Drupal 10.5.2
8 August 2025
Drupal version 10.5.2 is now available.
Upgrading to Drupal 10.5.2
Drupal 10.5.2 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Drupal updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Drupal install to test the 10.5.2 upgrade prior to applying it live. Get started managing your Drupal installations with Installatron
What's New in Drupal 10.5.2
This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites
Bug Fixes and Changes
- Avoid abuse of config sync import tarballs
- Incorrect warning for system requirements for APCu memory
- [random test failure] ToolbarActiveTrail::testToolbarActiveTrail
- Add dcam as a subsystem maintainer of the Link module
- Deleting a config checkpoint breaks the checkpoint storage
- Saving untrusted config results in memory leak
- Config of the type plural_label can never be valid due to the label constraint
- [regression] Wrong doc link on database update page
- [regression] Tags td, tr or th ignored by new parseHTML implementation
- Claro breadcrumb doesn't meet minimum target-size
- hook_views_query_alter() docs missing use QueryPluginBase import
- Olivero: Allow primary & secondary navigation focus outline to work with long text
- block_theme_initialize should not create blocks during config sync
- Access cacheability is not correct when "view own unpublished content" is in use
- Improve Dynamic Page Cache header assertions in JSON:API tests
- Composer issue when dealerdirect/phpcodesniffer-composer-installer update from v1.0.0 to v1.1.0
- AutowireTrait and autowire for services behave differently for nullable types
- Allow setting memory limit to -1 for phpstan precommit hooks
- Add mohit_aghera as File sub-system co-maintainer
- Add tests for SA-CORE-2025-004: Link field attribute XSS
- FormState::getTriggeringElement() behaves inconsistently when request is malformed
- \Drupal\jsonapi\Controller\FileUpload deprecation layer does not work
- Yarn watch task broken
- The entity link label formatter should check URL access
- Clean up todo in InlineBlockEntityOperations::handleEntityDelete()
