Mike Anello (ultimike)

If you're using Twig's raw filter with Drupal, you're doing it wrong | PreviousNext

With some recent security advisories for Cross Site Scripting (XSS), it feels like an opportune time to remind those who author Twig templates for Drupal:If you're using Twig's |raw filter, you're probably doing it wrong

Remove the Telephone module

Problem/Motivation Remaining tasks The change record for this issue should include a link to recommendations page, https://www.drupal.org/node/3223395#s-telephone. (For example, the CR for removing HAL) - Wrote it here https://www.drupal.org/node/3606383 Tag this issue 'Needs release note.' - Done Remove the extension ;-). - Done Update update path tests as needed. See Learn how to write an automated update test. Remove references from core/phpstan-baseline.neon. - Done Remove any spelling words

Pick Your Starting Point in the Drupal Site Templates Marketplace

More than a dozen Drupal site templates are available. Compare every marketplace option by sector, design system, and content architecture.

Vibe Coding Drupal: A Force Multiplier for Contrib

Maintainer burnout threatens Drupal's 50,000+ contrib modules. How vibe coding with AI is becoming a lifeline for open source.

Drupal 11: Building A "Load More" Feature For Paginating Nodes Using htmx

Following on from my last article, an introduction to htmx in Drupal, I wanted to start looking at examples of htmx being used to power interactivity in Drupal in different ways.I thought a good place to start this off would be to look at using htmx in a simple controller. By creating a route to a controller we can render content and then inject htmx attributes to perform actions with the same controller.

Creating tests for Drupal module Update Hooks | LostCarPark

The gap between Drupal and its reputation

Drupal is stronger than its reputation, but unless the community tells that story, the outdated one wins.

Six months following DrupalCon Vienna: the Drupal AI Initiative arrives in Chicago, showing significant progress and major releases

Six months after DrupalCon Vienna, the Drupal AI Initiative arrived in Chicago showing growth and progress, with 10 new partners (31 total) and $1.5 million in funding and staff support. Key releases—Drupal AI 1.2.0 and 1.3.0, MCP 1.2, and Drupal CMS 2.0 with Canvas AI—introduced governance, workflows, and production visibility.

lakedrops.com

The ECA Guide Revolution: Documentation Meets AI | LakeDrops

This is part of our ongoing exploration of ECA's evolution, "ECA: The Next Chapter". Earlier posts covered the journey from Vienna to Athens, the Modeler API, in-context customization, the new

Vibing Drupal: Switching from "Brat mode" to "Drupal mo...

UI Suite Monthly #36 — Beta 5, Recipes, and AI That Builds Your Pages | UI Suite Initiative website

Our 36th monthly UI Suite meeting (June 18, 2026) was a packed one. Despite the early-summer heat in Paris and a few people already on holiday, the team walked through a string of releases, demoed a brand-new starter kit, and gave a first live look at AI agents building Drupal pages on their own. Here's everything that happened.

Blog post: Our contributions to Drupal 11.4 - and the 11.x journey so far

Drupal 11.4 is here. Several features landing in this cycle, and across the broader 11.x series, trace back to ideas we explored in contrib first. Worth noting too: Drupal major releases don't introduce new features. The real architectural work happens in the minors, and by the time 12.0 arrives, much of it will already be available, paving the way for the next series of improvements in 12.x.Here's what we've been working on, and what else is worth knowing about.

Which AI Summit Is Right for You at DrupalCon Rotterdam?

Artificial intelligence is changing how we build, manage, and deliver digital experiences. But AI isn’t just a developer conversation. It’s also a conversation for architects, product owners, marketers, digital strategists, executives, and organisational leaders. That’s why DrupalCon Rotterdam is introducing two dedicated AI summits on Monday, 28th September. Each has a different focus, but together they provide a complete picture of what AI means for the future of Drupal. The AI Dev Summit The

Volunteer Opportunities at DrupalCon Orlando 2027 | Drupal Events

DrupalCon unites experts from around the globe who create ambitious digital experiences. Network, learn, and be inspired.

drupal-colorado.org

DrupalCamp Colorado 2026 | Drupal Colorado, Inc.

