Merge releases/v4 into releases/v3

[github-actions]

Merging 87557b9 into releases/v3.

Conductor for this PR is @henrymercer.

Contains the following pull requests:

• Bump the npm-minor group across 1 directory with 6 updates #3921 (@mbg)
• Bump ruby/setup-ruby from 1.306.0 to 1.307.0 in /.github/workflows in the actions-minor group across 1 directory #3925 (@mbg)
• Mergeback v4.36.0 refs/heads/releases/v4 into main #3928 (@oscarsj)
• Update supported GitHub Enterprise Server versions #3933 (@henrymercer)
• Bump the npm-minor group across 1 directory with 2 updates #3934 (@mbg)
• Bump tmp from 0.2.4 to 0.2.7 #3936 (@mbg)
• Disable missing diff-ranges fallback when overlay enabled manually #3939 (@henrymercer)
• Merge main into releases/v4 #3940 (@henrymercer)

Please do the following:

• Ensure the CHANGELOG displays the correct version and date.
• Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
• Check that there are not any unexpected commits being merged into the releases/v3 branch.
• Ensure the docs team is aware of any documentation changes that need to be released.
• Mark the PR as ready for review to trigger the full set of PR checks.
• Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.

[Copilot]

Pull request overview

This PR merges changes from releases/v4 into releases/v3, picking up dependency bumps, GHES compatibility range updates, and an overlay-analysis behavior change (explicit overlay mode no longer disables itself when PR diff ranges are missing).

Changes:

• Track whether overlay mode was set explicitly and skip the “missing diff-ranges” fallback in that case.
• Update supported GHES API compatibility range (max version) and bump various dependencies.
• Release metadata updates (version/changelog) for the 3.36.1 release.

Show a summary per file

File	Description
src/testing-utils.ts	Updates test config defaults to include the new overlayModeSetExplicitly flag.
src/config-utils.ts	Adds overlayModeSetExplicitly to config/state and uses it to control overlay fallback behavior.
src/config-utils.test.ts	Extends unit tests to validate explicit overlay behavior and adjusts overlay enablement expectations.
src/api-compatibility.json	Bumps maximum supported GHES version for compatibility warnings.
pr-checks/package.json	Bumps yaml, @types/node, and tsx used by PR check tooling.
pr-checks/checks/rubocop-multi-language.yml	Updates the pinned ruby/setup-ruby action SHA/version.
package.json	Bumps action version to 3.36.1 and updates dependency versions.
package-lock.json	Updates lockfile for dependency bumps (but currently contains an inconsistent root version).
CHANGELOG.md	Adds the 3.36.1 entry (currently understates user-facing changes).
lib/entry-points.js	Generated build output (not reviewed).
.github/workflows/__rubocop-multi-language.yml	Generated workflow output (not reviewed).

Copilot's findings

• Files reviewed: 8/11 changed files
• Comments generated: 1