Merge releases/v4 into releases/v3

[github-actions]

Merging 89a39a4 into releases/v3.

Conductor for this PR is @mbg.

Contains the following pull requests:

• Improve proxy certificate generation #3473 (@mbg)
• Add csra analysis kind #3474 (@mbg)
• Mergeback v4.32.3 refs/heads/releases/v4 into main #3480 (@henrymercer)
• Release notes: Use author if they are GitHub staff #3482 (@mbg)
• Add feature for forcing the nightly bundle in dynamic workflows #3484 (@mbg)
• Add feature to enable Java network debugging #3485 (@mbg)
• Log information about the runner which may affect the private registry proxy #3486 (@mbg)
• Bump fast-xml-parser from 5.3.4 to 5.3.6 #3488 (@oscarsj)
• Use new feature flag for repository properties #3492 (@henrymercer)
• Update default bundle to 2.24.2 #3493 (@mbg)
• Merge main into releases/v4 #3494 (@mbg)

Please do the following:

• Ensure the CHANGELOG displays the correct version and date.
• Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
• Check that there are not any unexpected commits being merged into the releases/v3 branch.
• Ensure the docs team is aware of any documentation changes that need to be released.
• Remove and re-add the "Rebuild" label to the PR to trigger just this workflow.
• Wait for the "Rebuild" workflow to push a commit updating the distribution files.
• Mark the PR as ready for review to trigger the full set of PR checks.
• Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.

[github-actions]

Pushed a commit to rebuild the Action. Please mark the PR as ready for review to trigger PR checks.

[Copilot]

Pull request overview

This is a release PR merging changes from releases/v4 into releases/v3 to create version 3.32.4. The release includes updates to the default CodeQL bundle, improvements to certificate generation for authentication proxies, additional diagnostic logging, and new internal settings for managing nightly builds and Java network debugging.

Changes:

• Update version to 3.32.4 with release date of February 20, 2026
• Update default CodeQL bundle from 2.24.1 to 2.24.2
• Add experimental certificate improvements for authentication proxy
• Add diagnostic logging for proxy environment inspection
• Add internal settings for nightly CLI and Java network debugging

Reviewed changes

Copilot reviewed 39 out of 45 changed files in this pull request and generated no comments.

File	Description
CHANGELOG.md	Documents version 3.32.4 with appropriate user-facing changes from PRs #3493, #3473, #3486, #3485, and #3484
package.json	Updates version to 3.32.4
package-lock.json	Contains critical version mismatch - shows 4.32.4 instead of 3.32.4

[mbg]

As Copilot points out in its summary, it seems that package-lock.json doesn't contain the expected version. That already seems to be the case in the release/v3 branch as well, so it seems to be an existing issue. Probably not critical, since that branch only really exists for the JS files and they get the correct version.

I'll proceed with this PR as-is and we can make a change to the workflow/release branch later if needed.