GeezerVison

Merging 6f2ac81 into releases/v3.

Conductor for this PR is @mbg.

Contains the following pull requests:

• Validate checkout_path input in analyze action #4148 (@mbg)
• Use setup-codeql logic for finding release assets in start-proxy #4198 (@mbg)
• Incorporate change-notes into CHANGELOG.md at release #4201 (@mario-campos)
• Bump minimum CodeQL CLI version to 2.20.7 #4205 (@henrymercer)
• Include primary cache keys as restore key #4206 (@mbg)
• Bump @octokit/plugin-paginate-rest from 15.0.0 to 16.0.0 #4208 (@henrymercer)
• Bump eslint-plugin-jsdoc from 64.5.4 to 65.0.1 #4209 (@mbg)
• Document change-notes process #4211 (@mario-campos)
• Do not use core.exportVariable in unit tests (2nd attempt) #4212 (@mbg)
• Mergeback v4.38.3 refs/heads/releases/v4 into main #4215 (@navntoft)
• Do not validate change-note file names or frontmatter #4218 (@mario-campos)
• Fix type inference for ActionState #4220 (@mbg)
• Store and restore "failed" configuration if init step aborts #4225 (@mbg)
• Report release version the proxy is taken from in start-proxy telemetry #4233 (@mbg)
• Bump the npm-minor group across 1 directory with 7 updates #4234 (@henrymercer)
• Add missing change notes for recent PRs #4236 (@mbg)
• Merge main into releases/v4 #4239 (@mbg)

Please do the following:

• Ensure the CHANGELOG displays the correct version and date.
• Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
• Check that there are not any unexpected commits being merged into the releases/v3 branch.
• Ensure the docs team is aware of any documentation changes that need to be released.
• Approve running the full set of PR checks if you have not pushed any changes.
• Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.