#Automatic Updates Initiative

Open on Drupal.org →

⚡️ Live updates comments, jobs, and issues, tagged with #Automatic Updates Initiative will update issues and activities on this page.

Issues

✨
The vendor hardening plugin should support changing the permissions of certain paths
Active
Drupal core 11.0 — composer
Created 2 months ago
🇺🇸United States phenaproxima
20 days ago
📌
Decide on consistent naming for future core modules that implement Automatic Updates and Project Browser functionality
Needs review
Drupal core 11.0 — other
Created about 4 years ago
🇺🇸United States effulgentsia
about 1 month ago
✨
Create a Composer plugin that records what packages are being updated, installed, or removed
Active
Drupal core 11.0 — package_manager.module
Created 4 months ago
🇺🇸United States phenaproxima
about 1 month ago
📌
[PP-1] Move some detail from Package Manager's hook_help into a validator message, or a handbook page
Postponed
Drupal core 11.0 — other
Created 11 months ago
🇺🇸United States phenaproxima
2 months ago
📌
[policy, no patch] Mark Package Manager as a beta stability core module
Active
Drupal core 11.0 — package_manager.module
Created 4 months ago
🇺🇸United States phenaproxima
2 months ago
📌
[policy, no patch] Require Composer 2 for Automatic Updates while still supporting Composer 1 for Drupal 9 generally
Closed: outdated
Drupal core 11.0 — base system
Created about 5 years ago
heddn
2 months ago
🌱
[policy] Require rsync for automatic updates in Drupal core and punt other syncers to contrib
Needs review
Drupal core 11.0 — update.module
Created over 1 year ago
🇺🇸United States effulgentsia
3 months ago
📌
[policy, no patch] composer.phar vs. API (automatic updates)
Active
Drupal core 11.0 — base system
Created about 5 years ago
heddn
3 months ago
🌱
[policy, no patch] Consider whether to keep Package Manager and Automatic Updates in a separate repo/package than core in order to facilitate releasing updates to the updater
Active
Drupal core 11.0 — other
Created about 2 years ago
🇺🇸United States effulgentsia
3 months ago
📌
[policy, no patch] Disallow using Package Manager (and therefore Automatic Updates and Project Browser) when Composer's disable-tls setting is true
Active
Drupal core 11.0 — other
Created about 2 years ago
🇺🇸United States effulgentsia
3 months ago
🌱
[policy, no patch] Require The Update Framework integration for new core Composer related modules
Active
Drupal core 10.1 — other
Created over 2 years ago
🇺🇸United States tedbow
3 months ago
📌
[policy, no patch] Should Package Manager require Composer HTTPS?
Active
Drupal core 10.1 — other
Created over 2 years ago
🇺🇸United States tedbow
3 months ago
🌱
[policy, no patch] Do automatic updates need to be supported on hosting plans that disable "proc_open" and friends?
Needs work
Drupal core 11.0 — update.module
Created over 4 years ago
🇺🇸United States effulgentsia
3 months ago
📌
[policy, no patch] Use Update XML in Package manager to determine release support status
Active
Drupal core 11.0 — composer
Created almost 2 years ago
🇺🇸United States tedbow
3 months ago
🌱
Automatic Updates Initiative overview and roadmap
Active
Drupal core ideas
Created over 7 years ago
🇺🇸United States hestenet
3 months ago
✨
Add Alpha level Experimental Package Manager module
Active
Drupal core 10.1 — composer
Created over 2 years ago
🇺🇸United States tedbow
3 months ago
✨
Use the flood system to rate limit security advisories fetching during cron
Active
Drupal core 11.0 — system.module
Created over 4 years ago
🇺🇸United States phenaproxima
3 months ago
✨
UpdateTestController should allow using release history fixtures from arbitrary directories
Active
Drupal core 11.0 — update.module
Created over 3 years ago
🇺🇸United States phenaproxima
4 months ago
🌱
[policy, no patch] Automatic Updates & Project Browser, should NOT handle dependency management for projects not known to Composer
Needs review
Drupal core 11.0 — composer
Created about 3 years ago
🇺🇸United States tedbow
4 months ago
📌
Update to stable php-tuf releases
Active
Drupal core 11.0 — package_manager.module
Created 11 months ago
🇬🇧United Kingdom catch
6 months ago
✨
Augment then Replace current Update Manager URL download based updates with Staged-Composer workflow
Needs work
Drupal core 11.0 — update.module
Created over 4 years ago
🇺🇸United States tedbow
9 months ago
📌
[PP-1] In comments, quote the names of the phases of Package Manager's stage lifecycle
Postponed
Drupal core 11.0 — other
Created 12 months ago
🇺🇸United States phenaproxima
10 months ago
📌
[PP-1]
Active
Drupal core 11.0 — other
Created 12 months ago
🇺🇸United States phenaproxima
10 months ago
📌
[PP-1] Is there a better way for Package Manager to discover project names, rather than parsing info files?
Postponed
Drupal core 11.0 — other
Created 11 months ago
🇺🇸United States phenaproxima
10 months ago
📌
[PP-1] Document when and how PackageManagerFixtureCreator should be used
Postponed
Drupal core 11.0 — other
Created 11 months ago
🇺🇸United States phenaproxima
