Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.9 to 3.28.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0...b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d

)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

updated man pages and manual

fixes #4301

updated benchmark numbers for v1.5.7

using latest version of @inikep's lzbench

this is by far our longest CI test.
Attempt to make it run a bit faster.

Improved Github Actions scorecards

update changelog for v1.5.7

CI: enable Intel LLVM C compiler (icx) check

Fixed CI

this test seems impossible on Ubuntu-24

14.1 seems no longer supported by gcloud

for ubuntu-24

this ABI is no longer supported by Ubuntu,
and there is a wider consensus that this ABI is on the way out,
with more and more distributions dropping it,
and lingering questions about support of x32 in the kernel.

change ubuntu20 tests to use more modern ubuntu variants

Improve compression ratio of the --patch-from mode

--ultra automatically triggered with --long and --patch-from

--max command

Bump github/codeql-action from 3.28.1 to 3.28.9

--max doesn't work in 32-bit mode, due to address space limitation

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.1 to 3.28.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b6a472f63d85b9c78a3ac5e89422239fc15e9b3c...9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0

)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

32-bit is unsuitable for --max