chore(deps): bump maxminddb from 0.28.1 to 0.30.0

[dependabot]

Bumps maxminddb from 0.28.1 to 0.30.0.

Release notes

Sourced from maxminddb's releases.

0.30.0

• Added deserialize_any_with_raw_strings() for Serde-based format adapters to validate MMDB strings while constructing another runtime's native string type, avoiding duplicate UTF-8 validation without unsafe Rust. Adapters remain responsible for strict UTF-8 validation.
• Fixed network iteration on cyclic or over-deep corrupt search trees so it returns an error instead of looping indefinitely.
• Fixed decode_path() error rendering for extreme negative indexes and reduced path traversal header parsing.
• Removed decoder logging checks from hot deserialization paths.
• Fixed verify() to validate shared data-section pointer targets once, reject pointer cycles, invalid scalar encodings, and impossible container sizes.

0.29.0

• Breaking: Metadata::build_time() now returns Result<SystemTime, MaxMindDbError> instead of panicking on unrepresentable timestamps, and databases whose build_epoch cannot be represented as SystemTime are rejected as invalid during open and verify.
• Breaking: Reader::metadata is now private. Use Reader::metadata() to access validated metadata by shared reference.
• Breaking: Opening a database now rejects unsupported major format versions, unsupported IP versions, and zero-node search trees. Minor format versions are still accepted for forward compatibility.
• Fixed: within() and networks() now handle IPv6 databases without an IPv4 subtree without reading terminal data nodes as tree nodes or panicking while formatting low IPv6 networks.
• Fixed: Skipping ignored or unknown fields now enforces data-section bounds and the maximum nesting depth instead of accepting truncated values or overflowing the stack on deeply nested corrupt data.
• Internal: Added focused benchmarks for network iteration and serde unknown-field skipping, plus metadata build-time conversion, to guard performance-sensitive fixes.
• Documentation: Fixed intra-doc links so docs build with warnings denied, and added a CI check to keep them passing.

Changelog

Sourced from maxminddb's changelog.

0.30.0 - 2026-07-18

• Added deserialize_any_with_raw_strings() for Serde-based format adapters to validate MMDB strings while constructing another runtime's native string type, avoiding duplicate UTF-8 validation without unsafe Rust. Adapters remain responsible for strict UTF-8 validation.
• Fixed network iteration on cyclic or over-deep corrupt search trees so it returns an error instead of looping indefinitely.
• Fixed decode_path() error rendering for extreme negative indexes and reduced path traversal header parsing.
• Removed decoder logging checks from hot deserialization paths.
• Fixed verify() to validate shared data-section pointer targets once, reject pointer cycles, invalid scalar encodings, and impossible container sizes.

0.29.0 - 2026-06-28

• Breaking: Metadata::build_time() now returns Result<SystemTime, MaxMindDbError> instead of panicking on unrepresentable timestamps, and databases whose build_epoch cannot be represented as SystemTime are rejected as invalid during open and verify.
• Breaking: Reader::metadata is now private. Use Reader::metadata() to access validated metadata by shared reference.
• Breaking: Opening a database now rejects unsupported major format versions, unsupported IP versions, and zero-node search trees. Minor format versions are still accepted for forward compatibility.
• Fixed: within() and networks() now handle IPv6 databases without an IPv4 subtree without reading terminal data nodes as tree nodes or panicking while formatting low IPv6 networks.
• Fixed: Skipping ignored or unknown fields now enforces data-section bounds and the maximum nesting depth instead of accepting truncated values or overflowing the stack on deeply nested corrupt data.
• Internal: Added focused benchmarks for network iteration and serde unknown-field skipping, plus metadata build-time conversion, to guard performance-sensitive fixes.
• Documentation: Fixed intra-doc links so docs build with warnings denied, and added a CI check to keep them passing.

Commits

• fceaa66 Prepare v0.30.0 release
• 770547a Set release date
• 68f7876 Merge pull request #118 from oschwald/greg/raw-string-deserialization
• 64107cd Clarify unsafe string decoding use case
• 35ade52 Clarify raw string adapter contract
• 37b3b66 Consolidate dynamic decoder dispatch
• f04108b Expand raw string decoder coverage
• 93a7d3b Expose raw string bytes to Serde adapters
• 9f194b4 Merge pull request #117 from oschwald/greg/harden-reader
• f8cd8eb Share search tree node decoding
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)