@@ -156,8 +156,6 @@ You can create a subject that filters for specific tag. In this example, the wor
 * Syntax: `repo:ORG-NAME/REPO-NAME:ref:refs/tags/TAG-NAME`
 * Example: `repo:octo-org/octo-repo:ref:refs/tags/demo-tag`
 
-{% ifversion fpt or ghec or ghes > 3.18 %}
-
 ### Filtering for metadata containing `:`
 
 Any `:` within the metadata values will be replaced with `%3A` in the subject claim.
@@ -167,8 +165,6 @@ You can configure a subject that includes metadata containing colons. In this ex
 * Syntax: `repo:ORG-NAME/REPO-NAME:environment:ENVIRONMENT-NAME`
 * Example: `repo:octo-org/octo-repo:environment:Production%3AV1`
 
-{% endif %}
-
 ## Immutable subject claims
 
 The OpenID Connect (OIDC) specification requires subject (`sub`) claims to be locally unique and never reassigned. Previously, the default `sub` format used only organization and repository names. If a namespace was recycled, a different owner could create the same subject value.
 
@@ -190,8 +190,6 @@ Flag | Description
 `--error-checks-only` | Only run high severity checks that should be treated as blocking errors.
 `--warning-checks-only` | Only run low severity checks that can be treated as warnings.
 
-{% ifversion ghes > 3.18 %}
-
 ### ghe-crypto
 
 This utility is used to verify and list {% data variables.enterprise.management_console %} `github-ssl` crypto settings for TLS and SSH connections.
@@ -276,8 +274,6 @@ ghe-crypto check ssh-ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.co
 
 For more information about configuring cipher suites and cryptographic algorithms, see [AUTOTITLE](/admin/configuring-settings/hardening-security-for-your-enterprise/configuring-tls-and-ssh-ciphers).
 
-{% endif %}
-
 ### ghe-console
 
 This utility opens the GitHub Rails console on your {% data variables.product.prodname_enterprise %} appliance. {% data reusables.command_line.use_with_support_only %}
 
@@ -19,12 +19,8 @@ category:
 
 To accommodate the SSH clients in your environment, you can configure the types of connections that {% data variables.location.product_location %} will accept.
 
-{% ifversion ghes > 3.18 %}
-
 You can also configure the cryptographic algorithms (ciphers, MAC algorithms, key exchange algorithms, and signature types) that {% data variables.location.product_location %} uses for SSH connections. For more information, see [AUTOTITLE](/admin/configuring-settings/hardening-security-for-your-enterprise/configuring-tls-and-ssh-ciphers).
 
-{% endif %}
-
 ## Configuring SSH connections with RSA keys
 
 When users perform Git operations on {% data variables.location.product_location %} via SSH over port 22, the client can authenticate with an RSA key. The client may sign the attempt using the SHA-1 hash function. In this context, the SHA-1 hash function is no longer secure. For more information, see [SHA-1](https://en.wikipedia.org/wiki/SHA-1) on Wikipedia.
 
@@ -8,7 +8,7 @@ redirect_from:
   - /admin/configuration/configuring-network-settings/configuring-tls#configuring-cipher-suites-and-cryptographic-algorithms
   - /admin/configuration/hardening-security-for-your-enterprise/configuring-tls#configuring-cipher-suites-and-cryptographic-algorithms
 versions:
-  ghes: '>=3.19'
+  ghes: '*'
 contentType: how-tos
 category:
   - Secure and govern your enterprise
 
@@ -119,10 +119,6 @@ To resolve these errors, you must update the Subject Alternative Names (SANs) yo
 
 1. If you configured a user message or maintenance mode, remove the message and disable maintenance mode.
 
-{% ifversion ghes > 3.18 %}
-
 ## Configuring cipher suites and cryptographic algorithms
 
