GitHub Enterprise Server 3.19 is now generally available

Published: (December 10, 2025 at 11:20 AM EST)
2 min read

Source: GitHub Changelog

Featured image

Improved repository creation experience

An improved and more intuitive flow for creating repositories is now available. The new form provides a modern interface for collecting repository metadata, enforcing custom properties, and applying repository policies at creation time. This helps ensure consistent repository configuration across your enterprise.
Read more about the improved repository creation experience.

Ruleset history, import, and export

Enterprise administrators can manage rules more efficiently with the general availability of ruleset history, import, and export. Ruleset history allows tracking and rolling back changes, while import and export simplify sharing and reusing rulesets, including those from GitHub’s ruleset‑recipes repository.
Documentation on managing rulesets.

Workflow security policies

Administrators can enforce policies to block specific actions and require SHA‑based pinning when workflows use actions from public repositories. These policies improve workflow security by ensuring only approved actions are used and referenced by immutable SHAs.
Blocking and SHA pinning actions.

GitHub App managers

You can now designate users as application managers of GitHub Apps owned by the enterprise. App managers can update application registration but cannot manage installations. The feature now leverages the roles platform, allowing organization teams to be assigned as app managers of individual organization‑owned apps, and a new organization app manager role can be assigned to teams and users, granting access to all apps owned by an organization.
GitHub App Managers documentation.

Metrics defaults

Starting with version 3.19, new installations of GHES have OpenTelemetry metrics enabled and Collectd metrics disabled by default. You can switch between the two if needed; upgraded instances retain their existing settings. In the next two to three releases, OpenTelemetry metrics will become the only supported metrics.
OpenTelemetry metrics guide.

SSH and TLS cipher configuration

You can now configure SSH and TLS ciphers for greater flexibility and control, including the ability to avoid weak ciphers. List the default ciphers and select which ones to use.
Configuring cipher suites and cryptographic algorithms.


To learn more about GHES 3.19, check out the release notes or download it now. If you encounter any issues upgrading or using these new features, please contact our support team.

Join the community discussion to share your feedback and ask questions.

Back to Blog

Related posts

Read more »