This is an automated email from the ASF dual-hosted git repository.

Jefffrey pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/arrow-rs.git


The following commit(s) were added to refs/heads/main by this push:
     new 2e3a24304c chore(deps): bump zstd from 0.13.3 to 0.14.0 (#11024)
2e3a24304c is described below

commit 2e3a24304ce22ac20947b8e956b55af1049dc2bd
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Wed Sep 9 09:16:28 2026 +1000

    chore(deps): bump zstd from 0.13.3 to 0.14.0 (#11024)
    
    Bumps [zstd](https://github.com/gyscos/zstd-rs) from 0.13.3 to 0.14.0.
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    
href="https://github.com/gyscos/zstd-rs/commit/648acb476da66b4bb856043c9b8ea1fdbfe69093";><code>648acb4</code></a>
    Avoid let...else in the seekable callbacks</li>
    <li><a
    
href="https://github.com/gyscos/zstd-rs/commit/e1152c1161fa6704b0b74bd538a9c92d2fe784a4";><code>e1152c1</code></a>
    Bump versions for the next release</li>
    <li><a
    
href="https://github.com/gyscos/zstd-rs/commit/7caed6e87ae89a31524018d2b3da023f3e4e724e";><code>7caed6e</code></a>
    Derive the usual traits on ResetDirective</li>
    <li><a
    
href="https://github.com/gyscos/zstd-rs/commit/bf7b1f762e5593c91f8b276eed7a15716fc14308";><code>bf7b1f7</code></a>
    Refuse to reuse a context an error may have left undefined</li>
    <li><a
    
href="https://github.com/gyscos/zstd-rs/commit/15656186f8b1e541cc86da7cade2187afca0015d";><code>1565618</code></a>
    Check the target, not the host, for MSVC</li>
    <li><a
    
href="https://github.com/gyscos/zstd-rs/commit/8315a6265d93f757a6fd8cd5b392207423731f1f";><code>8315a62</code></a>
    Return Ok(0) from Read::read for an empty buffer</li>
    <li><a
    
href="https://github.com/gyscos/zstd-rs/commit/a7cfa93a6e265ec7d89be5a6f65024dffab89f71";><code>a7cfa93</code></a>
    Keep the std gate on the Cursor WriteBuf impl</li>
    <li><a
    
href="https://github.com/gyscos/zstd-rs/commit/9bf1692593efe098ec1cf08f48c1cba149b2c672";><code>9bf1692</code></a>
    Say why the Send and Sync impls hold</li>
    <li><a
    
href="https://github.com/gyscos/zstd-rs/commit/681bcc36c49d568d439eccf6722c8a33e0f52cde";><code>681bcc3</code></a>
    Don't truncate Cursor positions on 32-bit targets</li>
    <li><a
    
href="https://github.com/gyscos/zstd-rs/commit/d5a1fdd7724c24aab5c32984cce9b6c40574dab2";><code>d5a1fdd</code></a>
    Don't hand out a &amp;mut Seekable from AdvancedSeekable</li>
    <li>Additional commits viewable in <a
    href="https://github.com/gyscos/zstd-rs/compare/v0.13.3...v0.14.0";>compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=zstd&package-manager=cargo&previous-version=0.13.3&new-version=0.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] 
<49699333+dependabot[bot]@users.noreply.github.com>
---
 Cargo.lock            | 32 +++++++++++++++++++++++++-------
 arrow-avro/Cargo.toml |  2 +-
 arrow-ipc/Cargo.toml  |  2 +-
 parquet/Cargo.toml    |  4 ++--
 4 files changed, 29 insertions(+), 11 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 39de6c0ae0..0d08210c91 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -268,7 +268,7 @@ dependencies = [
  "tempfile",
  "tokio",
  "uuid",
- "zstd",
+ "zstd 0.14.0",
 ]
 
 [[package]]
@@ -435,7 +435,7 @@ dependencies = [
  "memmap2",
  "tempfile",
  "tokio",
- "zstd",
+ "zstd 0.14.0",
 ]
 
 [[package]]
@@ -2449,7 +2449,7 @@ dependencies = [
  "tempfile",
  "tokio",
  "twox-hash",
- "zstd",
+ "zstd 0.14.0",
 ]
 
 [[package]]
@@ -3758,7 +3758,7 @@ dependencies = [
  "tower-service",
  "tracing",
  "webpki-roots",
- "zstd",
+ "zstd 0.13.3",
 ]
 