10 months ago
📌
[PP-1] Consider moving some of Package Manager's config options to settings
Active
Drupal core 11.0 — other
Created 12 months ago
🇺🇸United States phenaproxima
10 months ago
📌
[PP-1] See if there's a less sweeping way to wire Composr Stager into Package Manager's services.yml
Postponed
Drupal core 11.0 — other
Created 11 months ago
🇺🇸United States phenaproxima
10 months ago
🐛
If the site is on an insecure version of an old minor and there is a secure version of that old minor available, the update status report should link that release
Needs review
Drupal core 11.0 — update.module
Created about 7 years ago
🇺🇸United States xjm
11 months ago
🐛
Exceptions in batch no longer are shown on the page when Javascript is disabled
Needs work
Drupal core 11.0 — batch system
Created almost 2 years ago
🇺🇸United States tedbow
about 1 year ago
📌
The core/drupal.message library requires a status_messages render element
Fixed
Drupal core 10.3 — javascript
Created almost 2 years ago
🇺🇸United States bnjmnm
about 1 year ago
🌱
Determine Multisite Support in Automatic Updates MVP
Active
Drupal core 11.0 — update.module
Created about 4 years ago
🇺🇸United States tedbow
about 1 year ago
📌
Should maintenance mode be suggested or enforced?
Active
Project Browser 1.0
Created over 2 years ago
🇺🇸United States tedbow
over 1 year ago
✨
Provide optional support for using composer.json for dependency metadata
Needs work
Drupal core 11.0 — extension system
Created almost 7 years ago
🇨🇦Canada jibran
over 1 year ago
📌
Convert update_calculate_project_update_status() into a class
Needs work
Drupal core 11.0 — update.module
Created almost 6 years ago
🇺🇸United States tedbow
over 1 year ago
📌
[Meta] Create Marketing Materials for the Automatic Updates initiative
Fixed
Promote Drupal
Created over 4 years ago
🇨🇦Canada pixelite
over 1 year ago
🐛
Never show a "Not supported!" version as "Recommended"
Fixed
Drupal core 10.3 — update.module
Created about 4 years ago
🇳🇴Norway gisle
over 1 year ago
✨
Store all installable releases in update_calculate_project_update_status()
Needs work
Drupal core 11.0 — update.module
Created almost 4 years ago
🇺🇸United States tedbow
over 1 year ago
🌱
[policy, no patch] Decide if and when automatic updates should rely only on packagist data to determine installability of modules
Active
Drupal core 11.0 — base system
Created almost 2 years ago
🇬🇧United Kingdom catch
over 1 year ago
📌
Create a separate rsync shim Composer library for Composer Stager
Active
Drupal core 11.0 — base system
Created over 1 year ago
🇺🇸United States traviscarden
over 1 year ago
🐛
BuildTestBase makes assumptions it should not about the code layout
Fixed
Drupal core 10.2 — phpunit
Created almost 2 years ago
🇬🇧United Kingdom alexpott
over 1 year ago
📌
Automatic Updates Gitlab Conversion test issue
Active
Drupal core 11.0 — other
Created over 1 year ago
🇺🇸United States tedbow
over 1 year ago
🐛
Exceptions in batch no longer are shown on the page: Javascript error
Fixed
Drupal core 10.2 — ajax system
Created almost 2 years ago
🇺🇸United States tedbow
over 1 year ago
🌱
[policy, no patch] Make PHP's OpenSSL extension a requirement for installing and using Package Manager (and therefore, Automatic Updates and Project Browser)
Fixed
Drupal core 10.2 — other
Created over 2 years ago
🇺🇸United States effulgentsia
almost 2 years ago
✨
Cron should not remain monolithic (Implement a scheduling hook for cron)
Active
Drupal core 11.0 — cron system
Created about 18 years ago
🇫🇷France fgm
about 2 years ago
📌
Create test trait to set update_test module settings
Fixed
Drupal core 11.0 — update.module
Created over 2 years ago
🇺🇸United States tedbow
about 2 years ago
🌱
Security issues with popular package managers
Closed: outdated
Drupal core 9.5 — composer
Created over 3 years ago
🇺🇸United States BEGRAFX
about 2 years ago
📌
Add colinodell/psr-test-logger to core's dev dependencies
Fixed
Drupal core 10.1 — other
Created almost 3 years ago
🇺🇸United States phenaproxima
over 2 years ago
📌
Add symfony/config to core's dependencies for package_manager
Closed: duplicate
Drupal core 10.1 — other
Created almost 3 years ago
🇧🇪Belgium wim leers
over 2 years ago
📌
[Policy, no patch] Projects depending on composer plugins will have to update the additional_trusted_composer_plugins setting in package_manager.settings
Active
Drupal core 10.1 — composer
Created over 2 years ago
🇧🇪Belgium wim leers
over 2 years ago
📌
[policy] Move composer/composer from a dev dependency to a production dependency
Closed: won't fix
Drupal core 10.0 — composer
Created almost 4 years ago
🇺🇸United States effulgentsia
over 2 years ago
✨
Replace single index.php with a frontend controller that supports A/B updating (automatic updates)
Active
Drupal core 10.1 — base system
Created almost 6 years ago
heddn
over 2 years ago
✨
Support scanning Composer Stager library for translatable strings
Active
Translation template extractor 1.0
Created over 2 years ago
🇺🇸United States traviscarden
over 2 years ago

