated
• Issue #3316627 by bnjmnm, Gauravvvv, Sakthivel M, Akshay kashyap, Asha Nair, joachim, smustgrave: dropbuttons get weird white line when font size is changed and at at various zoom settings
• Issue #3078030 by danflanagan8, mottihoresh, Abhijith S, smustgrave, andypost, phenaproxima: Duplicated summary item when linking to content with the MediaThumbnailFormatter
• Issue #3350387 by Gauravvvv, Chi: Claro: fix size of H3 elements in status report
• Issue #3331870 by Chris64, PrabuEla, smustgrave, lauriii, cilefen: Code error url fragment: wrong array key: key #fragment should be fragment
• Issue #2806009 by alexpott, JvE, Berdir, Dmitriy.trt, jhodgdon, lokapujya, VladimirAus, Gábor Hojtsy, Jose Reyero, Anybody, kristiaanvandeneynde, Sutharsan, casey, smustgrave, nod_: Installing a module causes translations to be overwritten
• Issue #3347480 by AndyF: Use temporary redirect for RFC5785 change password well known resource
• Issue #3349028 by nod_, DuaelFr, smustgrave, bnjmnm: Improper use of aria-label in "System Powered By" block
• Issue #3282451 by nod_, fanton, andy-blum, Bhanu951, mherchel, mgifford, andrewmacpherson: Create a README.md file in Olivero theme to explain the name of the theme
• Issue #2264943 by FeyP, er.pushpinderrana, _pratik_, gauravkhambhala, Weilinggu, Nikhil_110, joachim, jhodgdon: Queue API topic and hook_queue_info() don't link to one another
• Issue #3323329 by alexander.levitsky, nayana_mvr, metalbote: Secondary tabs not accessible if more than X on screen size Y
• Issue #3347067 by danflanagan8, _pratik_, smustgrave, longwave: CsrfAccessCheck docblock extremely out of date
• Issue #3293855 by rkoller, rocketeerbkw, nitin_lama, Anchal_gupta, AaronMcHale, smustgrave, cutehair: Update the outdated user_help text for user.admin_permissions and the description of the select box on the role settings page
• Issue #3331397 by gcb, DanielVeza, Tatsiana, arisen: ListItemBase::generateSampleValue() white screen when options list is empty
• Issue #2745179 by juancasantito, heddn, dpi, acbramley, Xano, dawehner, alexpott, catch: Uncaught exception in link formatter if a link field has malformed data
• Issue #3086845 by jonathan1055, smustgrave: Module constraint checks fail incorrectly due to str_replace
• Issue #3341737 by acbramley, lauriii, gordon, jptaranto, Wim Leers: CKEditor 5 content squashed in off-canvas sidebar
• Issue #3336463 by sleitner, recrit, catch: Htaccess rewrite rules for gzipped CSS and JavaScript aggregates never match
• Issue #2911379 by Spokje, ProFire, mstrelan: Unneccessary bitwise operation for file permissions check on Windows
• Issue #2977785 by acbramley, ameymudras, mrinalini9, Hardik_Patel_12, Berdir, sourabhjain, ravi.shankar, Deepak Goyal, Prem Suthar, TanujJain-TJ, kishor_kolekar, snehalgaikwad, nghai, larowlan, Lendude, smustgrave, Sam152, quietone: No error messages are shown for applied validation on a view exposed filter with on "AJAX"
• Issue #3351113 by a.milkovsky, mostepaniukvm, daffie: Not optimal query in DatabaseBackend::garbageCollection()
• Issue #3351004 by Natallia: Deprecations for PHP 8.1 get_class() and get_called_class() without argument
• Revert "Issue #3306554 by andypost, mondrake: InvocationMocker::withConsecutive() is deprecated in PHPUnit 9.6 and removed from PHPUnit 10 - easy replacements"
• Issue #2758915 by mdupont, darvanen, -enzo-, Amber Himes Matz, smustgrave: AJAX commands documentation is misleading when working with render arrays
• Issue #3145850 by smustgrave, natedouglas, nod_, Gauravvvv, s_leu, amateescu, pankaj.singh, Abhijith S, quietone, jungle: Required summary element hidden when other text-with-summary fields do not require summary
• Issue #2505579 by dpi, NivethaSubramaniyan, smustgrave, ian.mahoney, amwhalen, Medha Kumari, Chi: Improve handling of invalid input in time zone abbreviation to TZID route
• Issue #2567745 by mohit_aghera, smustgrave, quietone, andypost, dww, alexpott: \Drupal\taxonomy\Plugin\views\field\TermName::getItems should work with links
• Issue #2911377 by smustgrave, ProFire, MerryHamster, ranjith_kumar_k_u, Medha Kumari, Spokje, neclimdul, a.dmitriiev, quietone, catch, Gábor Hojtsy: Fix for Unit Test on Windows
• Issue #3221633 by bircher, lind101, smustgrave, quietone, Zemelia: BatchNegotiator tests for an invalid route
• Issue #3281557 by smustgrave, ipo4ka704, acbramley, ravi.shankar, benjifisher, Sardis, ameymudras, adeshsharma, Rishabh Vishwakarma, rollins, TanujJain-TJ, larowlan, catch, igorbiki: DateTime::__construct(): Passing null to parameter #1 ($datetime) of type string is deprecated
• Issue #3348686 by james.williams, FeyP, kunal_sahu, larowlan, alexpott: [regression] Inaccessible language switcher links are removed before alternatives can be provided
• Issue #2958649 by acbramley, moshe weitzman, fenstrat: Incorrect totals count when importing config that contains a theme uninstall
• Issue #3307409 by mherchel, heddn, gquisini, Phoenixbros, bbu23: Setting media field to loading="eager" doesn’t work when using the media_thumbnail field formatter