minor: fix overly cautious conversion warning

fix long sequences (> 64 KB)

fix issue with incompressible sections

speed optimized version of targetCBlockSize

note that the size of individual compressed blocks will vary more wildly with this modification.
But it seems good enough for a first test, and fix the speed regression issue.
Further refinements can be attempted later.

benchmark more can test targetCBlockSize

Merge pull request #3903 from gruenich/feature/reduce-scope-of-variables

Reduce scope of variables

Merge pull request #3905 from facebook/dependabot/github_actions/actions/upload-artifact-4.3.1

Bump actions/upload-artifact from 4.3.0 to 4.3.1

Merge pull request #3913 from facebook/lorem2

Lorem Ipsum generator update

Merge pull request #3914 from facebook/setup_msys2_v2.22.0

updated setup-msys2 to v2.22.0

updated setup-msys2 to v2.22.0

following a warning in recent test reports

```
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: msys2/setup-msys2@5beef6d11f48bba68b9eb503e3adc60b23c0cc36. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
```

fix include order

fix Visual Studio datagen recipe

fix clangbuild

notably -Wconversion and -Wdocumentation

fix cmake build

fix c89 compatibility by removing snprintf()

note that this function has been in the code for a long while,
so why does it only start failing CI tests now ?

fix meson datagen build

fix datagen size control

internal benchmark: can select size of generated synthetic sample

datagen generates lorem ipsum by default

increase word dictionary

for higher variety of messages.
Now, level 5 compresses better than level 4 (by a hair).

runtime weight distribution table

and made small words a bit more common.

add question marks

and (slightly) longer sentences.

enriched vocabulary again

using real latin sentences from Cicero.

Compression ratio lower again, closer to "real" text,

now level 6 is way better than level 4.

level 5 is still lower than level 4,
but at least it's now higher than level 3.

increase vocabulary size

makes compression a bit less good,
hence a bit more comparable with real text (though still too easy to compress).
level 6 is now stronger than level 4, by a hair.
However, there is still a ratio dip at level 5.

Merge pull request #3909 from felixhandte/security-md-notif-list-ad

Advertise Availability of Security Vulnerability Notifications

Advertise Availability of Security Vulnerability Notifications

Add SECURITY.md File

This just adds a copy of the Meta default SECURITY.md that we can then modify.

Bump actions/upload-artifact from 4.3.0 to 4.3.1

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.0 to 4.3.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/26f96dfa697d77e81fd5907df203aa23a56210a8...5d5d22a31266ced268874388b861e4b58bb5c2f3)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Reduce scope of variables

This improves readability, keeps variables local, and
prevents the unintended use (e.g. typo) later on.
Found by Cppcheck (variableScope)

Merge pull request #3902 from facebook/fuzz_debuglevel

Fix fuzz issue 5131069967892480

fix fuzz issue 5131069967892480

fuzz: control debuglevel from Makefile

and make the compilation faster

Merge pull request #3900 from facebook/fix5921623844651008

fix 5921623844651008

Convert the CircleCI workflow to a GitHub Actions workflow

Merge pull request #3899 from sandreenko/dev

[Zstd] Less verbose log for patch mode.

fix issue 5921623844651008

ossfuzz managed to create a scenario which triggers an `assert`.
This fixes it, by giving +1 more space for the backward search pass.

[Zstd] Less verbose log for patch mode.

Merge pull request #3895 from facebook/fix_3793

Improve compression of Arrays of Integers (High compression mode)

added or updated code comments

as suggested by @terrelln,
to make the code of the optimal parser a bit more understandable.

update compression results for regression tests

fix msan warnings

fix uasan dictionary_stream_round_trip fuzz test

Merge pull request #3897 from facebook/dependabot/github_actions/microsoft/setup-msbuild-2.0.0

