30 Sep 2026

feedDrupal.org aggregator

Drupal Association blog: The Drupal Advocacy Program: Helping the world catch up to what Drupal can do.

Graphic that says 'help the world cup up to what drupal can do'

In a major shake-up, your advocacy work now earns Drupal contribution credit.

Drupal is now light-years ahead of its reputation. It's time we changed that.

The Drupal Advocacy Program is a new Drupal Association pilot that awards contribution credit for work that helps people discover and understand Drupal.

Drupal is light-years ahead of its reputation. The platform has changed dramatically in recent years, but the market's picture of Drupal runs years behind. If you have ever heard "oh, is Drupal still around?", you have felt that gap first-hand - and research by major Drupal agencies confirms it. The fix is not a bigger ad budget. It is education at community scale: authentic stories from the people who build with Drupal, told in their own voices to the audiences they know best.

Our community can be uneasy with the word "marketing". But you are already advocates for Drupal, day in and day out - and that is exactly what this moment needs. If you have ever written a tutorial, recorded a demo, translated an article, or shared someone else's talk with a new audience, you have been doing advocacy. Starting today, that work earns recognition.

How it works

Tell the story. Create, share, and boost content about modern Drupal. A blog post for your market. A video for your audience. A talk at a non-Drupal conference. A customer story in your language. And amplification counts: share someone else's DrupalCon talk or case study, tell us about it, and you earn credit too.

Themes multiply your impact. Four to six times a year, we will roll out a theme - a consistent message with messaging and proof points ready to build on. Take it and make it your own: translate it for your language, reframe it for your industry, make it relevant to your network. Advocacy content on the current theme earns 2x-3x credits, because 126 certified partners and a huge global community telling one story at the same moment is what moves the market.

Credits flow back. Advocacy runs through the same contribution credit system that recognises code. It counts toward your standing in the ecosystem, including Drupal Certified Partner visibility. Credits will be awarded in bulk each month, guided by a published scale (to come), weighted by quality and reach, because we want content that travels beyond the Drupal world. Each month we will also spotlight the best advocacy content and award it extra credit.

The ground rules are simple. This is about promoting Drupal and what Drupal can do. You can mention where you work, and you can absolutely draw on case studies from your own business - as a way of showing what Drupal makes possible.

Ways to take part

  • Post. A thoughtful LinkedIn article or thread in your own words
  • Write. A blog post specific to your audience, region, or industry
  • Record. An explainer, tutorial, reaction, or customer-story video
  • Boost. Share and amplify someone else's talk, case study, or post
  • Adapt. Translate or localise the story for your language and market
  • Speak. A talk or lightning talk, especially at non-Drupal events and meetups
  • Pod. Appear on or host a podcast episode
  • Show your work. A customer or project story that highlights what Drupal can do
  • Teach. A tutorial, demo, or code walkthrough that shows modern Drupal in action

Choose something that fits you. You do not need to become a salesperson. As Dries put it in his DrupalCon Rotterdam keynote: Drupal doesn't need hype. It needs a better public record.

Quote graphic that says 'Drupal needs a better public record"

Submitting is simple

For now, it is a short form at drupal.org/advocacy. In the coming days you will also find a submission form across many Drupal Slack channels. Either way, telling us about your content should take a minute - because for this to work, submitting needs to be exceedingly easy.

This is very much a pilot. We will start by reviewing and crediting submissions by hand, look for ways to automate over time, and let what we learn from your submissions shape how the program grows. And we want to celebrate the people who lead the way: at next year's DrupalCons, we will present awards to Drupal's biggest advocates.

Start today

Every story you tell adds to Drupal's public record - the record that search engines, AI assistants, and agentic search increasingly draw on when people ask what to build with. More authentic voices means Drupal showing up where decisions are actually made.

Submit your advocacy work at drupal.org/advocacy. You will find the current theme, its messaging and proof points, and guidelines on attribution and what qualifies for credit.

You have done the work. Now start talking.

File attachments:

30 Sep 2026 9:21am GMT

Gspikes: Drupal Migrate Plus and Custom Source Plugins: The Working Guide

What Migrate Plus adds to core, when a custom source plugin is the right answer, and the anatomy of one that survives real data, with working PHP and YAML.

30 Sep 2026 7:00am GMT

29 Sep 2026

feedDrupal.org aggregator

Aten Design Group: The Cost of Waiting: Why CMS Maintenance Belongs in Every Website Budget

The Cost of Waiting: Why CMS Maintenance Belongs in Every Website Budget Joel Steidl Process Drupal WordPress Backdrop CMS

Launching a website is a major milestone, but it does not mark the end of the investment.

Drupal, WordPress, and Backdrop are actively maintained software platforms. Core software changes. Modules and plugins release updates. Security vulnerabilities are discovered. PHP and other underlying technologies move through their own support cycles.

During a long website build, teams should be paying attention to those changes and applying updates when they make sense within the project cadence. That does not necessarily require a dedicated line item for updates. It does require recognizing that the software will continue to change while the site is being built.

The more important planning conversation is what happens after launch. Post-launch budgets often focus on new features, enhancements, and fixes specific to the site. Routine platform maintenance has to be planned alongside that work, or it is easy to defer indefinitely.

Updates are part of operating a CMS

Different content management systems handle releases differently.

