One Webform Release, Twenty Advisories: Audit Every Drupal Site
A critical Webform release is a reminder to audit every Drupal codebase, configuration and deployment—not just the main production website.
Composer
Maintenance automation / DevOps
The boring superpower: a weekly gate that keeps twelve sites' dependencies current
Twelve production websites on one server, each with its own Composer dependency tree, and the oldest question in hosting: are they up to date, and is it safe to make them so? The dependency-currency gate answers it weekly and automatically — it inventories every vhost, checks each dependency tree against the PHP version that site's web server actually runs, queues the semver-safe updates for approval, and reports the breaking ones instead of applying them.
GrN.dk — server fleet (12 production vhosts)
Drupal’s June security bundle exposes fragile Composer update habits
Drupal’s June security fixes reveal gaps in Composer update routines. Learn how to choose supported versions, resolve blockers, test changes, and deploy reliably.
Drupal 10's December 2026 Deadline: Start With the Upgrade Inventory
Drupal 10 reaches end of life on December 9, 2026. Use this practical inventory to scope Drupal 11 readiness, Composer debt, modules, and custom code.
Drupal Automatic Updates After the Legacy API Shutdown: A Practical Fix Plan
The legacy Drupal update API is gone. Choose a supported update path, check Composer and hosting constraints, and rehearse safer Drupal releases.
Drupal 9: A Practical Upgrade Path for Legacy Sites
A practical 2026 guide to auditing a legacy Drupal 9 site, using Drupal 10 as a controlled bridge, and deciding whether to upgrade to Drupal 11 or rebuild.
Drush and Symfony Errors in Drupal: How to Fix Them Safely
Find the cause of Drupal Drush, Symfony and PHP errors, choose compatible dependencies, and restore reliable deployments without risky production changes.
Tidy Up composer.json with Composer Normalize
Make PHP dependency changes easier to review with Composer Normalize. Set explicit plugin trust, keep the lock file in sync, and catch drift in CI.
Written recommendations from Trafik og Veje, Aarhus Municipality (2011) and AgroTech (2010).
