Skip to main content
Home
GrN.dk

Main navigation

  • Articles
  • Cases
  • Services
  • Your Digital Project Manager
  • About Greg Nowak
  • Image Gallery
  • Contact
User account menu
  • Log in

Join my community / free newsletter — sign up here

Breadcrumb

  1. Home

Drupal 10's December 2026 Deadline: Start With the Upgrade Inventory

Illustrated infographic summarizing: Drupal 10's December 2026 Deadline: Start With the Upgrade Inventory

By Greg Nowak. Last updated 2026-06-26.

Drupal 10 now has a planning date that should be on every site owner's calendar. As of June 26, 2026, Drupal.org lists Drupal 10's end-of-life date as December 9, 2026. It also names Drupal 10.6.0 as the final Drupal 10 minor release, with no new Drupal 10 releases after that date.

That does not mean every Drupal 10 site is in trouble today. It does mean the useful conversation has changed. The right question is no longer, "Will we upgrade eventually?" It is, "What do we need to know before the Drupal 11 upgrade can be scheduled with confidence?"

The deadline exposes hidden project work

For business owners, operations leads, and agency teams, the risky part is rarely the last Composer command. The risk is all the hidden dependency work that has to be understood before that command is safe.

The official Drupal 10 to 11 upgrade path expects a site to be on Drupal 10.3.x or later before moving to Drupal 11. It also expects the hosting environment to meet Drupal 11 platform requirements, PHP 8.3.0 or later, command-line access with Composer and Drush, and the ability to adjust file permissions during the upgrade.

There is also site-specific cleanup. Drupal's guide notes that all core files change, including .htaccess, so any scaffold customizations need to be found and documented. Several extensions deprecated in Drupal 10 are removed in Drupal 11, including Actions UI, Activity Tracker, Book, Forum, Statistics, and Tour. If a live site still depends on one of these, the upgrade inventory needs to decide whether to remove it, replace it with a contributed version, or change the business process around it.

Drupal 10 to 11 upgrade inventory: where scope usually appears.
Inventory Area What To Check Decision Needed
Platform Drupal 10.3+, PHP 8.3+, Composer, Drush, file permissions Can the current host and pipeline run Drupal 11?
Contributed projects Modules, themes, major-version constraints, issue queues Update, replace, patch, or retire?
Custom code Deprecated APIs, custom modules, themes, Twig, libraries Fix manually, use Drupal Rector, or redesign?
Composer and deployment Lock file health, direct dependencies, outdated packages, audit results Is dependency cleanup needed before core moves?
Scaffold and core extensions .htaccess changes, removed modules, obsolete extensions What must be documented and reapplied?

Run readiness checks before upgrading

The Upgrade Status project is useful because it treats major-version readiness as an assessment, not a guess. It checks whether the current Drupal version supports the next major upgrade, whether the system meets the next version's requirements, and whether contributed projects can be updated while the site is still on the current major version. It also runs PHPStan-based compatibility checks, understands several Drupal-specific deprecations, and can be used through Drush for command-line or CI workflows.

Timing matters. Upgrade Status should be run on the current Drupal 10 site against Drupal 11 readiness. After the site has already been upgraded, many deprecated APIs and libraries are gone, so there is less left to inspect. The same project documentation also makes clear that skipping multiple major versions is not supported by Upgrade Status or Drupal core's upgrade path. In practical terms: do not treat Drupal 10 to Drupal 12 as a shortcut.

Composer debt belongs in the estimate

Composer readiness is not just a developer convenience. It is part of delivery risk. Drupal 10 requires Composer 2.3.6 or higher; Drupal 11 requires Composer 2.7.0 or higher. If local machines, CI runners, release scripts, or production install steps still assume older tooling, the upgrade is not operationally ready.

A useful inventory keeps the commands close to the work. Start by exposing what is stale or unsafe:

  • composer outdated "drupal/*" shows Drupal projects with available updates.
  • composer audit checks PHP dependency advisories, not just Drupal modules.
  • composer why-not drupal/core ^11 helps identify constraints blocking Drupal 11.
  • composer update --dry-run previews dependency changes before files are changed.

For major module upgrades, a simple update is often not enough. Drupal's Composer guidance says a new major version should be required explicitly, for example composer require drupal/modulename:^2.0 --with-all-dependencies. For upgrade preparation, Drupal's core guide also uses --no-update when changing constraints first, so dependency conflicts can be resolved deliberately instead of halfway through a release window.

A practical project shape

  1. Confirm the baseline: core version, PHP, Composer, Drush, hosting, permissions, backups, and deployment workflow.
  2. Build the inventory: contributed modules, themes, custom code, direct Composer dependencies, removed core extensions, and scaffold customizations.
  3. Run Upgrade Status: capture environment findings, contributed-project findings, and custom-code deprecations.
  4. Remediate in order: update what can move on Drupal 10, handle major-version constraints, remove obsolete dependencies, and fix custom code.
  5. Execute with verification: back up the database, dry-run Composer, perform the update, run database updates, rebuild caches, export configuration, test workflows, monitor logs, and run cron.

For agency teams, this structure also makes handoff cleaner. The inventory can become a scoped backlog instead of a vague warning. For owners and operations leads, it gives the upgrade a budget, risk profile, and sequence.

Need a steady owner for the upgrade?