Drupal has a well-defined release cycle, including regular windows for bug fixes and security releases. Backdrop similarly publishes scheduled minor releases and security release windows.

WordPress is less predictable. Core releases do not follow the same kind of monthly schedule, while plugins and themes are updated independently by their maintainers. For WordPress sites, that makes proactive monitoring particularly important. Checking for updates weekly or bi-weekly can help teams identify changes before they accumulate.

The operational lesson is more important than the differences between platforms: someone needs to be responsible for keeping track of change.

For WordPress, the Site Health screen provides a useful view into outdated software and configuration issues. Drupal and Backdrop have their own tools and processes for monitoring available updates and security advisories. But knowing an update exists is only the beginning.

Updates still need to be evaluated, tested, and deployed.

Small updates are easier to manage than large ones

Consider a site that receives routine maintenance every month.

There might be a core update and several module or plugin updates to review. The team applies them in a development or staging environment, tests critical functionality, resolves any issues, and deploys the changes.

Now consider the same site after maintenance has been deferred for two years.

There may be dozens of pending updates spanning multiple versions. Some dependencies may no longer be maintained. A newer module or plugin may require a newer version of the CMS. That version may require a newer version of PHP. Custom code written several years earlier may no longer behave as expected.

What could have been a series of small maintenance tasks has become a project.

The difficulty is not simply the number of updates. It is the number of things changing at once. When something breaks, there are more possible causes. Testing takes longer. Troubleshooting becomes less predictable.

Regular maintenance keeps those changes smaller and makes risk easier to manage.

Maintenance has to compete with improvement work

After launch, most organizations still have a list of things they want to change. Editors need improvements to a workflow. A department wants a new feature. An integration needs adjustment. Bugs emerge once more people start using the site.

That work is visible, and its value is usually easy to understand. Routine maintenance is less visible. Updating a dozen modules and ending up with a site that looks and behaves exactly as it did before can be difficult to prioritize against a feature someone has been waiting for.

But those two kinds of work need to coexist.

For many sites, a recurring monthly maintenance allocation is a sensible baseline alongside a budget for improvements and feature development. It creates room to review available updates, apply appropriate changes in a non-production environment, test important workflows, and deploy deliberately without forcing that work to compete every month with the next feature request.

The exact cadence can vary. WordPress sites may warrant weekly or bi-weekly checks because plugins and themes release independently. Security updates on any platform may require attention outside the normal maintenance cycle.

Testing matters too. A plugin update that looks routine can conflict with WordPress core or another plugin. A Drupal module update can affect custom functionality or configuration. Updates should generally move through development or staging before reaching production.

Backups are another part of the equation, particularly for WordPress sites where application state and content are closely connected to the database. Reliable, automated backups, preferably managed at the hosting level, provide an important recovery path when an update does not behave as expected.

The goal is not simply to install updates. It is to make maintenance a normal part of operating the site rather than something that only gets attention when there is a problem.

Maintenance starts before launch

Planning for maintenance does not mean every build needs a separate maintenance workstream.

During an active build, teams can often incorporate core, module, plugin, and dependency updates into the normal development process. What matters is that the team is paying attention. On a project that lasts six months, a year, or longer, building against a frozen snapshot of the software and waiting until launch to address updates creates unnecessary risk.

Decisions made during the build also affect how difficult future maintenance will be.

Every module, plugin, theme, integration, and piece of custom code becomes part of the site's long-term maintenance surface. Before adding a dependency, teams should consider whether it is actively maintained, how important it will be to the site, and what replacing it would involve if support ends.

Architecture matters as well. Clear separation between custom code, contributed software, configuration, and content makes future changes easier to understand and test. Automated tests around critical functionality can make routine updates considerably safer.

The same thinking applies beyond code. Structured content, consistent components, and well-defined editorial workflows reduce the number of exceptions teams have to account for when the platform changes.

Maintainability is not a separate phase of the build. It is one of the considerations that should inform how the platform is built.

The cost of waiting

Skipping maintenance can look like a savings because nothing happens immediately. It can also create more room in the budget for improvements that stakeholders can see and use right away.

But the maintenance work has not disappeared.

Updates continue to accumulate, dependencies continue to change, and older versions eventually stop receiving support. When the organization finally has to act, the work is usually larger and the options are more constrained.

A recurring maintenance budget helps turn that unpredictable future project into routine digital operations. It gives teams a chance to make smaller changes, test them carefully, and identify larger lifecycle issues before they become urgent.

That does not mean maintenance should consume the entire post-launch budget. Websites need to improve as organizational needs change. The goal is to make room for both: maintaining the platform you have while continuing to make it better.

The cost of waiting is not just more updates later. It is giving up control over when and how those updates happen.

James Nettik

29 Sep 2026 9:34pm GMT

Drupal blog: Celebrating Excellence: the Women in Drupal Awards Shine a Spotlight on Women Shaping the Future of Open Source

The Women in Drupal Awards returned this year to celebrate the outstanding achievements of women making remarkable contributions to the global Drupal community. Presented during DrupalCon Rotterdam 2026, the awards recognize women whose talent, leadership, creativity, and commitment are helping strengthen the Drupal community and shape the future of open source.

