Update xxhash requirement from <=3.6.0,>=1.1.0 to >=1.1.0,<=3.8.0

[dependabot]

Updates the requirements on xxhash to permit the latest version.

Release notes

Sourced from xxhash's releases.

v3.8.0

• Speed up module-level one-shot digest(), intdigest(), and hexdigest() functions by switching them to METH_FASTCALL.
• Keep one-shot argument handling consistent with hash constructors, including positional and keyword input/seed arguments, duplicate argument errors, and oversized seed wrapping.
• Fix error handling in the xxh3_128 integer digest path so allocation failures are reported cleanly.
• Fix Python 3.8 builds by adding a PyModule_AddType compatibility fallback with correct reference counting.
• Correct type stubs for xxh64_digest(), xxh64_hexdigest(), and xxh64_intdigest(), they were incorrectly aliased to xxh3_64 functions.

---

Full list of changes: ifduyue/python-xxhash@v3.7.1...v3.8.0

Changelog

Sourced from xxhash's changelog.

v3.8.0 2026-06-27

- Speed up module-level one-shot ``digest()``, ``intdigest()``, and
  ``hexdigest()`` functions by switching them to ``METH_FASTCALL``.
- Keep one-shot argument handling consistent with hash constructors, including
  positional and keyword ``input``/``seed`` arguments, duplicate argument
  errors, and oversized seed wrapping.
- Fix error handling in the ``xxh3_128`` integer digest path so allocation
  failures are reported cleanly.
- Fix Python 3.8 builds by adding a ``PyModule_AddType`` compatibility
  fallback with correct reference counting.
- Correct type stubs for ``xxh64_digest()``, ``xxh64_hexdigest()``, and
  ``xxh64_intdigest()``, they were incorrectly aliased to xxh3_64 functions.
v3.7.1 2026-06-24

• Fix memory leak in copy() and new() when memory allocation fails (rare edge case)
• Fix seed/reset state initialization in xxh32 and xxh64 (unlikely to affect normal usage)
• Replace Py_BuildValue with PyLong_FromUnsignedLong/LongLong for performance
• Update README examples to use bytes literals
• Add CodSpeed performance benchmarks and CI workflow
• Build aarch64/armv7l on native Arm runners; test against Python 3.15.0-beta.2

v3.7.0 2025-04-25

- Drop support for Python 3.7
- Build armv7l manylinux/musllinux wheels
- Build riscv64 manylinux/musllinux wheels
- Build android and ios wheels
v3.6.0 2025-10-02

• Build wheels for Python 3.14
• Python free-threading support
• Typing: Use Buffer type stubs
• Deprecate xxhash.VERSION_TUPLE, it will be removed in the next major release

v3.5.0 2024-08-17

- Build wheels for Python 3.13
v3.4.1 2023-10-05

... (truncated)

Commits

• 48c60f2 chore: release v3.8.0
• c7f2397 fix: restore PyLong_FromUnsignedLong/LongLong over Py_BuildValue
• aea7a72 test: fix positional seed tests in test_fastcall.py
• e084433 fix: correct docstring typos in xxh3_64 copy() documentation
• 414b254 fix(pyi): xxh64_digest/hexdigest/intdigest are functions
• 9af9913 fix: add PyModule_AddType fallback for Python 3.8 compatibility
• 1ecd5b4 perf: mark _get_buffer_or_str and _parse_fastcall_args as inline
• 2b6f712 fix: detect duplicate seed, expand fastcall tests
• 5d59623 fix: add NULL checks in xxh3_128_intdigest 128-bit math
• 8fe3bf4 refactor: consolidate fastcall arg parsing into _parse_fastcall_args
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #331.