Update - Deployment of GovCMS hotfix 4.5.1.2 is complete for production sites and is now commencing on non-production sites. The deployment block has now been lifted.
Oct 15, 2026 - 21:45 AEDT
Oct 15, 2026 - 21:45 AEDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 15, 2026 - 12:00 AEDT
Oct 15, 2026 - 12:00 AEDT
Scheduled - Advice:
GovCMS will release the Drupal 11 (D11) distribution on Thursday 15 October 2026. It addresses recent security advisories issued by Drupal.org. GovCMS assessed the CRITICAL risk as they applied to D11 distribution, subsequently the security residual risk remained CRITICAL. The D11 distribution will continue to be supported after this update.
In preparation for this release, shield was enabled on all non-production environments from COB Wednesday 14 October 2026. The shield credentials have been randomly generated for each non-production environment. To retrieve the details, login to the Dashboard, and you’ll find the credentials stored in `BASIC_AUTH_USERNAME` and `BASIC_AUTH_PASSWORD` environment variables for each environment.
SaaS Deployment schedule:
- Production and Non-Production deployments commence from 12:00PM (AEST) Thursday 15 October 2026
- Production environments completed by 7:00PM (AEST) Thursday 15 October 2026.
- Non-Production environments completed by COB (AEST) Friday 16 October 2026.
- PaaS deployments schedules are not impacted.
Core Update:
Update Drupal Core from 11.3.17 to 11.3.19
- https://www.drupal.org/project/drupal/releases/11.3.19
- https://www.drupal.org/sa-core-2026-014
- https://www.drupal.org/sa-core-2026-015
- https://www.drupal.org/sa-core-2026-016
What modules are added /removed in the distribution?
- No modules were added/removed from the distribution
Website using Gin Admin Theme
Please be aware there is also a DSA regarding the Gin admin theme. The theme is your responsibility please ensure it updated within 30 days: https://www.drupal.org/sa-contrib-2026-219
PaaS Actions:
The Critical Drupal Security Advisory will need be assessed and addressed as it pertains to your websites. Given the nature of the security announcement, this exploit with the help of AI, could develop within hours or days to highly critical changing the SLA requirements for patching. As a result, GovCMS will patch the distribution inline with highly critical SLA (within 48hrs) and we urge you to do the same.
If you are not in a position to do a release and deployment immediately, we recommend uninstalling the field UI module in the meantime.
Update your codebase to ensure you are running the latest platform base images and packages, and stay aligned to GovCMS best practice:
- GovCMS distribution (15 October 2026) > https://github.com/govCMS/GovCMS/releases/tag/4.5.1.2
- GovCMS lagoon (15 October 2026) > https://github.com/govCMS/lagoon/releases/tag/11.3.8.4
- GovCMS scaffold (15 September 2026) > https://github.com/govCMS/scaffold/releases/tag/4.1.0
- GovCMS scaffold-tooling (17 September 2026) > https://github.com/govCMS/scaffold-tooling/releases/tag/6.0.10
If you have any concerns, raise a ticket at https://www.govcms.support
Oct 15, 2026 12:00 - Oct 19, 2026 16:00 AEDT
GovCMS will release the Drupal 11 (D11) distribution on Thursday 15 October 2026. It addresses recent security advisories issued by Drupal.org. GovCMS assessed the CRITICAL risk as they applied to D11 distribution, subsequently the security residual risk remained CRITICAL. The D11 distribution will continue to be supported after this update.
In preparation for this release, shield was enabled on all non-production environments from COB Wednesday 14 October 2026. The shield credentials have been randomly generated for each non-production environment. To retrieve the details, login to the Dashboard, and you’ll find the credentials stored in `BASIC_AUTH_USERNAME` and `BASIC_AUTH_PASSWORD` environment variables for each environment.
SaaS Deployment schedule:
- Production and Non-Production deployments commence from 12:00PM (AEST) Thursday 15 October 2026
- Production environments completed by 7:00PM (AEST) Thursday 15 October 2026.
- Non-Production environments completed by COB (AEST) Friday 16 October 2026.
- PaaS deployments schedules are not impacted.
Core Update:
Update Drupal Core from 11.3.17 to 11.3.19
- https://www.drupal.org/project/drupal/releases/11.3.19
- https://www.drupal.org/sa-core-2026-014
- https://www.drupal.org/sa-core-2026-015
- https://www.drupal.org/sa-core-2026-016
What modules are added /removed in the distribution?
- No modules were added/removed from the distribution
Website using Gin Admin Theme
Please be aware there is also a DSA regarding the Gin admin theme. The theme is your responsibility please ensure it updated within 30 days: https://www.drupal.org/sa-contrib-2026-219
PaaS Actions:
The Critical Drupal Security Advisory will need be assessed and addressed as it pertains to your websites. Given the nature of the security announcement, this exploit with the help of AI, could develop within hours or days to highly critical changing the SLA requirements for patching. As a result, GovCMS will patch the distribution inline with highly critical SLA (within 48hrs) and we urge you to do the same.