LLM harm reduction in Drupal core contribution, AGENTS.md guidelines

Problem/Motivation LLM use in Drupal is not slowing down, it's picking up in Drupal core too. Drupal.org requires disclosure of LLM use when contributing. They can't do that if they're afraid of the response from the community. It means more "hidden" use of LLM, more time wondering if a contribution is LLM generated or not. Shaming people into changing their behavior doesn't work, what it does is make people hide their use, leave, or lash out, none of which is helpful. To keep things manageable

Termageddon

Auto-Updating Privacy Policy Generator for Websites

Generate compliant Privacy Policies, Terms & Cookie policies that auto-update as privacy laws change. Coverage for US, EU, UK, Canada & Australia.

Commenting is not enabled in Drupal by default anymore

The standard install profile and recipe does not depend on comment module anymore, meaning site builders need to explicitly decide to enable commenting. The feature itself is still available in Drupal core.

Using AI to Moderate Content in an Existing Drupal Workflow | Aten Design Group

||A New Solution to An Old ProblemContent moderation is a data processing problem. For large sites with many content contributors, moderators can get bogged down catching obvious content policy violations without having time to do real editorial work.

DDEV

DDEV Live Usage Statistics

Live DDEV usage statistics pulled from Amplitude at every site build.

Popular Science

What kind of animal is Gonzo? What kind of animal is Gonzo? The Muppets won't say, so we asked biologists.

Gonzo’s most distinct feature is also his most baffling: his beak. (Or is it a nose?)

DDEV

Sponsor DDEV

Help ensure DDEV's sustainable future through recurring sponsorship.

Election 2026: Dates & Candidates

Each year, one at-large board seat becomes available as part of our staggered two-year term structure. We're incredibly grateful to Alejandro Moreno for their dedicated service on the board from 2024 to 2026. As their term concludes, we’re excited to invite a new community member to step into this vital leadership role and help shape the future of the Drupal project.

DDEV

DDEV April 2026: Talking Drupal, Ubuntu 26.04, coder.ddev.com, Intel Macs fade away, Add-ons as delivery mechanism

April 2026 DDEV Newsletter, the latest from the DDEV community

Talking Drupal: Talking Drupal #566 - DrupalEasy: Responsible Drupal AI

Today we are talking about Drupal, AI, and learning to use it responsibly with guest Mike Anello. We’ll also cover Entity Mesh as our module of the week. For show notes visit: Topics Course overview Fast moving modules Inside vs outside AI No code approach Keeping curriculum current Essentials vs add ons Chat Claude Code setup Inside vs Outside AI Rules and Provider Calls Guardrails in Drupal UI Model QA and Testing Local Models and Costs Token Budgets and Logging Course Use Cases Overview RAG

DDEV

Umbraco on DDEV: .NET, SQL Server, and the generic project type

An experiment in running Umbraco CMS and .NET 10 under DDEV, using the generic project type, a custom web image, and Azure SQL Edge.

GitLab issue migration: thank you Ripple Makers, your projects are next

This is the fifth post in our GitLab issue migration series. So far we’ve covered the immediate changes, the new workflow for migrated projects, how to use it, and what the migration looks like from a contributor’s perspective. This post is about which projects we’re migrating next, and why. We are now migrating projects maintained by Ripple Makers, the individual members of the Drupal Association. If you’re a Ripple Maker who maintains one or more contrib projects, this is our thank you for you

Drupal AI Initiative: introducing Inside AI and Outside AI

A year ago, we launched the Drupal AI Initiative with a published strategy and a bet that AI would matter enormously to Drupal's future. Today the initiative spans 32 organizations and more than 50 contributors, shipping against a public 2026 roadmap. As the work has grown, it's become clear that our AI strategy needs to cover two distinct areas. While innovation and product development remain core goals across everything we do, we are organizing our day-to-day execution into two workstreams: In

"Argo-nizing" Our Platform for AI Development | Security, Insights, and Results for your Drupal or WordPress Website

How grouping related repos into a single parent directory made AI coding assistants significantly more useful

Drupal AI 1.4.0: Unveiling Extensibility, Enterprise Resilience, and Advanced Guardrails

Just two months after the milestone release of Drupal AI 1.3.0, we are thrilled to announce that Drupal AI 1.4.0 is officially here! With the 1.x branch reaching a high level of maturity and stability, we are excited to transition into a more predictable, bi-monthly minor release cadence. Moving forward, the Drupal community can look forward to a steady, reliable stream of improvements, new integrations, and expanded platform capabilities.

