{"company":{"name":"Pantheon","slug":"pantheon","website":"https://pantheon.io","category":"cloud-hosting"},"question":"What has Pantheon shipped recently?","answer":"In the last 30 days, Pantheon shipped 26 tracked updates. The most recent was \"WordPress (composer managed) upstream 1.34.0 update now available\" on 2026-10-02.","window":{"days":30,"updateCount":26,"returned":26},"generatedAt":"2026-10-03T21:11:32.748Z","updates":[{"title":"WordPress (composer managed) upstream 1.34.0 update now available","summary":"Pantheon released WordPress (composer managed) upstream 1.34.0, defaulting to PHP 8.3, syncing with Roots Bedrock, and fixing a PHP warning. The update changes Composer repository defaults, which may cause merge conflicts in composer.json files using wpackagist-plugin/* or wpackagist-theme/* packages.","date":"2026-10-02","dateIsEstimated":false,"signalType":"feature_update","signalTypeLabel":"Feature","sourceUrl":"https://docs.pantheon.io/release-notes/2026/10/wordpress-composer-managed-1-34-0","publisher":"docs.pantheon.io"},{"title":"New default PHP version 8.3 for WordPress upstreams","summary":"Pantheon changed the default PHP version for its WordPress and WordPress (composer managed) upstreams from 8.2 to 8.3. New sites automatically use PHP 8.3, while existing sites will upgrade unless explicitly pinned to 8.2 in their pantheon.yml. Users must test compatibility before applying the update.","date":"2026-10-02","dateIsEstimated":false,"signalType":"feature_update","signalTypeLabel":"Feature","sourceUrl":"https://docs.pantheon.io/release-notes/2026/10/php-83-default-wordpress-upstreams","publisher":"docs.pantheon.io"},{"title":"Site Edge Logs","summary":"Pantheon introduced Edge Logs, a self-service tool providing direct visibility into HTTP requests hitting sites at the edge via their Global CDN. Users can search recent traffic, filter by time windows, and drill into individual requests, but the feature is limited to the Live environment and only for sites migrated to the next-generation Global CDN. Data is retained for 24 hours with a 2-hour maximum query window.","date":"2026-10-01","dateIsEstimated":true,"signalType":"feature_update","signalTypeLabel":"Feature","sourceUrl":"https://docs.pantheon.io/guides/account-mgmt/edge-logs","publisher":"docs.pantheon.io"},{"title":"Introducing Edge Traffic Visibility","summary":"Pantheon introduced Edge Traffic Visibility in its dashboard, showing edge-level request activity such as cache statuses, ASNs, and response codes. The feature requires sites to be on Pantheon’s next-generation Global CDN; legacy CDN sites are excluded.","date":"2026-10-01","dateIsEstimated":false,"signalType":"feature_update","signalTypeLabel":"Feature","sourceUrl":"https://docs.pantheon.io/release-notes/2026/10/edge-logs","publisher":"docs.pantheon.io"},{"title":"Public Office Hours","summary":"Pantheon announced its weekly public office hours, held every Wednesday via Zoom, where users can ask questions to Developer Relations and other staff. The sessions are open to all and cover general platform usage, with occasional topic-focused weeks.","date":"2026-09-30","dateIsEstimated":false,"signalType":null,"signalTypeLabel":null,"sourceUrl":"https://pantheon.io/events/office-hours/public-office-hours-2026-9-30","publisher":"pantheon.io"},{"title":"Pantheon Advanced Edge Features","summary":"Pantheon’s Advanced Edge now lets workspace-level CDN changes be self-served via the dashboard, replacing support tickets. New features include IP, ASN, and Geo blocking rules, Enterprise WAF toggles, and Image Optimization, all scoped to entire workspaces. Each feature supports instant rollback and has defined entry limits.","date":"2026-09-30","dateIsEstimated":true,"signalType":"feature_update","signalTypeLabel":"Feature","sourceUrl":"https://docs.pantheon.io/guides/nextgen-gcdn/advanced-edge","publisher":"docs.pantheon.io"},{"title":"Machine tokens are now called personal access tokens, with