v2.40
ci: reduce aslr level to avoid issues with ASAN
build-sys: fail build for untracked files
ci: consistently use gcc 13 during CI
ci: cancel running jobs on push
ci: (codeql) ignore cpp/uncontrolled-process-operation
build: harden coverity.yml permissions
ci: update shellcheck
github: add labeler
ci: run full testsuite under musl libc