Merge pull request #320 from maxmind/greg/eng-4241

horgh · web-flow · commit 92cecffb2ec0 · 2026-02-25T08:36:57.000-08:00
Release 3.1.0
diff --git a/HISTORY.rst b/HISTORY.rst
@@ -3,6 +3,14 @@
 History
 -------
 
+3.1.0 (2026-02-24)
+++++++++++++++++++
+
+* The vendored ``libmaxminddb`` has been updated to 1.13.1. This includes
+  several security hardening improvements when reading corrupt or malicious
+  database files, including fixes for integer overflows, bounds checking, and
+  use-after-free prevention.
+
 3.0.0 (2025-10-15)
 ++++++++++++++++++
 
diff --git a/extension/libmaxminddb b/extension/libmaxminddb
@@ -1 +1 @@
-Subproject commit cba618d6581b7dbe83478c798d9e58faeaa6b582
+Subproject commit de43d4f767f22ea4027892a01d5aec89687757da
diff --git a/pyproject.toml b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "maxminddb"
-version = "3.0.0"
+version = "3.1.0"
 description = "Reader for the MaxMind DB format"
 authors = [
     {name = "Gregory Oschwald", email = "goschwald@maxmind.com"},
@@ -33,6 +33,7 @@ Documentation = "https://maxminddb.readthedocs.org/"
 [dependency-groups]
 dev = [
     "pytest>=8.3.5",
+    "tox-uv>=1.29.0",
 ]
 lint = [
     "mypy>=1.15.0",
diff --git a/uv.lock b/uv.lock
