Notice of upcoming GovCMS D11 hotfix release 4.6.1

Scheduled for Nov 11, 18:00 AEDT  -  Nov 15, 22:00 AEDT

Scheduled

Advice
We would like to inform you of the upcoming GovCMS Drupal 11 (D11) release and deployment. It addresses a recent security advisory issued by Drupal.org. GovCMS assessed the CRITICAL risk as they applied to D11 distribution, subsequently the security residual risk remained CRITICAL. The D11 distribution will continue to be supported after this update.

Given the limited GitLab and deployment availability over the past week, this deployment will be scheduled after hours to reduce impact of the deployment block during business hours.

As a reminder, a SaaS deployment block is in place ONLY while we update the production branches. During this time, you will still be able to develop and deploy to non-production feature branches. PaaS deployments schedules are not impacted by the SaaS deployment block.

Module Updates:
Update drupal/simple_oauth module from 6.1.3 to 6.1.4
- https://www.drupal.org/project/simple_oauth/releases/6.1.4
- https://www.drupal.org/sa-contrib-2026-296

Deployment schedule:
- Deployment to commence from 6PM AEDT Wednesday 11 November 2026 and will be conducted throughout the evening.
- Production branches completed by 11AM AEDT Thursday 12 November 2026
- Non-Production branches completed by 10AM AEDT Friday 13 November 2026

PaaS Actions:
Update your codebase to ensure you are running the latest platform base images and packages, and stay aligned to GovCMS best practice:
- GovCMS distribution (9 November 2026) > https://github.com/govCMS/GovCMS/releases/tag/4.6.1
- GovCMS lagoon (9 November 2026) > https://github.com/govCMS/lagoon/releases/tag/11.4.0.2
- GovCMS scaffold (15 September 2026) > https://github.com/govCMS/scaffold/releases/tag/4.1.0
- GovCMS scaffold-tooling (29 October 2026) > https://github.com/govCMS/scaffold-tooling/releases/tag/6.0.12
Posted Nov 10, 2026 - 17:49 AEDT
This scheduled maintenance affects: GovCMS Projects (Individual websites).