If you are not in a position to do a release and deployment immediately, we recommend uninstalling the field UI module in the meantime.
Update your codebase to ensure you are running the latest platform base images and packages, and stay aligned to GovCMS best practice:
- GovCMS distribution (15 October 2026) > https://github.com/govCMS/GovCMS/releases/tag/4.5.1.2
- GovCMS lagoon (15 October 2026) > https://github.com/govCMS/lagoon/releases/tag/11.3.8.4
- GovCMS scaffold (15 September 2026) > https://github.com/govCMS/scaffold/releases/tag/4.1.0
- GovCMS scaffold-tooling (17 September 2026) > https://github.com/govCMS/scaffold-tooling/releases/tag/6.0.10
If you have any concerns, raise a ticket at https://www.govcms.support
Oct 15, 2026 12:00 - Oct 19, 2026 16:00 AEDT
About This Site
GovCMS: Content management and website hosting for the Australian government. Managed by the Department of Finance with service delivery partners Salsa Digital and amazee.io
GovCMS Hosting and Infrastructure
Operational
Hosting Infrastructure (Amazon EKS)
Operational
Akamai CDN cache
Operational
AWS Compute (Sydney)
Operational
AWS S3 Storage (Sydney)
Operational
AWS LoadBalancer (Sydney)
Operational
GovCMS E-mail relay (AWS Simple Email Service)
Operational
HTTPS Redirect Service
Operational
GovCMS Projects
Under Maintenance
Individual websites
Under Maintenance
GovCMS Sites Dashboard
Operational
GovCMS Sites Logging System (OpenSearch)
Operational
GovCMS GitLab
Operational
Deployment Infrastructure
Operational
Lagoon API
Operational
Akamai API
Operational
Lagoon tasks
Operational
GovCMS Service Desk (Freshdesk)
Operational
Freshdesk email notifications
Operational
Freshdesk search
Operational
Freshdesk incoming emails
Operational
Freshdesk outgoing emails
Operational
Other
Operational
Pygmy
Operational
Docker Desktop
Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.
Scheduled Maintenance
Cluster maintenance Oct 19, 2026 06:30-08:30 AEDT
We will be performing cluster maintenance, there will be a brief disruption of a few minutes to the Lagoon API and dashboard during this time. No disruption to running sites.
Posted on Oct 14, 2026 - 09:25 AEDT
Posted on Oct 14, 2026 - 09:25 AEDT
FYI: Notice of upcoming GovCMS D11 release 4.6.0 Oct 20, 2026 06:00 - Oct 24, 2026 10:00 AEDT
Advice
We would like to inform you of the tentative dates for the upcoming GovCMS Drupal 11 (D11) release and deployment
Thank you to everyone that has completed testing. The official preview period ended on 7 October 2026. However, will keep the preview environments available for you to continue reviewing next week. In parallel we will completing our final regression testing on the release.
The final release date is subject to change, as it will be determined by the testing outcomes. The date will be confirmed when the distribution is released and the release notes are expected to be sent on Monday 19 October 2026.
As a reminder, a SaaS deployment block is in place ONLY while we update the production branches. During this time, you will still be able to develop and deploy to non-production feature branches. We are wanting to give you as much lead time as possible, should you need to adjust your timeframes. PaaS deployments schedules are not impacted.
Deployment schedule:
- Deployment to commence from 6am Tuesday 20 October 2026 and will be conducted throughout the daytime.
- Production branches completed by 10am Wednesday 21 October 2026
- Non-Production branches completed by 10am Thursday 22 October 2026
Posted on Oct 09, 2026 - 10:16 AEDT
We would like to inform you of the tentative dates for the upcoming GovCMS Drupal 11 (D11) release and deployment
Thank you to everyone that has completed testing. The official preview period ended on 7 October 2026. However, will keep the preview environments available for you to continue reviewing next week. In parallel we will completing our final regression testing on the release.
The final release date is subject to change, as it will be determined by the testing outcomes. The date will be confirmed when the distribution is released and the release notes are expected to be sent on Monday 19 October 2026.
As a reminder, a SaaS deployment block is in place ONLY while we update the production branches. During this time, you will still be able to develop and deploy to non-production feature branches. We are wanting to give you as much lead time as possible, should you need to adjust your timeframes. PaaS deployments schedules are not impacted.
Deployment schedule:
- Deployment to commence from 6am Tuesday 20 October 2026 and will be conducted throughout the daytime.
- Production branches completed by 10am Wednesday 21 October 2026
- Non-Production branches completed by 10am Thursday 22 October 2026
Posted on Oct 09, 2026 - 10:16 AEDT
Regular Weekly Maintenance - GovCMS Oct 20, 2026 23:00 - Oct 21, 2026 06:00 AEDT
We are conducting regular maintenance on our systems. The maintenance will last for 7 hours.
Posted on Oct 13, 2026 - 07:00 AEDT
Posted on Oct 13, 2026 - 07:00 AEDT