Pantheon release notes

The latest versions of PHP 8.x are now available on the Pantheon platform. PHP 8.1.27, 8.2.16, and 8.3.3 are all bug fix releases. No action is required on your part if you are using one of these PHP versions (8.1, 8.2 or 8.3).

We're thrilled to announce the availability of WP-CLI v2.10.0 on the Pantheon platform.

WP-CLI is easily accessible for any WordPress site on Pantheon through our CLI, Terminus. Manage your WordPress installations efficiently with the power of WP-CLI at your fingertips.

Highlights

• New i18n "make-php" command: This new command lets site owners take advantage of WordPress Core's "Performant Translations" project even before it is released with WordPress Core.
• Adds minor and patch limitations to theme updates: Now, like plugins, themes can be updated only to their latest minor or patch releases
• Bug fixes: WP-CLI 2.10.0 fixes "a lot of small and not so small bugs" with more than 200 pull requests merged.

For those who love diving into the details, we encourage you to explore the detailed WP-CLI changelog.

The latest version of WordPress, 6.4.3, became available on Pantheon as of January 30, 2024.

Highlights

• Security updates: Addressed two security vulnerabilities, including a PHP file upload bypass (limited to administrators), and a object injection mechanism that could be used to exploit an existing Remote Code Execution (RCE) vulnerability. Since this release fixes security vulnerabilities, users are urged to upgrade their sites immediately. For a detailed analysis of the two security patches, see this article from Patchstack.
• 5 bug fixes in Core
• 16 bug fixes in the Block Editor

Upgrade to WordPress 6.4.3 right from your Pantheon dashboard or Terminus for added security.

As we embark on a new year, we're excited to unveil a transformation. This January marks the introduction of Pantheon release notes, a rebranding of our changelog. Our aim is to elevate your platform experience by providing even more valuable insights into product updates.

What's new?

• Enhanced visibility: Discover our improved interface with added tags to each release note, indicating their category and whether action is required. This feature ensures quick insights at a glance, making your navigation smoother.
• Filter functionality: Explore the convenience of our newly integrated filter functionality, allowing you to tailor your release note view based on specific tags. This feature ensures you get information that's most relevant to you.

What’s coming up?

Get ready for a streamlined and more dynamic experience with Pantheon release notes. We're committed to keeping you in the loop every step of the way, ensuring you stay informed about the latest.

• Frequent updates: Say goodbye to waiting for a monthly summary. We're shifting from the monthly retrospective model to publishing a release note for each significant update, providing you with real-time information.
• Proactive communication: This change supports more proactive communication. Now, any noteworthy change will be marked here, complementing other channels like blog posts and emails.

What lies ahead?

This is just the beginning! Stay tuned for more enhancements down the road as we continue to refine and elevate your Pantheon experience.

We appreciate your continued support and look forward to a year filled with collaborative success.

We're thrilled to announce the availability of WP-CLI v2.9.0 on the Pantheon platform.

WP-CLI is easily accessible for any WordPress site on Pantheon through our CLI, Terminus. Manage your WordPress installations efficiently with the power of WP-CLI at your fingertips.

Highlights

• Enhanced PHP 8.2 support: This release is dedicated to refining support for PHP 8.2, the recommended version on Pantheon.
• Optimized compatibility with WordPress 6.4: We've worked to guarantee seamless compatibility, providing you with the best performance and features available.
• Introducing "wp config is-true" command: Our Pantheon engineers have introduced the new "wp config is-true" command. Specifically designed for shell scripting, this command improves WP-CLI functionality and is already integrated into some of our automation processes.
• Bug fixes: Although primarily a compact release, WP-CLI v2.9.0 brings a significant impact with crucial bug fixes to enhance usability.

For those who love diving into the details, we encourage you to explore the detailed WP-CLI changelog.

The latest version of WordPress, 6.4.2, became available on Pantheon as of December 6, 2023.

Highlights

• Security updates: Addressed a Remote Code Execution vulnerability. While not directly exploitable in Core, its potential severity was recognized, especially when combined with certain plugins, particularly in multisite installations.
• 7 bug fixes in Core: Resolved an issue causing inconsistencies in stylesheet and theme directories.

Upgrade to WordPress 6.4.2 right from your Pantheon dashboard or Terminus for added security.

Pantheon has seamlessly integrated the Drupal 7.99 release, packed with bug fixes and exciting feature enhancements.

Highlights

• Menu link enhancement: "Parent link" in new custom menu creation is now limited to the current menu, simplifying the process. Editing still allows access to links from other menus, enabling easy relocation.

• New Drupal 7 hook: Introduced a new “hook_field_schema_alter()”, providing additional flexibility for schema alterations.

• Security improvement for failed logins: Error messages after a failed login now include a password reset link without disclosing the username, enhancing security by preventing unintended disclosure to third-party services.

Elevate your Drupal 7 experience by applying these updates directly from your Pantheon dashboard. If you would like to delve into specifics of this release, please explore on drupal.org.

We're thrilled to announce an impactful upgrade to Pantheon's security infrastructure, reinforcing our commitment to safeguarding your websites. In response to the escalating sophistication of distributed denial-of-service (DDoS) attacks, we've implemented innovative solutions to fortify our defenses. Particularly, we've addressed a surge in Layer 7 attacks targeting content management systems, ensuring resilience even without our Advanced Global CDN's Web Application Firewall (WAF).

Key benefits:

• Advanced DDoS protection: Our engineers have proactively countered Layer 7 attacks, mitigating risks posed by inauthentic traffic targeting web content management systems.
• Rate limiting capabilities: We've introduced rate limiting capabilities within our Global CDN, curbing abusive traffic effectively. This ensures a stable online presence, even during large-scale attacks, preventing wider stability issues.

For more in-depth insights into the measures we've taken and the value they bring to your Pantheon experience, delve into the full blog post. Your website's security and stability are our top priorities, and this enhancement is another step in our ongoing commitment to delivering a robust WebOps platform.