GovCMS D10 update 3.20.0
Scheduled Maintenance Report for GovCMS
Completed
The scheduled maintenance has been completed.
Posted Dec 05, 2024 - 14:59 AEDT
Update
Deployment of D10 3.20.0 is complete for production sites and is now commencing on non-production sites. The deployment block has now been lifted.
Posted Dec 03, 2024 - 14:03 AEDT
In progress
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Dec 03, 2024 - 06:00 AEDT
Scheduled
Advice
- Who is affected: GovCMS Drupal 10 (D10) community.
- Distribution was updated on Monday 2 December 2024 .
- simpleSAMLphp Auth and External Auth modules were added to the distribution
- No modules were removed from the distribution
- No outages are expected to websites during the deployment process.
- The D10 distribution will continue to be supported after this update.
- If you have any concerns, raise a ticket at https://www.govcms.support

This is the last scheduled maintenance update for 2024. Scheduled maintenance will resume from 13 January 2025. GovCMS will continue to monitor Drupal Security Advisories over the shutdown period.

The 4 major highlights of this release are:

1. It addresses recent security advisories issued by Drupal.org. GovCMS assessed the less critical and moderately critical risks as they applied to D10 distribution, subsequently the security residual risk remained moderately critical. The D10 distribution will continue to be supported after this update.

2. This release contains an issue that may impact your website. Specifically, the issue is in relation to links within your website that have a trailing space or whitespace at the end of a path. This issue has been introduced in Drupal Core upstream with symfony/http-foundation. This update could not be avoided due to needing to address the Drupal Security Advisories. Please review the following knowledge base article for more information Error with spaces at the end of addresses (https://www.govcms.support/support/solutions/articles/51000438886-error-with-spaces-at-the-end-of-addresses)

3. GovCMS has also applied a fix for the recent Facets/AJAX issue that has been reported by some customers.

4. And lastly, this release includes Single Sign-On capability into the distribution.


Deployment schedule plan:
- Deployment to commence from 6am Tuesday 3 December 2024 and will be conducted throughout the daytime.
- Production branches completed by 10am Wednesday 4 December 2024
- Once production branches are completed, status page will be updated and Non-Production branches will kick off
- Non-Production branches completed by 10am Thursday 7 November 2024


❗ IMPORTANT NOTICE 1: Deployments during maintenance window
- During the scheduled maintenance window, ALL D10 SaaS deployments will be blocked while we deploy to the D10 Production branches.
- While the production block is on, you will still be able to develop and deploy to non-production feature branches.
- PaaS deployments schedules are not impacted.

❗ IMPORTANT NOTICE 2: Update local environments
- Ensure you update your local environments to the latest release. Not rebasing your codebase results in mismatched database configuration causing errors in forklifts and deployments.

❗ IMPORTANT NOTICE 3: For customers with configuration management enabled
- The latest configuration from your production database has been created for you in GitLab in a branch called action-required/latest-config-export.
- You need to review and test the changes in the merge request. Once you are satisfied, please check the “Delete source branch” box and click “Merge”.
- This MUST be done before any new commits.
- All subsequent deployments will be blocked in the CI pipeline until this merge request branch is deleted
- Not merging the latest configuration provided could result in your new database configuration reverting to an older version when you next deploy, potentially causing issues for your website.
- If no merge request is lodged after a release then no configuration has changed and no further action is required.


Drupal Core Updates:
- Drupal Core from 10.3.6 to 10.3.10 (https://www.drupal.org/project/drupal/releases/10.3.10 ; https://www.drupal.org/sa-core-2024-003 ; https://www.drupal.org/sa-core-2024-004 ; https://www.drupal.org/sa-core-2024-006 ; https://www.drupal.org/sa-core-2024-007)
- Core Composer Scaffold from 10.3.6 to 10.3.10 (https://github.com/drupal/core-composer-scaffold/releases/tag/10.3.10)

Distribution update:
- Admin Toolbar module from 3.5.0 to 3.5.1 (https://www.drupal.org/project/admin_toolbar/releases/3.5.1)
- Devel module from 5.1.2 to 5.3.1 (https://www.drupal.org/project/devel/releases/5.3.1)
- Entity Browser module from 2.11.0 to 2.12.0 (https://www.drupal.org/project/entity_browser/releases/8.x-2.12)
- Layout Builder Modal module from 1.2.0 to 2.0.0 (https://www.drupal.org/project/layout_builder_modal/releases/2.0.0)
- Linkit module from 6.1.4 to 6.1.6 (https://www.drupal.org/project/linkit/releases/6.1.6)
- Metatag module from 2.0.2 to 2.1.0 (https://www.drupal.org/project/metatag/releases/2.1.0
- Scheduled Transitions module from 2.5.0 to 2.7.0 (https://www.drupal.org/project/scheduled_transitions/releases/2.7.0)
- Search API Attachments module from 9.0.3 to 9.0.5 (https://www.drupal.org/project/search_api_attachments/releases/9.0.5)
- Symfony Mailer requirement from 1.4.1 to 1.5.0 (https://www.drupal.org/project/symfony_mailer/releases/1.5.0)
- TFA module from 1.8.0 to 1.9.0 (https://www.drupal.org/project/tfa/releases/8.x-1.9
- Twig Tweak from 3.3.0 to 3.4.0 (https://www.drupal.org/project/twig_tweak/releases/3.4.0)
- Fix: Creating requests causes failures on Drupal 10.3 [#3466281] (https://www.drupal.org/project/facets/issues/3466281)


Information for PaaS customers
Update your codebase to ensure you are running the latest platform base images and packages, and stay aligned to GovCMS best practice:
GovCMS D10 distribution
- includes a module update addressing Drupal security vulnerability
- updated files will be released on Monday 2 December 2024
- available from https://github.com/govCMS/GovCMS/releases/tag/3.20.0.
- you should aim to apply this update to your distribution as soon as possible.

GovCMS lagoon
- latest files released on Monday 2 December 2024
- available from https://github.com/govCMS/lagoon/releases/tag/10.3.1

GovCMS scaffold
- latest files released on Thursday 3 October 2024
- available from https://github.com/govCMS/scaffold/releases/tag/3.6.0.

GovCMS scaffold-tooling
- latest files released on Thursday 22 August 2024
- available from https://github.com/govCMS/scaffold-tooling/releases/tag/5.4.0.

More information about how to update this can be found in the Knowledge Base (https://www.govcms.support/support/solutions/articles/51000177893-keeping-your-govcms-scaffold-up-to-date-paas-customers).
Posted Nov 26, 2024 - 12:04 AEDT
This scheduled maintenance affected: GovCMS Projects (Individual websites).