Released Redis 2.0.0-alpha2 with various performance improvements and a neat new drush report that includes more information on expired and invalidated items and impact of cache tag invalidations. https://www.drupal.org/project/redis/releases/2.0.0-alpha2
The alpha quality mostly refers to the API stability, I expect it should run reliable and we're about to roll it out in production.
*Very* interesting, thought-provoking piece from @pluralistic here, on the idea of code as a liability, and the consequences of that in the increasingly LLM-driven landscape of software development.
Drupal 11.3 is here with the biggest performance boost in a decade. Serve 26-33% more requests with the same database load. 🚀
New native HTMX support enables rich UX with up to 71% less JavaScript. Plus, enjoy the new stable Navigation module, improved CKEditor content editing, native content export, and cleaner OOP hooks for themes.
🔗 Get all the details about Drupal 11.3.0 at https://www.drupal.org/blog/drupal-11-3-0
I've been busy working on a large number of performance improvements in Drupal 11.3 and contributed projects, together with @catch56 and many others.
Everything combined, we're seeing hundreds of queries less on complex pages. On one specific example page that we measured in a cold cache scenario, that's a reduction of 670 queries, 62% of the total queries. And that doesn't even include similarly reduced cache lookups and writes.
Read more on our blog post.
https://www.md-systems.ch/en/blog/2025-12-16/performance-improvements-drupal-11-3
The latest release of Drupal core, combined with updates to Entity Reference Revisions, Paragraphs and other modules save hundreds of queries when rendering complex pages. This post goes through all the improvements that make this possible.
Facets - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-100
This module enables you to to easily create and manage faceted search interfaces. The module doesn’t sufficiently filter certain user-provided text leading to a cross site scripting (XSS) vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role with the permission “administer facets”. CVSS risk score (experimental) 4.8 / Medium
Recently, I've been working on a number of performance improvements during the bootstrap phase of Drupal, which is especially relevant to make fast cached responses from the internal page cache and the dynamic page cache modules faster.
DDEV
Nick
Drupal
Drupal Security Team
The Drop is Always Moving