GitHub Enterprise Server 3.19 release candidate is now available

Source: GitHub Changelog

Improved Repository Creation

An improved and more intuitive flow for creating repositories is now available. The new form provides a modern interface for collecting repository metadata, enforcing custom properties, and applying repository policies at creation time. This helps ensure consistent repository configuration across your enterprise. For more information, read the improved repository creation experience.

Ruleset Management

Enterprise administrators can manage rules more efficiently with the general availability of ruleset history, import, and export. Ruleset history allows tracking and rolling back changes, while import and export simplify sharing and reusing rulesets, including GitHub’s ruleset‑recipes. For more information, see the documentation on managing rulesets.

Workflow Security Policies

Administrators can enforce policies to block specific actions and require SHA‑based pinning when workflows use actions from public repositories. These policies improve workflow security by ensuring only approved actions are used and referenced by immutable SHAs. Learn more at blocking and SHA pinning actions.

GitHub App Managers

You can now designate users as application managers of GitHub Apps owned by the enterprise. App managers can update application registration but cannot manage application installations. The feature now uses the roles platform, allowing organization teams to be assigned as app managers of individual organization‑owned apps, and a new organization app manager role can be assigned to teams and users, granting access to all apps owned by an organization. For details, see GitHub App Managers.

Metrics

Starting with version 3.19, new installations of GHES have OpenTelemetry metrics enabled and Collectd metrics disabled by default. You can switch between the two if needed, and upgraded instances retain their current settings. In the next two to three releases, OpenTelemetry metrics will become the only supported metrics. More information is available in the OpenTelemetry metrics documentation.

Cipher Configuration

You can now configure SSH and TLS ciphers for greater flexibility and control, including the ability to avoid weak ciphers. List the default ciphers and select which ones to use. See the guide on configuring cipher suites and cryptographic algorithms.

Release Candidate Information

Release candidates let you try the latest features early and provide feedback to ensure the release works in your environment. Learn about the release candidate process. To learn more about GHES 3.19, check the release notes or download the 3.19 release candidate. If you have any feedback or questions, please contact our support team.