Update warning about module

Created on 27 February 2025, about 1 month ago

Problem/Motivation

I got a security update warning via email today, that version 1.0.1 of the module is no longer supported, and should be updated:

The installed version of at least one of your modules or themes is no longer supported. Upgrading or uninstalling is strongly recommended. See the project homepage for more details.

See the available updates page for more information:
https://example.org/admin/reports/updates
Your site is currently configured to send these emails only when security updates are available. To get notified for any available updates, https://example.org/admin/reports/updates/settings.

... and under /admin/reports/updates:

CKEditor 5 Paste Filter 1.0.1 Not Supported!
Recommended version: 1.1.0 (2025-Feb-26)
Your currently installed release is now unsupported, and is no longer available for download. Uninstalling everything included in this release or upgrading is strongly recommended!

It's my impression that the update from CKEditor 5 Paste Filter 1.0.1 to 1.1.0 is not a security update, but merely an improvement:

https://www.drupal.org/project/ckeditor5_paste_filter/releases/1.1.0

I wonder if this happened due to a mistaken update in the module maintenance interface, (like removing "Supported"?) when in fact version 1.0.1 would still work fine?

I created an infrastructure issue about this also, to try to understand why this happens.

Steps to reproduce

Proposed resolution

Consider if a setting in the user interface for the module should be updated, to prevent false warning emails being sent to the users of the module. (like version 1.0.1 changed back to "Supported"?)

Remaining tasks

User interface changes

Introduced terminology

API changes

Data model changes

Release notes snippet

📌 Task
Status

Active

Version

1.1

Component

Miscellaneous

Created by

🇩🇰Denmark ressa Copenhagen

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

  • Issue created by @ressa
  • 🇨🇦Canada star-szr

    Hmm, my fault for not reading the docs I suppose, it wasn’t clear to me that this would happen.

    Sorry for the alarm/noise. My intent was simply to only point to one version on the project page, but I guess that’s not really an option.

  • 🇨🇦Canada star-szr

    I have set 1.0.1 back to “Supported”. Thanks for the report!

  • 🇩🇰Denmark ressa Copenhagen

    No problem, and thanks for a fast reply! Please don't consider this a criticism, I am very grateful there are users creating and maintaining modules. Without you guys, there wouldn't be a Drupal.

    But it would be awesome if you left a comment in 📌 False warnings about security updates Active , and gave some feedback to improve the module administration user interface, to prevent this from happening.

    Like I wrote, this is not the first time I get a false security warning, so it seems like it's not clear enough what checking or unchecking that innocent checkbox can result in ... Thanks!

  • 🇩🇰Denmark ressa Copenhagen

    I see you already did, thanks!

  • Automatically closed - issue fixed for 2 weeks with no activity.

Production build 0.71.5 2024