Pantheon release notes

PHP 8.2.17 and 8.3.4 were released on the platform. They contain the latest bug fixes and security releases for PHP. As a reminder, PHP 8.0 reached End-of-Life on 26 November 2023. For the best performance and security, Pantheon recommends running PHP 8.1 and above.

Pantheon Advanced Page Cache v1.5.0 is now available on WordPress.org and GitHub. This release adds a new filter to make cache purges less aggressive and provide more flexibility for developers and the sites they maintain. You can learn about the filter in the plugin's README file which includes an example of how to use it.

Additionally, this update implements our recently updated WPUnit Helpers project to simplify PHP Unit tests as well as our recently developed Plugin Release Actions to automate steps in the release process.

You can read the full changelog in the GitHub release notes.

The latest version of Drupal 7, 7.100, became available on Pantheon as of March 8, 2024.

Highlights

• Announcements Module 7.100 includes the Annoucements module backported to Drupal 7. Please read the change record before updating if you do not want the module to be automatically enabled.
• PHP 8 Compatibility Bundled with Drupal 7's release is an update to Pantheon's Apache Solr module that fixes deprecation warnings with PHP 8.1+.
• Bug fixes and security hardening In addition to the Announcements module, the release includes a few bug fixes and feature improvements. No security fixes are included in this release. For full details, see the release notes on Drupal.org.

Upgrade your Drupal 7 site to Drupal 7.100 right from your Pantheon dashboard or Terminus.

WordPress 6.5 will add a new Font Library feature. The Font Library allows you to upload fonts from your computer or add any of the fonts available on Google's font library to your WordPress site. In anticipation of this, Pantheon has added a feature to our Pantheon MU Plugin to support the new Font Library feature. You can read more about the Font Library feature in our guide to using the Font Library on Pantheon.

We've recently modified the Pantheon wrapper around the WP-CLI executable to solve a number of interrelated issues that customers may have previously been experiencing and/or using workarounds to solve. We recommend reviewing your site's logs and resolve any PHP notices or warnings.

Problem

• Our WP-CLI wrapper included a hard-coded --url flag for all wp commands run on the platform (via Terminus, e.g. terminus remote:wp or terminus wp, or internal workflows that relied on WP-CLI like flushing cache or viewing the Status page in the dashboard).
• For WordPress Multisites, the hard-coded --url flag pointed to the Pantheon platform domain (*.pantheonsite.io) instead of the actual domain of the site resulting in errors and the command failing unless executed manually (via Terminus with the correct --url flag attached).

Solution

• We have implemented a solution that checks if a site is a WordPress Multisite. If so, we remove the hard-coded --url flag, allowing WP-CLI to operate normally.
• This change does not affect workflows that are properly passing the --url flag to WP-CLI commands via terminus (e.g. terminus wp <site>.<env> -- plugin list --url=<url>). Any WP-CLI flags passed after the -- in the terminus wp command will be passed through to and interpreted by WP-CLI.
• This change means that many sites that were previously unable to view their full Status page will now be able to do so, and flushing site cache via the button in the Pantheon dashboard on sites that previously were unable to or had errors in doing so should now work as expected. Any other workflows or processes that relied on WP-CLI will also benefit from this change.

Recommended action

The latest versions of PHP 8.x are now available on the Pantheon platform. PHP 8.1.27, 8.2.16, and 8.3.3 are all bug fix releases. No action is required on your part if you are using one of these PHP versions (8.1, 8.2 or 8.3).

We're thrilled to announce the availability of WP-CLI v2.10.0 on the Pantheon platform.

WP-CLI is easily accessible for any WordPress site on Pantheon through our CLI, Terminus. Manage your WordPress installations efficiently with the power of WP-CLI at your fingertips.

Highlights

• New i18n "make-php" command: This new command lets site owners take advantage of WordPress Core's "Performant Translations" project even before it is released with WordPress Core.
• Adds minor and patch limitations to theme updates: Now, like plugins, themes can be updated only to their latest minor or patch releases
• Bug fixes: WP-CLI 2.10.0 fixes "a lot of small and not so small bugs" with more than 200 pull requests merged.

For those who love diving into the details, we encourage you to explore the detailed WP-CLI changelog.

The latest version of WordPress, 6.4.3, became available on Pantheon as of January 30, 2024.

Highlights

• Security updates: Addressed two security vulnerabilities, including a PHP file upload bypass (limited to administrators), and a object injection mechanism that could be used to exploit an existing Remote Code Execution (RCE) vulnerability. Since this release fixes security vulnerabilities, users are urged to upgrade their sites immediately. For a detailed analysis of the two security patches, see this article from Patchstack.
• 5 bug fixes in Core
• 16 bug fixes in the Block Editor

Upgrade to WordPress 6.4.3 right from your Pantheon dashboard or Terminus for added security.