By Greg Nowak, 22 June, 2026 Drupal's June security bundle exposes fragile Composer update habits Drupal's June 2026 security releases show why Composer updates need staging, dependency review, JSON:API checks, oEmbed settings, and a runbook. Tags Drupal Composer security patching CMS operations