Skip to content

Bump maxminddb from 0.29.0 to 0.30.0 - #217

Merged
elrido merged 1 commit into
masterfrom
dependabot/cargo/maxminddb-0.30.0
Aug 7, 2026
Merged

Bump maxminddb from 0.29.0 to 0.30.0#217
elrido merged 1 commit into
masterfrom
dependabot/cargo/maxminddb-0.30.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 25, 2026

Copy link
Copy Markdown
Contributor

Bumps maxminddb from 0.29.0 to 0.30.0.

Release notes

Sourced from maxminddb's releases.

0.30.0

  • Added deserialize_any_with_raw_strings() for Serde-based format adapters to validate MMDB strings while constructing another runtime's native string type, avoiding duplicate UTF-8 validation without unsafe Rust. Adapters remain responsible for strict UTF-8 validation.
  • Fixed network iteration on cyclic or over-deep corrupt search trees so it returns an error instead of looping indefinitely.
  • Fixed decode_path() error rendering for extreme negative indexes and reduced path traversal header parsing.
  • Removed decoder logging checks from hot deserialization paths.
  • Fixed verify() to validate shared data-section pointer targets once, reject pointer cycles, invalid scalar encodings, and impossible container sizes.
Changelog

Sourced from maxminddb's changelog.

0.30.0 - 2026-07-18

  • Added deserialize_any_with_raw_strings() for Serde-based format adapters to validate MMDB strings while constructing another runtime's native string type, avoiding duplicate UTF-8 validation without unsafe Rust. Adapters remain responsible for strict UTF-8 validation.
  • Fixed network iteration on cyclic or over-deep corrupt search trees so it returns an error instead of looping indefinitely.
  • Fixed decode_path() error rendering for extreme negative indexes and reduced path traversal header parsing.
  • Removed decoder logging checks from hot deserialization paths.
  • Fixed verify() to validate shared data-section pointer targets once, reject pointer cycles, invalid scalar encodings, and impossible container sizes.
Commits
  • fceaa66 Prepare v0.30.0 release
  • 770547a Set release date
  • 68f7876 Merge pull request #118 from oschwald/greg/raw-string-deserialization
  • 64107cd Clarify unsafe string decoding use case
  • 35ade52 Clarify raw string adapter contract
  • 37b3b66 Consolidate dynamic decoder dispatch
  • f04108b Expand raw string decoder coverage
  • 93a7d3b Expose raw string bytes to Serde adapters
  • 9f194b4 Merge pull request #117 from oschwald/greg/harden-reader
  • f8cd8eb Share search tree node decoding
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [maxminddb](https://github.com/oschwald/maxminddb-rust) from 0.29.0 to 0.30.0.
- [Release notes](https://github.com/oschwald/maxminddb-rust/releases)
- [Changelog](https://github.com/oschwald/maxminddb-rust/blob/main/CHANGELOG.md)
- [Commits](oschwald/maxminddb-rust@v0.29.0...v0.30.0)

---
updated-dependencies:
- dependency-name: maxminddb
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 25, 2026
@elrido
elrido merged commit b9c3c38 into master Aug 7, 2026
1 check passed
@dependabot
dependabot Bot deleted the dependabot/cargo/maxminddb-0.30.0 branch August 7, 2026 19:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant