build(deps): bump zstandard from 0.15.2 to 0.17.0 in /bot

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps zstandard from 0.15.2 to 0.17.0.

Release notes

Sourced from zstandard's releases.

0.16.0

Backwards Compatibility Notes

• Support for Python 3.5 has been dropped. Python 3.6 is now the minimum required Python version.

Changes

• Bundled zstd library upgraded from 1.4.8 to 1.5.0.
• manylinux2014_aarch64 wheels are now being produced for CPython 3.6+. (#145).
• Wheels are now being produced for CPython 3.10.
• Arguments to ZstdCompressor() and ZstdDecompressor() are now all optional in the C backend and an explicit None value is accepted. Before, the C backend wouldn't accept an explicit None value (but the CFFI backend would). The new behavior should be consistent between the backends. (#153)

Changelog

Sourced from zstandard's changelog.

0.17.0 (released 2021-01-18)

Backwards Compatibility Notes

• ZstdCompressionWriter and ZstdDecompressionWriter now implement __iter__() and __next__(). The methods always raise io.UnsupportedOperation. The added methods are part of the io.IOBase abstract base class / interface and help ensure instances look like other I/O types. (#167, #168)
• The HASHLOG3_MAX constant has been removed since it is no longer defined in zstd 1.5.1.

Bug Fixes

• The ZstdCompressionReader, ZstdCompressionWriter, ZstdDecompressionReader, and ZstdDecompressionWriter types in the C backend now tracks their closed attribute using the proper C type. Before, due to a mismatch between the C struct type and the type declared to Python, Python could read the wrong bits on platforms like s390x and incorrectly report the value of the closed attribute to Python. (#105, #164)

Changes

• Bundled zstd library upgraded from 1.5.0 to 1.5.1.
• The C backend now exposes the symbols ZstdCompressionReader, ZstdCompressionWriter, ZstdDecompressionReader, and ZstdDecompressionWriter. This should match the behavior of the CFFI backend. (#165)
• ZstdCompressionWriter and ZstdDecompressionWriter now implement __iter__ and __next__, which always raise io.UnsupportedOperation.
• Documentation on thread safety has been updated to note that derived objects like ZstdCompressionWriter have the same thread unsafety as the contexts they were derived from. (#166)

0.16.0 (released 2021-10-16)

Backwards Compatibility Notes

• Support for Python 3.5 has been dropped. Python 3.6 is now the minimum required Python version.

Changes

... (truncated)

Commits

• f753b8d global: release version 0.17.0
• 9641413 global: reflect zstd 1.5.1 upgrade
• 57be05b zstd: initialize blockProperties to avoid compiler warning
• 970d822 global: remove HASHLOG3_MAX constant
• a76c72d zstd: upgrade vendored zstd to 1.5.1
• 82eb028 c-ext: remove unused totalOutputSize variable
• 1174d91 ci: upgrade packages
• 0cf3f06 ci: pin cibuildwheel to 2.1.3
• 0cc3af3 docs: expand thread safety documentation to cover derived values
• 712d113 docs: use multiple backticks in rst
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)