Now in its fifth year, the Women in Drupal Awards continue their mission of amplifying women's voices and recognizing the many different ways they contribute to technology and the Drupal ecosystem. From technical expertise and project leadership to community building, mentoring, advocacy, and innovation, the awards celebrate women whose work creates meaningful impact across projects, organizations, and communities.

Three awards celebrating three different forms of contribution

This year, the Women in Drupal Awards recognize three outstanding nominees across three distinct categories:

  • Women in Drupal Award - Define
    Antonella Severo, Project Manager at Nestlé, has been an active contributor to the Drupal community and has been involved in the Success Stories track at DrupalCon, helping highlight the impact and achievements of Drupal projects and organizations.
  • Women in Drupal Award - Build
    Nikita Aswani, Senior Front-end Developer on Open Social, combines technical expertise with a strong commitment to the Drupal community. She is also a member of the Drupal Asia steering committee, contributing to the growth and development of the regional Drupal ecosystem.
  • Women in Drupal Award - Scale
    Rachel Lawson, who works at the University of Cambridge, has made a lasting contribution to the Drupal community through mentoring and community engagement. She is also a former Community Liaison at the Drupal Association, where she played an important role in supporting and connecting members of the community.

Together, the three nominees represent the breadth of contributions that make the Drupal ecosystem stronger: from leading projects and showcasing success stories, to developing technology, supporting regional communities, mentoring others, and fostering collaboration.

The Women in Drupal Awards were created to ensure that women's stories and successes in technology are visible and celebrated. The awards recognize contributions in many forms, whether through building Drupal projects, leading teams and organizations, designing digital experiences, driving innovation and strategy, mentoring others, strengthening the community, advocating for inclusion, or championing open source and collaboration.

A key contributor to this year's awards is JAKALA, the official sponsor of the Women in Drupal Awards. JAKALA created the award and has supported the initiative since its inception, helping ensure that the achievements and contributions of women across the global Drupal community are recognized and celebrated. As the awards enter their fifth year, JAKALA continues to support their mission of highlighting diverse talent, leadership, and impact within the Drupal ecosystem.

The ceremony has become a highlight of DrupalCon. Beyond the awards themselves, the wider Women in Drupal initiative fosters mentorship, networking, recognition, and greater visibility for women working in Drupal and open source. This year, the initiative also includes a dedicated Women in Drupal networking lunch, organized in collaboration with JAKALA, providing an opportunity for women and gender-diverse members of the community to connect, share experiences, and build relationships.

The Women in Drupal Awards are supported by the Drupal Association and organizations across the industry. The 2026 jury brings together members of the Drupal Association, previous award winners, and JAKALA, combining perspectives from across the Drupal community to recognize this year's outstanding contributors.

About Women in Drupal

Women in Drupal is a community-driven initiative dedicated to celebrating, supporting, and empowering women in the Drupal ecosystem. Through recognition, networking, mentorship, and community events, the initiative fosters inclusion and encourages greater participation and leadership in open source.

The Women in Drupal Awards recognize women from across the Drupal community, regardless of role or area of expertise, celebrating the talent, leadership, creativity, and commitment that help strengthen Drupal and shape its future.

29 Sep 2026 6:44pm GMT

Undpaul.de: Drupal CMS & Drupal AI: The Future of Content Management At DrupalCon Rotterdam

Today at DrupalCon Rotterdam, Dries Buytaert presented the future of Drupal CMS and Drupal AI. The key message: Working with content is becoming dramatically easier, more flexible, and more intelligent for editors, marketing teams, and organizations.

29 Sep 2026 5:20pm GMT

Omega8.cc: No Removal Van

Most Drupal 7 sites keep the crossing to modern Drupal parked for some day, and some day has a habit of never arriving, because the crossing as we all learned it wants a second machine, a dump shipped across, credentials pasted into one more form and a rehearsal budget which runs out after the first try. On a BOA server the two ends sit on one account: the Drupal 7 site keeps serving while a fresh Drupal CMS site goes up beside it, one Ægir task lends the new site read-only eyes on the old database (enforced by the database server itself), and Drupal's own migration engine pulls content, files and users across in place. Rehearsals are throwaway site tasks, the wizard says what will cross before it starts, and the cutover is a move onto your own build and two renames, the old site kept intact. The front end is still a rebuild, your theme, custom code and views; only the logistics go away. Capabilities rather than an enforced workflow, and nothing here picks your exit for you.

29 Sep 2026 12:48pm GMT

DrupalCon News & Updates: International Splash Awards Celebrate Excellence in Drupal Innovation at DrupalCon Rotterdam 2026

Rotterdam, Netherlands, 28 September 2026. The International Splash Awards 2026 concluded today during DrupalCon Europe in Rotterdam, celebrating the world's most outstanding Drupal projects, agencies, and developers. The annual awards recognize excellence in design, innovation, technical achievement, and community impact across a range of categories.

The range of entries shows how powerful Drupal as an Open Source system truly is. From municipal websites to apps that connect parents in developing nations to expert childcare advice, the competition this year was fierce.

- Hilmar Kári Hallbjörnsson, head of jurors, International Splash Awards

Image
Int Splash Awards Rotterdam 2026

Photo Credits: Joris Vercammen

Following the successful return of the International Splash Awards in 2025, this year's competition saw an even greater participation from across the global Drupal community, receiving 40% more submissions than the previous year. A distinguished jury of independent experts in web design, user experience, open source development, and digital strategy evaluated entries across criteria including concept, execution, emotional appeal, accessibility, performance, innovation, and social relevance.

