fidzu : Drupal

Ryan on the First Month of Advocacy

In Rotterdam, Dries asked the community to talk louder about Drupal. The response so far: 264 pieces of advocacy from nearly 150 people, in at least seven languages, on everything from Reddit threads to a major Italian daily. I spent the past week reviewing all of it, and I'm feeling incredibly optimistic about what this program can unlock.

This month's Insider leads with the full wrap-up: the numbers, the credit matrix we built along the way, and fifteen people whose work shows what the program is for. If you've been waiting to see whether the Advocacy Program is real before joining in, consider this your evidence.

Thanks for reading, and for telling Drupal's story.

Ryan Witcombe, Director, Product Marketing

The Advocacy Program by the numbers

At DrupalCon Rotterdam, Dries asked the community to talk louder about Drupal, and the Drupal Association launched the Advocacy Program to back it. The idea is simple: tell Drupal's story in your own voice, and earn contribution credits through the same system that recognizes code.

One month in, 264 pieces of advocacy have gone through review from nearly 150 contributors: blog posts, videos, conference talks, podcast episodes, Reddit replies, and press coverage, in at least seven languages. Around 2,400 contribution credits are now going out through Drupal.org.

The pattern we hoped for showed up in the data. Social posts made up more than half the volume but under a fifth of the credits, and the biggest scores went to work that travels furthest:

• A 9,000-subscriber YouTube channel that published 102 Drupal videos and livestreams this year.
• A live Drupal AI demo at MAICON, a major marketing-AI conference.
• A three-post technical deep-dive on Drupal and the Model Context Protocol.
• A first-hand write-up of a WordPress-to-Drupal CMS migration.

Read the Month 1 wrap-up for the numbers, the credit matrix, and the fifteen people and pieces we're spotlighting this month.

Want in? Anything public that shows what Drupal can do counts, and anything you've published in 2026 is eligible. Submit it through the form or in Drupal Slack, in the #promote-drupal channel. A Month 1 leaderboard is on the way, and the Drupal 12 launch in December will be the next theme.

In the Open with Tiffany Farriss

In the Open is a weekly series from Drupal Association Interim CEO Tiffany Farriss, sharing what she is hearing across the Drupal community and where the Association is headed. The first episode is out, and new episodes will be published each week. Subscribe to the Drupal Association YouTube channel to follow along. With thanks to Stephen Cross of Second Signal Media for producing the series.

A busy month for the engineering team

October's biggest engineering news came from upstream. On October 21, PHP released fixes for two critical remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that affect every PHP application, Drupal included. We had been preparing, so when PHP moved the release up a day, we hardened Drupal.org's production sites hours before the fixes were public. We then briefly took Drupal.org offline to patch. For the full story, read the incident recap.

The same day, GitLab released a fix for a critical (CVSS 10.0) vulnerability, and we had git.drupalcode.org upgrading within minutes, before GitLab had even published the severity. We've also been sharing mitigation and audit guidance with Drupal Certified Partners and hosting partners. Thank you to our engineering team and our infrastructure partners at Tag1 for the late nights and early mornings, and to the community for your patience.

The regular work didn't stop:

• Canvas is now enabled on new.drupal.org with 67 design components ready for building pages.
• More than 250,000 contrib issues have migrated to GitLab.
• packages.drupal.org now publishes release times for more than 16,600 projects, so site owners can use Composer's new cooldown option to hold off on brand-new releases, an added layer of protection against compromised packages.
• New contributors see Drupal's AI contribution policy where it matters, in their welcome email and default issue template.
• We retired jobs.drupal.org and several legacy servers as we finish moving off our previous hosting.

DrupalCon Orlando 2027

Three ways to get involved:

• T-shirt design contest. Submit your design for the official DrupalCon Orlando 2027 T-shirt. The winning design will be worn by attendees across the event, and the winner also receives a complimentary ticket. Submissions close November 30, 2026, at 11:59 PM EST. Enter the contest.
• Drupal's Got Talent. The inaugural DrupalCon talent show comes to Orlando on the evening of Tuesday, March 23, 2027. You don't need to be a professional, just willing to get up on stage and show your fellow Drupalers what you've got. Sign up before February 19, 2027.
• Sponsorship opportunities. Build visibility, engage with the Drupal community, and showcase your leadership in the open web. Review the prospectus and secure your spot as a sponsor or exhibitor.

DrupalCon Europe heads to Edinburgh

DrupalCon Rotterdam is over, and we would like to thank everyone who attended, contributed, and supported the event. It was fantastic to bring the Drupal community together for another inspiring edition.

Now it's time to look ahead to 2027. DrupalCon Europe is heading to Edinburgh, a city with a rich history, creative spirit, and thriving culture of innovation, and a fitting setting for the community to connect, share knowledge, and shape what comes next. Save the date: 25 to 28 October 2027.

