Drupal 9.3.5
7 February 2022
Drupal version 9.3.5 is now available (security release).
Upgrading to Drupal 9.3.5
Drupal 9.3.5 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Drupal updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Drupal install to test the 9.3.5 upgrade prior to applying it live. Get started managing your Drupal installations with Installatron
What's New in Drupal 9.3.5
9.3.5
Security
- Twig is a third-party library used by Drupal 9. Today the Twig project released a security update. The disclosed vulnerability requires advanced, administrator-level permissions to exploit, so under our policy, we are not issuing a security advisory for it.
9.3.4
Bug Fixes and Changes
- Database dumps are no longer driver-agnostic
- Expand SmartDefaultSettingsTest to also test a format + editor with media embedding
- Improve messaging about Internet Explorer 11
- Fix unused variable $unpublished in TrackerTest.php
- Fix documentation for _toolbar_get_subtrees_hash()
- Wrong argument for @message in ModuleInstaller::install call to watchdog_exception
- CKEditor 5's toolbar occludes Drupal's toolbar if and only if CKEditor 5 has focus
- UID base field override configs can still have old default value callbacks
- scaffold README is out of date
- Entity query system does not document the NOT BETWEEN operator, but JSON:API supports/uses it
- Exclude system.batch_page.html from setting update security message
- Language toolbar item cannot be removed from the toolbar
- Correct visibility of getPluginDefinition function in ContextAwarePluginTrait
- Claro's password element handling invalid fails in some circumstances
- Dialog width and positioning issues in Claro
- Plugin definition DX: validate drupal.conditions
- Add documentation of migration yml files
- Add tests of row hash to trackChangesTest
- Add missing CKE5 SmartDefaultSettings test coverage (wildcard tag with unsupported attribute)
- View mode doesn't display in dropdown if numerical
- Split ckeditor5_alignment CKEditor 5 plugin, to allow for more precise upgrade path
- PHPUnit 9.5.12 (released 2022-01-21) throws unhandled deprecation notice on "Drupal\Tests\Listeners\DrupalListener"
- Extraneous closing parentheses and curly brace in visually-hidden button description text
- Update to Drupal 9.3.0 adding --2 suffix to (views-) block-ID's
- Fragment link pointing to should be redirected to CKEditor 5 instance when CKEditor 5 replaced that textarea
- Drupal-specific CKEditor 5 plugins should be able to use Drupal's JS translation API: Drupal.t()
- fix yarn vendor-update command
- Small typos in CKEditor 5 module
- [Symfony 6] Revert 3231603 to use our own TranslatorInterface
- FileUrlGenerator::generate() does not work with externally hosted files using stream wrappers
- Fix PHPStan L0 failures that cannot be included in baseline
- Fix \Drupal\Core\Asset\CssOptimizer::processFile() docblock