MidCamp

Responsible Drupal AI Basics

Explore how AI can enhance - not replace - your Drupal workflow in this hands-on half-day workshop. Focused on the Drupal AI module ecosystem, you'll learn setup options, auditing tools, and practical techniques for responsible content generation. Topics include AI Automators and Field Widget Actions, with real-world examples throughout. Prerequisites: basic prompt engineering knowledge, site-building skills, and a paid API account with OpenAI, Gemini, or Anthropic.

TheDropTimes

Andy Marquis Outlines Custom Field’s Role Alongside Paragraphs in Drupal

When Paragraphs-based content models grow deep, Drupal teams can inherit slower rendering, heavier databases, and harder migrations. Custom Field maintainer Andy Marquis explains where field-based structured data offers a leaner alternative, and where Paragraphs still belongs.

lakedrops.com

Test, Replay, Debug: Closing the Feedback Loop | LakeDrops

I've been building workflows blind for years. Configure a model, save it, deploy, trigger an event, check logs, guess what went wrong. Repeat. Slow, frustrating, error-prone.When we talked to existing ECA users during UX research in late 2025, they didn't ask for more actions or events. They asked for visibility. "This is what we've waited for the most," they said.

The 60-second procurement test

Anyone paying for Open Source work should be able to check whether a vendor contributes. Open Source projects should take responsibility for making that easy by publishing contribution records.

The UN Spent a Week Describing Drupal

Image Credit: Mike Gifford I spent last week at the UN in New York for Open Source Week. The AI sessions were sharp, well-attended, and full of people who have been thinking seriously about where this is all going. Ministers, engineers, researchers, cybersecurity practitioners. And across four days of sessions, a picture kept assembling itself — not one anyone drew deliberately, but one that emerged from enough different people making enough adjacent points. By the end of the week I was fairly c

Beyond the "AI Average": How Drupal is the Future of ‘Quality at Scale’

In his ‘#DriesNote’ presentation at DrupalCon Chicago 2026, Dries addressed the elephant in the room: AI is currently flooding the web with "average" content: fast to produce, but hard to distinguish. While there are tools that can generate beautiful prototypes in 15 minutes with no technical skill, those prototypes lack the structured data, governance, and durability required by serious organizations.

Remove Tags vocabulary from Standard profile and recipe

Problem/Motivation [#3159848] left the tags vocabulary in standard profile / recipe, although it is free flowing and is not attached to anything that uses it. We kept it there to manage scope. We should remove it. Steps to reproduce Proposed resolution Remove the tags vocabulary. Remaining tasks User interface changes Introduced terminology API changes Data model changes Release notes snippet The standard install profile and recipe does not include the tags vocabulary anymore.

Spaceballs: The Wiki

Ludicrous Speed

―Dark Helmet and Colonel Sandurz preparing to pursue Lone Starr.[src] Ludicrous Speed was a hyperspace speed considerably faster than lightspeed. While a ship was moving at Ludicrous Speed, a plaid-patterned tunnel straight through space itself would be visible to all bystanders. Ludicrous Speed was both an extremely powerful hyperdrive mechanism and a considerable threat to the health of anyone not buckled down during acceleration. Dark Helmet, drastically overestimating the capacity of...

DDEV

DDEV v1.25.3: Faster Start and Stop, Built-in Docker Compose, Stable Podman, MariaDB 12.3 LTS

DDEV v1.25.3 brings faster `ddev start` and `ddev stop`, built-in Docker Compose, stable Podman and Docker rootless support, MariaDB 12.3 LTS support, and Node.js configuration fixes.

AI and the great CMS unbundling

AI is not killing the CMS. It is unbundling creation from control. That may replace the CMS for simple publishing, but makes it more important wherever content is shared, reused, approved, or trusted.

Drupal 11.4.0 is now available

The fourth feature release of Drupal 11 is another performance breakthrough. Using only a third of the database and cache lookups compared to Drupal 11.0 and 10.6 for the same requests. It also comes with 15-25% better compression of JS and CSS, much faster translation file handling, a new native command line interface, improved password hashing and a lot more.