Deployment of D10 3.28.0 is complete for production sites and is now commencing on non-production sites. The deployment block has now been lifted.
Posted Sep 24, 2025 - 08:36 AEST
In progress
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Sep 23, 2025 - 06:00 AEST
Scheduled
Advice - Who is affected: GovCMS Drupal 10 (D10) community. - No outages are expected to websites during the deployment process. - The D10 distribution will continue to be supported after this update. - If you have any concerns, raise a ticket at https://www.govcms.support
Schedule: - Distribution was released on Monday 22 September 2025 - Deployments to commence from 6am Tuesday 23 September 2025 and will be conducted throughout the daytime - Production branches completed by 10am Wednesday 24 September 2025 - Once production environments are completed, status page will be updated and Non-Production environments will kick off - Non-Production branches completed by 10am Thursday 25 September 2025
❗ IMPORTANT NOTICE 1: Deployments during maintenance window - During the scheduled maintenance window, ALL D10 SaaS deployments will be blocked while we deploy to the D10 Production environments. - While the production block is on, you will still be able to develop and deploy to non-production feature branches. - PaaS deployments schedules are not impacted.
❗ IMPORTANT NOTICE 2: Update local environments - Ensure you update your local environments to the latest release. Not rebasing your codebase results in mismatched database configuration causing errors in forklifts and deployments.
❗ IMPORTANT NOTICE 3: For customers with configuration management enabled - The latest configuration from your production database has been created for you in GitLab in a branch called action-required/latest-config-export. - You need to review and test the changes in the merge request. Once you are satisfied, please check the “Delete source branch” box and click “Merge”. - This MUST be done before any new commits. - All subsequent deployments will be blocked in the CI pipeline until this merge request branch is deleted - Not merging the latest configuration provided could result in your new database configuration reverting to an older version when you next deploy, potentially causing issues for your website. - If no merge request is lodged after a release then no configuration has changed and no further action is required.
Drupal Core Update:
- Drupal Core from 10.4.8 to 10.5.2
Distribution Updates:
• Admin Toolbar module from 3.6.1 to 3.6.2 • CAPTCHA module from 2.0.7 to 2.0.9 • Entity Browser module from 2.13.0 to 2.15.0 • Entity Hierarchy module from 3.3.12 to 3.3.14 • Environment Indicator module from 4.0.24 to 4.0.25 • Facets module from 2.0.9 to 2.0.10 ◦ https://www.drupal.org/sa-contrib-2025-100 ◦ https://www.drupal.org/sa-contrib-2025-099 • Google Tag module from 2.0.8 to 2.0.9 • Linkit module from 7.0.7 to 7.0.9 • Metatag module from 2.1.1 to 2.1.2 • Migrate Plus module from 6.0.5 to 6.0.8 • Migrate Tools module from 6.0.5 to 6.1.2 • Token module from 1.15.0 to 1.16.0
Linkit: There is a known existing issue with Linkit 7.x where it will generate multiple links if the display text is changed. This has not been fixed with the module update in this release. Some solutions include: • Selecting all text to edit the link and/or text • Deleting and retyping text in the case where multiple links are already generated.
What modules are added/deprecated/removed in the distribution?
• We’ve added: Views data export module 8.x-1.6. Raise a Service Desk ticket to have this module enabled. • We’ve removed/ uninstalled the following modules: CKAN Connect; ClamAV; DVF; Redirect 404 • We’ve marked the following modules as obsolete: GovCMS8 Foundations; page_manager; page_manager_ui; purge_purger_http; Statistics
Information for PaaS customers In line with this advice https://status.govcms.support/incidents/khd5xg9qcsdv, we created and set a Lagoon environment variable for Cache life for 15 minutes, please review this change for your projects. If you are using the GovCMS Akamai CDN, we strongly recommend that you enable the Akamai Purge module on your projects to support automated cache purging.
Update your codebase to ensure you are running the latest platform base images and packages, and stay aligned to GovCMS best practice: GovCMS D10 distribution - includes a module update addressing Drupal security vulnerability - updated files will be released on 22 September 2025 - available from https://github.com/govCMS/GovCMS/releases/tag/3.28.0 - you should aim to apply this update to your distribution as soon as possible.
GovCMS would like to make you aware of a recent Drupal PSA-2025-09-17. We are actively tracking this activity from a platform perspective, however, under the shared responsibility model, we strongly recommend caution on your side as well. More information can be found in the Security advisories section in the Knowledge base: Node Package Manager (NPM)
Posted Sep 11, 2025 - 11:24 AEST
This scheduled maintenance affected: GovCMS Projects (Individual websites).