Bump zstandard from 0.23.0 to 0.24.0 (#11435)

Bumps [zstandard](https://github.com/indygreg/python-zstandard) from
0.23.0 to 0.24.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/indygreg/python-zstandard/releases">zstandard's
releases</a>.</em></p>
<blockquote>
<h2>0.24.0</h2>
<h1>Backwards Compatibility Notes</h1>
<ul>
<li>Support for Python 3.8 has been dropped because it reached end of
life. Python 3.9 is the minimum supported Python version. The code
should still be compatible with Python 3.8 and removing of version
checks from <code>setup.py</code> will likely yield a working install.
However, this is not officially supported.</li>
</ul>
<h1>Changes</h1>
<ul>
<li>Bundled zstd library upgraded from 1.5.6 to 1.5.7. (<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/255">#255</a>)</li>
<li>We now use and require cffi 1.17.0 or newer. Previously, the
constraint was &gt;=1.11.0 on Python &lt;3.13.</li>
<li>The <code>pyproject.toml</code> file now defines a
<code>[project]</code> section.</li>
<li>We now use GitHub's native ARM Linux runners to build wheels and run
tests. Previously, Linux ARM wheels were built inside a QEMU virtualized
environment and we didn't run tests on this platform.</li>
<li>We now use GitHub's native ARM Windows runners to build wheels and
run tests. Previously, Windows ARM wheels were cross compiled from an
x86-64 runner and we never ran tests for the Windows ARM platform.</li>
<li>We now <code>collections.abs.Buffer</code> on Python 3.12+ instead
of <code>typing.ByteString</code>, as <code>typing.ByteString</code> was
deprecated and later removed. (<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/238">#238</a>,
<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/262">#262</a>)</li>
<li>PyO3 Rust crate upgraded from 0.21 to 0.22 (<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/257">#257</a>)
and later to 0.24.</li>
<li>Removed CI coverage for PyPy 3.9.</li>
<li>Added CI coverage for PyPy 3.11.</li>
<li>Anaconda Windows CI builds have been disabled because we're running
into an apparent conda bug.</li>
<li>Added CI coverage for Anaconda 3.12 and 3.13 on Linux and Windows
x86-64 (but the Windows builds no-op due to above issue).</li>
<li><code>get_frame_parameters()</code> now accepts an optional
<code>format</code> argument defining the zstandard frame type. You can
pass e.g. <code>zstandard.FORMAT_ZSTD1_MAGICLESS</code> to decode frames
without header magic. (<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/217">#217</a>)</li>
<li>Initial Python 3.14 support. We build wheels and have CI test
coverage.</li>
</ul>
<h1>Source Archive Publishing Error</h1>
<p>During the release process of this version, we uploaded the source
archive to PyPI after some wheels. PyPI rejected the source archive
because of presence of a <code>license-file</code> entry while using
metadata version 2.4. We manually generated the source distribution
locally. The source distribution on PyPI therefore does not match what
GitHub Actions produced.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/indygreg/python-zstandard/blob/main/docs/news.rst">zstandard's
changelog</a>.</em></p>
<blockquote>
<h1>0.24.0 (released 2025-08-17)</h1>
<h2>Changes</h2>
<ul>
<li>Bundled zstd library upgraded from 1.5.6 to 1.5.7. (<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/255">#255</a>)</li>
<li>We now use and require cffi 1.17.0 or newer. Previously, the
constraint
was &gt;=1.11.0 on Python &lt;3.13.</li>
<li>The <code>pyproject.toml</code> file now defines a
<code>[project]</code> section.</li>
<li>We now use GitHub's native ARM Linux runners to build wheels and run
tests.
Previously, Linux ARM wheels were built inside a QEMU virtualized
environment
and we didn't run tests on this platform.</li>
<li>We now use GitHub's native ARM Windows runners to build wheels and
run tests.
Previously, Windows ARM wheels were cross-compiled from an x86-64 runner
and
we never ran tests for the Windows ARM platform.</li>
<li>We now <code>collections.abs.Buffer</code> on Python 3.12+ instead
of <code>typing.ByteString</code>,
as <code>typing.ByteString</code> was deprecated and later removed. (<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/238">#238</a>,
<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/262">#262</a>)</li>
<li>PyO3 Rust crate upgraded from 0.21 to 0.22 (<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/257">#257</a>)
and later to 0.24.</li>
<li>Removed CI coverage for PyPy 3.9.</li>
<li>Added CI coverage for PyPy 3.11.</li>
<li>Anaconda Windows CI builds have been disabled because we're running
into
an apparant conda bug.</li>
<li>Added CI coverage for Anaconda 3.12 and 3.13 on Linux and Windows
x86-64
(but the Windows builds no-op due to above issue).</li>
<li><code>get_frame_parameters()</code> now accepts an optional
<code>format</code> argument
defining the zstandard frame type. You can pass e.g.
<code>zstandard.FORMAT_ZSTD1_MAGICLESS</code> to decode frames without
header magic.
(<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/217">#217</a>)</li>
<li>Initial Python 3.14 support. We build wheels and have CI test
coverage.</li>
</ul>
<h2>Backwards Compatibility Notes</h2>
<ul>
<li>Support for Python 3.8 has been dropped because it reached end of
life.
Python 3.9 is the minimum supported Python version. The code should
still be
compatible with Python 3.7 and removing of version checks from
<code>setup.py</code>
will likely yield a working install. However, this is not officially
supported.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/9223924b1db8f36cf1c7c2dcd55232093890d145"><code>9223924</code></a>
global: release 0.24.0</li>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/b63f21e75c85537feb6e9ede6b515ce1f109ac6e"><code>b63f21e</code></a>
ci: remove cibuildwheel from <code>requirements.txt</code></li>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/724df3df0ff524d6f6278e7ac1e72061f6b5bc62"><code>724df3d</code></a>
build: require cffi 1.17.0</li>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/58fca18a3aaa9a520c33cc874517fc10d36957f7"><code>58fca18</code></a>
build: use static dependency metadata</li>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/fd9553600d91626ed2070eb721bb01780cb37310"><code>fd95536</code></a>
docs: move the potential 1.0 feature list from <code>news.rst</code> to
`missing_feature...</li>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/a32e7a6ee530c37e665b97a4ac6cabeccfb1ec79"><code>a32e7a6</code></a>
docs: fix incorrect <code>dict_id()</code> reference</li>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/4110f711ca658e43b8ab03fd350ee80d22c59596"><code>4110f71</code></a>
ci: add Python 3.14 wheels and test coverage</li>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/c950bbf5c86a9641bbab7d232cc5371475c7e025"><code>c950bbf</code></a>
ci: upgrade macOS wheel environment to Python 3.13</li>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/075f8ca4eefd366f89f642037e44685953bcf1cf"><code>075f8ca</code></a>
docs: add top-level docs section for One-Shot APIs</li>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/7312fae803fb33758f9ef6f9fafd5d33f912007f"><code>7312fae</code></a>
frameparams: support defining frame format for
<code>get_frame_parameters()</code></li>
<li>Additional commits viewable in <a
href="https://github.com/indygreg/python-zstandard/compare/0.23.0...0.24.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=zstandard&package-manager=pip&previous-version=0.23.0&new-version=0.24.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

