chore(deps): bump github.com/oschwald/maxminddb-golang/v2 from 2.1.1 to 2.4.1

[dependabot]

Bumps github.com/oschwald/maxminddb-golang/v2 from 2.1.1 to 2.4.1.

Release notes

Sourced from github.com/oschwald/maxminddb-golang/v2's releases.

2.4.1

• Fixed Result.Decode and Result.DecodePath after Reader.Close so stale results return closed-database errors instead of reading invalidated data.
• Fixed Networks and NetworksWithin with SkipEmptyValues so malformed pointer cycles return an error instead of looping indefinitely.
• Fixed top-level Decode validation so nil and non-pointer values are rejected consistently before custom Unmarshaler dispatch.
• Fixed ReadMap and ReadSlice iterator cleanup so callers that stop iteration early can continue decoding from the correct next value.
• Fixed an oversized data-pointer bounds check so malformed databases return an offset error instead of risking a panic on 32-bit builds.
• Fixed migration and README examples to reference the public mmdbdata.Decoder type for custom unmarshaling.

2.4.0

• Reduced reflection decoding time and memory allocations. A city-lookup benchmark decoding a geoip2-style result allocates 20% fewer bytes (saving 48 B/op) and 2 fewer heap allocations per lookup when utilizing pointer-heavy destination structures.
• Optimized map key decoding by adding a fast path for pointer keys, improving general lookup throughput by 2.7% to 6.4%.
• Optimized tree traversal for IPv6 lookups, resulting in an ~8.8% speedup.
• Fixed pointer-to-pointer chains in malformed database data so decoder entry points reject them consistently instead of following invalid chains.
• Reduced memory mapping overhead and system allocations when invoking OpenBytes and NetworksWithin.
• Cleaned up, simplified, and deduplicated internal decoder and reader structures, removing deprecated type assertion workarounds and unused helper functions.

2.3.0

• This module now targets Go 1.25+.
• Reduced reflection decoding time and heap allocations on the hot path. A city-lookup benchmark decoding a geoip2-style result runs about 15% faster and allocates about 39% fewer bytes per lookup compared to 2.2.0.
• Specialized the IPv4 search-tree walk for 24-, 28-, and 32-bit record sizes to skip the IPv6 prefix when looking up IPv4 addresses.
• Decoding into a non-nil slice with sufficient capacity now reuses the caller's backing array instead of allocating a fresh slice, matching encoding/json semantics. Callers that share slice headers across Decode calls should be aware that the backing memory is now mutated.
• Reduced contention under concurrent lookups by switching the internal string cache to a lock-free design.

2.2.0

• Improved reflection decoding performance by skipping Unmarshaler checks for destination types that cannot implement the interface.
• Fixed verifier search-tree size arithmetic to match the reader's safe multiplication order instead of using an overflow-prone equivalent formula.
• Fixed unsigned bounds checks in search-tree node reads and traversal so very

... (truncated)

Changelog

Sourced from github.com/oschwald/maxminddb-golang/v2's changelog.

2.4.1 - 2026-06-28

• Fixed Result.Decode and Result.DecodePath after Reader.Close so stale results return closed-database errors instead of reading invalidated data.
• Fixed Networks and NetworksWithin with SkipEmptyValues so malformed pointer cycles return an error instead of looping indefinitely.
• Fixed top-level Decode validation so nil and non-pointer values are rejected consistently before custom Unmarshaler dispatch.
• Fixed ReadMap and ReadSlice iterator cleanup so callers that stop iteration early can continue decoding from the correct next value.
• Fixed an oversized data-pointer bounds check so malformed databases return an offset error instead of risking a panic on 32-bit builds.
• Fixed migration and README examples to reference the public mmdbdata.Decoder type for custom unmarshaling.

2.4.0 - 2026-06-06

• Reduced reflection decoding time and memory allocations. A city-lookup benchmark decoding a geoip2-style result allocates 20% fewer bytes (saving 48 B/op) and 2 fewer heap allocations per lookup when utilizing pointer-heavy destination structures.
• Optimized map key decoding by adding a fast path for pointer keys, improving general lookup throughput by 2.7% to 6.4%.
• Optimized tree traversal for IPv6 lookups, resulting in an ~8.8% speedup.
• Fixed pointer-to-pointer chains in malformed database data so decoder entry points reject them consistently instead of following invalid chains.
• Reduced memory mapping overhead and system allocations when invoking OpenBytes and NetworksWithin.
• Cleaned up, simplified, and deduplicated internal decoder and reader structures, removing deprecated type assertion workarounds and unused helper functions.

2.3.0 - 2026-05-17

• This module now targets Go 1.25+.
• Reduced reflection decoding time and heap allocations on the hot path. A city-lookup benchmark decoding a geoip2-style result runs about 15% faster and allocates about 39% fewer bytes per lookup compared to 2.2.0.
• Specialized the IPv4 search-tree walk for 24-, 28-, and 32-bit record sizes to skip the IPv6 prefix when looking up IPv4 addresses.
• Decoding into a non-nil slice with sufficient capacity now reuses the caller's backing array instead of allocating a fresh slice, matching encoding/json semantics. Callers that share slice headers across Decode calls should be aware that the backing memory is now mutated.
• Reduced contention under concurrent lookups by switching the internal string cache to a lock-free design.

2.2.0 - 2026-04-26

• Improved reflection decoding performance by skipping Unmarshaler checks for destination types that cannot implement the interface.

... (truncated)

Commits

• f98ac8d Set release date
• 58ecec7 Merge pull request #216 from oschwald/dependabot/go_modules/golang.org/x/sys-...
• 7f285c9 Merge pull request #217 from oschwald/dependabot/github_actions/actions/check...
• 169741a Merge pull request #218 from oschwald/fix-reviewed-bugs
• ee04849 Document public custom decoder package
• 19ac9d7 Avoid oversized pointer panic on 32-bit
• 3569b77 Advance decoder after early iterator stops
• e1c4fde Validate Decode arguments before unmarshaling
• 220a58e Bound empty-value pointer traversal
• 7b8dfc3 Handle stale results after reader close
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)