Pantheon release notes

We’ve upgraded to PHP 5.6.35, 7.0.29, 7.1.16, and 7.2.4. See our documentation to learn how to upgrade your PHP version.

The Surrogate-Key-Raw header, used for debugging when using Pantheon Advanced Page Cache, is no longer sent by default. To receive this header when making a request, send the Pantheon-Debug: 1 header, like so:

This change addressed an issue that caused Twitter card validation to fail, and also reduces overall page size and speeds up page load time when sending many keys.

Drupal 8.5.1 has been pushed to all Drupal 8 site dashboards. This release is classified as a security release and all users are urged to upgrade their sites as soon as possible.

Drupal 7.58 has been pushed to all Drupal 7 site dashboards. This release is classified as a security release and all users are urged to upgrade their sites as soon as possible.

Drupal 6.40 has been pushed to all Drupal 7 site dashboards. This release is classified as a security release and all users are urged to upgrade their sites as soon as possible.

WordPress 4.9.4 has been pushed to all WordPress site dashboards.

PHP 5.6, 7.0, 7.1, and 7.2 have been updated to the latest versions platform-wide to address a vulnerability that could allow for arbitrary code execution.

On March 5th, the cost for legacy load balancers increased from $30/month to $60/month. To avoid increased charges, upgrade to the Global CDN, which includes free, automated HTTPS, by updating DNS records.

Drupal 8.4.5, a security release, has been pushed to all Drupal 8 site dashboards.

Drupal 7.57, a security release, has been pushed to all Drupal 7 site dashboards. This release is classified as a security release and all users are urged to upgrade their sites as soon as possible.

You can now automatically trigger Quicksilver scripts from the pantheon.upstream.yml file when you create new sites from a custom upstream.