Winners & Highlights

AI-Enhanced Experiences

  • Winner: blökkli - the open-source in-page editing experience for Drupal by Liip
  • Runner-up: Atelier by AIncient Labs - the AI-first Website Studio built on Drupal by Factorial.io

Commerce

  • Winner: Finstral Compendium by Factorial.io
  • Runner-up: Building the Digital Museum: How Drupal Powers the Belvedere's Entire Ecosystem by acolono

Corporate

  • Winner: Drupal as a foundation for continuous improvement: The digital ecosystem of The Hague University of Applied Sciences by Netvlies
  • Runner-up: Volkswagen AG InfoPortal by drunomics GmbH

Design / UX

  • Winner: Transforming Three Global Travel Brands with One Drupal Platform by Zoocha
  • Runner-up: pharmaSuisse "Fakten & Zahlen" - interactive data visualisation by Liip

Education

  • Winner: Luiss Corporate website, Design system and AI search by SparkFabrik
  • Runner-up: Wageningen University & Research - How WUR replaced a fragmented web landscape with one central, AI-powered Drupal platform by iO

Government & Public Services

  • Winner: The AI the EU could actually trust: EPSO's source-grounded answer engine by Dropsolid AI
  • Runner-up: From Scripts to Sovereignty. How Pidpa replaced contact centre overhead with auditable, citizen-facing AI by Dropsolid AI

Healthcare

  • Winner: Health First: Multiple Audiences. One Drupal Platform by Vardot
  • Runner-up: Turning 350 Healthcare Career Options into One Clear Journey by Reading Room

Non-profit

  • Winner: Empowering healthier lives: a platform for awareness, prevention and action for diabetes by SWIS
  • Runner-up: UPD Foundation Advisory Cockpit by Factorial.io

Publishing / Media

  • Winner: pharmaSuisse "Fakten & Zahlen" - interactive data visualisation by Liip
  • Runner-up: From Print to Digital Storytelling: How STAN Magazine Reimagined Publishing with Drupal by ImageX

Tools / Apps

  • Winner: blökkli - the open-source in-page editing experience for Drupal by Liip
  • Runner-up: Dutch Safety Region South Limburg: Empowering citizens through digital crisis communication by 1xinternet

Impact & Community

Image
Int Splash Awards Rotterdam 2026

Photo Credits: Joris Vercammen

The International Splash Awards serve not only to honor outstanding work but also to inspire collaboration, share best practices, and elevate the broader Drupal ecosystem. The projects recognized this year demonstrate the diversity of ways Drupal can be used to create meaningful, accessible, innovative, and high-performing digital experiences.

From ambitious public platforms and global corporate ecosystems to innovative applications and community-focused initiatives, the 2026 winners showcase the scale and maturity of Drupal as an open source digital experience platform.

Beyond the projects themselves, the Awards celebrate the people and organizations behind them. Many participants contribute to the Drupal community through open source development, modules and distributions, conference talks, training, mentoring, and knowledge sharing.

Thank you to eSepia for sponsoring the International Splash Awards this year. And also thank you to Acquia for doing the interviews.

Looking Ahead: 2027 & Beyond

With the 2026 edition now behind us, the International Splash Awards will continue to evolve alongside Drupal and the wider digital landscape. As organizations face increasingly complex challenges around AI, accessibility, privacy, sustainability, digital sovereignty, and user experience, the Awards will continue to recognize projects that demonstrate how open source technology can meet these challenges with creativity and purpose.

Image
Int Splash Awards Rotterdam 2026

Photo Credits: Joris Vercammen

The International Splash Awards will return in 2027, continuing its mission to bring the global Drupal community together and celebrate the people, ideas, and projects shaping the future of the open web.

About International Splash Awards

The International Splash Awards is an independent, global awards program that highlights exceptional Drupal-powered websites, applications, and digital solutions. Its mission is to recognize creativity, technical excellence, and social impact within the Drupal and open-source communities.

The Splash Awards have been organized as regional competitions in Drupal communities around the world for many years. In 2018, the Splash Awards went international, giving outstanding projects from across the globe the opportunity to compete on a global stage. Following a break, the International Splash Awards returned in 2025 and are now an annual fixture at DrupalCon Europe.

For more information about categories, submission guidelines, jury members, and past winners, visit https://splashawards.org/.

29 Sep 2026 9:52am GMT

The Drop Times: Acquia Cuts DrupalCon Booth Spend to Donate $50,000 to Drupal

Acquia deliberately spent less on its Rotterdam booth and made that decision visible. Shawn Perritt then used the DrupalCon stage to challenge sponsors, agencies and competitors to find their own way to give back.

29 Sep 2026 8:38am GMT

Specbee: Tired of adding Webform fields one by one? AI Webform Generator builds Drupal forms from a single sentence and checks every AI output first.

Tired of adding Webform fields one by one? AI Webform Generator builds Drupal forms from a single sentence and checks every AI output first.

29 Sep 2026 8:08am GMT

Morpht: What's new in the Drupal AI Views Agent: Simpler prompts and a build assistant

Stop writing prompts that sound like YAML. The Drupal Views AI agent now speaks plain English, and it brought a chatbot.

