Merge main into releases/v4

[github-actions]

Merging 2a1689e into releases/v4.

Conductor for this PR is @henrymercer.

Contains the following pull requests:

• Bump the npm-minor group across 1 directory with 6 updates #3921 (@mbg)
• Bump ruby/setup-ruby from 1.306.0 to 1.307.0 in /.github/workflows in the actions-minor group across 1 directory #3925 (@mbg)
• Mergeback v4.36.0 refs/heads/releases/v4 into main #3928 (@oscarsj)
• Update supported GitHub Enterprise Server versions #3933 (@henrymercer)
• Bump the npm-minor group across 1 directory with 2 updates #3934 (@mbg)
• Bump tmp from 0.2.4 to 0.2.7 #3936 (@mbg)
• Disable missing diff-ranges fallback when overlay enabled manually #3939 (@henrymercer)

Please do the following:

• Ensure the CHANGELOG displays the correct version and date.
• Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
• Check that there are not any unexpected commits being merged into the releases/v4 branch.
• Ensure the docs team is aware of any documentation changes that need to be released.
• Mark the PR as ready for review to trigger the full set of PR checks.
• Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.
• Merge the mergeback PR that will automatically be created once this PR is merged.
• Merge all backport PRs to older release branches, that will automatically be created once this PR is merged.

[Copilot]

Pull request overview

Mergeback PR merging main into releases/v4, bundling release v4.36.1 with dependency bumps, GHES version support update, and a behavior change to overlay database mode handling.

Changes:

• Release v4.36.1: version bump, changelog entry, regenerated lib/ bundle
• Dependency bumps (semver, eslint/compat, types/node, nock, typescript-eslint, yaml, tsx, tmp, ruby/setup-ruby) and bumped GHES API compatibility max version to 3.22
• Behavior: when CODEQL_OVERLAY_DATABASE_MODE is set explicitly, skip the missing-diff-ranges fallback that disables overlay mode (new overlayModeSetExplicitly field threaded through config)

Show a summary per file

File	Description
package.json	Version bump to 4.36.1; dependency bumps
package-lock.json	Lockfile updates for dependency bumps
pr-checks/package.json	Bump yaml, @types/node, tsx
CHANGELOG.md	Add 4.36.1 release entry
src/api-compatibility.json	Bump max supported GHES version to 3.22
src/config-utils.ts	Add overlayModeSetExplicitly field and skip fallback when set
src/config-utils.test.ts	Tests for new explicit-mode behavior
src/testing-utils.ts	Initialize new field in test config
pr-checks/checks/rubocop-multi-language.yml	Bump ruby/setup-ruby to v1.307.0
.github/workflows/__rubocop-multi-language.yml	Generated workflow update
lib/entry-points.js	Regenerated bundle

Copilot's findings

• Files reviewed: 8/11 changed files
• Comments generated: 0