[AlexSkrypnyk]

Scope

First half of the main -> 2.x forward-port: the 70 commits that landed on main between 2026-08-31 and 2026-10-23 and have a clear, decision-free equivalent on 2.x. The second half (the 9 decisions, the docs passes and the dependency refresh) is in #3236, which also targets 2.x and is rebased onto it once this PR is merged. The two were split so each stays rebase-mergeable.

2.x has moved a long way from main (the installer is the CLI in .vortex/cli, tooling is PHP, provisioning is deploy steps, provider settings live in drevops/environment-detector, services have vendor-agnostic names), so most of these are adaptations rather than straight cherry-picks. Each port is its own commit: cherry-picks carry the (cherry picked from commit ...) trailer, adaptations name the source commit in the body.

Known red check: Vortex - Test docs

This required check fails on this PR for a reason outside the diff. vortex-test-docs.yml runs on workflow_run, so GitHub uses main's copy of the workflow. That copy has a Check prose style step (yarn run lint-prose), and 2.x gains lint-prose only in the follow-up PR, so here it fails with error Command "lint-prose" not found. Every other check is green. The plan is to merge this PR with an admin override of that one check; the follow-up PR brings Vale and turns it green.

Applied

• Pins and constraints: every GitHub Actions bump since 2026-08-31 (applied as SHA swaps across all 2.x workflows, including vortex-test-cli.yml and vortex-test-tooling.yml), Drupal core to ~11.4.11, PHP package constraints, uselagoon images to 26.10.0, Selenium Chromium 155 on browser, Renovate 44.176.2, platform PHP 8.4.27.
• Template fixes:
  • Rector set guard ([#3070] Restored Drupal Rector sets and added a guard against them silently unloading. #3071).
  • sdc_devel excluded from config export ([#3082] Excluded 'sdc_devel' from exported configuration like the other development modules. #3088).
  • auth.json kept out of the image ([#3078] Kept 'auth.json' out of the container build context and image. #3084).
  • Behat core inline_failures (Replaced 'drevops/behat-format-progress-fail' with the Behat core 'inline_failures' option and updated 'behat/behat' to '^3.34.0'. #3181).
  • Redundant Composer requirements removed (Removed Composer requirements that top-level packages already provide and skipped two Rector rules for the resulting version change. #3093).
  • Email rerouting in every cloud environment ([#3098] Enabled email rerouting in every cloud environment and moved 'reroute_email' to the development modules script. #3099).
  • Fast 404 fixed and covered with tests ([#3100] Shipped 'drupal/fast_404', corrected its settings guard and covered it with tests. #3101, Adopted the documented Fast 404 settings and covered them with tests. #3102, [#3211] Fixed Fast 404 blocking missing image style derivatives by setting 'fast404_allow_anon_imagecache' to 'TRUE'. #3217).
  • One === '1' guard form across the settings includes ([#3112] Settled one environment variable guard form across the Drupal settings includes. #3122).
  • Acquia hook wrappers abort on missing values ([#3111] Aborted Acquia hook wrappers on unset and empty required values. #3120).
  • Custom PHP ini for cli and appserver (Added custom PHP ini support to the 'cli' and 'php' containers and disabled session upload progress. #3222, Asserted the 'php' container PHP settings through 'php-fpm -i' in the Docker Compose workflow test. #3223).
  • PCOV via PIE ([#3220] Installed PCOV with PIE instead of PECL in the CLI image. #3221).
  • CLAMAV_ test isolation ([#3230] Cleared inherited 'CLAMAV_' variables in the settings tests. #3231).
• Tooling, rewritten in PHP:
  • Acquia purge-cache placeholders ([#3105] Matched the prod domain placeholder case in the Acquia purge-cache task. #3118).
  • Opt-in post-provision config check ([#3135] Added an opt-in check that fails provisioning when post-provision operations change configuration. #3150).
  • Dirty-worktree CI gate ([#3136] Added a CI gate that fails when the build leaves a dirty working tree. #3149).
  • git-artifact 1.9.0 with --source (Updated 'git-artifact' to '1.8.0' and passed the source directory with its '--source' option. #3172, Updated 'git-artifact' to 1.9.0. #3224).
  • vortex-fetch-db source validation and none ([#3208] Made 'vortex-fetch-db' fail on an unknown 'VORTEX_FETCH_DB_SOURCE' instead of reporting success. #3212).
  • vortex-doctor advice and webserver after appserver ([#3169] Made 'nginx' start after 'php' and corrected the SSH agent recovery advice in 'vortex-doctor'. #3170).
• CI and maintenance: DIDI-II fetch source ([#3184] Fixed the DIDI-II database job to use the 'container_registry' fetch source. #3185), DCLint/Gitleaks in CircleCI ([#3210] Fixed DCLint and Gitleaks scanning an empty directory in CI. #3215), CLI docblocks and test environment restore ([#3110] Reconciled comments and docblocks with the code they describe. #3123, [#3127] Restored the process environment after every installer test. #3129), maintenance skills moved to .vortex/skills as the vortex plugin (Moved maintenance skills to '.vortex/skills' and registered them as the 'vortex' Claude Code plugin. #3204), template-level parts of 1.42.0 and the package refresh (Updated for the release 1.42.0 'Halo'. #3213, Updated all packages to their latest versions and all container images to their latest tags. #3227).

Skipped

• 6f3508bf8 ([#3081] Derived the host with 'parse_url()' when building trusted host patterns. #3087): provider files gone on 2.x; the same bug lives upstream in drevops/environment-detector.
• 94e4e4b6b ([#3107] Replaced the drifted script snippet in '.vortex/CLAUDE.md' with a pointer to 'script-boilerplate.sh'. #3117): 2.x documents its own PHP tooling pattern.
• d131ccbad ([#3106] Added the missing marker space in negative BATS step assertions. #3119): BATS only; 2.x has no BATS suite.
• 9b38d2840 ([#3113] Reconciled the drifted duplicate helpers across the shipped tooling scripts. #3124): Bash helpers; the PHP tooling shares helpers.php.
• 82c16503d ([#3114] Derived the handler processing order and prompt count in 'PromptManager'. #3125): no PromptManager on 2.x.
• d2e6faf06 (Updated 'drevops/ci-runner' to '26.10.0'. #3173): 2.x doesn't use drevops/ci-runner.

Worth a look

• Stage reroutes email.
• Flags such as DRUPAL_SHIELD_DISABLED accept only 1.
• Fast 404 is active wherever drupal/fast_404 is installed.

Snapshots and gates

• ahoy update-snapshots ran after the last port.
• This exact head passed every CI check except the docs check explained above, including the full vortex-test-workflow matrix.
• Locally: ahoy lint, .vortex/cli (1687 tests) and .vortex/tooling (840 tests).

[github-actions]

Code coverage (threshold: 90%)

  Classes: 100.00% (1/1)
  Methods: 100.00% (2/2)
  Lines:   100.00% (171/171)

Per-class coverage

Drupal\ys_demo\Plugin\Block\CounterBlock
  Methods: 100.00% ( 2/ 2)   Lines: 100.00% ( 10/ 10)

[AlexSkrypnyk]

Code coverage (threshold: 90%)

  Classes: 100.00% (1/1)
  Methods: 100.00% (2/2)
  Lines:   100.00% (171/171)

Per-class coverage

Drupal\ys_demo\Plugin\Block\CounterBlock
  Methods: 100.00% ( 2/ 2)   Lines: 100.00% ( 10/ 10)