Merge main into releases/v4

[github-actions]

Merging e0b52db into releases/v4.

Conductor for this PR is @navntoft.

Contains the following pull requests:

• Add context to JSON parse errors #4161 (@mbg)
• Move bundle types and helpers out of setup-codeql.ts #4167 (@henrymercer)
• Improve job naming for the release workflow #4169 (@mbg)
• Mergeback v4.38.2 refs/heads/releases/v4 into main #4170 (@mbg)
• Remove unnecessary check in start-proxy-action-post #4176 (@mbg)
• Point at Dependabot groups docs in version mismatch error #4177 (@mbg)
• Use wrapApiConfigurationError more for init-action-post #4178 (@mbg)
• Support linux-arm64 assets in start-proxy #4181 (@mbg)
• Bump the npm-minor group across 1 directory with 4 updates #4182 (@mbg)
• Bump ruby/setup-ruby from 1.323.0 to 1.326.0 in /.github/workflows in the actions-minor group across 1 directory #4183 (@mbg)
• Use the combined bundle when queries may need other languages' library packs #4184 (@henrymercer)
• Update supported GitHub Enterprise Server versions #4188 (@henrymercer)
• Bump brace-expansion from 1.1.18 to 1.1.21 #4189 (@mbg)
• Fix merge conflict handling in the rebuild workflow #4191 (@henrymercer)
• Check package-lock.json for wrong addresses #4192 (@mbg)
• Dependabot: Apply cooldown uniformly #4193 (@mbg)
• Downgrade @actions/cache for now #4194 (@mbg)
• Bump ruby/setup-ruby from 1.326.0 to 1.327.0 in /.github/workflows in the actions-minor group across 1 directory #4196 (@henrymercer)
• Minor VSCode workspace settings changes #4197 (@mbg)
• Fully migrate pr-checks to ESM #4200 (@mbg)
• Update default bundle to 2.27.2 #4203 (@navntoft)
• Pin Python 3.13.15 for older CLI versions in the multi-language check #4210 (@henrymercer)

Please do the following:

• Ensure the CHANGELOG displays the correct version and date.
• Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
• Check that there are not any unexpected commits being merged into the releases/v4 branch.
• Ensure the docs team is aware of any documentation changes that need to be released.
• Approve running the full set of PR checks if you have not pushed any changes.
• Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.
• Merge the mergeback PR that will automatically be created once this PR is merged.
• Merge all backport PRs to older release branches, that will automatically be created once this PR is merged.