If your Drupal 10 site has unclear module compatibility, old Composer constraints, custom code that has not been checked against Drupal 11, or a deployment process that only one person understands, this is a good moment to turn the unknowns into a plan. Greg can help audit the site, run readiness checks, separate quick fixes from real blockers, and shape the work into a controlled upgrade project. Talk to Greg about your Drupal upgrade inventory.

Related on GrN.dk

  • WordPress 7.0 Collaboration Readiness: Why Legacy Meta Boxes and Hosting Assumptions Can Still Stall Your Upgrade
  • CMS Upgrades in 2026: A PHP Roadmap for WordPress and Drupal Sites
  • Drupal CMS 2.0 Speeds Marketing Site Rebuilds, but It Is Not Autopilot

Need help with this kind of work?

Plan your Drupal upgrade inventory Get in touch with Greg.

Sources

  • Drupal core release schedule
  • How to upgrade from Drupal 10 to Drupal 11
  • Upgrade Status
  • Composer requirements
  • Updating Modules and Themes using Composer
Last modified
2026-07-27

Tags

  • Drupal
  • Drupal 11
  • upgrade planning
  • Composer
  • Ops consulting

Review Greg on Google

Greg Nowak Google Reviews

 

Written recommendations from Trafik og Veje, Aarhus Municipality (2011) and AgroTech (2010) — read them on LinkedIn.

Illustrated infographic summarizing: From Supplier Invoice to Bookkeeping: AI with a Control Checkpoint
From Supplier Invoice to Bookkeeping: AI with a Control Checkpoint
2026-08-18

AI can reduce the work involved in processing supplier invoices, but reliable bookkeeping requires validation, duplicate checks, approval and a clear audit trail.

Illustrated infographic summarizing: Nginx 1.30 Changed the Upstream Defaults—Test Before You Upgrade
Nginx 1.30 Changed the Upstream Defaults—Test Before You Upgrade
2026-08-17

Nginx 1.30 defaults upstream proxying to HTTP/1.1 with keepalive enabled. Here is what to inspect, model and test before upgrading.

Illustrated infographic summarizing: OpenAI’s Assistants API Shuts Down in Ten Days. Is Your App Ready?
OpenAI’s Assistants API Shuts Down in Ten Days. Is Your App Ready?
2026-08-16

OpenAI’s Assistants API shuts down on August 26, 2026. Learn what to inventory, how to preserve state and how to cut over without breaking the product.

Illustrated infographic summarizing: WordPress 7.1 Forces the Editor Into an iframe—Test Your Custom Blocks
WordPress 7.1 Forces the Editor Into an iframe—Test Your Custom Blocks
2026-08-15

WordPress 7.1 removes the non-iframe editor fallback. Learn how to audit custom blocks, test real workflows and fix compatibility issues before launch.

Illustrated infographic summarizing: GitHub will stop sending jobs to stale self-hosted runners
GitHub will stop sending jobs to stale self-hosted runners
2026-08-14

GitHub starts enforcing runner versions on August 24, 2026. Audit and upgrade self-hosted runners before builds and deployments start stalling.

Illustrated infographic summarizing: Your AI Agent Has Shell Access. What Can It Reach?
Your AI Agent Has Shell Access. What Can It Reach?
2026-08-13

A practical guide to mapping what a shell-enabled AI agent can reach, then containing its access to files, credentials, networks, tools, and high-impact actions.

Illustrated infographic summarizing: Cloudflare Changed DoH JSON. What Else Is Parsing DNS as Text?
Cloudflare Changed DoH JSON. What Else Is Parsing DNS as Text?
2026-08-12

Cloudflare’s DoH JSON change exposes brittle DNS parsing. Find affected scripts, test both formats, and choose a safer integration contract.

Illustrated infographic summarizing: Your Website Can Answer Questions Now. Should It?
Your Website Can Answer Questions Now. Should It?
2026-08-11

NLWeb makes conversational website search practical to deploy. The real question is whether your content, users and team are ready to support it.

Illustrated infographic summarizing: AI Search Finally Has Reports. Now Connect Visibility to Revenue
AI Search Finally Has Reports. Now Connect Visibility to Revenue
2026-08-11

Google and Bing now expose first-party AI search data. The real task is connecting citations and impressions to analytics, CRM outcomes, and revenue.

Illustrated infographic summarizing: The Bot Passed Your CAPTCHA. What Did It Do Next?
The Bot Passed Your CAPTCHA. What Did It Do Next?
2026-08-11

Passing a challenge is only one signal. Session analysis, server-side validation and endpoint-specific controls help reduce bot abuse without blocking customers.

More articles

Built by AI — available for your business. The daily articles on this site are researched, written and illustrated by an autonomous AI pipeline. At nowa.dk I install the same kind of AI automation in businesses at fixed prices — site in Danish, English version here, and web/marketing agencies have a dedicated page.

RSS feed

Footer

  • All articles
  • Contact

GrN.dk — AI automation, web platforms, web optimization, data handling and logistics.

© 2026 GrN.dk · LinkedIn · Contact · AI automation in Danish: nowa.dk

Behind GrN.dk: Individual Entrepreneur Codecrafter · Tax ID 305669096 · Bakhtrioni St. 22, 0194 Tbilisi, Georgia · official business register