TYPO3 13.4.28—What’s Changed?
Released: April 14, 2026
Update type: Bugfix and maintenance release
TYPO3 13.4.28 is a maintenance release focusing on stability and performance improvements. This release includes important database optimizations, bug fixes for workspace handling, form processing, and FAL metadata extraction, as well as updates to core dependencies like TypeScript 6, Node.js 24 LTS, and Doctrine DBAL 4.4.
Security Fixes
No security fixes in this release.
Editing & UX Improvements
- Color field focus fix — Prevents focus loss when clicking on color input fields in the backend.
- Form navigation improvements — Disabled pages are now properly respected in form navigation, and disabled form elements are excluded from GridRow column class calculations.
- Record link handler fix — Adds missing JavaScript module in RecordLinkHandler to prevent errors.
- Workspace preview handling — Derives workspace preview handling from the correct event context to avoid errors.
Backend & Administration
- Database index optimization — Adds missing index for content_from_pid in pages table to improve query performance.
- Category permissions initialization — Properly adds category_perms on group data initialization.
- FAL metadata extraction — Excludes missing files from File Abstraction Layer metadata extraction batch to prevent errors.
- System log timestamp fix — Correctly sets tstamp in DatabaseWriter for sys_log entries.
- System status display — Shows severity as text in System Status Update module for better readability.
Technical Changes
- TypeScript 6 update — Updates to TypeScript version 6 for modern JavaScript tooling.
- Node.js 24 LTS — Updates to Node.js 24 LTS for improved development environment.
- Doctrine DBAL 4.4 — Raises doctrine/dbal to version 4.4 with improved database platform version handling.
- Fluid Standalone 4.6.0 — Updates Fluid Standalone to version 4.6.0.
- PHPStan improvements — Updates PHPStan to 2.1.47 with improved static analysis capabilities.
- Performance optimization — Speeds up PolymorphicDeserializer::parseClassNames() and improves GreedyDatabaseBackend sophistication.
- Array offset fixes — Resolves multiple null array offset warnings in FlexFormFieldValues and other components.
- Site configuration — Properly persists environment variables in site config (rootPageId) and respects Site::isTypoScriptRoot() in BackendConfigurationManager.