We’ve shipped WMS Drupal 3.3.6, building on the 3.3.5 ECA hotfix. This release bundles a July contrib maintenance wave, Drupal core 10.6.12, Klaro consent-manager updates, and follow-on fixes for the Christiansbrunn site that launched in 3.3.2. Most changes apply platform-wide; the Christiansbrunn work only affects forks with that config split enabled.
If you maintain a WMS Drupal fork or deploy campus sites from the platform, plan composer install, drush updatedb, and config import on your next upgrade. Apply on stage first, then production on your usual schedule.
Security and maintenance
Keeping Drupal and contrib current is non-negotiable. This release includes:
- Drupal core 10.6.11 → 10.6.12 — July maintenance release (DRUP-3856)
- Contrib auto-updater wave (DRUP-3856) — aggregator, antibot, colorbox, entity_usage, heading, imce_rename_plugin, linkit, media_file_delete, module_filter, scheduler, simple_timeline, smart_date, tagify, trash, upgrade_status, webform;
lehigh-drupal/devel_entity_updates2.2.0 → 2.3.0 drupal/klaro3.0.10 → 3.1.1 — with exportedneed_explicit_csomsettings across Klaro app config so consent behavior stays aligned with the updated moduledrupal/dynamic_entity_referencepinned to 3.2.1 — 3.2.2 declares PHP 8.3 in its.infofile; the platform remains on PHP 8.2
What to do: Run composer install and drush updatedb on each environment after deploying. Smoke-test forms, scheduled content, webforms, and any Klaro consent banners if your site uses them.
Christiansbrunn site fixes (DRUP-3872, DRUP-3875)
The Christiansbrunn site split (site_christiansbrunn) picks up editorial and access fixes after the site’s initial rollout in 3.3.2:
Person source taxonomy (DRUP-3872)
The person_source vocabulary term listing now shows an unpaginated, alphabetically sorted directory of people (by field_last_name on person_page content). The lehigh_christiansbrunn_site module applies view overrides scoped to person_source only so other vocabularies are unaffected. Config-split form displays for building and person content types were normalized after export.
Trade vocabulary access (DRUP-3875)
Anonymous users were hitting “page not found” on trade taxonomy term pages. Rabbit Hole behavior for that vocabulary now uses display_page instead of page_not_found, so trade term pages are publicly viewable.
What to do: Deploy and config-import only if your fork enables site_christiansbrunn. Verify the person source directory sorts correctly and loads without pagination, and confirm anonymous users can view trade term pages.
Upgrade notes
Patch release since 3.3.5:
| Step | Required? |
|---|---|
composer install | Yes |
drush updatedb | Yes |
Config import | Yes (platform Klaro config for all sites; site_christiansbrunn split if active) |
Christiansbrunn QA | Only for forks with site_christiansbrunn enabled |
For commit-level detail, see CHANGELOG.md on the 9.x branch.