Pantheon release notes

We have released version 0.7.0 of the 'Push to Pantheon' GitHub Action. This version adds a new input to skip the Terminus install if your workflow is already installing Terminus. Documentation in the readme.md has been updated to include definitions for both the skip_terminus_install and relative_site_root (which was previously undocumented) inputs. Additionally, documentation guidance has been added for using the action with robots (like Dependabot) to ensure robot-created workflows don't fail due to lack of permissions.

For more details and a full list of changes in this release, please refer to the 0.7.0 release notes. To update to the latest version, modify your workflow file to use 0.7.0:

Support for PHP 8.4 is now available on the platform with the new PHP Runtime Generation 2. PHP 8.4 is the latest version of the server-side language powering Drupal and WordPress.

CMS support

PHP 8.4 is recommended for sites running Drupal 10.4+ or 11.1+. See the Drupal PHP requirements documentation for more details.

WordPress 6.7+ only has "beta support" for PHP 8.4, therefore Pantheon does not recommend using WordPress in a production environment with this PHP version yet.

Pantheon currently recommends at least PHP 8.2 for all production sites.

New features

PHP 8.4 is not expected to bring new performance gains for sites. But for developers looking to take advantage of the latest PHP functionalities, a few new updates are notable:

• Property Hooks: Introduces support for computed properties, allowing for pre/post-processing of values.
• Asymmetric Visibility: Provides independent control over property read/write scope.
• Enhanced DOM API: Adds new classes for HTML5 parsing.
• New Array Functions: Introduces array_find(), array_find_key(), array_any(), and array_all().
• PDO Driver Subclasses: PDO now includes driver-specific subclasses.
• Updated JIT: Includes a new implementation of the Just-In-Time compiler.
• Expanded String Functions: New mb_trim(), mb_ltrim(), mb_rtrim(), mb_ucfirst(), and mb_lcfirst() functions.

See the PHP 8.4 release announcement from php.net for full details.

How to upgrade

To upgrade your site, set the following in your pantheon.yml file:

Note: PHP 8.4 is only available with the new PHP Runtime Generation 2. Upgrading to PHP 8.4 will automatically upgrade the environment to the second generation PHP Runtime.

The latest update to the Pantheon Advanced Page Cache Drupal module focuses on improving the functionality of the surrogate key header limit in your local development environment.

Key Update

Surrogate Key Header Limit Adjustment: To prevent oversized response headers and enhance the ease of work in your local environment, developers now have the ability to override the surrogate key header limit.

By default, the limit is set to 25,000 bytes. It can be adjusted by adding the following line to your site's settings.php file:

Please note that the maximum value for this setting is capped at 25,000 bytes. Adjust the value as needed to suit your local development requirements.

Editorial notes:

• The start date of the PHP Runtime Generation 2 rollout has been moved from August 15 to September 24, 2025.

Starting September 17, 2025, Pantheon will begin rolling out PHP Runtime Generation 2 to all sites on the platform. The new PHP Runtime enforces the use of TLS 1.2 or 1.3 for external connections. This change is part of our ongoing efforts to enhance security and comply with modern best practices.

What is TLS?

Transport Layer Security (TLS) is the cryptographic protocol that secures connections between systems — for example, when your website connects to a third-party API. TLS 1.0 and 1.1 were introduced in 1999 and 2006, respectively, and are now considered deprecated due to known vulnerabilities and lack of support for modern encryption standards.

TLS 1.2 was released in 2008 and remains the industry standard, with widespread adoption across browsers and APIs. TLS 1.3, released in 2018, offers additional performance and security benefits.

Action Required

Sites using external services that still rely on TLS 1.0 or 1.1 will experience failed connections once PHP Runtime Generation 2 is enabled. We strongly recommend auditing your site’s outgoing connections to ensure compatibility with TLS 1.2 or higher.

Follow our guide for testing TLS compatibility to check whether your site is making external requests using outdated TLS versions. Our DevRel team has created a WordPress plugin and Drupal module that can help expedite your testing.

