Skip to content

Bump github.com/oschwald/maxminddb-golang/v2 from 2.6.0 to 2.7.0 - #298

Merged
oschwald merged 2 commits into
mainfrom
dependabot/go_modules/github.com/oschwald/maxminddb-golang/v2-2.7.0
Oct 14, 2026
Merged

oschwald merged 2 commits into
mainfrom
dependabot/go_modules/github.com/oschwald/maxminddb-golang/v2-2.7.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/oschwald/maxminddb-golang/v2 from 2.6.0 to 2.7.0.

Release notes

Sourced from github.com/oschwald/maxminddb-golang/v2's releases.

2.7.0

  • Go 1.26 or later is now required. CI now tests Go 1.26 and 1.27.
  • Fixed Reader.Verify() rejecting a search-tree record that points to a value nested in another data record. The MaxMind DB spec permits this, and mmdbwriter can write such databases. GitHub #250.
  • Decoding now rejects extended type bytes 0 and 250 through 255, which the MaxMind DB spec does not define. Before, they decoded as other types. For example, 0x00 0xfb decoded as a string.
  • Reader.Verify() now rejects a data pointer that points into the middle of a field.
  • Reader.Verify() now also checks the metadata section. Its pointers must point to the start of a field, and all data after the metadata map must be valid values.
Changelog

Sourced from github.com/oschwald/maxminddb-golang/v2's changelog.

2.7.0 - 2026-09-29

  • Go 1.26 or later is now required. CI now tests Go 1.26 and 1.27.
  • Fixed Reader.Verify() rejecting a search-tree record that points to a value nested in another data record. The MaxMind DB spec permits this, and mmdbwriter can write such databases. GitHub #250.
  • Decoding now rejects extended type bytes 0 and 250 through 255, which the MaxMind DB spec does not define. Before, they decoded as other types. For example, 0x00 0xfb decoded as a string.
  • Reader.Verify() now rejects a data pointer that points into the middle of a field.
  • Reader.Verify() now also checks the metadata section. Its pointers must point to the start of a field, and all data after the metadata map must be valid values.
Commits
  • e228017 Set release date and set version in doc
  • faf39ba Merge pull request #247 from oschwald/dependabot/go_modules/golang.org/x/tool...
  • 8002482 Merge pull request #249 from database64128/v6-zone
  • 737b5b3 Merge pull request #254 from oschwald/dependabot/github_actions/github/codeql...
  • 5de4d13 Merge pull request #255 from oschwald/greg/stf-1863
  • 1167020 Check metadata pointers and the values after the metadata map
  • 6c3604e Reject data pointers that point into the middle of a field
  • 7e05d3d Reject extended type bytes outside the spec
  • 00b036c Accept search-tree records that point to nested fields
  • 731ece0 Bump github/codeql-action from 4.37.9 to 4.38.2
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/oschwald/maxminddb-golang/v2](https://github.com/oschwald/maxminddb-golang) from 2.6.0 to 2.7.0.
- [Release notes](https://github.com/oschwald/maxminddb-golang/releases)
- [Changelog](https://github.com/oschwald/maxminddb-golang/blob/main/CHANGELOG.md)
- [Commits](oschwald/maxminddb-golang@v2.6.0...v2.7.0)

---
updated-dependencies:
- dependency-name: github.com/oschwald/maxminddb-golang/v2
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 13, 2026
maxminddb-golang v2.7.0 requires Go 1.26. Remove Go 1.25 from the CI
matrix, add Go 1.27, and set the golangci-lint Go version to 1.26.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@oschwald
oschwald merged commit c3ce82b into main Oct 14, 2026
13 of 15 checks passed
@oschwald
oschwald deleted the dependabot/go_modules/github.com/oschwald/maxminddb-golang/v2-2.7.0 branch October 14, 2026 20:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Development

Successfully merging this pull request may close these issues.

2 participants