The legacy Drupal Automatic Updates API is gone. Audit branches, Composer, hosting constraints, and deployment workflows before the next security release.
A practical 2026 guide to auditing a legacy Drupal 9 site, using Drupal 10 as a controlled bridge, and deciding whether to upgrade to Drupal 11 or rebuild.
Clean up composer.json with Composer Normalize, Composer validation, and CI checks so PHP dependency changes stay readable, repeatable, and easier to review.
Practical Composer guidance for Drupal teams: safer installs, cleaner dependency updates, faster conflict debugging, and Drush that matches each project.
