Tuesday, October 27, 2026
We started with Drupal-related notes:
- upcoming critical Drupal core release on October 14, 2026
- Drupal core security advisory SA-CORE-2026-014; also SA-CORE-2026-015 and SA-CORE-2026-016
- Drupal 11.3.20 released; also Drupal 11.5.0-beta1 and Drupal 12.0.0-beta2
- DDEV 1.25.5: PHP security fixes, PHP 8.6, rebuilt TUI, SSH agent passthrough, and QR codes
- the .profile file extension has been deprecated
- robots.txt no longer blocks search pages with query parameters
- Drupal 11.5 deprecates .module files ahead of their Drupal 13 removal
- why Drupal security updates need to happen within hours
- Composer CVE-2026-59944 affects Drupal 11-compatible versions
- File (Field) Paths 8.x-1.0 is stable and back under maintenance
- Drupal Security Team adds Rudloff, Zhao, Driesen, and Kalata as full members
- the Drupal Advocacy Program: helping the world catch up to what Drupal can do
- the official Drupal AI demo is live
- official Drupal AI demo
- what Drupal AI 1.5 means for digital marketing leaders
- meet Dashi, the new multilingual demo for Drupal CMS
- one description, inside and outside Drupal
- running with scissors: using AI to explore and build
- vibing Drupal: using AI to maintain a module
- vibing Drupal: using AI to contribute code by planting it
- vibing Drupal: using AI to switch between multiple versions
- vibe coding Drupal: the pragmatic middle path
- the October #DrupalOffTheIsland challenge
- Southwestern Ontario Drupal Camp 2026: Megan McDermott
- automatically fix Drupal redirect chains with Redirect Audit
- DDEV add-on for running Drupal code quality tools
- more flexible Drupal Views exposed filters with the form attribute
- Playwright for Drupal: a test automation guide
- what Drupal’s .module deprecation means
- what AI adds to Drupal’s content management
- cutting Drupal site installation time from 20 minutes to 90 seconds with an AI coding agent
- DrupalEasy removes third-party tracking scripts for privacy
- State of Drupal presentation, September 2026
- thoughts on a Drupal Federation: charter first, price tag later
- Shy One-Time contrib module stops link security tests from breaking one-time-links
- WordPal Gallery of WordPress themes converted to Drupal
- Mac Packwala and the Curse of the Stale Cache
Next, general web (and other) notes:
- what's new to the web platform in September 2026
- introducing Firefox Enterprise
- Pantheon's P1: Go ahead. Break it.
- the P1 Block Library
- Pantheon P1 brings AI agents to web building without replacing Drupal
- a fresh start for web builders in the AI era
- how Pantheon's layered security response helps reduce risk during critical PHP vulnerabilities
- ChatGPT Sites: build sites and apps with ChatGPT
- PHP Security advisory: critical remote code execution vulnerabilities
- eight bits of trust: eMudhra's CA keys cracked in milliseconds
- State of HTML 2026 survey now open
- 64-day Let's Encrypt certificate lifetimes coming in February 2027
- Stack Overflow Developer Survey 2026 results
- Example.com just launched its biggest redesign in decades
- updated Candidate Recommendation for Scalable Vector Graphics (SVG) 2
- WebAIM Screen Reader User Survey #11 results
- Lullabot Sandbar: a secure VM for running agents like Claude Code
- comprehensive web redesign in the Rice Brand Guide
- the people holding up the internet
- WebKit is blocking identity resolution infrastructure
- a sustainable web career for when all this blows over
- human in the middle: the review is still yours
- WCAG 3: a different future for accessibility
- fingerprints are the new cookies
- 2027 Web Platform Feature Ranking; the future of CSS; and Eric Meyer's Interop 2027 rankings
- chat is AI's command line
- GPT-6 and intelligent UI for everyone
- what changes when a tool doesn't have to pay for itself
- the death of Agile: how AI kills it and saves it
- This Hue Shall Pass: a colour contrast checker
- new HTML and CSS features to use in your design system
- the ultimate low-quality image placeholder technique
- the argument that decorative images aren't a thing
- using maths to balance heading styles
- how far ahead browsers fetch lazy-loaded images and media
- the best way to use icons in web UIs
- CSS-Tricks has a new owner
At the end of the meeting, we recommended people watch "Pre-Flight Checklist: Local Code Quality for Drupal Developers" as presented at Pacific Northwest Drupal Summit.
These "regular" Web Dev Rev meetings generally happen once every 3 weeks. The next session is scheduled for November 17th, 2026.