Drupal AI Initiative

Drupal AI 1.5: what it means for digital marketing leaders. Drupal AI 1.5 is out, built by 63 contributors from 31 organizations around the world. A new post from the Drupal AI Initiative explains what the release means for digital marketing leaders. Conversational assistants can remember context across a browsing session and draw on your own site content, streaming guardrails filter output token by token, and editorial copilots help editors refine copy and draft image alt text. Semantic search ranks results by intent, and you can choose your own AI provider. Read the post.

AI Inside Drupal Essentials course debuts in November. The official Drupal AI Initiative training program is now open for registration. The first live, online session begins November 9, with more sessions starting in January 2027. Created by Mike Anello (ultimike), a seasoned Drupal developer and trainer, AI Inside Drupal Essentials is an 18-hour curriculum delivered in 3-hour sessions on Mondays, Wednesdays, and Fridays over two weeks. Participants get a 100+ page course guide, DrupalEasy's weekly office hours, all class recordings, and the AIDE Slack channel. The course fee is $600. Register for AIDE training.

Adapted from the Drupal Association's monthly newsletter, the DA Insider. "The work that just happens" spotlights the behind-the-scenes effort required to keep Drupal's infrastructure, programs, and community moving forward.

Subscribe | Browse the series | Support the work

AI helped adapt the newsletter for the web, and Drupal Association staff reviewed and edited it.

This is the second post in a three-part series about the impact of the AWS Open Source Credits program on the Drupal community. Part one covered our testing infrastructure. Part three will cover the AI era and what we're exploring next.

When people talk about open source infrastructure, they usually mean git repositories and CI runners, and that's what our first post covered. But Drupal is a 25-year-old project with a global community, and the infrastructure that holds that community together goes well beyond code.

This post is about the rest of it: our translation platform, the contribution credit system, the tools for organizing events, and the community archives that AWS credits help keep online. We build the tools that enable our community to build Drupal, and many of those tools have nothing to do with merge requests.

Translating Drupal

Localize.drupal.org is our community translation platform, where more than 8,500 contributors work across 119 language groups. Together they have recorded nearly 1.8 million translations of more than 1.4 million source strings, across more than 33,000 projects.

Behind those numbers is a crucial pipeline: every time a maintainer ships a release, the platform parses it and extracts the translatable strings automatically. So far it has parsed more than 211,000 releases and scanned more than 15.8 million files. Translators then do the part that needs people: deciding how Drupal should read in their own language. In August, localize.drupal.org was one of the last services we moved off the old hardware at the Oregon State University Open Source Lab and onto AWS. Coming very soon, we'll be deploying an upgrade of localize.drupal.org to modern Drupal, thanks to an important group of community contributors.

Localization is how open source reaches people beyond the English-speaking developer world, and for many contributors, translating Drupal into their own language is the first contribution that leads to a greater contribution journey.

Recognizing the work that doesn't show up in git

Drupal does something rare among major open source projects: we record contribution, including work that isn't code, and credit both the people who do it and the organizations that sponsor them. Documentation, event organizing, mentoring, marketing, and accessibility work can all earn credit in our Contribution Records system, alongside code. In the three years to this September, it recorded more than 217,000 credits for more than 14,000 people.

Most of that credit still goes to code, because code is the easiest work to see, and we're working to change that. This fall we launched the Advocacy Program pilot, which awards credit for work that helps people discover and understand Drupal, and organizations can now see the events they sponsor in their Owner Tools on Drupal.org.

The reason we do this is practical: organizations choosing a Drupal partner can see who contributes, which gives companies a reason to sponsor their people's time, including for work that never touches the codebase. We've written about the limits of any credit system, and we adjust ours as we learn, most recently by raising the weight of core and core security work.

The community's calendar, and its memory

Communities organize, and organizing takes tooling. We run events.drupal.org for DrupalCon, and the community events calendar on Drupal.org holds the record of more than 1,700 past events going back to 2004, from local meetups to volunteer-run DrupalCamps around the world, with dozens more on the calendar now.

Why we think this matters beyond Drupal

Most of the conversation about open source sustainability focuses on paying maintainers, and for good reason. But there is a second gap that gets less attention: infrastructure for everyone around the maintainers, like the translators, event organizers, documentation writers, and the people who mentor new contributors. Many of the people who come to Drupal.org never open a merge request, and they need tools too.

Most projects never build this layer because nobody funds it. Fortunately, cloud credits are a practical way to close this gap: they pay for the servers under the translation platform and the events calendar just as they pay for CI. When AWS supports our infrastructure, it supports the community around the code as well as the code itself.

What's next in this series

In our final post: what the AI era is doing to demand on open source infrastructure, where our community's contribution numbers stand today, and how we're thinking about AI tooling for contributors who want it, not only those whose employers pay for it.

The Drupal Association is a 501(c)(3) non-profit. If your organization depends on Drupal, or on the health of open source infrastructure generally, you can support our work.

