Pantheon release notes

Pantheon now supports Bun as a package manager for Next.js sites, alongside npm, yarn, and pnpm. We've also added support for Node.js 26 (LTS).

Bun support

To use Bun, add a bun.lock file to your repository. Pantheon automatically detects the lock file and uses Bun to install your dependencies during the build process.

You can specify a Bun version in the engines.bun or packageManager field of your package.json. If no version is specified, Pantheon defaults to the latest stable release.

Node.js 26 support

Node.js 26 is now available as an LTS runtime for Next.js sites. Set the engines.node field in your package.json to use it:

Node.js 20 removed

Node.js 20 has reached end of life and is no longer available as a runtime. Sites using Node.js 20 must upgrade to Node.js 22 or later.

For more details about Next.js on Pantheon, see our Next.js documentation.

Terminus 4.3.1 is now available. This patch release makes the --org option required for site:create, enforcing the requirement that all new sites belong to an organization.

Key improvements in this release

• --org now required for site:create: The --org option is no longer optional when creating sites. Previously a warning was displayed; now omitting --org will return an error with a clear message. This aligns Terminus with the platform requirement that all sites belong to an organization. (#2845)

How to upgrade to Terminus 4.3.1

If you use Homebrew (macOS-only) to manage your Terminus installation, you should upgrade using:

If you installed Terminus directly from the .phar file, you should upgrade using the self:update command:

For more information about this release, visit the GitHub release page.

If you have questions or concerns around Terminus, please use the Terminus issue queue.

We've released the final update to the build-tools-ci Docker image. We will not publish any further updates, bug fixes, or security patches to the following tags:

• pantheonpublic/build-tools-ci:9.x-php8.2
• pantheonpublic/build-tools-ci:9.x-php8.3
• pantheonpublic/build-tools-ci:9.x-php8.4
• quay.io/pantheon-public/build-tools-ci:9.x-php8.2
• quay.io/pantheon-public/build-tools-ci:9.x-php8.3
• quay.io/pantheon-public/build-tools-ci:9.x-php8.4

Background

These base images were created at a time when CI providers recommend using customized Docker images to speed up execution and reduce the need for replicating boilerplate configration. It has since become more common to run CI jobs on standard base images for speed and the reduction in boilerplate code comes from reusable GitHub Actions or CircleCI Orbs.

Recommended migration

Use a standard base image from your CI provider and install the Pantheon tools you need during the CI run. Standard images are better cached by CI runners, so your pipelines will perform better overall than with a custom image.

Learn more about Pantheon's reusable GitHub Actions and CircleCI Orb.

Action required

If you use any of the build-tools-ci image tags listed above, migrate to a standard base image before the included dependencies become outdated.

Customer Scheduled Jobs is now available to all Pantheon customers. The feature allows you to schedule automated cron jobs tailored to your site's needs — set the frequency (hourly, daily, weekly, or monthly) and the actions to perform, and Pantheon handles execution automatically. Each site has a daily budget of 300 minutes for running jobs.

Previously limited to Early Access participants, the feature is now open to everyone with no enrollment required.

What's changed

• Customer Scheduled Jobs is now available on all eligible sites without Early Access enrollment.
• The Terminus Scheduled Jobs Plugin can be installed and configured on any site.

No action required

If you're already using Customer Scheduled Jobs, your configuration continues to work. New users can install the Terminus plugin and start scheduling jobs immediately.

More information

For setup instructions and usage details, see the Customer Scheduled Cron Jobs documentation.

We're introducing a User Agent Parser to the site metrics traffic tables to make traffic analysis faster and more intuitive.

Clicking View details next to any user agent now opens a modal that cleanly translates the raw string into readable components, including:

• Browser (Name & Version)
• Operating System (Name & Version)
• Device (Model, Type, & Vendor)
• CPU Architecture
• Rendering Engine

This update allows you to quickly identify specific traffic sources, browsers, and devices at a glance, while still preserving the exact raw string for your records and security rules.

Pantheon will shut down infrastructure running our Front-End Sites offering on October 1st, 2026.

Our intention to replace the Front-End Sites was included in the Beta announcement of newer support for Next.js. As our support for Next.js reached General Availability, Pantheon staff began direct outreach to customers using Front-End Sites.

Please reach out to your Customer Success Manager if you would like assistance moving your site. Or, if you prefer to migrate on your own, you can do so with these steps.

Terminus 4.3.0 is now available. This release adds GitHub Enterprise Server (GHES) support for VCS commands, enabling customers using GHES to provision and manage their repositories through Terminus.

Key improvements in this release

• GHES provisioning command: New vcs:github-host:add command allows provisioning GitHub Enterprise Server hosts for use with Pantheon VCS integrations (#2838)
• GHES support in VCS commands: Existing VCS commands now accept a --github-host option to target GitHub Enterprise Server instances (#2840)
• Twig dependency update: Updated the twig templating dependency (#2841)

How to upgrade to Terminus 4.3.0

If you use Homebrew (macOS-only) to manage your Terminus installation, you should upgrade using:

If you installed Terminus directly from the .phar file, you should upgrade using the self:update command:

For more information about this release, visit the GitHub release page.

If you have questions or concerns around Terminus, please use the Terminus issue queue.

Pantheon has released version 2.3.2 of the WP SAML Auth WordPress plugin. This security update fixes vulnerabilities in the robrichards/xmlseclibs and onelogin/php-saml dependencies. For more information, see the plugin release notes for details.

Update to 2.3.2 from the WordPress dashboard under Plugins > Installed Plugins, or download it from the WordPress Plugin Repository.