feat: LGTM security analysis

Add tags based on this tutorial:
https://cwiki.apache.org/confluence/display/INFRA/git+-+.asf.yaml+features#git.asf.yamlfeatures-Repositorymetadata
and this JIRA:
https://issues.apache.org/jira/browse/INFRA-20886

fix: partially resolves #13164

Merge 4.9.0 release into master

Release 4.9.0

style: remove unexpected es6 code

fix(timeline): fix icon style not work bug brought in #13015

fix(bar): showBackground bug when update with no previous background elements

fix(bar): showBackground bug when update with no previous background elements

fix: recover auto rotation for line symbol.

fix(graph): fix null pointer error in graph simple layout

fix: In Line.js (used by graph and markLine), when rotation is not specified by users, the "auto rotation" rule should not be broken when rendered at the second time (like when drag graph or move dataZoom). (Brought by 7c3f1896 #12392 )

Create release 4.9.0 branch

feat(funnel): funnel chart support orient API

fix(themeRiver): use layer key map rather then largestLayer #11948

fix(markArea): hide labels when markArea is not inside grid #12591

fix(tooltip): richText for series-specific formatters #12232

feat(dataZoom): custom brush style in toolbox.feature.dataZoom

fix(pie): pie series render incorrectly after editing its data in DataView. close #12560.

Fix dataview show NaN when user use dataset

fix(lines): lines series shouldn't disappear after `setOption({})`. (#12836)