I've been maintaining the matrix_api module on Drupal.org since 2016, nearly a decade of it doing one thing well: posting Drupal events into a Matrix room. This year that changed.
Drupal
🕑Aug 01, 2026 🖋John Locke
💬0
Zero to new Drupal site in 133 seconds
Gabor asked in Slack about how people contributing to Drupal manage multiple different Drupal versions, and different contributed module branches, when using AI agents:
Case Study
From Drupal 5 to Drupal Canvas: Keeping KSER on the Air Through Two Decades of the Web
KSER is a community radio station. Community radio doesn’t get downtime — or a huge IT budget.
We started maintaining KSER’s Drupal 5 site in 2013, even though Drupal 5 had already reached end-of-life. For more than a decade, we kept it secure, stable, and useful while the station put its resources where they mattered most.
Now KSER has a new home on Drupal 11 and Drupal CMS, with Drupal Canvas for easier content management and a persistent audio player that keeps the station streaming while visitors move through the site.
Sometimes the right answer isn’t “rebuild now.” It’s maintain what you have well, then replace it when the time is right.
🕑Jul 21, 2026 🖋John Locke
💬1
We Patched wp2shell in 4 Hours. On a Friday Afternoon.
On July 17, WordPress shipped an emergency security release for a vulnerability chain now being called wp2shell.
🕑May 28, 2026 🖋John Locke
💬0
Every Night, Argo Watches
While your site is running, things change. A content editor tweaks a configuration setting. A security vulnerability surfaces in a dependency. A production fix gets applied directly instead of going through the normal release process.
🕑May 22, 2026 🖋John Locke
💬0
The Night the Internet Tried to Kill Your Website
May 2026
My name doesn't matter. Call me the op. I run a small shop — we keep websites alive, patch the holes before the wrong people find them, and make sure that when something goes sideways, there's always a way back. It's not glamorous work. But this spring? This spring was something else.
🕑May 19, 2026 🖋John Locke
💬0
Your Website Will Be Attacked. Here's How We Make Sure You Survive It.
The question used to be whether your website would face a serious security threat. That question has been answered. The question now is whether you'll be ready when it happens — and whether you can recover cleanly when something gets through.
🕑May 18, 2026 🖋John Locke
💬0
The Rules Have Changed: Security in the Age of AI-Assisted Attacks
Security is getting dramatically harder and more expensive. AI is simultaneously driving an explosion in vulnerability discovery and weaponizing the exploits that follow. The question for every organization with anything online is no longer whether to invest in resilience — it's whether that investment is already in place before the next incident arrives.
🕑Apr 21, 2026 🖋John Locke
💬0
When Views meets Drupal Canvas -- getting dynamic content into your Canvas page
From early days, "views" has been the killer feature of Drupal. Views is a powerful querying tool built into Drupal that allows dynamic lists and displays of content to be created without writing custom code.
Dragging Movements
On October 5, 2023, the W3C published WCAG 2.2 as an official web standard. While WCAG 2.1 remains valid and widely referenced, WCAG 2.2 introduces nine new success criteria and removes one obsolete requirement. These changes reflect a deeper understanding of mobile accessibility, cognitive disabilities, and focus management.
The Legal Landscape
Adoption of WCAG 2.2 varies by jurisdiction:
Predictable Behavior
You're tabbing through a form, reading field labels before you decide what to enter. You tab into a dropdown menu just to see what options are available. The instant it receives focus - before you've even opened it - the page suddenly redirects to a completely different page. You didn't select anything, didn't press Enter, just tabbed through. Now you're disoriented and have to navigate back to find your place.
Label in Name
You're using voice control to navigate a website because typing is painful today. You see a button that says "Submit" - perfect, that's what you need. You say clearly: "Click Submit." Nothing happens. You try again: "Click Submit button." Still nothing. Frustrated, you finally say "Show numbers" to overlay numbers on every interactive element, then speak the number to activate the button.