Pantheon release notes

Effective October 22, 2025, the "Unprivileged" user role will be transitioned to a new "Contributor" role. Permissions will remain exactly the same, except that Contributors will have limited access to Workspaces in the Pantheon Dashboard. This update is to ensure that all Pantheon users have access to the modern dashboard experience.

No action is needed by Site Owners or Workspace Administrators.

Key changes

• The name will change from Unprivileged to Contributor
• Contributors will have limited access to Workspaces:

Users assigned this role will retain access solely to the sites for which they have been explicitly granted permission. They will not be authorized to modify Workspace configurations, access billing information, create custom upstreams, or perform other administrative functions. If these users are in multiple Workspaces, they will continue to have access to the Workspace Selector to change which Workspace they are currently working in.

Here's what you can expect a Contributor to see when accessing the Workspace:

The following user interface enhancements are now available for Content Publisher:

• Disconnecting a Google Workspace account is now self-serve, previously required contacting support
• Refreshing collection status can now be done manually in the Content Dashboard
• Publishing to Pantheon’s playground now supports personal Gmail accounts

We have also released several minor bug fixes, user interface enhancements, and formatting issues - which don’t affect functionality, but do improve the end user experience.

Editorial note: The date has been moved from January 19 to January 26.

Tika 1.18 and 1.21 will no longer be available starting January 26, 2026. Impacted sites must upgrade to Tika 3.2 which is available via PHP Runtime Generation 2.

The Apache Tika toolkit detects and extracts metadata and structured text content from various documents using existing parser libraries. On the Pantheon platform, our customers tend to use Tika to parse PDF content for searching with Solr.

Action Required

For most customers, we expect the upgrade to be seamless and not require any manual intervention. But if your site has a custom Tika integration, we recommend you follow our documentation for upgrading to Tika 3 as soon as possible to ensure your site continues to operate as expected.

Sites which have not upgraded to Tika 3 as of January 26, 2026, will be automatically upgraded. Setting tika_version: 1 in pantheon.yml will be ignored after that date. Symlinks from the 1.xx jar filepaths (/srv/bin/tika-app-1.xx.jar) will point to the new Tika 3 jar (/opt/pantheon/tika/tika.jar). These symlinks will be removed later in 2026.

Terminus 4.1.0 is now available. This minor update contains the latest bug fixes and improvements for this tool.

This release includes enhanced environment information visibility and improved error messaging.

Added

• PHP Runtime Generation and PHP Version fields are now optional fields of the env:list command output, providing better visibility into your environment's PHP configuration
  • Use env:list <site> --fields=id,php_runtime_generation,php_version to view these fields

Fixed

• Improved workflow timeout handling now displays warnings instead of confusing error messages when workflows take longer than expected

How to upgrade Terminus

If you manage your installation via Homebrew on macOS, you can update Terminus with the following command:

For other systems, see additional upgrade instructions here.

PHP versions 8.3.26 and 8.4.13, are now available on the platform. These updates bring the latest bug fixes, improving performance and security for your sites. Updates will be applied automatically over the next few days, so no manual action is required.

PHP 8.4 is only available with the new PHP Runtime Generation 2. To upgrade your site, set the following in your pantheon.yml file:

The PHP 8.4 upgrade process automatically includes an upgrade to PHP Runtime Generation 2.

Important PHP version information

• PHP 8.1 and 8.2 are currently receiving security-only updates.
• For more details, see the full list of PHP supported versions.

For the best performance and security, Pantheon recommends running PHP 8.2 and above.

Starting today, the session length for users logged into the Pantheon Dashboard has been reduced from 24 hours to 14 hours - regardless of session activity.

Key Changes

• Previously, Pantheon Dashboard sessions expired after 24 hours of inactivity.
• Previously, session lengths were inconsistent in some places of the Pantheon Dashboard leading to random logout and authentication requests.
• Reducing session lengths to 14 hours across the Pantheon Dashboard provides various security benefits and stronger protection for your accounts.

Terminus sessions are not impacted. See related documentation for more information.

As part of Pantheon's Long-Term Support (LTS) for Drupal 7, Drupal 7.105 is now available with a critical security patch.

In order to swiftly provide security coverage for a discovered vulnerability, both 7.104 and 7.105 have been included in a 7.105 tag for the drops-7 upstream.

• 7.104: This backports a prototype pollution fix in the BBQ JavaScript library used by several popular modules, including Views, Overlay and Module Filter. Of the usages inspected, only Overlay was found to be using BBQ in a vulnerable manner. If you cannot upgrade immediately, the issue can be mitigated by uninstalling Overlay module. If Overlay is not installed, then this update is not needed.

• 7.105: This adds support for PHP 8.4. If you do not run and/or do not plan to run your site on PHP 8.4, you do not need this update. Because of the many deprecation notices added to PHP 8.4, it is recommended that ini_set('error_reporting', E_ALL & ~E_DEPRECATED & ~E_USER_DEPRECATED) or some equivalent is added to the site's settings.php file.

Action required

Apply the latest upstream update to your Drupal 7 site to receive these updates. See related documentation for how to apply core updates.

About Drupal 7 Long-Term Support

Pantheon has partnered with Tag1 Consulting to deliver security updates and maintenance for Drupal 7 sites until at least January 5, 2027. This extended support is included at no additional cost.

For configuration guidance and detailed information, visit our related documentation.

The latest version of WordPress, 6.8.3, is available on Pantheon as of September 30, 2025.

Action required

Upgrade to WordPress 6.8.3 right from your Pantheon dashboard or Terminus to access the latest features, fixes, and security enhancements. See related documentation for how to apply core updates.

Highlights

• This is a security release - immediately update your websites
• Resolved security issues include a data exposure risk for authenticated users and an authenticated user role XSS vulnerability in navigation menus

For full details about WordPress 6.8.3, see the official release announcement.