maxminddb-rust 0.7.0__tar.gz → 0.9.0__tar.gz

{maxminddb_rust-0.7.0 → maxminddb_rust-0.9.0}/.github/dependabot.yml

@@ -8,7 +8,9 @@ updates:
       time: "14:00"
     open-pull-requests-limit: 10
     cooldown:
-      default-days: 4
+      default-days: 7
+    allow:
+      - dependency-type: all
 
   - package-ecosystem: pip
     directory: /
@@ -17,7 +19,9 @@ updates:
       time: "14:00"
     open-pull-requests-limit: 10
     cooldown:
-      default-days: 4
+      default-days: 7
+    allow:
+      - dependency-type: all
 
   - package-ecosystem: github-actions
     directory: /
@@ -25,4 +29,12 @@ updates:
       interval: daily
       time: "14:00"
     cooldown:
-      default-days: 4
+      default-days: 7
+
+  - package-ecosystem: gitsubmodule
+    directory: /
+    schedule:
+      interval: daily
+      time: "14:00"
+    cooldown:
+      default-days: 7

{maxminddb_rust-0.7.0 → maxminddb_rust-0.9.0}/.github/workflows/benchmark.yml

@@ -38,19 +38,19 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
           persist-credentials: false
           submodules: recursive
 
       - name: Install Rust
-        uses: dtolnay/rust-toolchain@67ef31d5b988238dd797d409d6f9574278e20537 # master
+        uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8 # master
         with:
           toolchain: stable
 
       - name: Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
 
       - name: Run benchmark comparison
         env:
@@ -73,7 +73,7 @@ jobs:
             --json-output benchmark-results.json
 
       - name: Upload benchmark results
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         if: always()
         with:
           name: benchmark-results

{maxminddb_rust-0.7.0 → maxminddb_rust-0.9.0}/.github/workflows/codeql.yml

@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 2
           persist-credentials: false
@@ -31,17 +31,17 @@ jobs:
         run: git checkout HEAD^2
 
       - name: Set up Python
-        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: "3.x"
 
       - name: Install Rust
-        uses: dtolnay/rust-toolchain@67ef31d5b988238dd797d409d6f9574278e20537 # master
+        uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8 # master
         with:
           toolchain: stable
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4.36.0
+        uses: github/codeql-action/init@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3
         with:
           languages: python, rust
 
@@ -52,4 +52,4 @@ jobs:
         run: maturin build --release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4.36.0
+        uses: github/codeql-action/analyze@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3

{maxminddb_rust-0.7.0 → maxminddb_rust-0.9.0}/.github/workflows/lint.yml

@@ -13,12 +13,12 @@ jobs:
     name: Clippy
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
       - name: Install Rust
-        uses: dtolnay/rust-toolchain@67ef31d5b988238dd797d409d6f9574278e20537 # master
+        uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8 # master
         with:
           toolchain: stable
           components: clippy
@@ -30,12 +30,12 @@ jobs:
     name: Rustfmt
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
       - name: Install Rust
-        uses: dtolnay/rust-toolchain@67ef31d5b988238dd797d409d6f9574278e20537 # master
+        uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8 # master
         with:
           toolchain: stable
           components: rustfmt
@@ -47,7 +47,7 @@ jobs:
     name: Ruff
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
@@ -64,14 +64,14 @@ jobs:
     name: Prettier
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
-          node-version: "20"
+          node-version: "26"
 
       - name: Install Prettier
         run: npm install -g prettier

{maxminddb_rust-0.7.0 → maxminddb_rust-0.9.0}/.github/workflows/release.yml

@@ -34,15 +34,15 @@ jobs:
             target: x86_64
           - os: windows-latest
             target: aarch64
-            python_versions: "3.11 3.12 3.13 3.14"
+            python_versions: "3.11 3.12 3.13 3.14 3.14t 3.15 3.15t"
 
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
       - name: Set up Python
-        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: "3.x"
 
@@ -57,7 +57,7 @@ jobs:
 
       - name: Set up QEMU
         if: runner.os == 'Linux' && matrix.target == 'aarch64'
-        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
+        uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
         with:
           platforms: arm64
 