29 Sep 2026 6:45am GMT

Drupal blog: DriesNote Rotterdam: Drupal is light-years ahead of its reputation

Dries Buytaert opened DrupalCon Rotterdam with a tour of a platform moving at remarkable speed. Multilingual sites that take a fraction of the effort to build. Components written in React. Headless delivery across five frameworks. AI assistants that connect directly to your content. A pipeline of innovation that has Europe's push for digital sovereignty looking closely at Drupal.

Then he named the problem: hardly anyone outside this community knows. The market's picture of Drupal runs years behind what the platform can do today.

Rotterdam has a saying: "Niet lullen maar poetsen." Stop talking, start working. Dries argued we have taken that advice almost too well, and he flipped it. The work is done. Now it's time to talk louder about what is working, and for the first time, that work earns contribution credit.

Here is what he covered.

Europe needs digital sovereignty, and Drupal is ready

Dries opened with a challenge facing Europe: reducing its dependence on technology it does not control. When the European Commission asked for feedback on digital sovereignty, Dries submitted his thinking, and his writing was referenced in the official policy recommendation that followed.

His point: open source projects like Drupal offer more than software. They offer ongoing maintenance, security releases, and a global community of care. He gave it a name he hopes will catch on: Stewarded Open Source.

For governments and organisations that need control over their digital infrastructure, Drupal is exactly that: open source with a steward, proven at scale, and owned by no single vendor. As Dries put it: "Europe needs Drupal. And Drupal needs Europe too."

Map of Europe with text saying Drupal needs Europe, and Europe needs Drupal.

Innovation is back, and it is reaching new people

Two years after launching the Starshot initiative, Dries reflected on what it delivered: Drupal CMS, recipes, site templates, Canvas, and a wave of AI tools. Then he showed four ways Drupal is bringing its strengths to more people:

  • Multilingual. Building multilingual sites is now dramatically simpler, and Drupal Canvas fully supports multilingual content.
  • JavaScript. Canvas code components can be written in React, treating JavaScript developers as first-class citizens.
  • Headless. Official headless support now spans five frameworks, including newly added Angular.
  • AI. A new public demo site lets anyone explore Drupal's AI capabilities, made possible by the partners of the Drupal AI Initiative.

AI assistants are becoming another interface to Drupal

You can already connect an AI assistant to a Drupal site using a recipe that combines Simple OAuth, MCP Server, and the Tool module. Dries demonstrated it on his own photo album module, built to answer questions like "Do you have that photo of Oma wearing her sunglasses?"

Fully exposing his module's capabilities took around 1,000 lines of code. A research prototype built with Matt Glaman reduced that to roughly 20 PHP attributes. Describe a capability once, and it becomes available everywhere: to AI assistants, to workflow tools like ECA, to JavaScript components, and to humans who never touch AI at all.

The Rosetta Sprint: one description, readable by everyone

To turn the prototype into a shared roadmap, Dries announced the Rosetta Sprint. Like the Rosetta Stone, which carried one decree in three scripts, the goal is for Drupal to describe its capabilities once, in a way that AI agents, other systems, and humans can all read.

The sprint will bring key maintainers together for four days of focused work.

Graphic that says Drupal is light years ahead of its reputation

The Drupal Advocacy Program: contribution credit for talking about Drupal

Dries named Drupal's reputation gap as the project's number one challenge. Too many people are judging the Drupal of ten years ago, and AI systems trained on old information repeat that outdated story.

His answer is not hype. "Drupal doesn't need hype. It needs a better public record."

So the Drupal Association is launching the Drupal Advocacy Program, a pilot that awards contribution credit for work that helps people discover and understand Drupal: writing tutorials, recording demos, translating articles, amplifying someone else's talk. Each quarter, a focus theme with a ready-made source kit earns double credits.

Submissions open today at drupal.org/advocacy.

Start now, in Rotterdam

Dries closed with the Rotterdam Pilot: a challenge to everyone at DrupalCon to turn the buzz in the room into buzz outside it. Share a takeaway. Clip a talk. Write about someone else's session and credit them.

"Drupal is now light-years ahead of its reputation," he said. Closing that gap is work we can all do, starting this week.

Slides will be posted at dri.es.

29 Sep 2026 6:31am GMT

Cheppers: ExperienceKit: Web Accessibility at Scale - Audit Components Once, Not Pages Forever

Every university web team and public-sector digital lead eventually has to answer one question, usually in a meeting where the numbers get uncomfortable: how do we make ten thousand pages accessible, and keep them that way?

29 Sep 2026 12:00am GMT

28 Sep 2026

feedDrupal.org aggregator

Jacob Rockowitz: Vibing Drupal: Tale 1 - Using AI to build and contribute a module

Introduction

I use AI every day to accomplish a variety of tasks. I'd like to share three tales about building, maintaining, and contributing to different Drupal modules. My goal is to discuss how I use AI and what I use it for.

At the same time, I am not trying to teach you how to use AI because I've noticed a nuance: AI can teach you how to use AI. For example, you can point an AI at this post and ask it to read the post, follow the links, and explain how things are being done. For me, open source and Drupal have always been more about sharing ideas, experiences, and stories, as well as code, allowing humans and their AIs to learn from or be inspired by each other's experiences.

