Merge main into releases/v4

[github-actions]

Merging be7a3db into releases/v4.

Conductor for this PR is @mbg.

Contains the following pull requests:

• Mergeback v4.37.6 refs/heads/releases/v4 into main #4073 (@mbg)
• Bump brace-expansion from 1.1.16 to 1.1.18 #4075 (@mbg)
• Bump globals from 17.7.0 to 17.8.0 in the npm-minor group across 1 directory #4076 (@henrymercer)
• Bump actions/setup-java from 5.6.0 to 5.7.0 in /.github/workflows in the actions-minor group across 1 directory #4077 (@henrymercer)
• Bump js-yaml from 5.2.2 to 5.2.3 #4082 (@mbg)
• Promote OverlayAnalysisResourceChecksV2 #4083 (@mbg)
• Bump undici from ^6.24.0 to ^6.28.0 #4084 (@navntoft)
• Update default bundle to 2.26.3 #4085 (@mbg)
• Make a Logger available to getCodeQLForCmd #4086 (@mbg)
• Bump the npm-minor group across 1 directory with 8 updates #4087 (@mbg)

Please do the following:

• Ensure the CHANGELOG displays the correct version and date.
• Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
• Check that there are not any unexpected commits being merged into the releases/v4 branch.
• Ensure the docs team is aware of any documentation changes that need to be released.
• Approve running the full set of PR checks if you have not pushed any changes.
• Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.
• Merge the mergeback PR that will automatically be created once this PR is merged.
• Merge all backport PRs to older release branches, that will automatically be created once this PR is merged.