Joël Pittet

52 Followers
58 Following
272 Posts

I discovered #ddev #drupal contrib, and it is absolutely great for graphql module development 😍

https://github.com/ddev/ddev-drupal-contrib

GitHub - ddev/ddev-drupal-contrib: Contrib module development environment for Drupal projects on DDEV

Contrib module development environment for Drupal projects on DDEV - ddev/ddev-drupal-contrib

GitHub
Thanks to dww ~70,000 #Drupal sites now have security coverage for the excellent Inline Entity Form module. A great day for #opensource !
https://www.drupal.org/project/inline_entity_form/releases/3.0.0
inline_entity_form 3.0.0

Stable release with security coverage. Supports D8 through D11. Contributors (16) dww, bluegeek9, Nikolay Shapovalov, dcam, supreetam09, benstallings, chi, saidatom, bharath-kondeti, anybody, sandeep sanwale, benjifisher, beloglazov91, damien laguerre, klausi, Anjali Mehta, geek-merlin Changelog Issues: 9 issues resolved.

Drupal.org

something I'm finding frustrating recently is

a) I feel like LLMs have helped me learn some programming things that were hard for me to learn previously
b) I'm tired of LLMs being relentlessly pushed on us and do not want to participate in that by talking about my positive experiences
c) there are also lots of hazards associated with using LLMs to generate code that are not that easy to avoid

Want to bring that DrupalCon energy to Canada next year? 🇨🇦

The Canadian Drupal community is planning the first-ever DrupalCan Summit 2027, and they need your help to decide the host city!

Take a moment to shape the future of this landmark event by filling out this quick survey ➡️ https://forms.gle/zcrGxqSYDvJnZucv6

#Drupal #OpenSource #DrupalCan #Canada #Tech

DrupalCan Summit 2027 Location and Pricing Interest Survey

Help us plan the coming DrupalCan Summit by providing your preferences on potential locations and ticket pricing.

Google Docs

I've just finished reading The Faith of Beasts, by James S. A. Corey.

It's the second book in The Captives' War series, and by the same authors that wrote The Expense series of books and TV series.

It's an excellent read, and I can't wait for the third one in the series, and hopefully a TV series too.

#Reading #BookList2026

⛔ Composer dependency policies block flagged malware by default, but only on 2.10. A project disabling the policy, or a CI image running Composer 2.4, still installs flagged versions normally until we can manually pull it from Packagist.

Private Packagist now refuses to serve dist files for malware-flagged versions at the repository level, regardless of the Composer version requesting them. Enabled by default for new and existing organizations.

https://blog.packagist.com/blocking-malware-downloads-for-every-composer-version-in-private-packagist/

#php #phpc #composerphp

Blocking Malware Downloads for Every Composer Version in Private Packagist

This is the next post in our supply chain security series, following the supply chain security update, the Composer 2.10 release, and the recent post on closing Composer's download fallback paths. Composer 2.10's dependency policy framework is a substantial step forward for PHP supply chain security. It removes

Private Packagist
Pride was born as a riot, and has always been an act of defiance. During my life, I survived an internment camp. I came out at 68. I've watched rights get won and now watch them being rolled back. Yet I'm still here, still proud, and still holding Brad's hand. They have never been able to extinguish us or our joy. And they won't start now. Happy Pride, friends. Let's make this the loudest, proudest one yet. 🌈 ✨️
@sysop408 thanks for sharing your take. Did you settle on a balance? When sdc gave you a tangible benefit (while developing and/or maintaining them)

I'm close to relaunching an ambitious remake of one of my oldest #Drupal projects and as part of my approach, I went in hard on Single Directory Components (SDC).

The opinionated advice on these Components is that everything should be one. Stop using anything but components. After slogging through a very complex project attempting to follow that advice, I've come to disagree.

What's great about SDCs is they encapsulate just about everything about an element within a single folder for easy reference, but it's a pipe dream to think we're ever going to be able to keep *everything* so tidy.

Consequently, making everything a component defeats the purpose. It creates a fog of excess code and makes it hard to identify what really matters.

My conclusion about best practices (for full stack developers) with SDC is that you shouldn't use them when there's no reason to use one. I really like the added options I have in structuring my sites with them, but the benefits are lost when taken to extremes.

#webdev #php

As an OSS maintainer, my new rule is that anything a frontier model can find with some reasonable effort is a 0-day. Hence why I'm now shipping security releases on public holidays.