Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 15, 2025

Bumps com.maxmind.geoip2:geoip2 from 5.0.1 to 5.0.2.

Release notes

Sourced from com.maxmind.geoip2:geoip2's releases.

5.0.2

  • Fixed an issue where decoding IpRiskResponse from the IP Risk database would fail when the ip_risk field was not present in the database record. The ipRisk field now defaults to 0.0 when not present. A value of 0.0 indicates that the risk score was not set in the database. In a future major release, this field may be changed to a nullable Double to better distinguish between "no data" and "zero risk". Reported by Fabrice Bacchella. GitHub #644.
  • Updated maxmind-db dependency to 4.0.2. This fixes a bug where enums with @MaxMindDbCreator would throw ConstructorNotFoundException when the data was stored via a pointer in the database, commonly occurring with deduplicated data in larger databases. It also improves error messages when constructor invocation fails. Reported by Fabrice Bacchella. GitHub #644.
Changelog

Sourced from com.maxmind.geoip2:geoip2's changelog.

5.0.2 (2025-12-08)

  • Fixed an issue where decoding IpRiskResponse from the IP Risk database would fail when the ip_risk field was not present in the database record. The ipRisk field now defaults to 0.0 when not present. A value of 0.0 indicates that the risk score was not set in the database. In a future major release, this field may be changed to a nullable Double to better distinguish between "no data" and "zero risk". Reported by Fabrice Bacchella. GitHub #644.
  • Updated maxmind-db dependency to 4.0.2. This fixes a bug where enums with @MaxMindDbCreator would throw ConstructorNotFoundException when the data was stored via a pointer in the database, commonly occurring with deduplicated data in larger databases. It also improves error messages when constructor invocation fails. Reported by Fabrice Bacchella. GitHub #644.
Commits
  • f2d48a5 Preparing for 5.0.2
  • a4440f5 Set release date
  • cd2ccc6 Add test to verify all database records deserialize correctly
  • e128097 Update maxmind-db dependency to 4.0.2
  • bf594e9 Merge pull request #645 from maxmind/greg/eng-3610
  • 4472884 Fix IpRiskResponse decoding when ip_risk field is missing
  • 425f818 Merge pull request #642 from maxmind/greg/eng-1733
  • 72fe963 Merge pull request #643 from maxmind/dependabot/maven/com.puppycrawl.tools-ch...
  • 16cd5e1 Fix release script consistency issues
  • 54901de Bump com.puppycrawl.tools:checkstyle from 12.1.2 to 12.2.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.maxmind.geoip2:geoip2](https://github.com/maxmind/GeoIP2-java) from 5.0.1 to 5.0.2.
- [Release notes](https://github.com/maxmind/GeoIP2-java/releases)
- [Changelog](https://github.com/maxmind/GeoIP2-java/blob/main/CHANGELOG.md)
- [Commits](maxmind/GeoIP2-java@v5.0.1...v5.0.2)

---
updated-dependencies:
- dependency-name: com.maxmind.geoip2:geoip2
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 15, 2025
@horgh horgh merged commit a212c2c into main Dec 15, 2025
23 checks passed
@horgh horgh deleted the dependabot/maven/com.maxmind.geoip2-geoip2-5.0.2 branch December 15, 2025 16:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Development

Successfully merging this pull request may close these issues.

2 participants