Pantheon release notes

The latest version of WordPress, 6.9.4, is available on Pantheon as of today, March 11th, 2026.

This is a security release that addresses incomplete security fixes from the previous 6.9.2 and 6.9.3 releases. Three security vulnerabilities are fixed in this version:

• A PclZip path traversal issue
• An authorization bypass on the Notes feature
• An XXE (XML External Entity) vulnerability in the external getID3 library

Action required

Upgrade to WordPress 6.9.4 right from your Pantheon dashboard or Terminus to access the latest features, fixes, and security enhancements. See related documentation for how to apply core updates.

The latest version of WordPress, 6.9.3, is available on Pantheon as of yesterday, March 10th, 2026.

This version is an immediate follow up with fixes for bugs introduced in 6.9.2, which is a security release.

Action required

Upgrade to WordPress 6.9.3 right from your Pantheon dashboard or Terminus to access the latest features, fixes, and security enhancements. See related documentation for how to apply core updates.

Pantheon has released version 2.3.1 of the WP SAML Auth WordPress plugin. This update adds a new filter for multisite environments to give developers more control over how SAML-provisioned users are added to sites. No action is required — existing behavior is unchanged.

What's new

• Multisite user provisioning control — A new wp_saml_auth_auto_add_to_blog filter allows developers to prevent auto-provisioned SAML users from being automatically added to the current site. When set to false, users are created as network-level users without a role on any specific site, giving full control over site membership. The filter defaults to true, preserving existing behavior. See #465 for details.

Update to 2.3.1 from the WordPress dashboard under Plugins > Installed Plugins, or download it from the WordPress Plugin Repository.

For more details, see the plugin changelog.

Version 1.3.5 of the Pantheon Content Publisher WordPress plugin is now available.

What's new?

• ACF integration — Sync Content Publisher metadata fields to Advanced Custom Fields. Define field mappings per post type in the plugin's Integration tab and metadata values are automatically applied on every publish.
• Custom post type support — Publish content to any public post type registered on your WordPress site. Administrators can set the target post type per collection, or select "Chosen by the author" to let document authors control it via the wp-post-type metadata field.

Update to 1.3.5 from the WordPress dashboard under Plugins > Installed Plugins, or download it from the WordPress Plugin Repository.

For more details, see the plugin changelog.

The latest version of WordPress, 6.9.1, is available on Pantheon as of February 4, 2026.

Action required

Upgrade to WordPress 6.9.1 right from your Pantheon dashboard or Terminus to access the latest features, fixes, and security enhancements. See related documentation for how to apply core updates.

Highlights

• This minor release includes fixes for 49 bugs throughout Core and the Block Editor, addressing issues affecting multiple areas of WordPress including the block editor, mail, and classic themes. For a full list of bug fixes, please refer to the release candidate announcement.

WordPress 6.9.1 is a short-cycle maintenance release. The next major version of WordPress will be 7.0; it is scheduled for release on 9 April 2026 at WordCamp Asia.

For full details about WordPress 6.9.1, see the official release announcement.

We are pleased to announce that all of our actively maintained WordPress plugins are now confirmed fully compatible with WordPress 6.9.

Actively Maintained Plugins

The following plugins have been tested and verified for compatibility:

• WP SAML Auth
• Pantheon Advanced Page Cache
• Pantheon HUD
• Native PHP Sessions
• Pantheon Content Publisher
• WP Redis

Action Required

We recommend updating your Pantheon plugins to their latest versions alongside your WordPress 6.9 core upgrade. This ensures you receive the latest performance optimizations, security patches, and full compatibility with PHP 8.4.

As a best practice, always test these updates in a Dev or Multidev environment before deploying to Live.

Pantheon has released a new version of our WP SAML Auth WordPress plugin. This update focuses on modernizing PHP support and providing developers with more granular control over SAML configurations.

What's New

• PHP 8.4 Compatibility: Full support for PHP 8.4 has been added.
• Updated PHP Requirements: The minimum supported PHP version has been increased to 7.4 to ensure better security and performance.
• WordPress 6.9 Compatibility: Confirmed compatibility with WordPress 6.9.
• Enhanced Configuration: Added the wp_saml_auth_internal_config filter, allowing developers to customize the OneLogin SAML configuration.
• SimpleSAMLphp 2.x Support: Improved auto-detection for SimpleSAMLphp 2.x and optimized autoloader discovery to skip redundant processes when the SimpleSAML\Auth\Simple class is already loaded.

Bug Fixes

Settings Page Warnings: Fixed a warning message on the plugin's settings page that appeared for users not utilizing SimpleSAML.

Important: Compatibility & Testing

While this update improves autoloader discovery, it changes how the plugin interacts with the local environment. We strongly recommend testing in a lower environment before upgrading especially if you use:

• Non-Standard Installations: Custom SimpleSAMLphp installations located in non-standard directories.
• Manual Autoloaders: Custom autoloader code that manually handles the loading of SimpleSAMLphp.

Action required

We encourage you to upgrade to the latest version of WP SAML Auth as soon as possible to take advantage of the latest features and compatibility updates. updating to get the latest features and compatibility updates.

If you have questions or concerns, please open issues in the queue for the plugin.

The latest version of WordPress, 6.9, is available on Pantheon as of December 02, 2025.

Action required

Upgrade to WordPress 6.9 right from your Pantheon dashboard or Terminus to access the latest features, fixes, and security enhancements. See related documentation for how to apply core updates.

For full details about WordPress 6.9, see the release notes