@@ -65,12 +65,12 @@ jobs:
         uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
         with:
           target: ${{ matrix.target }}
-          args: --release --out dist --interpreter ${{ matrix.python_versions || '3.8 3.9 3.10 3.11 3.12 3.13 3.14 3.14t' }}
+          args: --release --out dist --interpreter ${{ matrix.python_versions || '3.9 3.10 3.11 3.12 3.13 3.14 3.14t 3.15 3.15t' }}
           sccache: "false"
           manylinux: auto
 
       - name: Upload wheels
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: maxminddb-rust-whl-${{ matrix.os }}-${{ matrix.target }}
           path: dist
@@ -79,7 +79,7 @@ jobs:
     name: Build source distribution
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
@@ -90,7 +90,7 @@ jobs:
           args: --out dist
 
       - name: Upload sdist
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: maxminddb-rust-sdist
           path: dist
@@ -100,23 +100,23 @@ jobs:
     runs-on: ubuntu-latest
     env:
       CIBW_BUILD: cp314-pyodide_wasm32
-      CIBW_DEPENDENCY_VERSIONS_PYODIDE: "packages: pyodide-build==0.35.0"
+      CIBW_DEPENDENCY_VERSIONS_PYODIDE: "packages: pyodide-build==0.39.3"
       CIBW_ENVIRONMENT: CARGO_PROFILE_RELEASE_PANIC=abort
       CIBW_PLATFORM: pyodide
-      CIBW_PYODIDE_VERSION: "314.0.0"
+      CIBW_PYODIDE_VERSION: "314.0.7"
       CIBW_TEST_COMMAND: >-
         python -c "import maxminddb_rust; reader =
         maxminddb_rust.open_database('{project}/tests/data/test-data/GeoIP2-City-Test.mmdb');
         assert reader.get('81.2.69.160')['country']['iso_code'] == 'GB'"
       RUSTUP_TOOLCHAIN: "1.93.0"
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
           submodules: recursive
 
       - name: Set up Python
-        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: "3.x"
 
@@ -127,10 +127,10 @@ jobs:
             --target wasm32-unknown-emscripten
 
       - name: Build and test Pyodide wheel
-        uses: pypa/cibuildwheel@294735312765b09d24a2fbec22660ce817587d55 # v4.1.0
+        uses: pypa/cibuildwheel@f9b966cfadf4109556cadc5bb39ddb72d0ce664e # v4.3.5
 
       - name: Upload Pyodide wheels
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: maxminddb-rust-whl-pyodide-wasm32
           path: wheelhouse/*.whl
@@ -145,11 +145,11 @@ jobs:
       id-token: write
     steps:
       - name: Download artifacts
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           pattern: maxminddb-rust-*
           path: dist
           merge-multiple: true
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
+        uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3

{maxminddb_rust-0.7.0 → maxminddb_rust-0.9.0}/.github/workflows/test.yml

@@ -17,22 +17,22 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13", "3.14"]
+        python-version: ["3.9", "3.10", "3.11", "3.12", "3.13", "3.14", "3.15"]
         os: [ubuntu-latest, macos-latest, windows-latest]
 
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
           submodules: recursive
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Rust
-        uses: dtolnay/rust-toolchain@67ef31d5b988238dd797d409d6f9574278e20537 # master
+        uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8 # master
         with:
           toolchain: stable
 
@@ -51,22 +51,27 @@ jobs:
         run: pytest -v tests/
 
   test-free-threaded:
-    name: Test free-threaded Python 3.14
-    runs-on: ubuntu-latest
+    name: Test free-threaded Python ${{ matrix.python-version }} on ${{ matrix.os }}
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.14t", "3.15t"]
+        os: [ubuntu-latest, macos-latest, windows-latest]
 
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
           submodules: recursive
 
-      - name: Set up free-threaded Python 3.14
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+      - name: Set up free-threaded Python ${{ matrix.python-version }}
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
-          python-version: "3.14t"
+          python-version: ${{ matrix.python-version }}
 
       - name: Install Rust
-        uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # master
+        uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8 # master
         with:
           toolchain: stable
 

{maxminddb_rust-0.7.0 → maxminddb_rust-0.9.0}/.github/workflows/zizmor.yml

@@ -17,9 +17,9 @@ jobs:
       security-events: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
+        uses: zizmorcore/zizmor-action@45d7276c9ca790aabd705e31ca99c6185c3e76dd # v0.8.1