Activities

No activities found.

contrib.social Blog FAQ Discussions

Production build 0.71.5 2024

#Automatic Updates Initiative

Issues

The vendor hardening plugin should support changing the permissions of certain pathsActiveDrupal core 11.0 — composer Created 2 months ago

Decide on consistent naming for future core modules that implement Automatic Updates and Project Browser functionalityNeeds reviewDrupal core 11.0 — other Created about 4 years ago

Create a Composer plugin that records what packages are being updated, installed, or removedActiveDrupal core 11.0 — package_manager.module Created 4 months ago

[PP-1] Move some detail from Package Manager's hook_help into a validator message, or a handbook pagePostponedDrupal core 11.0 — other Created 11 months ago

[policy, no patch] Mark Package Manager as a beta stability core moduleActiveDrupal core 11.0 — package_manager.module Created 4 months ago

[policy, no patch] Require Composer 2 for Automatic Updates while still supporting Composer 1 for Drupal 9 generallyClosed: outdatedDrupal core 11.0 — base system Created about 5 years ago

[policy] Require rsync for automatic updates in Drupal core and punt other syncers to contribNeeds reviewDrupal core 11.0 — update.module Created over 1 year ago

[policy, no patch] composer.phar vs. API (automatic updates)ActiveDrupal core 11.0 — base system Created about 5 years ago

[policy, no patch] Consider whether to keep Package Manager and Automatic Updates in a separate repo/package than core in order to facilitate releasing updates to the updaterActiveDrupal core 11.0 — other Created about 2 years ago

[policy, no patch] Disallow using Package Manager (and therefore Automatic Updates and Project Browser) when Composer's disable-tls setting is trueActiveDrupal core 11.0 — other Created about 2 years ago

[policy, no patch] Require The Update Framework integration for new core Composer related modulesActiveDrupal core 10.1 — other Created over 2 years ago

[policy, no patch] Should Package Manager require Composer HTTPS?ActiveDrupal core 10.1 — other Created over 2 years ago