 [[package]]
@@ -4549,7 +4549,16 @@ version = "0.13.3"
 source = "registry+https://github.com/rust-lang/crates.io-index";
 checksum = "e91ee311a569c327171651566e07972200e76fcfe2242a4fa446149a3881c08a"
 dependencies = [
- "zstd-safe",
+ "zstd-safe 7.2.4",
+]
+
+[[package]]
+name = "zstd"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index";
+checksum = "bf06bd8162af0734b344780deb55b42a2429ae430870d13fcc12f238e880fe6e"
+dependencies = [
+ "zstd-safe 8.0.0",
 ]
 
 [[package]]
@@ -4561,11 +4570,20 @@ dependencies = [
  "zstd-sys",
 ]
 
+[[package]]
+name = "zstd-safe"
+version = "8.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index";
+checksum = "ae42c0555055784c70058d19ba8e275528e8a99a706684868ace5da4e716a4ab"
+dependencies = [
+ "zstd-sys",
+]
+
 [[package]]
 name = "zstd-sys"
-version = "2.0.16+zstd.1.5.7"
+version = "2.1.0+zstd.1.5.7"
 source = "registry+https://github.com/rust-lang/crates.io-index";
-checksum = "91e19ebc2adc8f83e43039e79776e3fda8ca919132d68a1fed6a5faca2683748"
+checksum = "0ef0a8027ec3ee71300ab3bcbcd0393f434aa72b91ca6d635a39941deae8eea0"
 dependencies = [
  "cc",
  "pkg-config",
diff --git a/arrow-avro/Cargo.toml b/arrow-avro/Cargo.toml
index e59048730f..d776a20a56 100644
--- a/arrow-avro/Cargo.toml
+++ b/arrow-avro/Cargo.toml
@@ -69,7 +69,7 @@ flate2 = { version = "1.0", default-features = false, 
features = [
 ], optional = true }
 futures = { version = "0.3", default-features = false, features = ["std"], 
optional = true }
 snap = { version = "1.0", default-features = false, optional = true }
-zstd = { version = "0.13", default-features = false, optional = true }
+zstd = { version = "0.14", default-features = false, optional = true }
 bzip2 = { version = "0.6.0", optional = true }
 xz = { package = "liblzma", version = "0.4", default-features = false, 
optional = true }
 crc = { version = "3.0", optional = true }
diff --git a/arrow-ipc/Cargo.toml b/arrow-ipc/Cargo.toml
index f58bdbe86c..71c4a4323f 100644
--- a/arrow-ipc/Cargo.toml
+++ b/arrow-ipc/Cargo.toml
@@ -43,7 +43,7 @@ arrow-schema = { workspace = true }
 arrow-select = { workspace = true}
 flatbuffers = { version = "25.2.10", default-features = false }
 lz4_flex = { version = "0.14", default-features = false, features = ["std", 
"frame"], optional = true }
-zstd = { version = "0.13.0", default-features = false, optional = true }
+zstd = { version = "0.14.0", default-features = false, optional = true }
 
 [features]
 default = []
diff --git a/parquet/Cargo.toml b/parquet/Cargo.toml
index 9df1265620..e4d4855d99 100644
--- a/parquet/Cargo.toml
+++ b/parquet/Cargo.toml
@@ -56,7 +56,7 @@ brotli = { version = "9.0", default-features = false, 
features = ["std"], option
 # To use `flate2` you must enable either the `flate2-zlib-rs` or 
`flate2-rust_backend` backends
 flate2 = { version = "1.1", default-features = false, optional = true }
 lz4_flex = { version = "0.14", default-features = false, features = ["std", 
"frame"], optional = true }
-zstd = { version = "0.13", optional = true, default-features = false }
+zstd = { version = "0.14", optional = true, default-features = false }
 chrono = { workspace = true }
 num-bigint = { version = "0.5", default-features = false }
 num-integer = { version = "0.1.46", default-features = false, features = 
["std"] }
@@ -84,7 +84,7 @@ insta = { workspace = true, default-features = true }
 brotli = { version = "9.0", default-features = false, features = ["std"] }
 flate2 = { version = "1.0", default-features = false, features = 
["rust_backend"] }
 lz4_flex = { version = "0.14", default-features = false, features = ["std", 
"frame"] }
-zstd = { version = "0.13", default-features = false }
+zstd = { version = "0.14", default-features = false }
 serde_json = { version = "1.0", features = ["std"], default-features = false }
 arrow = { workspace = true, features = ["ipc", "test_utils", "prettyprint", 
"json"] }
 arrow-cast = { workspace = true }

Reply via email to