chore(deps): update rust crate zstd to 0.14

[ferrlabs-renovate]

This PR contains the following updates:

Package	Type	Update	Change
zstd	workspace.dependencies	minor	0.13 → 0.14

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

gyscos/zstd-rs (zstd)

v0.14.0

Compare Source

Breaking

• The with_prepared_dictionary() constructors now borrow the dictionary for as long as the stream (#​372). The dictionary is registered with the underlying context by pointer, so dropping it early left the stream with a dangling pointer - reachable from safe code.
• The project is now licensed under BSD-3-Clause (#​360, #​314).
• Requires zstd-safe 8.0.0.

Fixed

• Decoder::finish() now consumes the rest of the frame, so the reader is handed back positioned just after it (#​251, #​255). zstd can produce the last of the decoded data before it has read the frame epilogue, so a caller who stops reading once it has the bytes it wanted used to get its reader back pointing inside the frame. Note that finish() may now read from the underlying reader; Decoder::finish_frame() is the same operation with the error surfaced.
• Read::read() with an empty buffer returns Ok(0) instead of an error (#​318).

New

• Decoder::finish_frame(), to consume the rest of the current frame explicitly.
• bulk::Compressor::set_pledged_src_size() (#​320).
• The missing with_context constructors (#​338).
• cmake and vendored features, forwarded to zstd-safe.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[ferrfleet]

zstd 0.13 → 0.14: breaking changes are the with_prepared_dictionary() lifetime change (dictionary now borrowed for the stream's life) and Decoder::finish() now consuming the rest of the frame. Requires zstd-safe 8.0.0 (Cargo.lock already reflects this).

Checked usage in this repo: only zstd::bulk::compress / zstd::bulk::decompress in server/src/storage/codec.rs. No dictionary API, no streaming Decoder/Encoder usage, so neither breaking change applies here.

CI: no failed jobs, rest still in progress at time of review. Clean bump.

[github-actions]

SonarQube — aucune nouvelle issue

_{Comparaison entre le projet bac à sable de cette PR et la branche par défaut : SonarQube Community n'analyse pas les PR, ce delta est calculé côté CI. Détail}