a 90-day expiration","summary":"Pantheon is rebranding machine tokens as personal access tokens (PATs) and enforcing a 90-day automatic expiration for security. Existing machine tokens remain functional but are now considered legacy, with PATs recommended for new integrations. Users must renew PATs every 90 days and update stored secrets accordingly.","date":"2026-09-30","dateIsEstimated":false,"signalType":"feature_update","signalTypeLabel":"Feature","sourceUrl":"https://docs.pantheon.io/release-notes/2026/09/personal-access-tokens","publisher":"docs.pantheon.io"},{"title":"PHP 8.1 is now End of Sale","summary":"Pantheon declared PHP 8.1 End of Sale effective September 30, 2026, blocking new sites from selecting it. Existing PHP 8.1 sites retain LTS security coverage under Generation 2 with at least 90 days' notice before removal. Pantheon recommends upgrading to PHP 8.3 or 8.4 for production sites.","date":"2026-09-30","dateIsEstimated":false,"signalType":"product_sunset","signalTypeLabel":"Sunset","sourceUrl":"https://docs.pantheon.io/release-notes/2026/09/php-81-end-of-sale","publisher":"docs.pantheon.io"},{"title":"Next-generation Advanced Global CDN: Phase 1 migrations begin September 30","summary":"Pantheon is migrating its Advanced Global CDN (AGCDN) to a next-generation edge platform in phases, starting September 30, 2026. Phase 1 customers will gain self-service edge controls in the Pantheon Dashboard, with migrations managed by Pantheon Professional Services.","date":"2026-09-30","dateIsEstimated":false,"signalType":null,"signalTypeLabel":null,"sourceUrl":"https://docs.pantheon.io/release-notes/2026/09/nextgen-agcdn-migrations","publisher":"docs.pantheon.io"},{"title":"Upgrade to Next-generation GCDN with bot protection","summary":"Pantheon is rolling out a next-generation Global CDN (GCDN) with bot protection, replacing the Advanced Global CDN (AGCDN) in waves. Sites must migrate DNS from CNAME-based platform hostnames to A/AAAA records before upgrading, or risk interruptions. Cloudflare users can use Orange-to-Orange (O2O) configuration via a Terminus plugin, while third-party CDNs must align TLS SNI with HTTP Host headers to avoid 403 errors.","date":"2026-09-30","dateIsEstimated":true,"signalType":"feature_update","signalTypeLabel":"Feature","sourceUrl":"https://docs.pantheon.io/guides/nextgen-gcdn/setup","publisher":"docs.pantheon.io"},{"title":"Win a pair of Bose Headphones","summary":"Pantheon is running a giveaway for Bose wireless noise-cancelling headphones at its booth on September 30, with the winner announced at 4:30 p.m. The event is part of Pantheon's community engagement efforts.","date":"2026-09-30","dateIsEstimated":false,"signalType":null,"signalTypeLabel":null,"sourceUrl":"https://pantheon.io/events/community/win-pair-bose-headphones","publisher":"pantheon.io"},{"title":"Pantheon Content Publisher 1.4.1 for WordPress now available","summary":"Pantheon released version 1.4.1 of its WordPress Content Publisher plugin, enhancing how Smart Components are placed in posts and pages, including preview functionality. Users can update via the WordPress dashboard or download from the WordPress Plugin Repository.","date":"2026-09-29","dateIsEstimated":false,"signalType":null,"signalTypeLabel":null,"sourceUrl":"https://docs.pantheon.io/release-notes/2026/09/content-publisher-wordpress-release-1-4-1","publisher":"docs.pantheon.io"},{"title":"PHP 7.4 entering End-of-Sale December 31, 2026","summary":"Pantheon will stop allowing new site creation with PHP 7.4 after December 31, 2026, though existing sites will continue receiving security patches during the End of Sale period. Customers are urged to upgrade to PHP 8.3 or 8.4 to avoid future risks.","date":"2026-09-29","dateIsEstimated":false,"signalType":"product_sunset","signalTypeLabel":"Sunset","sourceUrl":"https://docs.pantheon.io/release-notes/2026/09/php-74-end-of-sale","publisher":"docs.pantheon.io"},{"title":"PHP 8.2, 8.3, 8.4 and 