[policy, no patch] Do automatic updates need to be supported on hosting plans that disable "proc_open" and friends?Needs workDrupal core 11.0 — update.module Created over 4 years ago

[policy, no patch] Use Update XML in Package manager to determine release support statusActiveDrupal core 11.0 — composer Created almost 2 years ago

Automatic Updates Initiative overview and roadmapActiveDrupal core ideas Created over 7 years ago

Add Alpha level Experimental Package Manager moduleActiveDrupal core 10.1 — composer Created over 2 years ago

Use the flood system to rate limit security advisories fetching during cronActiveDrupal core 11.0 — system.module Created over 4 years ago

UpdateTestController should allow using release history fixtures from arbitrary directoriesActiveDrupal core 11.0 — update.module Created over 3 years ago

[policy, no patch] Automatic Updates & Project Browser, should NOT handle dependency management for projects not known to ComposerNeeds reviewDrupal core 11.0 — composer Created about 3 years ago

Update to stable php-tuf releasesActiveDrupal core 11.0 — package_manager.module Created 11 months ago

Augment then Replace current Update Manager URL download based updates with Staged-Composer workflowNeeds workDrupal core 11.0 — update.module Created over 4 years ago

[PP-1] In comments, quote the names of the phases of Package Manager's stage lifecyclePostponedDrupal core 11.0 — other Created 12 months ago

[PP-1] ActiveDrupal core 11.0 — other Created 12 months ago

[PP-1] Is there a better way for Package Manager to discover project names, rather than parsing info files?PostponedDrupal core 11.0 — other Created 11 months ago

[PP-1] Document when and how PackageManagerFixtureCreator should be usedPostponedDrupal core 11.0 — other Created 11 months ago

[PP-1] Consider moving some of Package Manager's config options to settingsActiveDrupal core 11.0 — other Created 12 months ago

[PP-1] See if there's a less sweeping way to wire Composr Stager into Package Manager's services.ymlPostponedDrupal core 11.0 — other Created 11 months ago

If the site is on an insecure version of an old minor and there is a secure version of that old minor available, the update status report should link that releaseNeeds reviewDrupal core 11.0 — update.module Created about 7 years ago

Exceptions in batch no longer are shown on the page when Javascript is disabledNeeds workDrupal core 11.0 — batch system Created almost 2 years ago

The core/drupal.message library requires a status_messages render element FixedDrupal core 10.3 — javascript Created almost 2 years ago

Determine Multisite Support in Automatic Updates MVPActiveDrupal core 11.0 — update.module Created about 4 years ago

Should maintenance mode be suggested or enforced?ActiveProject Browser 1.0 Created over 2 years ago

Provide optional support for using composer.json for dependency metadataNeeds workDrupal core 11.0 — extension system Created almost 7 years ago

Convert update_calculate_project_update_status() into a classNeeds workDrupal core 11.0 — update.module Created almost 6 years ago

[Meta] Create Marketing Materials for the Automatic Updates initiativeFixedPromote Drupal Created over 4 years ago

Never show a "Not supported!" version as "Recommended"FixedDrupal core 10.3 — update.module Created about 4 years ago

Store all installable releases in update_calculate_project_update_status()Needs workDrupal core 11.0 — update.module Created almost 4 years ago

[policy, no patch] Decide if and when automatic updates should rely only on packagist data to determine installability of modulesActiveDrupal core 11.0 — base system Created almost 2 years ago

Create a separate rsync shim Composer library for Composer StagerActiveDrupal core 11.0 — base system Created over 1 year ago

BuildTestBase makes assumptions it should not about the code layoutFixedDrupal core 10.2 — phpunit Created almost 2 years ago

Automatic Updates Gitlab Conversion test issueActiveDrupal core 11.0 — other Created over 1 year ago

Exceptions in batch no longer are shown on the page: Javascript errorFixedDrupal core 10.2 — ajax system Created almost 2 years ago

[policy, no patch] Make PHP's OpenSSL extension a requirement for installing and using Package Manager (and therefore, Automatic Updates and Project Browser)FixedDrupal core 10.2 — other Created over 2 years ago

Cron should not remain monolithic (Implement a scheduling hook for cron)ActiveDrupal core 11.0 — cron system Created about 18 years ago

