build(deps): Bump zstd.version from 0.12 to 0.13 - #401

Sourced from io.github.dfa1.zstd:zstd's releases.

v0.13

• Project renamed zstd-java → zstd-ffm (GitHub repo, parent POM artifactId, SonarCloud project key). Published Maven coordinates (io.github.dfa1.zstd:zstd, :zstd-platform, :bom, native classifiers) are unaffected — only the internal parent-aggregator artifactId changed.

Fixed

• ZstdCompressContext/ZstdDecompressContext.refDictionary(...) held a raw native pointer to the referenced ZstdCompressDictionary/ ZstdDecompressDictionary: closing that dictionary while a context still referenced it freed the pointer out from under the context, corrupting or crashing every subsequent compress/decompress call. Both dictionary types now share ownership with every referencing context via NativePointerWithRefCount, so the native dictionary is freed only once every borrower — including the dictionary's own constructor reference — has let go. refDictionary(...) on an already-closed context, and loadDictionary(...)/refPrefix(...) superseding a referenced dictionary, now also drop the reference correctly instead of leaking it. (#119)

Sourced from io.github.dfa1.zstd:zstd's changelog.

[0.13] - 2026-09-12

• Project renamed zstd-java → zstd-ffm (GitHub repo, parent POM artifactId, SonarCloud project key). Published Maven coordinates (io.github.dfa1.zstd:zstd, :zstd-platform, :bom, native classifiers) are unaffected — only the internal parent-aggregator artifactId changed.

Fixed

• ZstdCompressContext/ZstdDecompressContext.refDictionary(...) held a raw native pointer to the referenced ZstdCompressDictionary/ ZstdDecompressDictionary: closing that dictionary while a context still referenced it freed the pointer out from under the context, corrupting or crashing every subsequent compress/decompress call. Both dictionary types now share ownership with every referencing context via NativePointerWithRefCount, so the native dictionary is freed only once every borrower — including the dictionary's own constructor reference — has let go. refDictionary(...) on an already-closed context, and loadDictionary(...)/refPrefix(...) superseding a referenced dictionary, now also drop the reference correctly instead of leaking it. (#119)

• 7ba13e1 release: 0.13
• ad453e0 docs: bump stale dependency-snippet versions to 0.13
• 74b163d fix: wire NativePointerWithRefCount into ref'd compress/decompress dictionari...
• 21da3d4 build(deps): Bump the maven-minor-patch group with 3 updates (#117)
• e702fe4 build(deps-dev): Bump com.github.luben:zstd-jni (#118)
• 8d2f324 build(deps-dev): Bump com.github.luben:zstd-jni (#114)
• 7e26a8a build(deps): Bump com.puppycrawl.tools:checkstyle from 13.10.0 to 14.0.0 (#113)
• e822e2c build(deps): Bump org.pitest:pitest-maven in the maven-minor-patch group (#115)
• 581bee5 build(deps): Bump actions/setup-java in the actions-all group (#116)
• 047958c feat: add NativePointerWithRefCount for shared native ownership
• Additional commits viewable in compare view

Sourced from io.github.dfa1.zstd:zstd-platform's releases.

v0.13

• Project renamed zstd-java → zstd-ffm (GitHub repo, parent POM artifactId, SonarCloud project key). Published Maven coordinates (io.github.dfa1.zstd:zstd, :zstd-platform, :bom, native classifiers) are unaffected — only the internal parent-aggregator artifactId changed.

Fixed

• ZstdCompressContext/ZstdDecompressContext.refDictionary(...) held a raw native pointer to the referenced ZstdCompressDictionary/ ZstdDecompressDictionary: closing that dictionary while a context still referenced it freed the pointer out from under the context, corrupting or crashing every subsequent compress/decompress call. Both dictionary types now share ownership with every referencing context via NativePointerWithRefCount, so the native dictionary is freed only once every borrower — including the dictionary's own constructor reference — has let go. refDictionary(...) on an already-closed context, and loadDictionary(...)/refPrefix(...) superseding a referenced dictionary, now also drop the reference correctly instead of leaking it. (#119)

Sourced from io.github.dfa1.zstd:zstd-platform's changelog.

[0.13] - 2026-09-12

• Project renamed zstd-java → zstd-ffm (GitHub repo, parent POM artifactId, SonarCloud project key). Published Maven coordinates (io.github.dfa1.zstd:zstd, :zstd-platform, :bom, native classifiers) are unaffected — only the internal parent-aggregator artifactId changed.

Fixed

• ZstdCompressContext/ZstdDecompressContext.refDictionary(...) held a raw native pointer to the referenced ZstdCompressDictionary/ ZstdDecompressDictionary: closing that dictionary while a context still referenced it freed the pointer out from under the context, corrupting or crashing every subsequent compress/decompress call. Both dictionary types now share ownership with every referencing context via NativePointerWithRefCount, so the native dictionary is freed only once every borrower — including the dictionary's own constructor reference — has let go. refDictionary(...) on an already-closed context, and loadDictionary(...)/refPrefix(...) superseding a referenced dictionary, now also drop the reference correctly instead of leaking it. (#119)

• 7ba13e1 release: 0.13
• ad453e0 docs: bump stale dependency-snippet versions to 0.13
• 74b163d fix: wire NativePointerWithRefCount into ref'd compress/decompress dictionari...
• 21da3d4 build(deps): Bump the maven-minor-patch group with 3 updates (#117)
• e702fe4 build(deps-dev): Bump com.github.luben:zstd-jni (#118)
• 8d2f324 build(deps-dev): Bump com.github.luben:zstd-jni (#114)
• 7e26a8a build(deps): Bump com.puppycrawl.tools:checkstyle from 13.10.0 to 14.0.0 (#113)
• e822e2c build(deps): Bump org.pitest:pitest-maven in the maven-minor-patch group (#115)
• 581bee5 build(deps): Bump actions/setup-java in the actions-all group (#116)
• 047958c feat: add NativePointerWithRefCount for shared native ownership
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)