Bump microsoft/setup-msbuild from 1.3.2 to 2.0.0

fix msbuild action version number

Bump microsoft/setup-msbuild from 1.3.2 to 2.0.0

Bumps [microsoft/setup-msbuild](https://github.com/microsoft/setup-msbuild) from 1.3.2 to 2.0.0.
- [Release notes](https://github.com/microsoft/setup-msbuild/releases)
- [Changelog](https://github.com/microsoft/setup-msbuild/blob/main/building-release.md)
- [Commits](https://github.com/microsoft/setup-msbuild/compare/031090342aeefe171e49f3820f3b52110c66e402...6fb02220983dee41ce7ae257b6f4d8f9bf5ed4ce)

---
updated-dependencies:
- dependency-name: microsoft/setup-msbuild
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

use ZSTD_memcpy()

which can be redirected in Linux kernel mode

removed trace control

fixed wrong assert

by introducing ZSTD_OPT_SIZE

update compression results

good news: there are only improvements

fixed wrong assert

minor optimization, mostly for clarity

finally, a version that generalizes well

While it's not always strictly a win,
it's a win for files that see a noticeably compression ratio increase,
while it's a very small noise for other files.

Downside is, this patch is less efficient for 32-bit arrays of integer
than the previous patch which was introducing losses for other files,
but it's still a net improvement on this scenario.

Merge pull request #3893 from felixhandte/gh-actions-cet-test-update-dep

Update Dependency in Intel CET Test; Re-Enable Test

Update Dependency in Intel CET Test; Re-Enable Test

Motivated by #3884.

Merge pull request #3890 from facebook/lorem

add a lorem ipsum generator

modification: differentiate literal update at pos+1

helps when litlen==1 is cheaper than litlen==0

works great on pathological arr[u32] examples
but doesn't generalize well on other files.

silesia/x-ray is amoung the most negatively affected ones.

Merge pull request #3886 from facebook/sparc64

add sparc64 compilation test

refactor optimal parser

store stretches as intermediate solution instead of sequences.
makes it possible to link a solution to a predecessor.

improve high compression ratio for file like #3793

this works great for 32-bit arrays,
notably the synthetic ones, with extreme regularity,
unfortunately, it's not universal,
and in some cases, it's a loss.
Crucially, on average, it's a loss on silesia.
The most negatively impacted file is x-ray.
It deserves an investigation before suggesting it as an evolution.

blindfix meson recipe

note: absence of GLOB capability within meson makes its maintenance more painful.

fix cmake recipe

fix Visual Studio solutions

note: we probably don't want to maintain VS2008 solution anymore.
Its successor VS2010 is > 10 years old,
which is more or less the limit after which we can stop supporting old compilers.

fix paramgrill Makefile recipe

add a lorem ipsum generator

this generator replaces the statistical generator
for the general case when no statistic is requested.

Generated data features a compression level speed / ratio curve
which is more in line with expectation.

Merge pull request #3888 from facebook/dependabot/github_actions/microsoft/setup-msbuild-1.3.2

Bump microsoft/setup-msbuild from 1.3.1 to 1.3.2

Merge pull request #3887 from facebook/dependabot/github_actions/actions/upload-artifact-4.3.0

Bump actions/upload-artifact from 4.2.0 to 4.3.0

Bump microsoft/setup-msbuild from 1.3.1 to 1.3.2

Bumps [microsoft/setup-msbuild](https://github.com/microsoft/setup-msbuild) from 1.3.1 to 1.3.2.
- [Release notes](https://github.com/microsoft/setup-msbuild/releases)
- [Changelog](https://github.com/microsoft/setup-msbuild/blob/main/building-release.md)
- [Commits](https://github.com/microsoft/setup-msbuild/compare/1ff57057b5cfdc39105cd07a01d78e9b0ea0c14c...031090342aeefe171e49f3820f3b52110c66e402)

---
updated-dependencies:
- dependency-name: microsoft/setup-msbuild
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump actions/upload-artifact from 4.2.0 to 4.3.0

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/694cdabd8bdb0f10b2cea11669e1bf5453eed0a6...26f96dfa697d77e81fd5907df203aa23a56210a8)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

add sparc64 compilation test

Merge pull request #3880 from facebook/dependabot/github_actions/actions/upload-artifact-4.2.0

