Merge tag '1.13.0' into ubuntu-ppa

Author: oschwald

.clang-format

@@ -3,3 +3,4 @@ IndentWidth: 4
 BinPackArguments: false
 BinPackParameters: false
 IndentCaseLabels: true
+IndentPPDirectives: BeforeHash

.github/dependabot.yml

@@ -1,6 +1,9 @@
 version: 2
 updates:
-- package-ecosystem: "github-actions"
-  directory: "/"
-  schedule:
-    interval: daily
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: daily
+      time: '14:00'
+    cooldown:
+      default-days: 7

.github/workflows/clang-addresssanitizer.yml

@@ -4,6 +4,7 @@ on:
   pull_request:
   schedule:
     - cron: '13 20 * * SUN'
+permissions: {}
 jobs:
   addresssanitizer:
     name: Clang AddressSanitizer
@@ -16,7 +17,7 @@ jobs:
       CXXFLAGS: -fsanitize=address
       LDFLAGS: -fsanitize=address
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           submodules: true
           persist-credentials: false

.github/workflows/clang-analyzer.yml

@@ -4,12 +4,13 @@ on:
   pull_request:
   schedule:
     - cron: '3 20 * * SUN'
+permissions: {}
 jobs:
   clang-analyzer:
     name: Clang static analysis
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - run: sudo apt install clang-tools libipc-run3-perl

.github/workflows/codeql-analysis.yml

@@ -18,7 +18,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
         # We must fetch at least the immediate parents so that if this is
         # a pull request then we can checkout the head.
@@ -33,7 +33,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
 
     - run: sudo apt install libipc-run3-perl pandoc
     - run: |
@@ -43,4 +43,4 @@ jobs:
             make safedist
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3

.github/workflows/precious.yml

@@ -0,0 +1,24 @@
+name: precious
+
+on:
+  push:
+  pull_request:
+
+permissions: {}
+
+jobs:
+  precious:
+    name: lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+
+      - name: Setup mise
+        uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
+        with:
+          cache: true
+
+      - name: Run precious lint
+        run: precious lint --all

.github/workflows/test.yml

@@ -4,6 +4,7 @@ on:
   pull_request:
   schedule:
     - cron: '3 20 * * SUN'
+permissions: {}
 jobs:
   test-autoconf:
     strategy:
@@ -17,7 +18,7 @@ jobs:
       CC: ${{ matrix.cc }}
       VERBOSE: 1
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           submodules: true
           persist-credentials: false
@@ -39,7 +40,7 @@ jobs:
     name: CMake build on ${{matrix.os}}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           submodules: true
           persist-credentials: false

.github/workflows/zizmor.yml

@@ -6,27 +6,18 @@ on:
   pull_request:
     branches: ["**"]
 
+permissions: {}
+
 jobs:
   zizmor:
-    name: zizmor latest via PyPI
     runs-on: ubuntu-latest
     permissions:
       security-events: write
-      # required for workflows in private repositories
-      contents: read
-      actions: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
 
-      - name: Install the latest version of uv
-        uses: astral-sh/setup-uv@v5
-        with:
-          enable-cache: false
-
       - name: Run zizmor
-        run: uvx zizmor --format plain .
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        uses: zizmorcore/zizmor-action@0dce2577a4760a2749d8cfb7a84b7d5585ebcb7d # v0.5.0

.precious.toml

@@ -0,0 +1,24 @@
+exclude = [
+    ".git",
+    "maxmind-db/**",
+    "t/libtap/**",
+    "t/maxmind-db/**",
+]
+
+[commands.clang-format]
+type = "both"
+cmd = ["clang-format", "-style=file"]
+lint-flags = ["--dry-run", "-Werror"]
+tidy-flags = ["-i"]
+path-args = "file"
+include = ["**/*.c", "**/*.h"]
+ok-exit-codes = 0
+
+[commands.prettier-markdown]
+type = "both"
+cmd = ["prettier", "--prose-wrap", "always", "--print-width", "80"]
+lint-flags = ["--check"]
+tidy-flags = ["--write"]
+path-args = "file"
+include = ["**/*.md"]
+ok-exit-codes = 0

CMakeLists.txt

@@ -2,7 +2,7 @@ cmake_minimum_required (VERSION 3.9...3.30)
 
 project(maxminddb
   LANGUAGES C
-  VERSION 1.12.2
+  VERSION 1.13.0
 )
 set(MAXMINDDB_SOVERSION 0.0.7)
 set(CMAKE_C_STANDARD 99)