 You can configure the cipher suites and cryptographic algorithms that {% data variables.product.prodname_ghe_server %} uses for TLS and SSH connections. For more information, see [AUTOTITLE](/admin/configuring-settings/hardening-security-for-your-enterprise/configuring-tls-and-ssh-ciphers).
-
-{% endif %}
@@ -60,9 +60,7 @@ You can enforce strict controls without defining exceptions or additional config
 * **Allow all actions {% ifversion actions-workflow-policy %}and reusable workflows{% endif %}:** Any action {% ifversion actions-workflow-policy %}or reusable workflow{% endif %} can be used, regardless of who authored it or where it is defined.
 * **Allow enterprise actions {% ifversion actions-workflow-policy %}and reusable workflows{% endif %}:** Only actions {% ifversion actions-workflow-policy %}and reusable workflows{% endif %} defined in a repository within the enterprise can be used. {% ifversion ghec %}Blocks all access to actions authored by {% data variables.product.prodname_dotcom %}, such as the [`actions/checkout`](https://github.com/actions/checkout) action.{% endif %}
 * {% data reusables.actions.policy-label-for-select-actions-workflows %}: Any action {% ifversion actions-workflow-policy %}or reusable workflow{% endif %} defined in a repository within the enterprise can be used, plus any action {% ifversion actions-workflow-policy %}or reusable workflow{% endif %} that matches criteria you specify.
-{%- ifversion actions-blocklist-sha-pinning %}
 * **Require actions to be pinned to a full-length commit SHA**: All actions must be pinned to a full-length commit SHA to be used. This includes actions from your enterprise and actions authored by {% data variables.product.github %}. {% ifversion actions-workflow-policy %}Reusable workflows can still be referenced by tag.{% endif %} For more information, see [AUTOTITLE](/actions/reference/security/secure-use#using-third-party-actions).
-{%- endif %}
 
 <span id="allowing-select-actions-and-reusable-workflows-to-run" ></span>
 
@@ -74,7 +72,7 @@ If you choose this option, actions {% ifversion actions-workflow-policy %}and re
 * **Allow Marketplace actions by verified creators:** Allows all {% data variables.product.prodname_marketplace %} actions created by verified creators, labeled with {% octicon "verified" aria-label="The verified badge" %}.{% ifversion ghes %}
 
    Only available if you have {% data variables.product.prodname_github_connect %} enabled and configured with {% data variables.product.prodname_actions %}. See [AUTOTITLE](/admin/managing-github-actions-for-your-enterprise/managing-access-to-actions-from-githubcom/enabling-automatic-access-to-githubcom-actions-using-github-connect).{% endif %}
-* **Allow{% ifversion actions-blocklist-sha-pinning %} or block{% endif %} specified actions{% ifversion actions-workflow-policy %} and reusable workflows{% endif %}:** Allows actions{% ifversion actions-workflow-policy %} and reusable workflows{% endif %} that you specify. You can specify individual actions{% ifversion actions-workflow-policy %} and reusable workflows{% endif %} or entire organizations and repositories.
+* **Allow or block specified actions{% ifversion actions-workflow-policy %} and reusable workflows{% endif %}:** Allows actions{% ifversion actions-workflow-policy %} and reusable workflows{% endif %} that you specify. You can specify individual actions{% ifversion actions-workflow-policy %} and reusable workflows{% endif %} or entire organizations and repositories.
 
 When specifying actions{% ifversion actions-workflow-policy %} and reusable workflows{% endif %}, use the following syntax:
 
@@ -88,11 +86,9 @@ When specifying actions{% ifversion actions-workflow-policy %} and reusable work
    * To allow all actions{% ifversion actions-workflow-policy %} and reusable workflows{% endif %} in repositories that start with octocat, use `*/octocat**@*`.
 * To specify multiple patterns, use `,` to separate patterns.
    * To allow all actions{% ifversion actions-workflow-policy %} and reusable workflows{% endif %} from the `octocat` and `octokit` organizations, use `octocat/*, octokit/*`.
-{%- ifversion actions-blocklist-sha-pinning %}
 * To block specific patterns, use the `!` prefix.
    * To allow all actions{% ifversion actions-workflow-policy %} and reusable workflows{% endif %} from the `space-org` organization, but block a specific action like `space-org/action`, use `space-org/*, !space-org/action@*`.
    * By default, only actions{% ifversion actions-workflow-policy %} and reusable workflows{% endif %} specified in the list will be allowed. To allow all actions{% ifversion actions-workflow-policy %} and reusable workflows{% endif %} while also blocking specific actions, use `*, !space-org/action@*`.
-{%- endif %}
 
