We have some important news to share with you about the end-of-life timeline for Drupal 7. While Drupal had previously announced an extension until November 1, 2023, we are thrilled to inform you that the final date for Drupal 7’s end-of-life has been extended once again – this time to January 5, 2025!

With this extension, the Drupal Security Team will be making some adjustments to the level of support provided. It’s important to note that this will be the final extension, so it’s crucial to plan your migration strategy accordingly.

Changes to Drupal services for Drupal 7

As of 1 August 2023, Drupal.org will no longer package Drupal 7 distributions with Drush make files. However, you can still build distributions locally using Drush make.

Important Points to Consider Regarding the End of Life Extension for Drupal 7

To ensure a smooth transition, we want to highlight a few key points regarding the end of life extension for Drupal 7:

– Moderately critical Drupal 7 issues will receive reduced support, starting from 1 August 2023. The Drupal Security Team may publicly post such issues, as long as they are not mass-exploitable. This will not affect Drupal 9 or newer versions. If a security issue affects both Drupal 7 and a newer version, the Drupal 7 issue may be made public without a corresponding fix.

– After 1 August 2023, unsupported Drupal 7 module branches will no longer be eligible for new maintainership. If you rely on Drupal 7 modules, we strongly encourage you to adopt and support them proactively to ensure they’re doing well. The Drupal Security Team will not issue security advisories for any unsupported libraries that Drupal 7 contributed modules depend on, including CKEditor 4.

– Starting from 1 August 2023, Drupal 7 will no longer support PHP versions lower than 5.6. Drupal may provide further updates regarding the minimum PHP requirement before Drupal 7’s end of life.

– From 1 August 2023, security fixes for Drupal 7 Windows-only issues will no longer be provided. If you are running a Drupal 7 site on Windows, we recommend considering migrating to another operating system or hosting provider.

– Effective 1 August 2023, Drupal.org will no longer package Drupal 7 distributions with Drush make files. You can still build distributions locally using Drush make.

As we near the end of Drupal 7’s life cycle, it’s crucial to grasp the potential impact on your website.

Here’s what you need to know:

• The Drupal Security Team will no longer offer support or Security Advisories for Drupal 7 core and modules, which could lead to the public disclosure of security issues and zero-day vulnerabilities.
• Drupal.org will no longer provide assistance for Drupal 7-related tasks, including documentation navigation, automated testing, and packaging.
• Drupal 7-compatible releases on project pages will be labelled as unsupported.
• Due to changes in the Drupal.org infrastructure, certain Drush functionalities for Drupal 7 will no longer function.
• Drupal.org will discontinue file archive packaging (tar and zip files) for Drupal 7, with archives possibly being removed over time.
• No additional core commits will be made to Drupal core 7x, and downloadable package tarballs may no longer be available.
• External vulnerability scans will flag Drupal 7 as insecure.

If you’re currently maintaining a Drupal 7 site, we strongly advise initiating a migration to Drupal 10 before the end of life date. Our team of experts is available to assist you throughout the migration process, ensuring a smooth transition.