Bump maxminddb from 3.1.1 to 3.2.0

[dependabot]

Bumps maxminddb from 3.1.1 to 3.2.0.

Release notes

Sourced from maxminddb's releases.

3.2.0

• Added limits to pure Python record and metadata decoding to prevent denial of service from crafted databases: 65,536 values, 512 nesting levels, and 2 MiB of string and bytes payload. Exceeding a limit raises InvalidDatabaseError. CPython may reach its recursion limit earlier, which raises the same error.
• Rejected unsigned integers longer than 16 bytes and signed integers longer than 4 bytes before reading their payload.
• Updated the vendored libmaxminddb to 1.14.0, which adds the same resource limits to the C extension.
• Truncated reads that previously raised IndexError or struct.error now raise InvalidDatabaseError.
• The pure Python reader now rejects invalid search tree sizes when opening a database.
• Improved pure Python lookup performance.

Changelog

Sourced from maxminddb's changelog.

3.2.0 (2026-09-10) ++++++++++++++++++

• Added limits to pure Python record and metadata decoding to prevent denial of service from crafted databases: 65,536 values, 512 nesting levels, and 2 MiB of string and bytes payload. Exceeding a limit raises InvalidDatabaseError. CPython may reach its recursion limit earlier, which raises the same error.
• Rejected unsigned integers longer than 16 bytes and signed integers longer than 4 bytes before reading their payload.
• Updated the vendored libmaxminddb to 1.14.0, which adds the same resource limits to the C extension.
• Truncated reads that previously raised IndexError or struct.error now raise InvalidDatabaseError.
• The pure Python reader now rejects invalid search tree sizes when opening a database.
• Improved pure Python lookup performance.

Commits

• b6885a0 Update for v3.2.0
• ecaa6a4 Set release date
• 19e0e48 Merge pull request #448 from maxmind/greg/stf-1328-ruff-is-upgraded-in-github...
• 9e92b88 Ignore CPY001 (missing-copyright-notice)
• 1aefe0f Bump ruff to 0.16.5
• 4be1670 Merge pull request #439 from maxmind/greg/stf-1488
• 976b641 Use a dataclass for decoder budgets
• 2983246 Bound malformed metadata cleanup tests
• 53622e7 Clarify decoder limits and early tree validation
• 20853e9 Test high nibbles in 28-bit search tree records
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)