Drupal Release: 9.0.10

TL;DR

Drupal 9.0.10 is a maintenance release that includes numerous bug fixes, documentation improvements, and code quality enhancements. This release addresses several critical issues including book module functionality, contact form message handling, and compatibility with PHP 8 and Composer 2. While primarily focused on bug fixes and code quality, it also includes important security improvements for translation fetching and resolves several random test failures to improve development reliability.

Highlight of the Release

• Fixed issue with contact message double decoding
• Resolved problems with book module functionality
• Improved compatibility with PHP 8 and Composer 2
• Enhanced security by enforcing HTTPS for translation fetching
• Fixed numerous documentation issues and code comments

Migration Guide

No specific migration guide is needed for this maintenance release. Drupal 9.0.10 contains bug fixes and improvements that should not require any migration steps from previous 9.0.x versions.

However, if you're using Composer 2, note that this release includes a fix for path repositories which need to be listed first in your composer.json file. If you experience any issues with Composer after upgrading, you may need to adjust your repository order.

Upgrade Recommendations

It is recommended that all sites running Drupal 9.0.x upgrade to this version to benefit from the numerous bug fixes and security improvements. This is especially important if you:

1. Use the Book module, as several critical fixes have been implemented
2. Use contact forms, as a message decoding issue has been fixed
3. Use Composer 2 for dependency management
4. Rely on path aliases in your site structure

The upgrade process should be straightforward as this is a maintenance release with no API changes or database updates required. Follow the standard Drupal update procedure:

1. Back up your database and code
2. Update your codebase to Drupal 9.0.10
3. Run the update script by visiting /update.php in your browser or using Drush

If you're using Composer, update with:

composer update drupal/core --with-dependencies

Bug Fixes

• Contact Module: Fixed issue where contact messages were being decoded twice, which could lead to data corruption.
• Book Module:
  • Fixed issue where unpublished books were appearing in the list of books at /book.
  • Resolved "Illegal choice 0 in Book element" error when switching the book outline field from anything to "- None -".
  • Fixed validation issues in Book Settings Form.
• Path Aliases: Fixed issue where "0" couldn't be used as a path alias without showing an error.
• File Handling: Fixed issue in file.php where all slashes were being incorrectly removed from filepaths.
• Layout Builder: Fixed issue where LayoutBuilderHtmlEntityFormController was breaking decoration.
• Migration: Fixed d6_term_node_revision migration that was referencing a non-existent migration.
• Form Handling: Fixed issue where null was being passed to SubformState::createForSubform() instead of an array.
• Update Module: Fixed notice "Undefined index: title" in ProjectSecurityRequirement.
• Testing:
  • Fixed issue where hold_test module was creating files in incorrect places, leading to random errors.
  • Fixed BasicAuthTestTrait::basicAuthPostForm() functionality.
  • Made QuickEditIntegrationTest more robust and fail-proof.
  • Fixed datetime-related test failures on PostgreSQL 12.

New Features

No significant new features were introduced in this maintenance release. Drupal 9.0.10 focuses primarily on bug fixes, documentation improvements, and code quality enhancements.

Security Updates

• Translation Fetching: Enhanced security by enforcing HTTPS for fetching translations, preventing potential man-in-the-middle attacks when downloading translation files.
• PHP 8 Compatibility: Added prevention measures to stop Drupal 8.9 and 9.0 from being installed on PHP 8, as this version is not yet fully supported and could lead to security vulnerabilities.

Performance Improvements

No specific performance improvements were highlighted in this maintenance release. The focus was primarily on bug fixes, documentation improvements, and code quality enhancements.

Impact Summary

Drupal 9.0.10 is a maintenance release that focuses on bug fixes, documentation improvements, and code quality enhancements. The most significant impacts are in the Book module functionality, with fixes for unpublished books appearing in lists and issues with the book outline field validation.

The release also addresses important compatibility concerns, including preventing installation on PHP 8 (which is not yet fully supported) and fixing path repository handling for Composer 2. Security is enhanced by enforcing HTTPS for translation fetching.

For developers, numerous documentation improvements and code comment fixes make the codebase more accurate and maintainable. Several test improvements also make the testing framework more reliable, especially on PostgreSQL 12.

While this release doesn't introduce new features or significant API changes, it provides important stability improvements that benefit all Drupal 9.0.x users. The fixes for the Book module, contact form message handling, and path alias functionality will be particularly valuable for content editors and site administrators.