Drupal Release: 7.100

TL;DR

Drupal 7.100 introduces the Announcements Feed module backported from newer Drupal versions, enhancing security with user password rehashing improvements, and making CI templates compatible with private repositories. This release focuses on keeping Drupal 7 sites informed about critical updates while improving security and development workflows.

Highlight of the Release

• Introduction of the Announcements Feed module backported from newer Drupal versions
• Security enhancement with hardened user_pass_rehash() function
• CI template compatibility with private repositories
• Announcements Feed enabled by default with opt-out option

Migration Guide

No specific migration steps are required for this update. The Announcements Feed module will be enabled by default after updating to Drupal 7.100.

If you wish to disable the Announcements Feed module, you can do so through the module administration interface or by using Drush:

drush dis announcements_feed

Upgrade Recommendations

It is recommended that all Drupal 7 sites upgrade to version 7.100 to benefit from the security improvements and new features. This is a standard update with no known breaking changes.

The update process follows the standard Drupal 7 update procedure:

1. Back up your database and files
2. Put the site into maintenance mode
3. Replace your existing Drupal core files with the new version
4. Run the update script (update.php)
5. Take the site out of maintenance mode

As always, test the update on a staging environment before applying it to your production site.

Bug Fixes

Version Property Added to Announcements Module

Fixed an issue where the Announcements module info file was missing the version property, ensuring proper module identification and compatibility checking.

New Features

Announcements Feed Module

The Announcements Feed module has been backported from newer Drupal versions to Drupal 7. This module allows site administrators to stay informed about important Drupal security releases, bug fixes, and other critical announcements directly from the Drupal project.

• The module is enabled by default but provides an opt-out option
• Helps ensure site administrators are aware of critical updates
• Backported to maintain feature parity with newer Drupal versions

CI Template Improvements

CI templates are now compatible with private repositories, making it easier for developers working with private Drupal 7 projects to utilize continuous integration workflows.

Security Updates

Hardened Password Rehashing

The user_pass_rehash() function has been hardened against potential attacks, improving the security of user accounts and password management. This enhancement helps protect against various password-related vulnerabilities and strengthens the overall security posture of Drupal 7 sites.

Performance Improvements

No specific performance improvements were mentioned in this release.

Impact Summary

Drupal 7.100 focuses on keeping Drupal 7 sites secure and up-to-date with the introduction of the Announcements Feed module and security enhancements. The addition of the Announcements Feed module (enabled by default) will help site administrators stay informed about critical updates, while the hardened password rehashing improves site security. Developers will benefit from improved CI workflows with private repositories.

This release continues to demonstrate the Drupal project's commitment to maintaining Drupal 7 with important security updates and backported features from newer versions, even as the platform approaches its end-of-life. The changes are non-disruptive and focused on enhancing security and administrator awareness.