Backport8 8750 8763 8768 v1

[catenacyber]

Link to ticket: https://redmine.openinfosecfoundation.org/issues/
https://redmine.openinfosecfoundation.org/issues/8751
https://redmine.openinfosecfoundation.org/issues/8912
https://redmine.openinfosecfoundation.org/issues/8769

Describe changes:

• backport of nfs: optionally parse nfs3 read attr-follows #16095 clean cherry-pick
• backport of detect/frame: fix assert #16094 clean cherry-pick
• backport of datasets: add size checks for hashes read #16093 unclean cherry-pick

SV_BRANCH=OISF/suricata-verify#3314

[codecov]

Codecov Report

❌ Patch coverage is 71.42857% with 4 lines in your changes missing coverage. Please review.
✅ Project coverage is 81.68%. Comparing base (9b63a58) to head (09c8299).

Additional details and impacted files

@@              Coverage Diff               @@
##           main-8.0.x   #16101      +/-   ##
==============================================
- Coverage       81.69%   81.68%   -0.02%     
==============================================
  Files            1016     1016              
  Lines          277166   277176      +10     
==============================================
- Hits           226430   226400      -30     
- Misses          50736    50776      +40     

Flag	Coverage Δ
fuzzcorpus	63.89% <33.33%> (-0.02%)	⬇️
livemode	18.63% <0.00%> (-0.05%)	⬇️
netns	20.14% <0.00%> (-0.02%)	⬇️
pcap	44.47% <16.66%> (-0.03%)	⬇️
suricata-verify	65.16% <83.33%> (-0.05%)	⬇️
unittests	58.59% <16.66%> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[suricata-qa]

Information: QA ran without warnings.

Pipeline = 33292

[victorjulien]

Merged in #16113, thanks!