build(deps): bump maxminddb from 3.1.1 to 3.2.0 in the python-runtime group

[dependabot]

Bumps the python-runtime group with 1 update: maxminddb.

Updates maxminddb from 3.1.1 to 3.2.0

Release notes

Sourced from maxminddb's releases.

3.2.0

• Added limits to pure Python record and metadata decoding to prevent denial of service from crafted databases: 65,536 values, 512 nesting levels, and 2 MiB of string and bytes payload. Exceeding a limit raises InvalidDatabaseError. CPython may reach its recursion limit earlier, which raises the same error.
• Rejected unsigned integers longer than 16 bytes and signed integers longer than 4 bytes before reading their payload.
• Updated the vendored libmaxminddb to 1.14.0, which adds the same resource limits to the C extension.
• Truncated reads that previously raised IndexError or struct.error now raise InvalidDatabaseError.
• The pure Python reader now rejects invalid search tree sizes when opening a database.
• Improved pure Python lookup performance.

Changelog

Sourced from maxminddb's changelog.

3.2.0 (2026-09-10) ++++++++++++++++++

• Added limits to pure Python record and metadata decoding to prevent denial of service from crafted databases: 65,536 values, 512 nesting levels, and 2 MiB of string and bytes payload. Exceeding a limit raises InvalidDatabaseError. CPython may reach its recursion limit earlier, which raises the same error.
• Rejected unsigned integers longer than 16 bytes and signed integers longer than 4 bytes before reading their payload.
• Updated the vendored libmaxminddb to 1.14.0, which adds the same resource limits to the C extension.
• Truncated reads that previously raised IndexError or struct.error now raise InvalidDatabaseError.
• The pure Python reader now rejects invalid search tree sizes when opening a database.
• Improved pure Python lookup performance.

Commits

• b6885a0 Update for v3.2.0
• ecaa6a4 Set release date
• 19e0e48 Merge pull request #448 from maxmind/greg/stf-1328-ruff-is-upgraded-in-github...
• 9e92b88 Ignore CPY001 (missing-copyright-notice)
• 1aefe0f Bump ruff to 0.16.5
• 4be1670 Merge pull request #439 from maxmind/greg/stf-1488
• 976b641 Use a dataclass for decoder budgets
• 2983246 Bound malformed metadata cleanup tests
• 53622e7 Clarify decoder limits and early tree validation
• 20853e9 Test high nibbles in 28-bit search tree records
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions