Bump maxminddb from 0.30.3 to 0.31.0

[dependabot]

Bumps maxminddb from 0.30.3 to 0.31.0.

Release notes

Sourced from maxminddb's releases.

0.31.0

• Fixed a denial-of-service issue when decoding records or metadata. A crafted database could repeatedly reference shared data, causing excessive CPU and memory use. Decoding now limits the number of values and the amount of string and byte data expanded in a single operation. Operations that exceed these limits return MaxMindDbError::ResourceLimit.
• Limited subdivision lists in the built-in City and Enterprise types to 32 entries to prevent excessive allocation from untrusted data.
• Reader::verify() now checks data referenced by unknown metadata fields.
• Limited the work performed by Reader::verify() to prevent excessive CPU use from databases with overlapping string payloads. Verification returns MaxMindDbError::ResourceLimit when this limit is exceeded.
• Improved record decoding performance by accelerating short ASCII string validation and inlining decoding entry points.

Changelog

Sourced from maxminddb's changelog.

0.31.0 - 2026-09-07

• Fixed a denial-of-service issue when decoding records or metadata. A crafted database could repeatedly reference shared data, causing excessive CPU and memory use. Decoding now limits the number of values and the amount of string and byte data expanded in a single operation. Operations that exceed these limits return MaxMindDbError::ResourceLimit.
• Limited subdivision lists in the built-in City and Enterprise types to 32 entries to prevent excessive allocation from untrusted data.
• Reader::verify() now checks data referenced by unknown metadata fields.
• Limited the work performed by Reader::verify() to prevent excessive CPU use from databases with overlapping string payloads. Verification returns MaxMindDbError::ResourceLimit when this limit is exceeded.
• Improved record decoding performance by accelerating short ASCII string validation and inlining decoding entry points.

Commits

• 68a981d Set release date
• 5f7c43e Merge pull request #126 from oschwald/dependabot/github_actions/github/codeql...
• d00d4fe Merge pull request #125 from oschwald/greg/stf-1488
• 149273e Keep release version updates consistent and failure-atomic
• 374fce3 Bound aggregate database verification work
• 4f498d3 Optimize short string validation and record decoding
• 7ad8bad Report absolute invalid-database offsets from reader operations
• 94eb383 Verify data referenced by unknown metadata fields
• 1f13875 Limit built-in subdivision lists during deserialization
• 215e598 Bound record and metadata decoding against amplification
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)