not an actual dev dependency

this also includes the .cmake files, letting cmake projects find libzstd

This CVE never affected alpine. Add secixes data to silence security
scanners.

closes #13915

The CVE was fixed in commit 9ea29aa6 (main/ncurses: upgrade to
6.3_p20220416) but secfixes comment was not added.

Oleg Titov authored 2 years ago and alice committed 2 years ago

Ref https://github.com/lu-zero/cargo-c/releases/tag/v0.9.10

Zach DeCook authored 2 years ago and alice committed 2 years ago

see !35034 (comment 239990)

Zach DeCook authored 2 years ago and alice committed 2 years ago

see !35034 (comment 239990)

Michał Polański authored 2 years ago and Jakub Jirutka committed 2 years ago

for compatibility with latest nvim-treesitter