Pantheon release notes

A critical release has been published for the Drupal 7 platform upstream which updates the Pantheon Apache Solr module to version 7.x-1.1.

This update adjusts the connection between the Drupal 7 and Pantheon's Solr service. This change is required as part of platform security improvements that will affect a site's ability to access the Solr service.

Action Required: Customers using Solr with Drupal 7 sites should update their sites to the latest version of the upstream as soon as possible. Customers with custom upstreams will need to update their upstreams to include the last changes in the platform upstream.

Starting June 17, 2025, Pantheon will require the updated Pantheon Apache Solr module (provided in the Pantheon Drupal 7 upstream) for Drupal 7 sites to access Solr services. Sites running on older versions of the Drupal 7 upstream (with pantheon_apachesolr version 7.x-1.0 or below) will no longer be able to access Pantheon's Solr services.

PHP version 8.3.21 is now available on the platform. This update bring the latest bug fixes and enhancements, improving performance and security for your sites. Updates will be applied automatically over the next few days, so no manual action is required.

Important PHP version information

• PHP 8.1 and 8.2 are currently receiving security-only updates.
• For more details, see the full list of PHP supported versions.

For the best performance and security, Pantheon recommends running PHP 8.2 and above.

We've added a new Traffic column to the site list of workspaces, enabling clearer visibility into traffic usage across all sites. This data resets at the end of your billing period. The metric visualized in this context is Site Visits.

Key Benefits

• Transparent Usage Insights: See exactly how much traffic each site is using in relation to its plan.
• Simplified Billing Reconciliation: Eliminate guesswork when matching traffic usage across multiple sites.
• Portfolio-Level Clarity: For teams managing many sites, this view offers a clean roll-up and drill-down experience that makes it easier to manage resources.

For more details on how to measure site traffic, see related documentation.

Editorial note: Automated overages are still currently paused for all users. This change is to help you better monitor site traffic.

Terminus 4.0.0 is now available. This release:

1. adds support for PHP 8.4,
2. removes support for PHP versions 8.1 and below,
3. improves interactive mode by prompting users for any missing required command parameters.

Terminus 4 is compatible with PHP 8.2 and 8.3 (see Supported Terminus and PHP versions). The PHP version refers to the local machine on which Terminus itself runs (e.g. developers' own computers or containers for continuous integration). This is distinct from PHP versions that run websites on Pantheon's infrastructure, which still include support for PHP 7.x.

For more information about this release, visit the GitHub release page.

How to upgrade to Terminus 4.x

If you use Homebrew (macOS-only) to manage your Terminus installation, you should upgrade using:

If you installed Terminus directly from the .phar file, you should upgrade using self:update command:

You can find more details about Terminus 4 in our documentation.

If you have questions or concerns around Terminus 4, please use the Terminus issue queue.

The New Relic PHP agent has been updated to the latest version, v11.8.0.22, for all eligible versions of PHP. Support for PHP 7.0 and 7.1 was removed in version 11.0, so the New Relic PHP agent for those versions remains at v10.22.0.12.

This update brings several enhancements and fixes compared to the previous version, including some fixes for Drupal errors and exception handling that may now surface some errors that previously were going unreported.

For a detailed list of all changes and improvements, see the complete New Relic PHP agent changelog.

Learn how New Relic's real-time performance monitoring can help you with metrics and reports on your Pantheon web applications.

Editorial note: As of May 8, 2025, this release note has been edited to no longer specify "newly created" sandbox sites - as this change now applies to all sandbox sites regardless of when the site was created.

Beginning May 6, 2025, sandbox sites will show an interstitial page when a visitor loads a page for the first time.

After clicking through this page, a cookie is set in the browser to prevent the interstitial page from showing again for the same visitor to the same environment for 24 hours.

This change is being made to discourage abuse of the sandbox sites for spam, phishing or other malicious purposes. It also clarifies for visitors that the site is not live, preventing potential confusion.

See related documentation to learn more about this change, including how to bypass the interstitial page for automated testing.

For questions or concerns, please reach out to Pantheon Support.

The latest version of WordPress, 6.8.1, is available on Pantheon as of April 30, 2025.

Action required

Upgrade to WordPress 6.8.1 right from your Pantheon dashboard or Terminus to access the latest features, fixes, and security enhancements. See related documentation for how to apply core updates.

Highlights

• 15 bugs throughout Core and the Block Editor.

For full details about WordPress 6.8.1, see the release notes

The Trust Center provides transparent access to Pantheon’s security controls, security policies, compliance certifications, and data privacy practices. These updates are part of our ongoing commitment to transparency and making it easier to access the information you need.

What’s included?

Publicly accessible information:

• Technical, security, and privacy FAQs.
• Descriptions of key security controls, covering areas like availability, change management, control environment, information and communication, logical access, system operations, risk assessment, and risk management.
• Table of contents for major security policies, including Access Control, Backups, Business Continuity Plan, Third Party Risk Management, and Overall Information Security.
• Voluntary Product Accessibility Template (VPAT) report.
• U.S. and U.K. Privacy Policies.
• Full list of Pantheon sub-processors.

Confidential documentation (available upon NDA completion):

• SOC 2 Type 2 report.
• TX-RAMP Level 1 certificate.
• Higher Education Community Vendor Assessment Toolkit (HECVAT) with responses.
• Full versions of key security and privacy policies.
• Most recent platform and network penetration testing results.
• Pantheon architecture diagram.

For more details, see the Trust Center.