Need More Time?

If you discover that your site relies on services that do not yet support TLS 1.2 or higher and need more time to upgrade, you can opt out of Generation 2 temporarily while you update those dependencies. Opting out will be available until early 2026.

PHP versions 8.1.33, 8.2.29, and 8.3.23 are now available on the platform. These updates brings the latest bug fixes and enhancements, improving performance and security for your sites. Updates will be applied automatically over the next few days, so no manual action is required.

Important PHP version information

• PHP 8.1 and 8.2 are currently receiving security-only updates.
• For more details, see the full list of PHP supported versions.

For the best performance and security, Pantheon recommends running PHP 8.2 and above.

The 1.33.0 update is now available for the WordPress (composer managed) upstream. This update fixes two bugs and alters the way REST API permalinks are handled on newly-created sites.

Bug fixes

• Fixes a bug where a script was added to the composer.json file that did not exist due to a typo in the script name. This caused a failure when running composer install or composer update. (For more information see #183.)
• Fixes an issue where REST API URLs were broken before "pretty permalinks" were enabled. This was due to URL rewriting fixes for the Bedrock-based WordPress architecture (using the /wp/ directory). The fix ensures that "pretty permalinks" are natively supported even before explicitly enabled, while also still supporting "plain" REST API URLs. (For more information see #186.)

For more details, refer to the WordPress (Composer Managed) changelog.

Action required

To benefit from these updates and ensure your site is using the most current version, apply the update to your WordPress (composer managed) site or custom upstream.

Troubleshooting

If you notice an error when running composer install or composer update, please check your composer.json file for the maybe-add-symlinks script and rename it to maybe-create-symlinks.

We have updated the version of WP-CLI on the Pantheon platform to v2.12.0. Sites will automatically update to this version over the next 48 hours.

WP-CLI is easily accessible for any WordPress site on Pantheon through our CLI, Terminus, allowing you to manage your WordPress installations efficiently with powerful commands at your fingertips.

Highlights

• Post lists can now handle complex query flags: When using post list, you can now use JSON notation to provide complex query arguments to the --tax_query, --meta_query and --post_date fields.
• Post meta can be forced to only return a single value: The post meta get command now has a --single flag defaulting to true which can be negated with --no-single. This flag tells WordPress whether to only return a single value or all existing values for a given key.
• Exclude files on core checksum verification: When running a core checksum verification, you can exclude one or more files from the checksum verification with the new --exclude=<files> flag.
• Respect requires and requires_php tags for plugins and themes: The plugin and theme commands now understand and respect the requires and requires_php header tags when trying to install or update extensions. A new state unavailable has been introduced to denote the updates that are newer than your current installation but for which your site does not fulfill the requirements.
• PHP 8.4 Compatibility: WP-CLI is now fully compatible with PHP 8.4. Pantheon is actively working to add PHP 8.4 support on the platform.
• Bug Fixes: WP-CLI 2.12.0 includes numerous bug fixes, with over 382 pull requests merged, addressing both minor and significant issues.

Two fixes related to wp-config.php in this release are specifically driven by needs of the Pantheon platform. wp config has (to check the existence of a variable or constant in wp-config) previously failed in read-only filesystems like Pantheon's test and live environments. PHP warnings or notices in wp-config.php also no longer surface twice when running wp config commands.

Pantheon Senior Software Engineer Phil Tyler contributed to this latest WP-CLI release.

For a deeper dive into all the changes, we encourage you to explore the detailed WP-CLI changelog.

We have released version 0.6.1 of the 'Push to Pantheon' GitHub Action. This version updates the version of the Terminus GitHub Action dependency, updates documentation in the README, and updates the default git user and email for build asset commits to match existing standards (Pantheon Automation). This is also the first version available in the GitHub Action Marketplace.

For more details, please refer to the 0.6.1 release notes. To update to the latest version, modify your workflow file to use 0.6.1: