Drupal 11.2.3

8 August 2025

Drupal version 11.2.3 is now available.

Upgrading to Drupal 11.2.3

What's New in Drupal 11.2.3

• Empty top bar actions dropdown
  
• Avoid abuse of config sync import tarballs
  
• ConditionInterface docs mention nonexistent QueryConditionInterface
  
• Incorrect warning for system requirements for APCu memory
  
• Remove core/recommended constraint for sebastian/diff
  
• Register a user without email verification should still send an email
  
• Assets paths in CSS no longer rewritten when aggregation is enabled
  
• Increase the color contrast of the toggle button border
  
• FileFieldTestBase::assertFileEntryNotExists() should be documented, typehinted, and accept a null value for $message
  
• Fix 'DocComment.MissingShort' in FunctionalJavascript tests
  
• PageVariantInterface docs mention class that doesn't exist
  
• Remove return type from BlockBase::submitConfigurationForm()
  
• [random test failure] ToolbarActiveTrail::testToolbarActiveTrail
  
• Add dcam as a subsystem maintainer of the Link module
  
• The unpacker chokes on Composer platform dependencies, like `ext-mbstring`
  
• The border of field types on the "add field" step has a too low color contrast
  
• Move JSON:API coverage for Contact to the Contact module
  
• Add fathershawn as a subsystem maintainer for the Ajax subsystem
  
• Display Umami warning on all pages (not just admin pages)
  
• Deleting a config checkpoint breaks the checkpoint storage
  
• BigPipe does not handle multiple tags correctly
  
• Package Manager should use a copy of Composer that is local to the current project, if available
  
• Saving untrusted config results in memory leak
  
• Config of the type plural_label can never be valid due to the label constraint
  
• [regression] Wrong doc link on database update page
  
• Wrong maxlength on Authored By field for translation
  
• Package Manager should always run Composer through the PHP interpreter, rather than directly
  
• [regression] Tags td, tr or th ignored by new parseHTML implementation
  
• HTMX behavior attachment fails with some swap strategies
  
• Dropdown does not show desired arrow on open state
  
• Claro breadcrumb doesn't meet minimum target-size
  
• hook_views_query_alter() docs missing use QueryPluginBase import
  
• Olivero: Allow primary & secondary navigation focus outline to work with long text
  
• Validatable config job is not aware of OOP hooks
  
• Duplicate path alias when adding node translation
  
• Try to reduce Unit test CPU requests
  
• Move QuickStart tests to build tests
  
• Fatal error when passing NULL to Renderer::render()
  
• Composer issue when dealerdirect/phpcodesniffer-composer-installer update from v1.0.0 to v1.1.0
  
• Convert experimental_module_requirements_test_requirements to new Class
  
• Deleted menus are not removed from content type config
  
• Ensure that the default content system can import a workspace with content in it
  
• AutowireTrait and autowire for services behave differently for nullable types
  
• Allow setting memory limit to -1 for phpstan precommit hooks
  
• PHPStan baseline is out of sync
  
• Checking for duplicate emails in user_requirements() does not take langcode into account
  
• Fix test classes with no *Test suffix
  
• Add mohit_aghera as File sub-system co-maintainer
  
• Let run-tests.sh print db type and version in the initial output
  
• defaultStorageSettings() and defaultFieldSettings() should document that they must not have setting names in common
  
• Add tests for SA-CORE-2025-004: Link field attribute XSS
  
• The active workspace is not persisted for the entire lifecycle of a form
  
• Composer unpack plugin runs into issue when requiring a dev-release of a module
  
• Constraint violations are not triggered for Roles on a user's account form
  
• Add return types to CookieResourceTestTrait
  
• Fix EntityController::addPage so bundles are sorted by label and not ID
  
• FormState::getTriggeringElement() behaves inconsistently when request is malformed
  
• phpstan dev constraints make it difficult for modules to support 11.2 and below
  
• Add test for SA-CORE-2024-002
  
• Unpack recipe test is in the wrong namespace (Tests vs BuildTest)
  
• Clean up todo in InlineBlockEntityOperations::handleEntityDelete()
  
• Use FormBase class for the test module's form in file.module
  
• Drupal 11.1.2 upgrade causes \Drupal::$container is not initialized yet error