GovCMS D11 update 4.4.0
Update - Deployments of D11 4.4.0 are complete for production sites and are now commencing on D11 non-prod sites.
The deployment block has been lifted.
Jul 14, 2026 - 11:25 AEST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Jul 14, 2026 - 06:00 AEST
Scheduled - Advice
We would like to inform you of an upcoming GovCMS Drupal 10 (D10) Drupal 11 (D11) release and deployment. It addresses a recent security advisory issued by Drupal.org. GovCMS assessed the MODERATELY CRITICAL risk as they applied to D11 distribution, subsequently the security residual risk remained MODERATELY CRITICAL. The D11 distribution will continue to be supported after this update.
As a reminder, a SaaS deployment block is in place ONLY while we update the production branches.
During this time, you will still be able to develop and deploy to non-production feature branches. We are wanting to give you as much lead time as possible, should you need to adjust your timeframes.
PaaS deployments schedules are not impacted.
Updates:
- https://www.drupal.org/project/book/releases/3.0.7
- https://www.drupal.org/project/chosen/releases/5.0.6
- https://www.drupal.org/project/config_ignore/releases/8.x-3.4
- https://www.drupal.org/project/entity_reference_revisions/releases/8.x-1.14
- https://www.drupal.org/project/entity_hierarchy/releases/3.3.15
- https://www.drupal.org/project/linkit/releases/7.0.15
- https://www.drupal.org/project/migrate_source_csv/releases/8.x-3.8
- https://www.drupal.org/project/migrate_tools/releases/6.1.4
- https://www.drupal.org/project/paragraphs/releases/8.x-1.21 (https://www.drupal.org/SA
CONTRIB-2026-061)
- https://www.drupal.org/project/recaptcha_v3/releases/2.0.5
- https://www.drupal.org/project/twig_tweak/releases/3.4.2
- https://www.drupal.org/project/views_data_export/releases/8.x-1.10
- https://www.drupal.org/project/webform/releases/6.3.0-rc1
Deployment schedule:
- Release notes sent Monday 13 July 2026
- Deployment to commence from 6am Tuesday 14 July 2026 and will be conducted
throughout the daytime.
- Production branches completed by 10am Wednesday 15 July 2026
- Non-Production branches completed by 10am Thursday 16 July 2026
PaaS Actions
Update your codebase to ensure you are running the latest platform base images and packages, and
stay aligned to GovCMS best practice:
- GovCMS distribution (13 July 2026) > https://github.com/govCMS/GovCMS/releases/tag/4.4.0
- GovCMS lagoon (13 July 2026) > https://github.com/govCMS/lagoon/releases/tag/11.3.7
- GovCMS scaffold (8 December 2025) > https://github.com/govCMS/scaffold/releases/tag/4.0.0
- GovCMS scaffold-tooling (18 June 2026) > https://github.com/govCMS/scaffold
tooling/releases/tag/6.0.8
If you have any concerns, raise a ticket at https://www.govcms.support
Jul 14, 2026 06:00 - Jul 18, 2026 10:00 AEST

About This Site

GovCMS: Content management and website hosting for the Australian government. Managed by the Department of Finance with service delivery partners Salsa Digital and amazee.io

Uptime over the past 90 days. View historical uptime.
GovCMS Hosting and Infrastructure Operational
90 days ago
100.0 % uptime
Today
Hosting Infrastructure (Amazon EKS) Operational
90 days ago
100.0 % uptime
Today
Akamai CDN cache Operational
90 days ago
100.0 % uptime
Today
AWS Compute (Sydney) Operational
90 days ago
100.0 % uptime
Today
AWS S3 Storage (Sydney) Operational
90 days ago
100.0 % uptime
Today
AWS LoadBalancer (Sydney) Operational
90 days ago
100.0 % uptime
Today
GovCMS E-mail relay (AWS Simple Email Service) Operational
90 days ago
100.0 % uptime
Today
HTTPS Redirect Service Operational
90 days ago
100.0 % uptime
Today
GovCMS Projects Operational
90 days ago
99.99 % uptime
Today
Individual websites Operational
90 days ago
99.97 % uptime
Today
GovCMS Sites Dashboard Operational
90 days ago
100.0 % uptime
Today
GovCMS Sites Logging System (OpenSearch) Operational
90 days ago
100.0 % uptime
Today
GovCMS GitLab Operational
90 days ago
100.0 % uptime
Today
Deployment Infrastructure Operational
90 days ago
100.0 % uptime
Today
Lagoon API Operational
90 days ago
100.0 % uptime
Today
Akamai API Operational
90 days ago
100.0 % uptime
Today
Lagoon tasks Operational
90 days ago
100.0 % uptime
Today
GovCMS Service Desk (Freshdesk) Operational
90 days ago
100.0 % uptime
Today
Freshdesk email notifications Operational
90 days ago
100.0 % uptime
Today
Freshdesk search Operational
90 days ago
100.0 % uptime
Today
Freshdesk incoming emails Operational
90 days ago
100.0 % uptime
Today
Freshdesk outgoing emails Operational
90 days ago
100.0 % uptime
Today
Other Operational
90 days ago
100.0 % uptime
Today
Pygmy Operational
90 days ago
100.0 % uptime
Today
Docker Desktop Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.

