Merge main into releases/v4 - #3824

Merging d2e135a into releases/v4.

Conductor for this PR is @henrymercer.

Contains the following pull requests:

• Remove unused @schemastore/package dependency #3779 (@henrymercer)
• Bump brace-expansion from 1.1.12 to 1.1.13 #3780 (@henrymercer)
• Mergeback v4.35.1 refs/heads/releases/v4 into main #3783 (@henrymercer)
• Move time-sensitive Actions workflows to ubuntu-latest #3786 (@henrymercer)
• Generate and analyse esbuild bundle metadata #3787 (@mbg)
• Overlay: Only require Git 2.36.0 for repos that contain submodules #3789 (@henrymercer)
• Extend start-proxy.yml to test multiple registry support #3792 (@mario-campos)
• Python: Disable standard library extraction on GHES #3794 (@henrymercer)
• Deprecate TRAP cache cleanup #3795 (@henrymercer)
• Add tests for getCredentials with multiple goproxy_servers and maven_… #3799 (@mario-campos)
• Upgrade to TypeScript 6 #3800 (@henrymercer)
• Mark Swift incompatible OS as configuration error #3801 (@henrymercer)
• Bump lodash from 4.17.23 to 4.18.1 #3802 (@henrymercer)
• Bump eslint-plugin-jsdoc from 62.8.0 to 62.8.1 in the npm-minor group across 1 directory #3803 (@henrymercer)
• Bump eslint-plugin-jsdoc from 62.8.1 to 62.9.0 in the npm-minor group #3804 (@henrymercer)
• Store language aliases from linked CLI #3806 (@henrymercer)
• Fix OIDC credential property names #3807 (@mbg)
• Fix pr-checks/tsconfig.json for TS6 #3810 (@mbg)
• Refactoring: Introduce