In the Open is a weekly series from Drupal Association Interim CEO Tiffany Farriss, sharing what she is hearing across the Drupal community and where the Association is headed. In this episode: what the Drupal Association team took away from its first all-staff retreat in three years, how the Drupal certification program is evolving, and what's coming up with the Rosetta Sprint and DrupalCon Orlando 2027.

"There are some things and some conversations that can only seem to happen when we're all together."

The following is a transcript of Tiffany's remarks, lightly edited for readability.

Being in one room

I'm Tiffany Farriss, the Interim CEO of the Drupal Association, and this is In the Open, my regular update on what's happening at the Association as we navigate a year of change.

Top of mind for me is just how important and accelerating being together in person is. For the first time in three years, the entire Drupal Association staff was in one room. Drupal and the DA collaborate across global time zones every day. That's just how it works. But there are some things and some conversations that can only seem to happen when we're all together in the same place at the same time.

Why we exist

In our DA retreat, we spent a lot of time talking about why we exist. I know you know this, but a handful of companies now run most of the web, whether it's cloud or search or browsers, and increasingly AI. Whoever runs your infrastructure gets a say in whether or how you get to use it. Using open source and Drupal offers a different, more sovereign option, a different future, if you will.

Drupal is a registered digital public good that enterprises and governments, the UN, and humanitarian and academic organizations rely on. So all of us at the DA traced a piece of our work to someone that it helps specifically, and then we mapped it to how it serves, whether it's the makers who build Drupal, the advocates who share the message about what Drupal is and what it could do, or the patrons who fund it.

Every single role at the Drupal Association is essential to how we steward our open source project, how Drupal is actually able to manage the commons that we have. And a lot of that work is stuff that folks in the community may not ever really see or notice.

Evolving Drupal certification

This led us to our biggest strategic conversation of the week: the Drupal certification program.

I talked about this a little bit at Rotterdam. I feel like it's the only thing I talk about these days. But for the last 25 years of Drupal, a really small group, mostly agencies and individuals, have been buying the round for millions of people around the world who use and run Drupal. And we're super deeply grateful for that.

But as we all know, the agency landscape is changing, and it's time for everyone who benefits from Drupal to buy a round too. As a 501(c)(3) program, we need to make sure that our mission serves the public interest. We're not a trade association. We can't give advantage to anyone or even just a few companies.

Those are real guardrails that we talked a lot about at the DA. The revamped Drupal certification is not a partner program. It's not a trade association. We're evolving it to be a public registry about those who engage with the Drupal ecosystem in a net neutral or a net positive way, and we're going to build it on facts that we can verify about how organizations contribute.

By designing Drupal certification, it will include the entire ecosystem. Agencies, yes, of course. Hosting and platform providers, definitely, but also infrastructure providers, technology and third-party integrations, and global systems integrators. People who have been using Drupal, and we see them occasionally contributing in small ways, but we want to encourage them to be able to participate more.

AI has made code cheap, and what we've realized is that trust is precious. So you're going to hear more about this idea of trust and Drupal trust over the coming months.

How we work together

We also talked a lot about how we work. Individuals here at the DA have worked side by side, some of them for many, many years. What we're shifting to, though, is actually working together cross-functionally on things that relate to all of us.

So that's really exciting, and I think that just reminded me that the DA needs to get together regularly and think about what it does and how we serve the Drupal community. I'm coming out of that very energized, and I also know that we're not the only ones who need to get together regularly.

The Rosetta Sprint

Dries has proposed an in-person Rosetta Sprint for early January, and I think that's coming together now. The idea with Rosetta is that Drupal modules describe what they can do once, so that AI assistants, front ends, and workflow tools can all use that same description, with no custom integration work for each kind of task you might want to do.

So if you maintain a module, Dries' post explains how to start now, and I've put the link below.

DrupalCon Orlando 2027

Obviously, the biggest place we all come together as a Drupal community, and where that energy is really palpable, is DrupalCon. If you haven't yet, please check out our DrupalCon Orlando site. Registration is open now for 2027.

This will be the first time since the absolutely epic DrupalCon Australia, which I missed sadly, that we're going to be at a resort, an 1,100-acre resort, the Hyatt Regency Grand Cypress in Orlando, Florida. It's in the Disney Springs area, right near Disney.

So you won't want to miss it. Obviously, there will be sessions and contribution and the hallway track all in one place. But I do want to make sure that you know it is spring break week. So if staying on site with everyone really matters to you, I do encourage you to both register for DrupalCon and book your hotel now. We may be able to add more rooms, but not until the ones we already have are gone.

So you're not going to want to miss it. The local team is deep in planning amazing things, and I know that they've started to recruit for the new Drupal's Got Talent. So whatever your act is, we want to see it, so please do apply.

I'm putting links below to everything. So thank you to the DA team for a really great week together. Thank you to everyone who builds, champions, and funds Drupal, and I hope to see you in Orlando, if not before.

Follow the conversation

New episodes of In the Open publish each week. Subscribe on the Drupal Association YouTube channel to follow along.

With thanks to Stephen Cross of Second Signal Media for producing this series.