8.5 updated to their latest security patch releases","summary":"Pantheon rolled out PHP 8.2.34, 8.3.35, 8.4.26, and 8.5.11 with critical security patches (e.g., CVE-2026-91765 in SOAP) and stability improvements. Updates deploy automatically over the next few days; no manual action is required.","date":"2026-09-25","dateIsEstimated":false,"signalType":"feature_update","signalTypeLabel":"Feature","sourceUrl":"https://docs.pantheon.io/release-notes/2026/09/php-82-83-84-85-security-updates","publisher":"docs.pantheon.io"},{"title":"Action required","summary":"September 3, 2026 Version 0.9.4 of the 'Push to Pantheon' GitHub Action is now available. This release fixes a command injection issue in the git_commit_message parameter, adds branch-based Multidev naming, and lets you name the GitHub deployment environment separately for each site. Action required Versions 0.9.0 through 0.9.3 interpolated the git_commit_message value into a shell string and evaluated it, so shell metacharacters in the message ran as commands rather than being passed ","date":"2026-09-25","dateIsEstimated":true,"signalType":null,"signalTypeLabel":null,"sourceUrl":"https://github.com/pantheon-systems/push-to-pantheon/releases/tag/0.9.4","publisher":"github.com"},{"title":"September Platform Tour: See Next.js on Pantheon in Action with Cellar Door","summary":"Pantheon announced a September webinar demonstrating how Cellar Door built a Next.js site on their platform, featuring a live demo and customer experience from setup to production. The event targets both existing and prospective Pantheon users evaluating Next.js workflows.","date":"2026-09-23","dateIsEstimated":false,"signalType":null,"signalTypeLabel":null,"sourceUrl":"https://pantheon.io/events/webinar/september-platform-tour-see-nextjs-pantheon-action-cellar-door","publisher":"pantheon.io"},{"title":"WordPress 7.1.2 Security Release now available","summary":"Pantheon now supports WordPress 7.1.2, a critical security release addressing CVE-2026-87902, which could enable unauthenticated remote code execution under specific conditions. Pantheon has deployed platform-wide mitigations but urges customers to update their sites immediately via dashboard or Terminus.","date":"2026-09-22","dateIsEstimated":false,"signalType":"feature_update","signalTypeLabel":"Feature","sourceUrl":"https://docs.pantheon.io/release-notes/2026/09/wordpress-7-1-2","publisher":"docs.pantheon.io"},{"title":"Brown-Forman: A Fortune 1000 Spirits Giant Rebuilds Its Digital Foundation","summary":"Brown-Forman migrated its portfolio of brand websites (including Jack Daniel's and Woodford Reserve) from self-managed hosting to Pantheon's platform, consolidating WordPress, Drupal, and Next.js sites. The move improved scalability for high-traffic events like the Kentucky Derby and enabled modern builds like JackDaniels.com on Next.js.","date":"2026-09-19","dateIsEstimated":true,"signalType":"case_study","signalTypeLabel":"Case Study","sourceUrl":"https://pantheon.io/resources/case-studies/brown-forman","publisher":"pantheon.io"},{"title":"Pantheon Content Publisher 1.4.0 for Wordpress now available","summary":"Pantheon released Content Publisher 1.4.0 for WordPress, introducing smart components that enable direct embedding of videos and interactive elements into posts via an updated Google Docs add-on. Users can update via the WordPress dashboard or download from the WordPress Plugin Repository.","date":"2026-09-18","dateIsEstimated":false,"signalType":"feature_update","signalTypeLabel":"Feature","sourceUrl":"https://docs.pantheon.io/release-notes/2026/09/content-publisher-wordpress-release-1-4-0","publisher":"docs.pantheon.io"},{"title":"WordPress 7.1.1 Security Release now available","summary":"Pantheon released WordPress 7.1.1 to address 11 security vulnerabilities, including an unauthenticated stored XSS flaw (CVE-2026-93485). Pantheon pre-deployed virtual patching mitigations but urges customers to update sites immediately via dashboard or Terminus.","date":"2026-09-18","dateIsEstimated":false,"signalType":"security_incident","signalTypeLabel":"Security","sourceUrl":"https://docs.pantheon.io/release-notes/2026/09/wordpress-7-1-1","publisher":"docs.pantheon.io"},{"title":"Pantheon Introduces New Agentic Fleet Management for Operating the Web at AI Speed","summary":"Pantheon introduced Agentic Fleet Management, enabling organizations to observe, operate, and remediate web fleets through a unified interface while maintaining governance and control. The feature allows AI agents to handle tasks across distributed web presences without sacrificing oversight.","date":"2026-09-10","dateIsEstimated":false,"signalType":null,"signalTypeLabel":null,"sourceUrl":"https://pantheon.io/press-releases/pantheon-introduces-new-agentic-fleet-management-operating-web-ai-speed","publisher":"pantheon.io"},{"title":"Self-service bot bypass tokens for Next Generation GCDN","summary":"Pantheon introduced self-service bot bypass tokens for its Next Generation GCDN, allowing sites to exempt trusted automation from bot protection challenges. Users can generate tokens via Terminus and include them in the x-pantheon-bot-bypass header to skip automated traffic challenges while retaining other protections.","date":"2026-09-10","dateIsEstimated":false,"signalType":"feature_update","signalTypeLabel":"Feature","sourceUrl":"https://docs.pantheon.io/release-notes/2026/09/gcdn-bot-bypass-token","publisher":"docs.pantheon.io"},{"title":"New sites now provision on the next-generation Global CDN by default","summary":"Pantheon will provision new sites on its next-generation Global CDN (powered by Cloudflare) starting September 10, 2026, replacing the legacy CDN. Existing sites remain unaffected, and migration is optional via standard paths.","date":"2026-09-10","dateIsEstimated":false,"signalType":"feature_update","signalTypeLabel":"Feature","sourceUrl":"https://docs.pantheon.io/release-notes/2026/09/new-sites-next-gen-gcdn-default","publisher":"docs.pantheon.io"},{"title":"Public Office Hours","summary":"Pantheon announced its weekly public office hours, held every Wednesday via Zoom, where users can ask questions to Developer Relations and other staff. The sessions are open to all and cover general platform usage, with occasional topic-focused weeks.","date":"2026-09-09","dateIsEstimated":false,"signalType":null,"signalTypeLabel":null,"sourceUrl":"https://pantheon.io/events/office-hours/public-office-hours-2026-9-9","publisher":"pantheon.io"},{"title":"HTTP-01 certificate validation now available in the GCDN Terminus plugin","summary":"Pantheon’s GCDN Terminus plugin now supports HTTP-01 certificate validation as an alternative to DNS-01 (TXT record) validation for domain verification on its next-generation Global CDN. This change allows users to avoid adding a second TXT record, though certificates cannot be pre-provisioned, risking brief downtime during cutover.","date":"2026-09-09","dateIsEstimated":false,"signalType":"feature_update","signalTypeLabel":"Feature","sourceUrl":"https://docs.pantheon.io/release-notes/2026/08/gcdn-terminus-plugin-http-validation","publisher":"docs.pantheon.io"},{"title":"Pantheon's GitHub Actions","summary":"Pantheon introduced two GitHub Actions: 'Push to Pantheon' for automated Multidev environment creation and Dev deployments, and 'Install Terminus' for workflows requiring Terminus. The Push action handles PR-triggered Multidev environments and main-branch deployments, while the Terminus action caches the executable and authenticated sessions for efficiency.","date":"2026-09-03","dateIsEstimated":true,"signalType":"integration","signalTypeLabel":"Integration","sourceUrl":"https://docs.pantheon.io/github-actions","publisher":"docs.pantheon.io"}],"attribution":{"source":"Spyingbee","url":"https://spyingbee.com/updates/pantheon","citation":"Spyingbee, \"Pantheon updates\", https://spyingbee.com/updates/pantheon (retrieved 2026-10-03)"}}