Bump actions/upload-artifact from 4.1.0 to 4.2.0

Merge pull request #3883 from facebook/cmake_test

improve cmake test

fix cmakebuild test

write it in a way which is more compatible with older versions of cmake (<3.13)

Also:
fix pzstd compilation (notably on macos)

Merge pull request #3884 from facebook/disable_intelcet

disable Intel CET Compatibility tests

disable Intel CET Compatibility tests

The binary blob that must be downloaded from intel.com is no longer available

Bump actions/upload-artifact from 4.1.0 to 4.2.0

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/1eb3cb2b3e0f29609092a73eb033bb759a334595...694cdabd8bdb0f10b2cea11669e1bf5453eed0a6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #3877 from facebook/oldgrep

minor: playTests.sh more compatible with older versions of grep

made playTests.sh more compatible with older versions of grep

replaced `\+` by `*`.
`\+` means `[1-N]`,
while `*` means `[0-N]`,
so it's not strictly equivalent
but `\+` happens to be badly supported on some flavors of grep,
and for the purpose of these tests, `*` is good enough.

Merge pull request #3865 from facebook/grep_e

playTests.sh does no longer needs grep -E

playTests.sh does no longer needs grep -E

it makes the test script more portable across posix systems
because `grep -E` is not guaranteed
while `grep` is fairly common.

Merge pull request #3863 from facebook/dependabot/github_actions/github/codeql-action-3.23.0

Bump github/codeql-action from 2.21.4 to 3.23.0

Merge pull request #3864 from facebook/dependabot/github_actions/actions/upload-artifact-4.1.0

Bump actions/upload-artifact from 4.0.0 to 4.1.0

Bump actions/upload-artifact from 4.0.0 to 4.1.0

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/c7d193f32edcb7bfad88892161225aeda64e9392...1eb3cb2b3e0f29609092a73eb033bb759a334595)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump github/codeql-action from 2.21.4 to 3.23.0

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.21.4 to 3.23.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/a09933a12a80f87b87005513f0abb1494c27a716...e5f05b81d5b6ff8cfa111c80c22c5fd02a384118)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #3760 from jcelerier/patch-1

[x-compile] Fix cross-compiling for AArch64 with lld

Merge pull request #3817 from elasota/oversized-probs-clarification

Clarify that probability tables must not contain non-zero probabilities for invalid values

Merge pull request #3850 from KapJI/better-errors

cli: better errors on argument parsing

Merge pull request #3858 from eli-schwartz/msvc-dev-cmd

CI: meson: use builtin handling for MSVC

Fix building on HP-UX 11.11 PA-RISC

By CMake 3.8.2 and GCC 4.7.1

Fix building xxhash on AIX 5.1

CI: meson: use builtin handling for MSVC

This avoids downloading -- and periodically bumping the checksum for --
a third-party action that isn't strictly required, and thus helps keep
down dependencies and reduce update churn.

Merge pull request #3855 from emaste/freebsd-14-ci

Cirrus-CI: Add FreeBSD 14

Merge pull request #3847 from michoecho/fix_nullptr_deref_in_createCDict

Fix a nullptr dereference in ZSTD_createCDict_advanced2()

Cirrus-CI: Add FreeBSD 14

Merge pull request #3846 from emaste/c89

zlibWrapper: convert to C89 / ANSI C

Specify offset 0 as invalid

Make offload API compatible with static CCtx (#3854)

* Add ZSTD_CCtxParams_registerSequenceProducer() to public API

* add unit test

* add docs to zstd.h

* nits

* Add ZSTDLIB_STATIC_API prefix

* Add asserts

Make `zstd::libzstd` an imported interface target.
It cannot be an alias, because it would lock the package to use either static or shared libraries at its build time. We want to decide this at the time `find_package` is called.

Merge pull request #3849 from facebook/dependabot/github_actions/actions/upload-artifact-4.0.0

Bump actions/upload-artifact from 3.1.3 to 4.0.0

Update windows-artifacts.yml

and fixed version number in comment

cli: better errors on arguent parsing