Create test trait to set update_test module settingsFixedDrupal core 11.0 — update.module Created over 2 years ago

Security issues with popular package managers Closed: outdatedDrupal core 9.5 — composer Created over 3 years ago

Add colinodell/psr-test-logger to core's dev dependenciesFixedDrupal core 10.1 — other Created almost 3 years ago

Add symfony/config to core's dependencies for package_managerClosed: duplicateDrupal core 10.1 — other Created almost 3 years ago

[Policy, no patch] Projects depending on composer plugins will have to update the additional_trusted_composer_plugins setting in package_manager.settingsActiveDrupal core 10.1 — composer Created over 2 years ago

[policy] Move composer/composer from a dev dependency to a production dependencyClosed: won't fixDrupal core 10.0 — composer Created almost 4 years ago

Replace single index.php with a frontend controller that supports A/B updating (automatic updates)ActiveDrupal core 10.1 — base system Created almost 6 years ago

Support scanning Composer Stager library for translatable stringsActiveTranslation template extractor 1.0 Created over 2 years ago

Activities

The vendor hardening plugin should support changing the permissions of certain paths
Active
Drupal core 11.0 — composer
Created 2 months ago

Decide on consistent naming for future core modules that implement Automatic Updates and Project Browser functionality
Needs review
Drupal core 11.0 — other
Created about 4 years ago

Create a Composer plugin that records what packages are being updated, installed, or removed
Active
Drupal core 11.0 — package_manager.module
Created 4 months ago

[PP-1] Move some detail from Package Manager's hook_help into a validator message, or a handbook page
Postponed
Drupal core 11.0 — other
Created 11 months ago

[policy, no patch] Mark Package Manager as a beta stability core module
Active
Drupal core 11.0 — package_manager.module
Created 4 months ago

[policy, no patch] Require Composer 2 for Automatic Updates while still supporting Composer 1 for Drupal 9 generally
Closed: outdated
Drupal core 11.0 — base system
Created about 5 years ago

[policy] Require rsync for automatic updates in Drupal core and punt other syncers to contrib
Needs review
Drupal core 11.0 — update.module
Created over 1 year ago

[policy, no patch] composer.phar vs. API (automatic updates)
Active
Drupal core 11.0 — base system
Created about 5 years ago

[policy, no patch] Consider whether to keep Package Manager and Automatic Updates in a separate repo/package than core in order to facilitate releasing updates to the updater
Active
Drupal core 11.0 — other
Created about 2 years ago

[policy, no patch] Disallow using Package Manager (and therefore Automatic Updates and Project Browser) when Composer's disable-tls setting is true
Active
Drupal core 11.0 — other
Created about 2 years ago

[policy, no patch] Require The Update Framework integration for new core Composer related modules
Active
Drupal core 10.1 — other
Created over 2 years ago

[policy, no patch] Should Package Manager require Composer HTTPS?
Active
Drupal core 10.1 — other
Created over 2 years ago

[policy, no patch] Do automatic updates need to be supported on hosting plans that disable "proc_open" and friends?
Needs work
Drupal core 11.0 — update.module
Created over 4 years ago

[policy, no patch] Use Update XML in Package manager to determine release support status
Active
Drupal core 11.0 — composer
Created almost 2 years ago

Automatic Updates Initiative overview and roadmap
Active
Drupal core ideas
Created over 7 years ago

Add Alpha level Experimental Package Manager module
Active
Drupal core 10.1 — composer
Created over 2 years ago

Use the flood system to rate limit security advisories fetching during cron
Active
Drupal core 11.0 — system.module
Created over 4 years ago

UpdateTestController should allow using release history fixtures from arbitrary directories
Active
Drupal core 11.0 — update.module
Created over 3 years ago

[policy, no patch] Automatic Updates & Project Browser, should NOT handle dependency management for projects not known to Composer
Needs review
Drupal core 11.0 — composer
Created about 3 years ago

Update to stable php-tuf releases
Active
Drupal core 11.0 — package_manager.module
Created 11 months ago

Augment then Replace current Update Manager URL download based updates with Staged-Composer workflow
Needs work
Drupal core 11.0 — update.module
Created over 4 years ago