 {% data reusables.actions.lockfile-allowed-actions-sha %}
 
 
@@ -61,8 +61,6 @@ You can edit a ruleset to change parts of the ruleset, such as the name, bypass
 
 {% endif %}
 
-{% ifversion repo-rules-management %}
-
 ## Importing a ruleset
 
 You can import a ruleset from another repository, organization or enterprise using the exported JSON file from the previous section. This can be useful if you want to apply the same ruleset to multiple repositories, organizations or enterprises.
@@ -73,8 +71,6 @@ You can import a ruleset from another repository, organization or enterprise usi
 1. Open the exported JSON file.
 1. Review the imported ruleset and click **Create**.
 
-{% endif %}
-
 ## Viewing insights for rulesets
 
 You can view insights for rulesets to see how rulesets are affecting the repositories in your enterprise. {% data reusables.repositories.about-ruleset-insights %}
 
@@ -3,7 +3,7 @@ title: Configuring Elasticsearch Cross-Cluster Replication for high availability
 shortTitle: Elasticsearch Cross-Cluster Replication
 intro: 'You can make search more resilient during maintenance, failovers, and upgrades on a high availability deployment by enabling Elasticsearch Cross-Cluster Replication (CCR).'
 versions:
-  ghes: '>=3.19'
+  ghes: '*'
 contentType: how-tos
 category:
   - Scale your instance
 
@@ -11,12 +11,6 @@ category:
 
 {% data reusables.enterprise.opentelemetry-migration %}
 
-{% ifversion ghes = 3.18 %}
-
-{% data reusables.enterprise.opentelemetry-preview %}
-
-{% endif %}
-
 ## About OpenTelemetry metrics
 
 The OpenTelemetry monitoring stack is based on industry-standard observability tools and includes various components for collecting, processing, and storing metrics. This comprehensive approach provides a complete view of your system's performance and health across all components of your {% data variables.product.prodname_ghe_server %} instance.
 
@@ -13,24 +13,14 @@ category:
 
 {% data reusables.enterprise.opentelemetry-migration %}
 
-{% ifversion ghes = 3.18 %}
-
-{% data reusables.enterprise.opentelemetry-preview %}
-
-{% endif %}
-
 ## Prerequisites
 
 * OpenTelemetry metrics are enabled for your {% data variables.product.prodname_ghe_server %} instance
 
 
 ## Additional dashboards
 
-{% ifversion ghes < 3.19 %}
-When OpenTelemetry metrics are enabled, you can turn on advanced Grafana dashboards with enhanced visualization and monitoring capabilities.
-{% else %}
 When OpenTelemetry metrics are enabled, you will have access to advanced Grafana dashboards with enhanced visualization and monitoring capabilities.
-{% endif %}
 
 * **Elasticsearch** - Detailed metrics for search performance, indexing operations, and cluster health
 * **Nomad** - In-depth monitoring of job scheduling, resource allocation, and service orchestration
@@ -39,25 +29,3 @@ When OpenTelemetry metrics are enabled, you will have access to advanced Grafana
 * **Process Exporter** - Detailed process-level metrics for monitoring individual service performance
 
 These dashboards provide more granular insights into your {% data variables.product.prodname_ghe_server %} instance's performance and can help with advanced troubleshooting and capacity planning.
-
-{% ifversion ghes < 3.19 %}
-## Enabling advanced dashboards
-
-### Prerequisites
-
-* SSH access to your {% data variables.product.prodname_ghe_server %} instance
-
----
-
-
-{% data reusables.enterprise_installation.ssh-into-instance %}
-1. Run the following command to enable advanced dashboards:
-
-   ```shell
-   ghe-config observability.metrics.advanced-dashboards-enabled true
-   ```
-
-{% data reusables.enterprise.apply-configuration %}
-
-After running these commands, your external Grafana instance will have access to additional pre-configured dashboards.
-{% endif %}