Keep a Site Up to Date

Recommended Workflow

Recommended: Use Git

If you're comfortable with Git, we recommend that you keep your site in Git mode all the time and use it to keep your modules, plugins, and themes up to date. If you are not using Git, you will need to use SFTP or the Drupal or WordPress web interface to update non-core code.

Pantheon help page: Starting with Git

Alternative: SFTP workflow

...

Updating Drupal or WordPress Core

When a Drupal/WordPress core update is available, it will appear on your Pantheon dashboard in the development environment. At times there will be other code updates such as changes to Pantheon-supplied enhancements. If you installed starting with a distribution, you may also see distribution updates on the dashboard. See Recommended Workflow.

Pantheon help page:...

Keep Your Pantheon Site Up to Date

All Drupal and WordPress sites should have a designated technical contact to receive notifications of security and other code updates.

You or someone on your team will need to be able to apply code updates, test them, and push them to your live site using Pantheon's dashboard.

We recommend that notifications be sent to a departmental account or mailing list, instead of or in addition to a personal email address.

Updating Modules and Themes

When you receive notification that an update is available, you will need to apply security updates to the applicable modules and themes as soon as possible. See Recommended Workflow.

Pantheon help pages:

Starting with Git ...

Drupal Security Update Notifications

The site technical contact should subscribe to the Drupal security notifications list. You can receive notifications via email, RSS, and/or Twitter.

To receive email notifications: Create an account on drupal.org or log in to your existing account On your account page, click Edit, then click My Newsletters. Check the box labeled Security announcements and save your settings.

Security announcements for Drupal core and contributed modules and themes are sent weekly, or as necessary for highly critical updates.

For more...