chore(deps): bump github.com/oschwald/maxminddb-golang/v2 from 2.6.0 to 2.7.0

[dependabot]

Bumps github.com/oschwald/maxminddb-golang/v2 from 2.6.0 to 2.7.0.

Release notes

Sourced from github.com/oschwald/maxminddb-golang/v2's releases.

2.7.0

• Go 1.26 or later is now required. CI now tests Go 1.26 and 1.27.
• Fixed Reader.Verify() rejecting a search-tree record that points to a value nested in another data record. The MaxMind DB spec permits this, and mmdbwriter can write such databases. GitHub #250.
• Decoding now rejects extended type bytes 0 and 250 through 255, which the MaxMind DB spec does not define. Before, they decoded as other types. For example, 0x00 0xfb decoded as a string.
• Reader.Verify() now rejects a data pointer that points into the middle of a field.
• Reader.Verify() now also checks the metadata section. Its pointers must point to the start of a field, and all data after the metadata map must be valid values.

Changelog

Sourced from github.com/oschwald/maxminddb-golang/v2's changelog.

2.7.0 - 2026-09-29

• Go 1.26 or later is now required. CI now tests Go 1.26 and 1.27.
• Fixed Reader.Verify() rejecting a search-tree record that points to a value nested in another data record. The MaxMind DB spec permits this, and mmdbwriter can write such databases. GitHub #250.
• Decoding now rejects extended type bytes 0 and 250 through 255, which the MaxMind DB spec does not define. Before, they decoded as other types. For example, 0x00 0xfb decoded as a string.
• Reader.Verify() now rejects a data pointer that points into the middle of a field.
• Reader.Verify() now also checks the metadata section. Its pointers must point to the start of a field, and all data after the metadata map must be valid values.

Commits

• e228017 Set release date and set version in doc
• faf39ba Merge pull request #247 from oschwald/dependabot/go_modules/golang.org/x/tool...
• 8002482 Merge pull request #249 from database64128/v6-zone
• 737b5b3 Merge pull request #254 from oschwald/dependabot/github_actions/github/codeql...
• 5de4d13 Merge pull request #255 from oschwald/greg/stf-1863
• 1167020 Check metadata pointers and the values after the metadata map
• 6c3604e Reject data pointers that point into the middle of a field
• 7e05d3d Reject extended type bytes outside the spec
• 00b036c Accept search-tree records that point to nested fields
• 731ece0 Bump github/codeql-action from 4.37.9 to 4.38.2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)