No incidents or maintenance related to this downtime.

Scheduled Maintenance

Regular Weekly Maintenance - GovCMS Jul 21, 2026 22:00 - Jul 22, 2026 05:00 AEST

We are conducting regular maintenance on our systems. The maintenance will last for 7 hours.
Posted on Jul 14, 2026 - 06:00 AEST
Jul 15, 2026
Regular Weekly Maintenance - GovCMS
Completed - The scheduled maintenance has been completed.
Jul 15, 05:00 AEST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Jul 14, 22:00 AEST
Scheduled - We are conducting regular maintenance on our systems. The maintenance will last for 7 hours.
Jul 7, 06:00 AEST
Jul 14, 2026
Issue regarding SSO functionality
Resolved - The issue has been investigated and resolved.

If you are still having issues with your SSO implementation, please raise a Service Desk ticket.
Jul 14, 16:43 AEST
Investigating - An issue has been identified that is preventing SSO from working for some GovCMS SaaS websites.

The issue is under active investigation and you may notice deployments for your project if you have SSO enabled.
Jul 14, 14:58 AEST
Jul 13, 2026

No incidents reported.

Jul 12, 2026

No incidents reported.

Jul 11, 2026

No incidents reported.

Jul 10, 2026
ASD Australian Cyber Security Centre alert
Resolved - We are aware of the recent ASD Australian Cyber Security Centre alert regarding a large-scale exploitation campaign targeting vulnerabilities in several content management systems and associated plugins.

The CVEs listed in the alert relate to WordPress plugins, Craft CMS, MaxSite CMS, MetInfo CMS and Joomla JCE. These technologies are not used as the content management system for GovCMS. GovCMS uses Drupal, and based on the information provided in the alert, the identified CVEs do not impact the Drupal CMS used with GovCMS.

While the specific vulnerabilities referenced in the communication do not apply to GovCMS Drupal, we recognise the broader cyber security risk highlighted by ASD’s ACSC. GovCMS continues to actively monitor the threat landscape and apply established security controls to protect customer websites.

Our robust Web Protection Service is actively managed to help mitigate new and emerging malicious cyber activity, including scanning, exploitation attempts and other threats targeting internet-facing websites. These protections are supported by ongoing monitoring, security review and operational response processes.

GovCMS also maintains well-established and mature security processes and procedures, which are actively managed and routinely reviewed. These processes support rapid assessment of security advisories, timely remediation where required, continuous improvement of platform controls, and alignment with ASD ACSC guidance for protecting websites.

In line with the immediate mitigation advice and additional protective steps outlined by ASD’s ACSC, GovCMS continues to apply security practices that include vulnerability management, monitoring for suspicious activity, restricting unnecessary access, reviewing platform controls, and maintaining operational processes to respond to emerging threats.

Customers do not need to take any specific action in relation to the CVEs listed in the ASD ACSC alert for the GovCMS Drupal platform. We will continue to monitor this activity and advise customers if any further information or action is required.

If you have any questions or concerns, please contact the GovCMS team through your usual support channel.
Jul 10, 09:32 AEST
Jul 9, 2026

No incidents reported.

Jul 8, 2026
Gitlab upgrade
Completed - The scheduled maintenance has been completed.
Jul 8, 05:01 AEST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Jul 7, 22:00 AEST
Scheduled - We will be undergoing scheduled maintenance during this time.
Jul 7, 19:18 AEST
Regular Weekly Maintenance - GovCMS
Completed - The scheduled maintenance has been completed.
Jul 8, 05:00 AEST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Jul 7, 22:01 AEST
Scheduled - We are conducting regular maintenance on our systems. The maintenance will last for 7 hours.
Jun 30, 06:00 AEST
Jul 7, 2026
Jul 6, 2026

No incidents reported.

Jul 5, 2026

No incidents reported.

Jul 4, 2026

No incidents reported.

Jul 3, 2026

No incidents reported.

Jul 2, 2026

No incidents reported.

Jul 1, 2026
Regular Weekly Maintenance - GovCMS
Completed - The scheduled maintenance has been completed.
Jul 1, 05:00 AEST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Jun 30, 22:00 AEST
Scheduled - We are conducting regular maintenance on our systems. The maintenance will last for 7 hours.
Jun 23, 06:00 AEST
← Incident History Powered by Atlassian Statuspage