Skip to content

Archive EOL GHES 3.14, 3.15, and 3.16 from GHAS feature matrix#100

Draft
github-actions[bot] wants to merge 1 commit into
mainfrom
update-ghas-matrix-archive-3.14-3.15-3.16
Draft

Archive EOL GHES 3.14, 3.15, and 3.16 from GHAS feature matrix#100
github-actions[bot] wants to merge 1 commit into
mainfrom
update-ghas-matrix-archive-3.14-3.15-3.16

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

Summary

This PR archives three GHES versions that have passed their end-of-life deprecation dates from the active GHAS feature matrix.

Note: This supersedes the open draft PR #85, which only covered archiving GHES 3.14 and 3.15. This PR archives all three EOL versions and is based on the same main branch.


Archived Versions

Version Release Date Deprecation Date Status
GHES 3.14 2024-08-27 2026-04-09 ✅ Archived
GHES 3.15 2024-12-03 2026-04-09 ✅ Archived
GHES 3.16 2025-03-11 2026-06-02 ✅ Archived

All three versions have passed their deprecation dates as of today (2026-06-23).

Archive file created

🗄️ advanced-security/archive/GHAS-on-GHES-feature-matrix-2026.md

This new file contains a complete snapshot of all feature rows and status icons for GHES 3.14, 3.15, and 3.16, copied exactly from the active matrix before removal.


Active Matrix After This PR

The active matrix now covers GHES 3.17 through 3.21 (five supported versions):

Version Release Deprecation
3.17 2025-06-03 2026-08-25
3.18 2025-10-14 2026-10-14
3.19 2025-12-09 2026-12-09
3.20 2026-03-17 2027-03-17
3.21 2026-06-02 2027-06-02

Patch Versions Checked (No New Features)

Version Latest Patch Reviewed Significant GHAS Changes
3.18 3.18.10 Security fixes only
3.19 3.19.7 Security fixes only
3.20 3.20.3 Security fixes only
3.21 3.21.1 Security fix only — CVE-2026-9312 (SSRF)

Omissions (seen but excluded per significance filter)

  • GHES 3.21.1 (2026-06-18) — security fix only (CVE-2026-9312 pre-auth SSRF), no new GHAS features
  • 3.21 language version bumps — Java 26, .NET 10, C# 14, Kotlin 2.3.10, Go 1.26, Swift 6.2.2/6.2.3, C++26 — excluded (new language/framework version support, not new functionality)
  • 3.21 experimental py/prompt-injection CodeQL query — excluded as experimental/minor
  • 3.21 Dependabot monorepo grouped updates by dependency name — minor enhancement to existing grouped updates feature, not a new distinct feature row
  • 3.21 Enterprise governance/policy improvements for secret scanning (fine-grained permissions for assignees, custom pattern editing by enterprise owners/security managers) — covered by existing matrix rows (alert assignment, delegated bypass)

Release Notes References


Rendered Matrix

Preview the updated active matrix: https://github.com/advanced-security/advanced-security-material/blob/update-ghas-matrix-archive-3.14-3.15-3.16/GHAS-on-GHES-feature-matrix.md

Generated by AW: Update GHAS-on-GHES Feature Matrix · 176.8 AIC · ⌖ 16.9 AIC · ⊞ 7.4K ·

GHES 3.14 (deprecated 2026-04-09), GHES 3.15 (deprecated 2026-04-09),
and GHES 3.16 (deprecated 2026-06-02) have all passed their end-of-life
dates. This commit:

1. Creates advanced-security/archive/GHAS-on-GHES-feature-matrix-2026.md
   with a complete snapshot of all feature data for those three versions.

2. Removes the 3.14, 3.15, and 3.16 columns from every table in the
   active GHAS-on-GHES-feature-matrix.md.

3. Updates the End of life Archive section with a link to the new
   2026 archive file.

The active matrix now covers GHES 3.17 through 3.21 (five versions).

Supersedes open draft PR #85, which only archived 3.14 and 3.15.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants