This Month in TYPO3: June 2026

Meanwhile the first North American Summit sharpened TYPO3's enterprise story, and the visual relaunch across all 12 web properties finally reached the finish line. Momentum, not maintenance.

• TYPO3 14.3.3 and 13.4.31 security releases published — Published 9 June, these resolved fourteen coordinated Core advisories (TYPO3-CORE-SA-2026-006 through -019) covering broken access control, cross-site scripting, open redirect, insecure deserialization, and SQL injection across the Form Framework, File Abstraction Layer, Backend API, DataHandler, Recycler, and more. Update without delay.
• TYPO3 10.4.57, 11.5.51, and 12.4.46 ELTS released — The same 9 June security cycle extended to the Extended Long Term Support branches, keeping older installations protected for teams on the TYPO3 Company's ELTS service.
• TYPO3 14.3.4 and 13.4.32 maintenance releases published — Published 16 June, these maintenance builds rolled up bug fixes and improvements to keep the current v14 and v13 lines healthy between feature cycles.
• TYPO3 10.4.58, 11.5.52, and 12.4.47 ELTS released — Also on 16 June, the ELTS branches received their matching maintenance updates for organizations running v10, v11, and v12 under extended support.

The June contributor roundup hasn't landed yet — expect it in early July. Even so, June's fingerprints are everywhere: fourteen Core advisories coordinated and shipped in a single day, the first Content Blocks GUI released, the Extbase documentation overhaul pushed forward, and the twelve-property visual relaunch brought home. A full month of quiet, compounding work.

• TYPO3 Association Board Meeting Protocol (24 June 2026) — The Board reviewed recent Core Team developments, the ongoing dialogue with the community, and membership-related processes, reaffirming its commitment to constructive exchange and outlining next steps on outstanding membership fees.
• Changes coming to the General Assembly 2027 — After a wave of feedback from the 2026 General Assembly (GA), the Board committed to reshaping how the next GA runs, addressing long-standing criticism, member suggestions, and practical friction that had built up over the years.
• TYPO3 Association joins the Open Regulatory Compliance working group — With the Cyber Resilience Act redefining obligations for open source stewards, the Association took its compliance work a step further by joining a dedicated ORC working group.
• One ecosystem, one look — The visual relaunch is finished: All 12 web properties, including the Symfony applications, extensions.typo3.org, and docs.typo3.org, now share a single unified design language.
• TYPO3 Association Board Quarterly Summit Protocol (Q2/2026) — At its quarterly summit, the Board planned the months ahead, redistributed roles and responsibilities, and began preparations for the 2027 General Assembly.
• TYPO3 Dialogue Days invitation — The Board invited Association members to a two-day strategic gathering on 13–14 July in Düsseldorf, Germany. A members-focused forum for shaping the project's direction together.
• Extbase documentation overhaul: status report — Anja Leichsenring shares where the ongoing effort to modernize the Extbase documentation stands, and what's still ahead for one of TYPO3's core developer resources.
• Content Blocks: Q1/2026 report and the first GUI release — The Content Types Team shipped the first Content Blocks GUI for TYPO3 v13, demoed it at two TYPO3 Camps, and started funded work on a JSON Schema and YAML linter.

• 13–14 July 2026 — TYPO3 Dialogue Days, Düsseldorf, Germany
• 4–5 August 2026 — CMS Connect, Montréal, Canada
• 6–8 August 2026 — TYPO3 Developer Days, Karlsruhe, Germany
• 11–13 September 2026 — TYPO3 Camp München, Munich, Germany
• 15–16 September 2026 — TYPO3 University Days 2026, Erfurt, Germany
• 23–24 September 2026 — DMEXCO, Cologne, Germany
• 15–17 October 2026 — TYPO3 Camp Berlin, Berlin, Germany
• 19–22 October 2026 — TYPO3 Community Sprint October 2026, Düsseldorf, Germany
• 20–21 October 2026 — Open Source CMS 26 Conference, Utrecht, Netherlands
• 3–6 November 2026 — Boye Aarhus, Aarhus C, Denmark
• 6–8 November 2026 — TYPO3 Camp RheinRuhr, Kamp-Lintfort, Germany

With the visual relaunch complete, docs.typo3.org now wears the same design language as the rest of the ecosystem — and June's Extbase overhaul is a reminder that the docs themselves keep moving too. Spotted a gap or fixed a typo while reading? You can contribute to the official documentation directly from any page.

• The CMS quiet years are over — Opening the first North American Summit, Karim Marucchi laid out a blunt take on where CMS, AI, and enterprise platforms are heading — and what TYPO3 has to do to stay essential.
• Recruiting international talent successfully — A practical, seven-step field guide to hiring across borders, from structured recruiting and relocation support through onboarding and real team integration.
• A North American Summit through American eyes — Kendall Litton reflects on the first TYPO3 North American Summit in Atlanta: what happened, what was discussed, and why the timing couldn't be better.
• Visual Editor 1.8.0 brings multi-language editing — The community-funded FriendsOfTYPO3 release lets editors work with language versions side by side in a fully rendered WYSIWYG view — comparing content, reviewing translations, and spotting layout differences in one place.
• Edit images right inside the TYPO3 backend — Georg Ringer's Image Editor for the Backend (image_editor) embeds the open-source Filerobot editor into the backend file list, letting editors crop, rotate, fine tune, filter, annotate, and resize straight to FAL with no download-and-reupload detour. Tool groups are configurable per backend user.
• Convert Fluid tag syntax to inline automatically — Georg Ringer's PhpStorm plugin rewrites bulky <f:...> tag ViewHelpers into compact inline notation with a single intention action, handling the nested and chained cases that are tedious and error-prone to convert by hand.
• When a stray TCA key breaks localization after a v13.4 upgrade — Torben Hansen traces a translation-saving bug to a misplaced behaviour key that older TYPO3 silently ignored, until v13.4's schema flattening in FieldTypeFactory made it active again. Keep allowLanguageSynchronization inside config.
• Redirect generator for CSV-driven redirects — Georg Ringer's extension imports redirects from CSV, creates single redirects via CLI, and exports existing ones — resolving TYPO3 page targets through routing, with optional email notifications and Scheduler support on v12 and v13.

Shipped a tricky v13 migration this month? Ran a local camp, mentored a first-time contributor, or built an extension worth showing off? The community learns fastest from real stories — tell us what you built and we'll feature it in a future issue.

Real gratitude to the Security Team, who coordinated fourteen advisories in one calm release; to the release managers keeping v14, v13, and every ELTS branch current; to the Content Types Team behind the first Content Blocks GUI; and to everyone who carried the visual relaunch across twelve properties and kept the Extbase documentation moving forward.