requirements/base.txt

@@ -46,5 +46,5 @@ uvloop==0.21.0 ; platform_system != "Windows" and implementation_name == "cpytho
     # via -r requirements/base.in
 yarl==1.20.1
     # via -r requirements/runtime-deps.in
-zstandard==0.23.0 ; platform_python_implementation == "CPython" and python_version < "3.14"
+zstandard==0.24.0 ; platform_python_implementation == "CPython" and python_version < "3.14"
     # via -r requirements/runtime-deps.in

requirements/constraints.txt

@@ -298,7 +298,7 @@ zlib-ng==0.5.1
     # via
     #   -r requirements/lint.in
     #   -r requirements/test.in
-zstandard==0.23.0 ; implementation_name == "cpython"
+zstandard==0.24.0 ; implementation_name == "cpython"
     # via
     #   -r requirements/lint.in
     #   -r requirements/runtime-deps.in

requirements/dev.txt

@@ -289,7 +289,7 @@ zlib-ng==0.5.1
     # via
     #   -r requirements/lint.in
     #   -r requirements/test.in
-zstandard==0.23.0 ; platform_python_implementation == "CPython" and python_version < "3.14"
+zstandard==0.24.0 ; platform_python_implementation == "CPython" and python_version < "3.14"
     # via
     #   -r requirements/lint.in
     #   -r requirements/runtime-deps.in

requirements/lint.txt

@@ -122,5 +122,5 @@ virtualenv==20.34.0
     # via pre-commit
 zlib-ng==0.5.1
     # via -r requirements/lint.in
-zstandard==0.23.0 ; implementation_name == "cpython"
+zstandard==0.24.0 ; implementation_name == "cpython"
     # via -r requirements/lint.in

requirements/runtime-deps.txt

@@ -40,5 +40,5 @@ typing-extensions==4.14.1
     #   multidict
 yarl==1.20.1
     # via -r requirements/runtime-deps.in
-zstandard==0.23.0 ; platform_python_implementation == "CPython" and python_version < "3.14"
+zstandard==0.24.0 ; platform_python_implementation == "CPython" and python_version < "3.14"
     # via -r requirements/runtime-deps.in

requirements/test.txt

@@ -147,5 +147,5 @@ yarl==1.20.1
     # via -r requirements/runtime-deps.in
 zlib-ng==0.5.1
     # via -r requirements/test.in
-zstandard==0.23.0 ; platform_python_implementation == "CPython" and python_version < "3.14"
+zstandard==0.24.0 ; platform_python_implementation == "CPython" and python_version < "3.14"
     # via -r requirements/runtime-deps.in