{maxminddb_rust-0.7.0 → maxminddb_rust-0.9.0}/CHANGELOG.md

@@ -5,6 +5,73 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.9.0] - 2026-11-08
+
+### Added
+
+- Added Python 3.15 support, with wheels for the standard and free-threaded
+  builds. CI now tests 3.15 and free-threaded 3.15.
+- Releases now include free-threaded wheels for Windows ARM64.
+
+### Changed
+
+- Updated PyO3 from 0.29 to 0.30. Calls to `open_database` are faster on
+  CPython 3.11 and later. The garbage collector now traverses the extension's
+  class objects, which fixes a possible memory leak of those classes.
+- Updated Rust and Python dependencies, GitHub Actions, the Pyodide build, and
+  the MaxMind-DB test submodule. The CodeQL action is now pinned to a commit
+  SHA like the other actions.
+- `get_path()` and `get_many_path()` now cache up to 32 parsed tuple paths per
+  thread instead of per `Reader`, so cache hits take no lock.
+- Each thread that decodes records keeps caches of up to 2,560 short Python
+  strings and map keys, using about 120 KB of tables, until the thread exits.
+
+### Performance
+
+- `get()`, `get_many()`, and lookups with `ipaddress` objects are about 20%
+  faster, and iteration is about 40% faster, measured against 0.8.0 with a
+  GeoIP2 City database on Python 3.14.
+- Repeated strings and map keys in records reuse cached Python strings.
+- Iteration builds `ipaddress` network objects without calling their
+  constructors. Each iterator first checks that the classes are the unpatched
+  standard library classes and that sample networks match. Otherwise it calls
+  the constructors, so patched or mocked classes behave as before.
+
+### Removed
+
+- Dropped support for Python 3.8, which reached end of life in October 2024.
+  PyO3 0.30 no longer supports it. Python 3.9 or later is now required.
+
+### Fixed
+
+- `get_many()` and `get_many_path()` no longer size the result from the
+  `__len__` of a generic iterable. A length such as `sys.maxsize` made them
+  panic with "capacity overflow" before reading any item.
+- An error raised by the `__iter__` of the `ips` argument now propagates.
+  Before, every error became a `TypeError`. A `TypeError`, such as "object is
+  not iterable", still gets the "ips must be an iterable" message and keeps
+  the original error as its cause.
+- `get_many()` and `get_many_path()` now iterate a list or tuple subclass that
+  overrides `__iter__`, instead of reading its contents directly.
+- An error raised while reading `_ip` from an IP address object, such as a
+  `RuntimeError` from a property, now propagates. The lookup falls back to the
+  object's `packed` value only when `_ip` is missing or is not a usable int.
+
+## [0.8.0] - 2026-09-12
+
+### Changed
+
+- Updated the `maxminddb` crate from 0.30.0 to 0.32.0, adding decoding resource
+  limits, fixing overflowing extended data types, and improving record decoding,
+  search-tree lookups, and selective path lookups.
+- Databases that exceed the new decoding limits now raise `InvalidDatabaseError`,
+  including databases that previously decoded successfully.
+- Updated Rust and Python dependencies and the MaxMind-DB test submodule.
+- Dependabot now covers all Cargo and Python dependency types and test-submodule
+  updates, with seven-day cooldowns across all ecosystems.
+- Synced applicable reader tests from the official Python reader's 3.2.0 release,
+  including bounded payload-amplification and pointer fan-out tests.
+
 ## [0.7.0] - 2026-07-19
 
 ### Changed
@@ -221,7 +288,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Python 3.8+
 - CPython implementation
 
-[0.6.0]: https://github.com/oschwald/maxminddb-rust-python/compare/v0.6.0...v0.7.0
+[0.9.0]: https://github.com/oschwald/maxminddb-rust-python/compare/v0.8.0...v0.9.0
+[0.8.0]: https://github.com/oschwald/maxminddb-rust-python/compare/v0.7.0...v0.8.0
+[0.7.0]: https://github.com/oschwald/maxminddb-rust-python/compare/v0.6.0...v0.7.0
 [0.6.0]: https://github.com/oschwald/maxminddb-rust-python/compare/v0.5.0...v0.6.0
 [0.5.0]: https://github.com/oschwald/maxminddb-rust-python/compare/v0.4.0...v0.5.0
 [0.4.0]: https://github.com/oschwald/maxminddb-rust-python/compare/v0.3.0...v0.4.0