This is a beta release for the next maintenance minor release of Drupal 10. Betas are good testing targets for developers and site builders who are comfortable reporting (and where possible, fixing) their own bugs. Beta releases are not recommended for non-technical users, nor for production websites. More information on beta releases..

This maintenance minor provides important dependency updates and API additions for Drupal 10 sites to provide the best forward-compatibility with Drupal 11. It does not break backward compatibility (BC) for public APIs. This is according to Drupal core's backward compatibility and experimental module policies.

Drupal 10.6.x will receive security support until December 2026. Drupal 10.5.x will continue to receive security support until June 2026.

Important update information

  • This release updates minimum versions of Symfony Framework libraries. The updated libraries include a fix for CVE-2025-64500. Drupal does not expose this vulnerability, but the update is included as a hardening for other applications that may extend the library directly.
  • The doctrine/annotations package is marked abandoned upstream. Parts of the code have been forked into Drupal core. This change only affects custom code that was handling PHP annotations; for more information, see the change record.

Platform requirements changes

  • PHP 8.4 is now the recommended PHP version for sites using Drupal 10.6 and above. (PHP 8.3 is still the minimum supported version.)

PHP dependency changes

  • Many dependencies have received minor- and patch-level updates to the latest versions

Frontend (CSS and JavaScript) production dependency changes

  • CKEditor is updated to CKEditor 5 47.1.0.
  • Many dependencies have received minor- and patch-level updates to the latest versions.

Known issues

Search the issue queue for known issues.

All changes in Drupal 10.6.x

Browse the core commit log on GitLab.

VCS Label
10.6.0-beta1
Release type
Short description
Betas are good testing targets for developers and site builders who are comfortable reporting (and where possible, fixing) their own bugs. Beta releases are not recommended for non-technical users, nor for production websites.
Packaged Git sha1
3ef240316e6346d03291a53dbbb39136ac8fbb9b
Release files