Drupal官网安全更新（2023-11-03）

drupal 10.2.0-alpha1

This is an alpha release for the next minor (feature) release of Drupal 10. Alphas are good testing targets for developers and site builders who are comfortable reporting (and where possible, fixing) their own bugs. Alpha releases are not recommended for non-technical users, nor for production websites. More information on alpha releases.<br/>This minor release provides improvements and new functionality. It does not not break backward compatibility (BC) for public APIs.There may be changes in internal APIs and experimental modules. If so, contributed and custom modules and themes may need updating. This is according to Drupal core&#39;s backward compatibility and experimental module policies.<br/>This release may include string changes and additions. Translators can review the latest translation status on localize.drupal.org.<br/>Drupal 10.2.x contains new features, and should be the target for new site development. Drupal 10.1.x will continue to have security support until June 2024.<br/>Drupal 9.5.x security support will end on November 1, 2023 (UTC). Sites on Drupal 8 or a Drupal 9 version earlier than 9.5.x should upgrade to a supported release as soon as possible.<br/><br/>Important update information<br/>Sites must update to at least Drupal 9.4.4 before upgrading to Drupal 10<br/>Drupal sites running 9.3.x or earlier versions must first update to 9.4.4 or later before updating to Drupal 10. All core updates added before 9.4.0 have been removed. The data upgrade path from CKEditor 4 to CKEditor 5 is not available before Drupal 9.4.4. In general, sites should update to the most recent release of their current major branch before updating to the next major release.<br/>Sites using CKEditor 4 should upgrade to CKEditor 5 in Drupal 9.4 or 9.5 before updating to Drupal 10<br/>Most Drupal sites using CKEditor 4 should upgrade to CKEditor 5. See the recommendations for CKEditor for details. Upgrading from CKEditor 4 to 5 is a manual process. You must review each text format editor condition.<br/>Upgrading from Drupal 6 and 7<br/>Drupal 6 and 7 users can continue to migrate to Drupal 10.2. The migration paths from Drupal 6 and Drupal 7 to Drupal 10 will remain supported throughout Drupal 10&#39;s release cycle.<br/>Changes<br/>Changes to site-owner-managed files<br/><br/><br/>TBA<br/><br/><br/>New features<br/><br/>The creating and editing of fields is now more intuitive and user-friendly, using one form instead of two. The \Drupal\field_ui\Form\FieldStorageConfigEditForm is now rendered as a subform of \Drupal\field_ui\Form\FieldConfigEditForm.<br/>Developers should be aware that the way field configuration changes are handled has changed. hook_field_storage_config_update is no longer sufficient to update field configuration when changes occur in field storage.<br/><br/>Consider adding logic to hook_field_storage_config_update to ensure that field configuration remains synchronized with field storage configuration. This is particularly important when making field storage changes within \Drupal\field_ui\Form\FieldConfigEditForm.<br/>\Drupal\field\FieldConfigStorage should be updated during changes made in the field config edit form to ensure that the field config edit form always reflects the most up-to-date field storage configuration.<br/><br/><br/>The Symfony mail component is added. It can be used via an experimental mail plugin or using the contributed Mail System module.<br/><br/>Plugins can now leverage PHP attributes instead of annotations. Both plugin types and plugins be converted.<br/><br/><br/>The functionality of the experimental Help Topics module has moved to the existing Help module. An update path will uninstall the help topics module and leave behind an empty shell. The Help Topics module should no longer be used.<br/><br/>Drupal now includes PerformanceTestTrait and PerformanceTestBase to allow for automated performance testing of core and contrib modules. This includes the ability to assert on script and stylesheet HTTP requests and the possibility to send core web vitals statistics to a grafana/prometheus instance via Open Telemetry. Additional assertions and metrics are planned.<br/><br/><br/>CKEditor 5 now provides advanced formatting for tables and table cells when used in Full HTML (or Full HTML-like) text formats.<br/><br/><br/>The filter system has been upgraded to output HTML5. HTML output will have minor changes in some cases.<br/><br/><br/>Changes to recommendations<br/><br/><br/>The recommended PHP requirement has been increased from PHP 8.1.6<br/>to 8.2 for Drupal 10.2.0.<br/><br/><br/>Bug fixes<br/><br/><br/>A long-standing front-end performance problem in CKEditor 5 is fixed. Previously, images linked in CKEditor 5 generated markup lacked the image height. This would cause layout shifts after the images had loaded, since the browser could not possibly know the height it had to reserve for the images.<br/>NOTE: this was not a problem if you were uploading images thanks to the Track images uploaded via a Text Editor setting width &amp;amp; height automatically. But that didn&#39;t work for linked images (inserted by URL).<br/><br/><br/>API deprecations and behavior changes<br/><br/><br/>hook_image_style_flush is now invoked if ImageStyle::flush is called with the $path parameter set. Previously the hook was only called if no path was passed to this method. Also, the path parameter is now passed along to the hook implementation.<br/><br/><br/>PHP dependency updates<br/>Drupal core&#39;s pinned Composer dependency versions have been updated for the latest minor and patch releases.<br/><br/><br/>Symfony components have been updated to version 6.4.<br/><br/><br/>The Symfony mail component is added.<br/><br/><br/>ESLint now allows ES11/ECMAScript 2020 syntax to be used in JavaScript as it is supported by all modern browsers.<br/><br/><br/>Frontend (CSS and JavaScript) production dependency changes<br/>Drupal core&#39;s JavaScript dependencies have been updated. The latest minor versions of all JavaScript dependencies are now required by core yarn constraints.<br/><br/><br/>CKEditor has been updated from 39.0.1 to 40.0.0. Custom CKEditor plugins may need updating to match API changes in the new version of CKEditor. Read CKEditor documentation for the details. v39.x and v40.x update guides.<br/><br/><br/><br/>Development dependencies<br/><br/><br/>To help anaylze system performance en-telemetry/sdk v1.0.0 and open-telemetry/exporter-otlp v1.0.0 are added.<br/><br/><br/>Coding standards<br/><br/>The rule Drupal.Semantics.FunctionTriggerError is enabled..<br/><br/><br/>Known issues<br/>Search the issue queue for known issues.Release type:&amp;nbsp;Bug fixesNew features

Drupal是使用PHP语言编写的开源内容管理框架（CMF），它由内容管理系统（CMS）和PHP开发框架（Framework）共同构成。

暂无

暂无

暂无

https://www.drupal.org/project/drupal/releases/10.2.0-alpha1