Drupal's first-generation Automatic Updates setup is no longer something teams can leave on the backlog. With the old Drupal.org API retired and the legacy hash files expiring on May 12, 2026, Composer, Package Manager, and deployment-workflow cleanup has become part of basic update readiness.