Merge main into releases/v4

[github-actions]

Merging 998798e into releases/v4.

Conductor for this PR is @henrymercer.

Contains the following pull requests:

• Remove AnalyzeUseNewUpload FF and make its behaviour the default #3309 (@mbg)
• Bump the npm-minor group with 5 updates #3348 (@henrymercer)
• Bump the actions-minor group across 1 directory with 2 updates #3349 (@henrymercer)
• Determine CodeQL version from feature flags on GHEC-DR  #3351 (@henrymercer)
• Clean up JavaMinimizeDependencyJars feature flag #3352 (@nickrolfe)
• Mergeback v4.31.8 refs/heads/releases/v4 into main #3356 (@oscarsj)
• Add status report for uploading databases to API #3358 (@henrymercer)
• Bump ruby/setup-ruby from 1.269.0 to 1.270.0 in /.github/workflows in the actions-minor group across 1 directory #3364 (@mbg)
• Bump actions/download-artifact from 6 to 7 in /.github/workflows #3365 (@mbg)
• Bump actions/upload-artifact from 5 to 6 in /.github/workflows #3366 (@mbg)

Please do the following:

• Ensure the CHANGELOG displays the correct version and date.
• Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
• Check that there are not any unexpected commits being merged into the releases/v4 branch.
• Ensure the docs team is aware of any documentation changes that need to be released.
• Mark the PR as ready for review to trigger the full set of PR checks.
• Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.
• Merge the mergeback PR that will automatically be created once this PR is merged.
• Merge all backport PRs to older release branches, that will automatically be created once this PR is merged.

[Copilot]

Pull request overview

This PR merges updates from main into the releases/v4 branch, primarily containing dependency updates, internal refactoring to rename GitHub environment variants, and workflow configuration changes. The changes do not affect user-facing functionality.

Reviewed changes

Copilot reviewed 47 out of 48 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
src/util.ts	Refactors GitHub variant enum from numeric to string values with descriptive names
src/util.test.ts	Updates tests to use new GitHub variant naming
src/setup-codeql.ts	Adjusts logic to use GHES variant check instead of non-DOTCOM check
src/init-action.ts	Removes feature flag for Java dependency jar minimization, enables by default based on CodeQL version
src/feature-flags.ts	Removes unused feature flags and refactors variant support checking
src/feature-flags.test.ts	Updates tests for GHEC-DR and consolidates test cases
src/dependency-caching.ts	Removes Java-specific cache key handling logic
src/dependency-caching.test.ts	Removes tests for Java minimize dependency jars feature
src/database-upload.ts	Adds return type for upload results tracking
src/database-upload.test.ts	Updates test expectations for error messages
src/api-client.ts	Updates variant name from GHE_DOTCOM to GHEC_DR
src/api-client.test.ts	Updates test for GHEC-DR naming
src/analyze-action.ts	Removes conditional upload logic, simplifies to single upload path
pr-checks/checks/*.yml	Updates action versions (ruby/setup-ruby, actions/upload-artifact)
package.json	Bumps version to 4.31.9 and updates dependencies
lib/*.js	Generated JavaScript from TypeScript changes
CHANGELOG.md	Adds entry for version 4.31.9
.github/workflows/*.yml	Updates actions/create-github-app-token and actions/download-artifact versions
.github/pull_request_template.md	Clarifies Dotcom environment description