We've shipped WMS Drupal 3.3.7, building on the 3.3.6 maintenance release. This is a focused patch that addresses a Klaro consent-banner regression introduced in 3.3.6, upgrades drupal/eca for a security fix, corrects card paragraph character counting for editors, and adds a Christiansbrunn taxonomy listing fix. Most changes apply platform-wide; the Christiansbrunn work only affects forks with that config split enabled.
If you maintain a WMS Drupal fork or deploy campus sites from the platform, plan composer install, drush updatedb, and config import on your next upgrade. Apply on stage first, then production on your usual schedule.
Security and maintenance
Keeping Drupal and contrib current is non-negotiable. This release includes:
drupal/eca2.1.18 → 2.1.20 — security update (DRUP-3891)
What to do: Run composer install and drush updatedb on each environment after deploying. Smoke-test any ECA-powered workflows or automations if your site uses them.
Klaro consent banner on editorial paths (DRUP-3879)
The drupal/klaro 3.1.1 upgrade in 3.3.6 re-exported Klaro settings but did not carry forward URL exclusions that kept the consent notice off admin and edit screens. After deploy, editors saw the cookie banner on /admin/*, node edit/delete/revisions routes, media and taxonomy term edit forms, user edit forms, and /batch.
This release restores that behavior by exporting disable_urls patterns in klaro.settings.yml for those paths. The fix applies platform-wide to every site running the synced Klaro config.
What to do: Config import after deploy. Confirm the consent banner no longer appears when editing content, managing media, or working in /admin.
Card paragraph character counter (DRUP-3878)
Editors building Card Set content sections were hitting the 500-character limit on card body text even when the visible text was well under the cap. The maxlength counter was counting HTML markup from the rich-text editor toward the limit.
The para_card form display now excludes HTML from the character count (count_html_characters: false), so editors see an accurate remaining-character count for visible text.
What to do: Config import after deploy. Spot-check a Card Set in the editorial UI and confirm the counter reflects readable text, not markup.
Christiansbrunn site fix (DRUP-3880)
The Christiansbrunn site split (site_christiansbrunn) picks up a follow-on taxonomy listing fix after the person_source and trade access work in 3.3.6:
Trade vocabulary listing
The trade vocabulary term listing now shows an unpaginated directory of related content, matching the pattern already applied to person_source in 3.3.6. The lehigh_christiansbrunn_site module applies view overrides scoped to trade only so other vocabularies are unaffected.
What to do: Deploy and config-import only if your fork enables site_christiansbrunn. Verify trade term pages load the full listing without pagination.
Upgrade notes
Patch release since 3.3.6:
| Step | Required? |
|---|---|
composer install | Yes |
drush updatedb | Yes |
Config import | Yes (Klaro settings and para_card form display for all sites; site_christiansbrunn split if active) |
Christiansbrunn QA | Only for forks with site_christiansbrunn enabled |
For commit-level detail, see CHANGELOG.md on the 9.x branch.