Drupal Release: 8.9.4

TL;DR

Drupal 8.9.4 is a maintenance release that addresses several bugs, improves accessibility, and enhances security. This update focuses on fixing issues with content moderation filters, JSON:API functionality, orphaned comments handling, and various code quality improvements. It's particularly important for sites using content moderation, JSON:API, or those with accessibility requirements.

Highlight of the Release

• Fixed content moderation state filter grouping issues
• Improved accessibility for required fields in Internet Explorer 11 high contrast mode
• Fixed JSON:API filtering for resources with empty relationship objects
• Resolved fatal errors when loading orphaned comments
• Enhanced Views UI with autocomplete suggestions for tags

Migration Guide

No migration steps are required for this maintenance release. As with any Drupal update, it's recommended to:

1. Back up your database and site files before updating
2. Update through Composer if your site is Composer-managed:

   composer update drupal/core-recommended --with-dependencies
   

3. Run database updates:

   drush updatedb
   

4. Clear caches:

   drush cache:rebuild
   

No API changes or deprecations were introduced that would require code modifications.

Upgrade Recommendations

This update is recommended for all Drupal 8.9.x sites, especially those using content moderation, JSON:API, or sites with accessibility requirements. The fixes for orphaned comments and empty libraries.yml files address issues that could cause fatal errors, making this update important for site stability.

Since this is a bugfix release with no known regressions, it's advisable to update as soon as your regular maintenance schedule allows. As always, test the update on a staging environment before applying to production.

Bug Fixes

Content Management

• Fixed content moderation state filter incorrectly grouping content type conditions
• Resolved issues with orphaned comments that could cause fatal errors when loading or building
• Fixed Views UI tags to properly use autocomplete suggestions

API & Development

• Fixed JSON:API filtering for resources with empty relationship objects
• Resolved issues with empty *.libraries.yml files causing fatal errors
• Fixed exception handling for access denied exceptions to prevent logging backtrace strings
• Corrected RDF comment storage to not load NULL comments
• Fixed issues when changing "Site language" setting for users with translated accounts

User Interface

• Fixed hidden buttons in off-canvas dialogs not being properly hidden
• Improved accessibility for required fields in Internet Explorer 11 high contrast mode
• Fixed exposed term filters to not show term options that users don't have access to

New Features

No significant new features were added in this maintenance release. Drupal 8.9.4 focuses primarily on bug fixes, accessibility improvements, and code quality enhancements.

Security Updates

While this release doesn't explicitly mention critical security fixes, it does include improvements to exception handling for access denied exceptions, which prevents potentially sensitive backtrace information from being logged. Additionally, the fix for exposed term filters ensures users don't see term options they shouldn't have access to, which improves security by properly enforcing access controls.

Performance Improvements

This release does not include any significant performance improvements. The focus was primarily on bug fixes, accessibility enhancements, and code quality improvements.

Impact Summary

Drupal 8.9.4 is a maintenance release that addresses several important bugs and improves site stability. The most significant fixes include:

1. Content Moderation Improvements: Fixed filtering issues that affected how content is displayed and managed when using content moderation.

2. Accessibility Enhancements: Required fields are now properly identifiable in Internet Explorer 11 high contrast mode, improving usability for users with visual impairments.

3. JSON:API Fixes: Resolved regression issues with filtering resources that have empty relationship objects, ensuring API functionality works as expected.

4. Fatal Error Prevention: Fixed several issues that could cause fatal errors, including problems with orphaned comments and empty libraries.yml files.

5. UI Enhancements: Improved Views UI tag autocomplete functionality and fixed issues with hidden buttons in off-canvas dialogs.

These changes primarily affect site administrators, content editors, and developers, with some improvements also benefiting end users through better accessibility and UI functionality.