[PP-1] In comments, quote the names of the phases of Package Manager's stage lifecycle
Postponed
Drupal core 11.0 — other
Created 12 months ago

[PP-1]
Active
Drupal core 11.0 — other
Created 12 months ago

[PP-1] Is there a better way for Package Manager to discover project names, rather than parsing info files?
Postponed
Drupal core 11.0 — other
Created 11 months ago

[PP-1] Document when and how PackageManagerFixtureCreator should be used
Postponed
Drupal core 11.0 — other
Created 11 months ago

[PP-1] Consider moving some of Package Manager's config options to settings
Active
Drupal core 11.0 — other
Created 12 months ago

[PP-1] See if there's a less sweeping way to wire Composr Stager into Package Manager's services.yml
Postponed
Drupal core 11.0 — other
Created 11 months ago

If the site is on an insecure version of an old minor and there is a secure version of that old minor available, the update status report should link that release
Needs review
Drupal core 11.0 — update.module
Created about 7 years ago

Exceptions in batch no longer are shown on the page when Javascript is disabled
Needs work
Drupal core 11.0 — batch system
Created almost 2 years ago

The core/drupal.message library requires a status_messages render element
Fixed
Drupal core 10.3 — javascript
Created almost 2 years ago

Determine Multisite Support in Automatic Updates MVP
Active
Drupal core 11.0 — update.module
Created about 4 years ago

Should maintenance mode be suggested or enforced?
Active
Project Browser 1.0
Created over 2 years ago

Provide optional support for using composer.json for dependency metadata
Needs work
Drupal core 11.0 — extension system
Created almost 7 years ago

Convert update_calculate_project_update_status() into a class
Needs work
Drupal core 11.0 — update.module
Created almost 6 years ago

[Meta] Create Marketing Materials for the Automatic Updates initiative
Fixed
Promote Drupal
Created over 4 years ago

Never show a "Not supported!" version as "Recommended"
Fixed
Drupal core 10.3 — update.module
Created about 4 years ago

Store all installable releases in update_calculate_project_update_status()
Needs work
Drupal core 11.0 — update.module
Created almost 4 years ago

[policy, no patch] Decide if and when automatic updates should rely only on packagist data to determine installability of modules
Active
Drupal core 11.0 — base system
Created almost 2 years ago

Create a separate rsync shim Composer library for Composer Stager
Active
Drupal core 11.0 — base system
Created over 1 year ago

BuildTestBase makes assumptions it should not about the code layout
Fixed
Drupal core 10.2 — phpunit
Created almost 2 years ago

Automatic Updates Gitlab Conversion test issue
Active
Drupal core 11.0 — other
Created over 1 year ago

Exceptions in batch no longer are shown on the page: Javascript error
Fixed
Drupal core 10.2 — ajax system
Created almost 2 years ago

[policy, no patch] Make PHP's OpenSSL extension a requirement for installing and using Package Manager (and therefore, Automatic Updates and Project Browser)
Fixed
Drupal core 10.2 — other
Created over 2 years ago

Cron should not remain monolithic (Implement a scheduling hook for cron)
Active
Drupal core 11.0 — cron system
Created about 18 years ago

Create test trait to set update_test module settings
Fixed
Drupal core 11.0 — update.module
Created over 2 years ago

Security issues with popular package managers
Closed: outdated
Drupal core 9.5 — composer
Created over 3 years ago

Add colinodell/psr-test-logger to core's dev dependencies
Fixed
Drupal core 10.1 — other
Created almost 3 years ago

Add symfony/config to core's dependencies for package_manager
Closed: duplicate
Drupal core 10.1 — other
Created almost 3 years ago

[Policy, no patch] Projects depending on composer plugins will have to update the additional_trusted_composer_plugins setting in package_manager.settings
Active
Drupal core 10.1 — composer
Created over 2 years ago

[policy] Move composer/composer from a dev dependency to a production dependency
Closed: won't fix
Drupal core 10.0 — composer
Created almost 4 years ago

Replace single index.php with a frontend controller that supports A/B updating (automatic updates)
Active
Drupal core 10.1 — base system
Created almost 6 years ago

Support scanning Composer Stager library for translatable strings
Active
Translation template extractor 1.0
Created over 2 years ago