My three tales are meant to be told in a specific order: building a greenfield project, maintaining a brownfield project, and contributing to someone else's project. Because of how AI works and the increased use of spec-driven development, people are discussing projects in terms of greenfield vs. brownfield. Ironically, I don't think of Drupal as greenfield or brownfield, but as infrastructure that fields and projects sit on top of. The most fundamental greenfield project in Drupal is building a new site for an organization, and for contributions to Drupal, building a new module.

Building a module using AI

Building a Drupal module with AI isn't new. I've written several posts that range from learning to build a Drupal module using AI to having AI build a module. The most recent module I've "built" with AI and contributed back to Drupal has a unique nuance: the initial code and solution came from an existing client project we are modernizing, and I had AI...Read More

28 Sep 2026 9:25pm GMT

The Drop Times: Rotterdam Puts Drupal’s Biggest Bets to the Test

Perhaps the most revealing thing about DrupalCon Rotterdam is that its programme does not tell one tidy story. Drupal is preparing to discuss its transformation into a production-ready Agentic CMS while another session asks, quite directly, why developers still do not choose Drupal. Canvas has become central to Drupal CMS, yet Rotterdam will also put it against Display Builder in a real-world project. Those collisions matter because Drupal's next phase depends less on any one initiative succeeding than on whether these different bets can reinforce one another without carrying old friction forward.

Connecting Drupal to models and agents is no longer the difficult part of the AI story. Rotterdam moves quickly into hallucination, reviewer trust, orchestration, governed workflows and human control because production use raises harder questions about what an agent may do once it can act rather than merely answer. Permissions, auditability, validation and human approval are becoming part of the product itself. If the Agentic CMS idea is going to mean more than a collection of AI capabilities, those boundaries have to become as deliberate as the capabilities they constrain.

Adoption tests another part of the same argument. Drupal CMS 2.0, Canvas, Recipes and AI-assisted tooling have changed the product presented to builders, but improved technology does not automatically change how Drupal is perceived beyond its existing community. "Why Developers Don't Choose Drupal" puts that gap unusually plainly. The useful evidence from Rotterdam will not be another inventory of features, but signs that newcomers can enter the system more easily, that organisations are choosing Drupal CMS rather than only inheriting or upgrading Drupal, and that the new experience removes barriers people outside the community can actually feel.

Digital sovereignty makes the question more demanding because Drupal is also being asked to apply its values inward. A Rotterdam discussion on FAIR asks whether sovereignty, governance and cost problems in Drupal's own software distribution could be addressed differently, starting from Drupal.org's role as the ecosystem's central distribution point. That turns openness from something Drupal offers its users into something its own infrastructure may need to demonstrate. Arguments about control become more credible when the project is willing to examine where dependence, responsibility and operational burden sit inside its own systems.

Discovery may be where all of these threads become visible from outside. A Rotterdam discussion on Drupal's representation in ChatGPT, Gemini and Claude starts from the recognition that developers and decision-makers increasingly encounter technologies through AI-generated answers as well as conventional search. Drupal therefore has to become easier to understand, evaluate and trust not only for people already inside the ecosystem, but also for the systems mediating their choices. Rotterdam will not settle all of that in four days. What it can reveal is whether Drupal's current direction is beginning to cohere: a product easier to adopt, agents with clearer limits, infrastructure consistent with its sovereignty claims, and a project that can explain its relevance wherever technology choices now begin.

Follow The DropTimes on LinkedIn, X, Bluesky, and Facebook, or join #thedroptimes on Drupal Slack.

Kazima Abbas wrote and curated this issue of Editor's Pick.

28 Sep 2026 2:06pm GMT

Joachim's blog: A great leap backwards: fixed configuration

A great leap backwards: fixed configuration

Drupal's configuration system has at its heart a key concept: the site owns the configuration. What that means is that after a module has provided install configuration, it no longer has any control over it. You, the site admin, can change that config or even delete it. The module is no longer involved.

This kept the configuration system simple (up to a point); after all, the development of this system was one of the harder parts of the lengthy and difficult Drupal 8 cycle ("The ConfigImporter class was written with a get this done and working attitude" wrote @alexpott on a core issue, and I think the same could be said of the configuration system as a whole).

Since then, the config transformation API was added, and various modules have been created that take advantage of this, such as Configuration Split and Config Merge. These still work in the paradigm of the site owning the configuration. But what if we could turn the clock back, just partially, to when modules could own config too?

The (different) old days

If you were around in the days of Drupal 7, you may remember the various default hooks. Modules such as Views and Flag exposed a hook which allowed modules to define configuration items. (These were not configuration in the modern sense, because there wasn't that concept at the time, but referring to them as such makes things simpler.)

These were thus a code-defined instance of a type of thing that could also be defined in the UI by site admins. A module could supply a default view, and rely on it always existing. A new release of a module could come with enhancements to a that view, and they would exist on the site as soon as the module code was updated to the new version.

Because these hooks were PHP code, it was also possible for configuration to dynamically depend on other aspects of the site. You could do something such as define a default flag for every node type.

The idea

For a long time, I've wondered if something similar could be possible with Drupal's configuration system: put simply, defining configuration in code. Or, as I'm calling it, fixed config.

