Skip to main content

Drupal 11.4.3

Release Date: July 14, 2026

Drupal 11.4.3 has been released as a patch (bugfix) update for the Drupal 11 series. This maintenance release is ready for use on production sites and addresses several bugs reported since 11.4.2.

What Changed

Seven identified issues have been resolved in this release, spanning core subsystems from routing to the Workspace module:

  • Stream wrapper service registration — Fixed an error that occurred when stream wrappers instantiated services in constructors, because register() was being called before the container was fully built (Issue #3603333)
  • Array union operator misuse — Corrected an invalid use of PHP's array union operator that caused unexpected behavior in certain data-merging scenarios (Issue #3152267)
  • Route discovery regression — Resolved a compatibility issue where route discovery was not fully compatible with Symfony routes after recent changes (Issue #3608776)
  • ComponentNegotiator performance — Fixed ComponentNegotiator::negotiate() re-running on every call when no replacement was found, improving performance in plugin negotiation (Issue #3592946)
  • CSRF protection for locale routes — The locale.check_translation route is now properly protected against Cross-Site Request Forgery attacks (Issue #3575821)
  • Aggregate entity query cloning — Cloning an aggregate entity query no longer shares its aggregate conditions with the original query object (Issue #3593233)
  • WorkspacePublisher rollback — WorkspacePublisher now correctly rolls back changes when a PHP Error is thrown during the publishing process (Issue #3590350)

Security Coverage

Drupal 11.4.x continues to receive security coverage until June 2027. Site maintainers on Drupal 11.4 are encouraged to update to this release to stay current with the latest fixes.

Upgrade Notes

This is a standard patch release with no breaking changes or database updates required. Existing Drupal 11.4.x sites can update by downloading the release package or using Composer:

composer update drupal/core --with-all-dependencies

As always, take a full backup of your files and database before performing any update.

What is New?

By continuing to use the site, you agree to the use of cookies.