Remove vendored ICU locale core and update dependencies

[piyyy314]

No description provided.

[nodejs-github-bot]

Review requested:

• @nodejs/actions
• @nodejs/releasers
• @nodejs/security-wg
• @nodejs/v8-update

[Copilot]

Pull request overview

This PR primarily updates tooling dependencies and refreshes multiple GitHub Actions workflow pins/configuration, with additional CI guardrails around tarball contents. It also introduces several repository-root shell scripts that automate merging PRs across unrelated repositories, which does not align with the PR title/purpose.

Changes:

• Bump Node.js repo tooling dependencies (ESLint toolchain, doc-kit, js-yaml) and update corresponding lockfiles.
• Update pinned GitHub Actions revisions across many workflows; tweak a few workflows’ behavior (commit-lint selection logic, PR labeling permissions/runner).
• Add a build-tarball CI step to verify Rust vendoring presence in produced tarballs; add new merge-*.sh scripts for bulk PR management.

Reviewed changes

Copilot reviewed 36 out of 40 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
tools/lint-md/package-lock.json	Updates js-yaml dependency resolution details.
tools/eslint/package.json	Bumps ESLint/Babel/related dependencies for repo lint tooling.
tools/eslint/package-lock.json	Lockfile updates for the ESLint tooling dependency bumps.
tools/doc/package.json	Updates @node-core/doc-kit version used by docs tooling.
merge-prs.sh	Adds a repo-root script to merge PRs across external repos (unrelated to Node.js).
merge-all-prs.sh	Adds a bulk merge/close automation script for many external repos (unrelated to Node.js).
merge-all-features.sh	Adds a bulk merge/close automation script for many external repos (unrelated to Node.js).
deps/v8/test/mjsunit/regress/regress-3039.js	Removes a stray no-op semicolon from a V8 regression test.
.github/workflows/update-wpt.yml	Updates pinned actions/checkout revision.
.github/workflows/update-v8.yml	Updates pinned actions/checkout and actions/cache revisions.
.github/workflows/update-openssl.yml	Updates pinned actions/checkout revision.
.github/workflows/tools.yml	Updates pinned actions/checkout and cachix/install-nix-action revisions.
.github/workflows/timezone-update.yml	Updates pinned actions/checkout revisions.
.github/workflows/test-shared.yml	Updates pinned actions/checkout, cachix/* action revisions.
.github/workflows/test-macos.yml	Updates pinned actions/checkout revision.
.github/workflows/test-linux.yml	Updates pinned actions/checkout revision.
.github/workflows/test-internet.yml	Updates pinned actions/checkout revision.
.github/workflows/stale.yml	Updates pinned actions/stale revision.
.github/workflows/scorecard.yml	Updates pinned harden-runner/checkout/codeql upload revisions.
.github/workflows/linters.yml	Updates pinned actions/checkout revision.
.github/workflows/lint-release-proposal.yml	Updates pinned actions/checkout revision.
.github/workflows/license-builder.yml	Updates pinned actions/checkout revision.
.github/workflows/label-pr.yml	Adjusts permissions/runner/token usage for PR labeling workflow.
.github/workflows/find-inactive-tsc.yml	Updates pinned actions/checkout revisions.
.github/workflows/find-inactive-collaborators.yml	Updates pinned actions/checkout revision.
.github/workflows/doc.yml	Updates pinned actions/checkout revision.
.github/workflows/daily.yml	Updates pinned actions/checkout revision.
.github/workflows/daily-wpt-fyi.yml	Updates pinned actions/checkout revisions.
.github/workflows/create-release-proposal.yml	Updates pinned actions/checkout revision.
.github/workflows/coverage-windows.yml	Adds Rust version pin; updates pinned checkout/codecov action revisions.
.github/workflows/coverage-linux.yml	Updates pinned checkout/codecov action revisions.
.github/workflows/coverage-linux-without-intl.yml	Updates pinned checkout/codecov action revisions.
.github/workflows/commit-queue.yml	Updates pinned actions/checkout revision.
.github/workflows/commit-lint.yml	Updates pinned checkout; changes commit selection logic for validation.
.github/workflows/codeql.yml	Switches runner; updates pinned checkout/codeql action revisions.
.github/workflows/close-stalled.yml	Updates pinned actions/stale revision.
.github/workflows/build-tarball.yml	Updates pinned checkout; adds tarball validation for vendored Rust crates.
.github/codeql-config.yml	Configures additional CodeQL query suites and keeps ignored paths.

Files not reviewed (2)

• tools/eslint/package-lock.json: Generated file
• tools/lint-md/package-lock.json: Generated file

Comments suppressed due to low confidence (1)

.github/workflows/coverage-windows.yml:77

• The workflow now pins RUSTC_VERSION, but the Rust setup step only runs rustup override set without ensuring that the requested toolchain is installed on the runner. This makes the job dependent on what the windows-2025 image happens to include and can start failing when the preinstalled toolchains change.

      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6.0.3
        with:
          persist-credentials: false
      - name: Set up Python ${{ env.PYTHON_VERSION }}
        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[piyyy314]

@copilot Fix the code for all comments in this review thread.

When a review comment includes a suggested change, apply the suggestion exactly.

Do not make changes beyond what is described in the linked review thread.