build(deps): bump zstandard from 0.23.0 to 0.24.0

[dependabot]

Bumps zstandard from 0.23.0 to 0.24.0.

Release notes

Sourced from zstandard's releases.

0.24.0

Backwards Compatibility Notes

• Support for Python 3.8 has been dropped because it reached end of life. Python 3.9 is the minimum supported Python version. The code should still be compatible with Python 3.8 and removing of version checks from setup.py will likely yield a working install. However, this is not officially supported.

Changes

• Bundled zstd library upgraded from 1.5.6 to 1.5.7. (#255)
• We now use and require cffi 1.17.0 or newer. Previously, the constraint was >=1.11.0 on Python <3.13.
• The pyproject.toml file now defines a [project] section.
• We now use GitHub's native ARM Linux runners to build wheels and run tests. Previously, Linux ARM wheels were built inside a QEMU virtualized environment and we didn't run tests on this platform.
• We now use GitHub's native ARM Windows runners to build wheels and run tests. Previously, Windows ARM wheels were cross compiled from an x86-64 runner and we never ran tests for the Windows ARM platform.
• We now collections.abs.Buffer on Python 3.12+ instead of typing.ByteString, as typing.ByteString was deprecated and later removed. (#238, #262)
• PyO3 Rust crate upgraded from 0.21 to 0.22 (#257) and later to 0.24.
• Removed CI coverage for PyPy 3.9.
• Added CI coverage for PyPy 3.11.
• Anaconda Windows CI builds have been disabled because we're running into an apparent conda bug.
• Added CI coverage for Anaconda 3.12 and 3.13 on Linux and Windows x86-64 (but the Windows builds no-op due to above issue).
• get_frame_parameters() now accepts an optional format argument defining the zstandard frame type. You can pass e.g. zstandard.FORMAT_ZSTD1_MAGICLESS to decode frames without header magic. (#217)
• Initial Python 3.14 support. We build wheels and have CI test coverage.

Source Archive Publishing Error

During the release process of this version, we uploaded the source archive to PyPI after some wheels. PyPI rejected the source archive because of presence of a license-file entry while using metadata version 2.4. We manually generated the source distribution locally. The source distribution on PyPI therefore does not match what GitHub Actions produced.

Changelog

Sourced from zstandard's changelog.

0.24.0 (released 2025-08-17)

Changes

• Bundled zstd library upgraded from 1.5.6 to 1.5.7. (#255)
• We now use and require cffi 1.17.0 or newer. Previously, the constraint was >=1.11.0 on Python <3.13.
• The pyproject.toml file now defines a [project] section.
• We now use GitHub's native ARM Linux runners to build wheels and run tests. Previously, Linux ARM wheels were built inside a QEMU virtualized environment and we didn't run tests on this platform.
• We now use GitHub's native ARM Windows runners to build wheels and run tests. Previously, Windows ARM wheels were cross-compiled from an x86-64 runner and we never ran tests for the Windows ARM platform.
• We now collections.abs.Buffer on Python 3.12+ instead of typing.ByteString, as typing.ByteString was deprecated and later removed. (#238, #262)
• PyO3 Rust crate upgraded from 0.21 to 0.22 (#257) and later to 0.24.
• Removed CI coverage for PyPy 3.9.
• Added CI coverage for PyPy 3.11.
• Anaconda Windows CI builds have been disabled because we're running into an apparant conda bug.
• Added CI coverage for Anaconda 3.12 and 3.13 on Linux and Windows x86-64 (but the Windows builds no-op due to above issue).
• get_frame_parameters() now accepts an optional format argument defining the zstandard frame type. You can pass e.g. zstandard.FORMAT_ZSTD1_MAGICLESS to decode frames without header magic. (#217)
• Initial Python 3.14 support. We build wheels and have CI test coverage.

Backwards Compatibility Notes

• Support for Python 3.8 has been dropped because it reached end of life. Python 3.9 is the minimum supported Python version. The code should still be compatible with Python 3.7 and removing of version checks from setup.py will likely yield a working install. However, this is not officially supported.

Commits

• 9223924 global: release 0.24.0
• b63f21e ci: remove cibuildwheel from requirements.txt
• 724df3d build: require cffi 1.17.0
• 58fca18 build: use static dependency metadata
• fd95536 docs: move the potential 1.0 feature list from news.rst to `missing_feature...
• a32e7a6 docs: fix incorrect dict_id() reference
• 4110f71 ci: add Python 3.14 wheels and test coverage
• c950bbf ci: upgrade macOS wheel environment to Python 3.13
• 075f8ca docs: add top-level docs section for One-Shot APIs
• 7312fae frameparams: support defining frame format for get_frame_parameters()
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)