Pantheon release notes

Editorial note: As of May 8, 2025, this release note has been edited to no longer specify "newly created" sandbox sites - as this change now applies to all sandbox sites regardless of when the site was created.

Beginning May 6, 2025, sandbox sites will show an interstitial page when a visitor loads a page for the first time.

After clicking through this page, a cookie is set in the browser to prevent the interstitial page from showing again for the same visitor to the same environment for 24 hours.

This change is being made to discourage abuse of the sandbox sites for spam, phishing or other malicious purposes. It also clarifies for visitors that the site is not live, preventing potential confusion.

See related documentation to learn more about this change, including how to bypass the interstitial page for automated testing.

For questions or concerns, please reach out to Pantheon Support.

The latest version of WordPress, 6.8.1, is available on Pantheon as of April 30, 2025.

Action required

Upgrade to WordPress 6.8.1 right from your Pantheon dashboard or Terminus to access the latest features, fixes, and security enhancements. See related documentation for how to apply core updates.

Highlights

• 15 bugs throughout Core and the Block Editor.

For full details about WordPress 6.8.1, see the release notes

The Trust Center provides transparent access to Pantheon’s security controls, security policies, compliance certifications, and data privacy practices. These updates are part of our ongoing commitment to transparency and making it easier to access the information you need.

What’s included?

Publicly accessible information:

• Technical, security, and privacy FAQs.
• Descriptions of key security controls, covering areas like availability, change management, control environment, information and communication, logical access, system operations, risk assessment, and risk management.
• Table of contents for major security policies, including Access Control, Backups, Business Continuity Plan, Third Party Risk Management, and Overall Information Security.
• Voluntary Product Accessibility Template (VPAT) report.
• U.S. and U.K. Privacy Policies.
• Full list of Pantheon sub-processors.

Confidential documentation (available upon NDA completion):

• SOC 2 Type 2 report.
• TX-RAMP Level 1 certificate.
• Higher Education Community Vendor Assessment Toolkit (HECVAT) with responses.
• Full versions of key security and privacy policies.
• Most recent platform and network penetration testing results.
• Pantheon architecture diagram.

For more details, see the Trust Center.

Today we are releasing v1.0 of Pantheon Content Publisher's Drupal module - a new contrib module for Drupal sites. This new module replaces the previous module that was used by earlier participants of the private beta program.

What's new?

This release marks a complete redesign of the Drupal integration for Content Publisher, and offers new functionality:

• Manages content as standard Drupal entities, rather than relying on Drupal Views for rendering.
• Metadata fields are now converted into standard Drupal configured fields.
• Search API support has been added, allowing Content Publisher content to be searched by Drupal with blended results alongside other Drupal content.
• Smart Components from Google Docs get represented as fieldable Drupal entities.
• Increased reliability for real-time previews.
• Improved configuration panel.

Learn More

While this module is now available on Drupal.org, it still requires access to the private beta program in order to be leveraged.

• Request beta access
• Docs: Content Publisher for Drupal: Getting Started Guide
• Blog: Enhanced Drupal Integration for Content Publisher
• See the Content Publisher release notes for a more detailed history of changes

The latest version of WordPress, 6.8 (Cecil), is available on Pantheon as of April 15, 2025.

Action required

Upgrade to WordPress 6.8 right from your Pantheon dashboard or Terminus to access the latest features, fixes, and security enhancements. See related documentation for how to apply core updates.

Highlights

• Speculative loading, preloading pages for a faster user experience.
• Improved password security with bcrypt
• Improvements to the style book, editor, and more than 100 accessibility improvements
• ...and more

For full details about WordPress 6.8, see the release notes or the WordPress 6.8 Field Guide.

PHP version 8.3.20 is now available on the platform. This update bring the latest bug fixes and enhancements, improving performance and security for your sites. Updates will be applied automatically over the next few days, so no manual action is required.

Important PHP version information

• PHP 8.1 and 8.2 are currently receiving security-only updates.
• For more details, see the full list of PHP supported versions.

For the best performance and security, Pantheon recommends running PHP 8.2 and above.

Update: The Drush 5 / 7 removal was planned for May 13 previously. This date has been updated to June 3, 2025.

As part of our ongoing platform maintenance and security improvements, Drush versions 5 and 7 will no longer be available on Pantheon starting June 3, 2025. After this date, sites using these versions will automatically be upgraded to Drush 8.

Drush 5 reached end-of-life (EOL) in May 2015 and Drush 7 in July 2017. EOL software does not receive security or feature updates, and could expose sites to attack if any vulnerabilities or exploits are discovered.

Find out which version of Drush your site is running.

Action Required

Sites using Drush 5 or 7 will need to upgrade to Drush 8 to maintain functionality and security:

1. Test your site with a newer version of Drush (8 or newer)
2. Update your site's Drush version
3. Review your deployment workflows and CI/CD pipelines to ensure compatibility with the new Drush version

On June 3, 2025, all sites using Drush 5 or 7 will be auto-upgraded to Drush 8.

New Relic is updating the IP ranges used for Synthetic Monitoring. Most Pantheon customers do not need to take action. However, if you have an allowlist set up for New Relic Synthetics traffic (in either Advanced Global CDN or another edge network provider), you may need to update your configurations before April 14, 2025, to ensure uninterrupted monitoring.

Who Needs to Take Action?

• If you do not explicitly allowlist New Relic Synthetics traffic by IP range, no changes are needed.
• If you do allowlist Synthetics traffic, you must update your allowlist with the new IP ranges before April 14, 2025, and remove the old IPs afterward to prevent failed connections.

What’s Changing?

New Relic is aligning its Synthetics monitoring IPs with standard data ingestion IP ranges. The new IP ranges that should be allowlisted before April 14, 2025, are:

• 152.38.128.0/19
• 212.32.0.0/20
• 64.251.192.0/20

After April 14, 2025, the old IP ranges will no longer be valid.

Next Steps

1. Check if you have an allowlist for New Relic Synthetics. If you don’t, you can ignore this change.
2. If you do allowlist Synthetics traffic, update your allowlist with the new IPs before April 14, 2025.
3. After April 14, 2025, remove the old IP ranges to avoid connectivity issues.

For any questions or assistance, refer to the documentation or reach out to New Relic support.