Many modules, such as Drupal Commerce and LocalGov Drupal rely on configuration items which are essential to their functionality (what I call machinery). Drupal's paradigm of configuration being owned by the site means that a site admin can break or outright delete key parts of the module's functionality: a commerce system missing its cart view, or a directory system missing its node types and vocabularies.

There's a case for admins being able to enhance and tweak a module's machinery, but that leads to the problem of how to reconcile a site's changes with changes that come in a new version of a module. There are modules that aim to help with this, but configuration entities are complex data structures, and without in-depth knowledge of that structure, this is a difficult and painstaking task. Some modules take care of this in update hooks each time they want to change their machinery, but that also requires complicated work each time.

The final push to get me to work on this was the use case of Entity Pager: the maintainer of the Flippy module suggested merging the two modules. But while Entity Pager provides the means for site admins to create any pager for any entity type, Flippy's functionality is to automatically provide a pager for each node type on the site. It seemed to me that the way to achieve this feature on top of Entity Pager was to have a way for the Flippy module to define an entity pager view automatically for each node type. The same way that Drupal 7 default hooks could.

Could this be done within the modern Drupal config system? The module would be in charge, not the site. If the module's code updated and changed the definition of the config, then the site would pick up on that.

Developing the module

The basic requirement is to add config entity definitions that are coming from code.

I could see two ways of doing this: intercept the entity storage handlers, or intercept the config transformation API. I opted for the latter. Partly because working at the entity storage level would require decorating every config entity type storage handler, which seemed heavy-handed, and because working within the config system has its advantages, and finally because one general principle I have found over the years is that complexity should generally be pushed down in a system. The config system is beneath the entity system, so working there would mean that this would be completely invisible to the entity system which would just see some additional entities.

So, I experimented with the config storage transformation API. Could I make it see, for example, a hardcoded node type? The answer was yes: it's simple to add an additional config entity in the STORAGE_TRANSFORM_IMPORT event, and the site sees it just as if it were some other piece of config.

Then the real development work started: making the config system read the fixed config, but also ignore it when necessary. I decided on this simple rule:

  • Fixed config is not exported to config sync. Instead, it is always re-created from files on config import.

On Drupal 7, some (but not all) default hooks had a concept of overriding. The site admin could choose to edit a default object, such as a view, and deviate from the version in code. From that point on, the site owned that object, not the module.

I've decided, for now at least, not to support overriding. I think a better, and simpler, pattern is to allow selection of config: the module provides machinery, but also provides a setting to select it as being in use. For our example of the commerce cart view, there would be the fixed config view, and also a config setting where you select which view is used for the cart. This means that the default view remains under the control of the commerce module, but a site admin can duplicate it, change the duplicate, and then use that one instead. The site then owns the duplicate view, but the default view remains available and functional at all times.

The Alpha-1 API

Having got a proof-of-concept, the next step was to design an API too. Rather than use hooks or an event, I decided fixed config should look the same as install config: YAML files. The big advantage here being that while developing it, you can move YAML files from sync or install folders to become fixed config. And it provides a system that is already familiar to developers: fixed config is simply a YAML file in a module's config/fixed folder instead of config/install. (I made a small change and a new release of Config Devel so that its module config export feature works with this folder too.)

But static YAML files doesn't cover all the use cases that the Drupal 7 era hooks used to satisfy. So I added the concept of derivers. We already have plugin derivers in Drupal (and maybe I should have tried to think of a different name); but these are config deriver plugins: they create multiple config items from a single template.

So while a static fixed config file looks identical to an install config file, a derived fixed config file has these additions:

third_party_settings:
  fixed_config:
    deriver: deriver_plugin_id
    dependee_config_patterns:
      - node.type.*

What this means is that when config whose name matches node.type.* is created or updated, the fixed config deriver plugin deriver_plugin_id reacts, and maintains the fixed config based on the YAML file that holds these properties.

The node type config entity is the dependee config; the fixed config that gets defined in response to that is the dependent fixed config.

This is how the Flippy module could then work: it defines a single fixed config YAML file for a view, and a deriver plugin which alters these config values:

  • Sets the value of the node type filter.
  • Sets the path for the page display.

Eating my own dogfood

I find that you never fully realise what an API needs to do or how it needs to work and how to best make it usable until you actually try to use it, and that therefore it's best to do that early on.

I started making the Entity Pager view, and I was soon struck with several things about what I'd made:

  • Code that sets a view's entity bundle filters to an incoming bundle entity should be reusable.
  • Code that adds the incoming entity's ID as a suffix to the view's path should be reusable, but not necessarily by the same things as the first.
  • As well as deriving a single view for each node type, it might be useful to have a single view which adds a new display for each node type.

That reusability feature could be solved by using PHP traits, and requiring developers to composite them into their plugin classes. Or it could be solved by making the plugins themselves smaller, and allowing the deriving process to specify more than one. A pipeline, basically.

And the many-to-one feature could be solved by letting code alter the fixed config YAML file values, rather than deriving from them: the same config values get processed by the PHP code for every config entity it listens for, rather than making a new copy each time.

To me, this suggests a new type of plugin, fixed config alterers, which can do the work in both of these scenarios.

So what I am pondering now would look like this:

  • For derived fixed config:
    • The fixed config deriver plugin does the bare minimum to the config values from the YAML file.
    • The config values are passed through multiple alterer plugins.
  • For static fixed config:
    • If config patterns are specified, the config values are passed through alterer plugins for each config matching the pattern.
    • A better name is needed as it would no longer be completely static!

