Merge main into releases/v4

[github-actions]

Merging 1f34ec1 into releases/v4.

Conductor for this PR is @henrymercer.

Contains the following pull requests:

• Default to StartProxyRemoveUnusedRegistries behaviour #3909 (@mbg)
• Convert update-supported-enterprise-server-versions script to TypeScript #3916 (@mbg)
• Mergeback v4.36.2 refs/heads/releases/v4 into main #3951 (@henrymercer)
• Use local upload-sarif Action in PR checks job #3953 (@henrymercer)
• Clean up codeql.resolveLanguages #3954 (@henrymercer)
• Fix broken log grouping due to nested log group #3955 (@henrymercer)
• Bump the npm-minor group across 1 directory with 4 updates #3957 (@mbg)
• Bump esbuild from 0.28.0 to 0.28.1 #3958 (@henrymercer)
• Bump tar from 7.5.15 to 7.5.16 #3961 (@mbg)
• Ad