One Webform Release, Twenty Advisories: Audit Every Drupal Site
A critical Webform release is a reminder to audit every Drupal codebase, configuration and deployment—not just the main production website.
A critical Webform release is a reminder to audit every Drupal codebase, configuration and deployment—not just the main production website.
Twelve production websites on one server, each with its own Composer dependency tree, and the oldest question in hosting: are they up to date, and is it safe to make them so? The dependency-currency gate answers it weekly and automatically — it inventories every vhost, checks each dependency tree against the PHP version that site's web server actually runs, queues the semver-safe updates for approval, and reports the breaking ones instead of applying them.
GrN.dk — server fleet (12 production vhosts)
Drupal’s June security fixes highlight common maintenance gaps. Check supported versions, resolve Composer blockers, and agree clear tests and deployment ownership.
Drupal 10 reaches end of life on December 9, 2026. Use this practical inventory to scope Drupal 11 readiness, Composer debt, modules, and custom code.
Still relying on Drupal’s retired update API? Check module compatibility, Composer and hosting requirements, then build a tested update process with clear ownership.
A practical 2026 guide to auditing a legacy Drupal 9 site, using Drupal 10 as a controlled bridge, and deciding whether to upgrade to Drupal 11 or rebuild.
Find the cause of Drupal Drush, Symfony and PHP errors, choose compatible dependencies, and restore reliable deployments without risky production changes.
Make PHP dependency changes easier to review with Composer Normalize. A practical guide to plugin setup, lock files, and CI checks for teams maintaining business websites.
Written recommendations from Trafik og Veje, Aarhus Municipality (2011) and AgroTech (2010).