Am I over-engineering, I wonder? Also, the pipeline of alterers seems very much like the Migrate API's pipeline of processors, but I don't see how to reuse those as they operate on different sorts of values: entire config entity values for my case, and single content entity field values for Migrate.

I'd be interested in hearing ideas and use cases for the fixed config module. It would help me with the process of refining my initial ideas for the API.

I've made an alpha release, try it out and let me know what you think, either in the issue queue or on mastodon.

Do you have potential uses for fixed configuration? I'd love to work on this module with some real-world use cases, and I'm available for hire - contact me!

joachim

28 Sep 2026 11:05am GMT

BloomIdea: Measuring ChatGPT ads on Drupal, from the browser and from the server

Since September, advertisers in Europe can buy ads inside ChatGPT, and the Ads Manager asks for two things before it can tell you whether they work: a measurement pixel in the browser and, ideally, conversions sent from your server. On a Drupal site that usually means pasting a snippet into the theme, writing the order_created call by hand in a template, and trying to hide the whole thing behind the cookie banner. Then the order paid by bank transfer or payment reference hours later, confirmed by a webhook, never shows up, because no browser was there to see it.

Even when a browser is there, the pixel loses part of the picture. Ad blockers stop it outright, Safari caps cookies written by scripts at seven days, and iOS removes tracking parameters from links shared in Messages and Mail and from links opened in private browsing. OpenAI's own documentation calls the Conversions API "a more reliable tracking source than the pixel alone".

We have released a module for this on drupal.org: ChatGPT Ads, free software under the GPL, for Drupal 10.3 and 11, covered by Drupal's security advisory policy. It plugs into Drupal Commerce, Webform and the Klaro consent manager through sub-modules, and sends events through both OpenAI's Measurement Pixel and the Conversions API. It is a community module, not affiliated with OpenAI.

What you can measure

  • With Drupal Commerce, every product added to the cart, including from an AJAX add-to-cart button, with its SKU, quantity and price.
  • The start of checkout, and the order itself when it is paid, not merely placed, so an unpaid bank transfer or an expired payment reference never counts as a sale.
  • The order paid later and off-site, reported from the server when the payment webhook arrives, with the same event id as the browser, so OpenAI counts it once.
  • With Webform, a contact form, a quote request or a newsletter sign-up as a lead: add the ChatGPT Ads handler to any webform and map the email and phone fields.
  • Account registrations, from the browser and the server.
  • Anything else, with a single call to Drupal.chatgptAds.measure() from your own script.

The pixel goes only on the pages you choose, using the same visibility conditions blocks use: paths, roles, content types, language.

What it refuses to do

Nothing is requested from OpenAI, and no cookie is set, until the visitor has decided. OpenAI's documentation suggests loading the pixel with consent withheld and granting it later, but the script sets cookies as soon as it loads, so the module does not load it at all until there is an answer.

A visitor who has not answered yet is neither a yes nor a no. Their events wait in memory and go out if they accept, so the landing page is not lost; if they refuse, they are dropped. The Klaro integration reads only decisions the visitor has confirmed, because Klaro reports a service's default from the moment the page loads, which would otherwise be read as a refusal while the banner is still on screen.

The same rule applies on the server. Hashed email, phone, IP address and user agent go to the Conversions API only for a visitor whose consent was recorded at the time of the event. For everyone else the conversion still goes, carrying the click identifier and nothing about the person.

The module never saves an order. Saving inside a Commerce transition can fire that transition twice, which on a live store means duplicate receipts and an error at checkout; the click identifiers are stored on the order when the checkout flow saves it anyway.

Pages stay cached

The pixel and the settings that are the same for everyone are cached with the page. What belongs to one visitor, the events collected for that page and, with advanced matching on, their hashed account data, arrives through a placeholder rendered on every request. A page carrying the pixel stays in Drupal's Dynamic Page Cache, instead of turning every page on the site uncacheable to deliver one visitor's identity.

Where it came from

It was built for one of the e-commerce stores we develop in Portugal, where many orders are paid by Multibanco or MB WAY, Portuguese payment methods whose confirmation often arrives hours after checkout. Bank transfers and payment references behave the same way in any country, and that pattern is why the Conversions API is in the first release rather than a later one: without it, those sales are invisible to the ad platform. The pixel, the Klaro gate and the cart events have been running on that store since mid September.

Your consent manager, your choice

Klaro gets a ready-made sub-module: install it and a ChatGPT Ads service appears in the banner, off by default. Any other consent manager reports the decision through a small JavaScript contract, and the README carries a working recipe for EU Cookie Compliance:

Drupal.chatgptAds.consent(true);   // granted, now or on a later page
Drupal.chatgptAds.consent(false);  // refused or withdrawn

To see what else on your site reaches third parties before the visitor decides, Consent Audit records it from real visits.

Get it

composer require drupal/chatgpt_ads

You need a ChatGPT Ads Manager account and the pixel id from its Conversions tab. The Conversions API sub-module stores its key through the Key module, so the secret can live in an environment variable instead of your exported configuration. The project page, the documentation and the issue queue are on drupal.org. Bug reports, questions and merge requests are welcome.

28 Sep 2026 10:28am GMT