Drupal Release: 9.5.1

TL;DR

Drupal 9.5.1 is a maintenance release that addresses several critical bugs, performance regressions, and security vulnerabilities. It includes important fixes for container serialization performance issues, jQuery updates to version 3.6.3, improvements to testing frameworks, and various documentation enhancements. This release is particularly important for sites experiencing performance issues after upgrading to Drupal 9.5.0.

Highlight of the Release

• Fixed critical performance regression in container serialization
• Updated jQuery to version 3.6.3 for improved security
• Fixed 'Remember the last selection' feature for views exposed filters
• Improved testing frameworks with better exception handling
• Updated Twig to version 2.15.4

Migration Guide

No specific migration steps are required for this maintenance release. This is a bugfix release that should be a straightforward update from Drupal 9.5.0.

If you experienced performance issues after upgrading to Drupal 9.5.0, upgrading to 9.5.1 is strongly recommended as it addresses a significant performance regression related to container serialization.

Upgrade Recommendations

This release is highly recommended for all Drupal 9.5.0 sites, especially those experiencing performance issues after upgrading from earlier versions. The container serialization fix alone provides a significant performance improvement that makes this update critical for production sites.

The update process should be straightforward:

1. Back up your database and code
2. Update your codebase to Drupal 9.5.1
3. Run the database updates via the admin UI or Drush
4. Clear caches

No special steps are required beyond the standard update procedure.

Bug Fixes

Critical Bug Fixes

• Container Serialization Performance Regression: Fixed a significant performance regression introduced in the container serialization solution (Issue #3327856).

• Views Exposed Filters: Restored functionality for the "Remember the last selection" feature in views exposed filters that had stopped working (Issue #3260652).

• WebdriverTestBase Regression: Fixed an issue where testing non-Drupal pages with WebdriverTestBase could break on Drupal 9.5 (Issue #3327244).

• Views Entity Operations Field: Fixed crashes in Views 'Entity Operations' field when used with non-required relationships (Issue #2939442).

• Entity Reference Display: Resolved a notice error when trying to access array offset on null value in Drupal\views\Plugin\views\display\EntityReference->query() (Issue #3180227).

• CronForm Configuration: Fixed an issue where $this->configFactory was not set properly in the constructor of \Drupal\system\Form\CronForm (Issue #3325184).

• Package.json Validation: Fixed invalid package.json in htaccess test fixtures (Issue #3328542).

• System Update Process: Modified system post-update sorting to log exceptions rather than aborting updates when configuration items don't exist (Issue #3254446).

New Features

No significant new features were added in this maintenance release. This is primarily a bugfix and performance improvement release that addresses issues discovered in Drupal 9.5.0.

Security Updates

• jQuery Update: Updated jQuery to version 3.6.3 to address potential security vulnerabilities (Issue #3328476).

• Twig Update: Updated Twig to version 2.15.4 which includes security improvements (Issue #3330465).

• HTTP Headers Documentation: Updated the OWASP link for useful HTTP headers to reference current security best practices (Issue #3307227).

Performance Improvements

• Container Serialization: Significant performance improvement by fixing a regression in container serialization that was introduced in a previous release (Issue #3327856). This fix addresses a major performance bottleneck that affected many Drupal 9.5.0 sites.

• Action List Builder: Eliminated unnecessary processing cycles in ActionListBuilder::load() for improved efficiency (Issue #3328497).

Impact Summary

Drupal 9.5.1 is primarily a bugfix release that addresses several critical issues discovered in Drupal 9.5.0. The most significant impact comes from fixing a major performance regression related to container serialization that affected many sites after upgrading to 9.5.0.

The release also includes important security updates to jQuery (3.6.3) and Twig (2.15.4), making it important from a security maintenance perspective.

For developers, there are several improvements to testing frameworks and documentation clarifications that will improve development workflows. The fixes to Views functionality, particularly for exposed filters and entity operations, will benefit content editors and site builders.

Overall, this is an important maintenance release that all Drupal 9.5.x sites should apply promptly, with minimal risk and significant performance benefits.