Merge main into releases/v3

[github-actions]

Merging 0a67bd4 into releases/v3.

Conductor for this PR is @mbg.

Contains the following pull requests:

• Only run PR checks on Ubuntu by default  #3137 (@henrymercer)
• Fix tools: linked log message #3139 (@henrymercer)
• Mergeback v3.30.4 refs/heads/releases/v3 into main #3150 (@henrymercer)
• Don't dry-run rollback-release workflow on release branches #3151 (@mbg)
• Add npm run ava command, update instructions, and exclude files from VSCode search #3152 (@mbg)
• Improve pr-checks workflow #3153 (@mbg)
• Add script to check whether npm i needs to be run #3154 (@mbg)
• Don't run npm install when in an Actions workflow #3155 (@mbg)
• Hotfix upload-sarif not uploading non-.sarif files #3160 (@mbg)

Please do the following:

• Ensure the CHANGELOG displays the correct version and date.
• Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
• Check that there are not any unexpected commits being merged into the releases/v3 branch.
• Ensure the docs team is aware of any documentation changes that need to be released.
• Mark the PR as ready for review to trigger the full set of PR checks.
• Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.
• Merge the mergeback PR that will automatically be created once this PR is merged.
• Merge all backport PRs to older release branches, that will automatically be created once this PR is merged.

[Copilot]

Pull Request Overview

This is a release PR merging changes from main into the releases/v3 branch for version 3.30.5. The primary purpose is to fix a bug introduced in version 3.30.4 where the upload-sarif functionality was incorrectly rejecting files without a .sarif extension.

Key changes:

• Fixed upload-sarif logic to properly handle code-scanning analysis files without .sarif extensions
• Code organization improvements in setup-codeql.ts (moved code block to better location)
• Simplified PR check workflow configurations by removing redundant OS specifications and consolidating test configurations

Reviewed Changes

Copilot reviewed 70 out of 72 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
src/upload-sarif-action.ts	Fixed conditional logic to accept code-scanning files without .sarif extension
src/setup-codeql.ts	Moved forceShippedTools logic block to execute after nightly tools handling
scripts/check-node-modules.sh	Added new script to conditionally run npm install based on package-lock.json state
package.json	Updated version to 3.30.5 and refactored npm scripts for better modularity
pr-checks/sync.py	Removed function and logic for OS/version exclusions, simplified default OS to ubuntu-only
pr-checks/checks/*.yml	Removed redundant operatingSystems specifications, consolidated test configurations
CHANGELOG.md	Added entry documenting the upload-sarif bug fix
Multiple lib/*.js files	Generated JavaScript reflecting the TypeScript source changes

Files not reviewed (1)

• package-lock.json: Language not supported