geoipupdate/geoipupdate.changes

442 lines
19 KiB
Plaintext

-------------------------------------------------------------------
Mon May 06 14:36:34 UTC 2024 - valentin.lefebvre@suse.com
- geoipupdate-legacy: update the curl command
- Update to version 7.0.1:
* Update module path version
- Update to version v7.0.0:
* BREAKING CHANGE: Improvements to the HTTP download API.
The client now calls two new endpoints:
* `/geoip/updates/metadata` which is responsible for getting information
about a database edition.
* `/geoip/databases/{edition-id}/download` which is responsible for
downloading the content of a database edition. This new endpoint redirects
downloads to R2 presigned URLs, so systems running `geoipupdate` need to
be able to reach
`mm-prod-geoip-databases.a2649acb697e2c09b632799562c076f2.r2.cloudflarestorage.com`
in addition to `updates.maxmind.com`.
* BREAKING CHANGE: The public package API has been redesigned. The previous
API was not easy to use and had become a maintenance burden. We now
expose a `Client` at `github.com/maxmind/geoipupdate/client` with a
`Download()` method. The intention is to expose less of the `geoipupdate`
internals and provide a simpler and easier to use package. Many
previously exposed methods and types are now either internal only or have
been removed.
* BREAKING CHANGE: If set, `GEOIPUPDATE_VERBOSE` must either be `0` or `1`.
All other values will return an error.
* Setting `GEOIPUPDATE_VERBOSE` to `1` now works as expected. In the 6.0.0 and
6.1.0 releases, the flag was ignored. Reported by pmcevoy. GitHub #298.
* `geoipupdate` now supports retrying on more types of errors
such as HTTP2 INTERNAL_ERROR.
* Now `geoipupdate` doesn't requires the user to specify the config file
even if all the other arguments are set via the environment variables.
Reported by jsf84ksnf. GitHub #284.
-------------------------------------------------------------------
Thu Feb 22 17:05:34 UTC 2024 - Valentin Lefebvre <valentin.lefebvre@suse.com>
- Use autosetup to prepare for RPM 4.20.
-------------------------------------------------------------------
Wed Feb 21 08:11:49 UTC 2024 - valentin.lefebvre@suse.com
- Update to version 6.1.0:
* Update indirect dependencies
* Bump golang.org/x/sync from 0.5.0 to 0.6.0
* Bump github/codeql-action from 2 to 3
* Bump actions/setup-go from 4 to 5
* Bump golang.org/x/sync from 0.4.0 to 0.5.0
* Resync golangci-lint config and fix several small issues
* Update changelog after fixing #262
* Trim white spaces when reading from secret files
* Bump golang.org/x/sync from 0.3.0 to 0.4.0
* Set API client version to the same as the binary version
* Use https URLs
* Bump actions/checkout from 3 to 4
* Update Go version in go.mod
-------------------------------------------------------------------
Thu Aug 24 08:03:51 UTC 2023 - valentin.lefebvre@suse.com
- Update to 6.0.0:
* geoipupdate now supports configuration via environment variables. Any
configuration set this way will override any value from the config file,
but still be overridden by any associated command line option (if any).
* Changed the signature of NewConfig in pkg/geoipupdate to no longer accept
a positional config file path argument, which can now be passed in using the
option from WithConfigFile along with the other optional parameters.
* geoipupdate and NewConfig no longer require a config file to exist.
* The --stack-trace flag has been removed. This flag has been broken since
4.11.0.
-------------------------------------------------------------------
Wed Jun 21 09:48:29 UTC 2023 - Valentin Lefebvre <valentin.lefebvre@suse.com>
- Update to 5.1.1:
* Based on feedback, the change to use a non-root user in 5.1.0 when using
the Docker image has been reverted. There are no non-Docker changes in this
release. See GitHub #233.
- Update to 5.1.0:
* Fixed the Docker health-check script to use the correct time of the last
update attempt. Reported by cford1080. GitHub #225.
* Added new --output flag to print JSON to standard output describing the
result of the run.
* Compilation with Go versions before 1.19 is no longer supported.
* When using the provided Docker images, geoipupdate no longer runs as root
in the container. Based on pull request by Andreas Grünenfelder. GitHub
#200.
- Update to 5.0.4:
* On releases 4.9.0 through 5.0.3, the incorrect commit was tagged. This
release attempts to fix the release process to prevent this issue. There
are no code changes to the binaries provided by MaxMind, either on the
GitHub Release page or the MaxMind PPA.
-------------------------------------------------------------------
Mon Apr 17 09:18:15 UTC 2023 - Valentin Lefebvre <valentin.lefebvre@suse.com>
- Update to 5.0.3:
* The directory /usr/local/share/GeoIP was being used rather than
/usr/share/GeoIP.
- Update to 5.0.2:
* "Database ... up to date" messages are now only shown if the verbose
flag is set.
- Update to 5.0.1:
* set the file permissions on downloaded databases to 0600.
- Update to 5.0.0
* Redefined the Reader and Writer interface apis in
pkg/geoipupdate/database
* Changed the signature of NewConfig in pkg/geoipupdate to accept
optional parameters.
* Introduced Parallelism as a new flag and config option to enable
concurrent database updates.
-------------------------------------------------------------------
Tue Mar 21 07:56:45 UTC 2023 - Paolo Stivanin <info@paolostivanin.com>
- Update to 4.11.1:
* github.com/pkg/errors is no longer used to wrap errors.
* Docker secrets are now supported for the MaxMind account ID and license key.
* The Dockerfile now has a Healthcheck that makes sure the modification date of
the database directory is within the update period.
* Removed extra underscore in script variables preventing the Docker secret
support added in 4.11.0 from working as expected.
-------------------------------------------------------------------
Wed Nov 9 10:35:24 UTC 2022 - Paolo Stivanin <info@paolostivanin.com>
- Update to version 4.10.0:
* HTTPS proxies are now supported.
* An HTTP request to get the filename for the edition ID
has been removed. This was previously required as the GeoIP
Legacy edition IDs bore little relation to the name of
the database on disk.
-------------------------------------------------------------------
Tue Mar 1 15:20:57 UTC 2022 - Paolo Stivanin <info@paolostivanin.com>
- Update to version 4.9.0:
* The client now sets the User-Agent header.
* The error handling has been improved.
* The goreleaser configuration has been consolidated. There is now
one checksum file for all builds.
-------------------------------------------------------------------
Mon Nov 08 15:51:20 UTC 2021 - info@paolostivanin.com
- Update to version 4.8.0:
* The Docker container now supports the following new environment
variables: GEOIPUPDATE_CONF_FILE and GEOIPUPDATE_DB_DIR
-------------------------------------------------------------------
Mon Sep 20 07:05:44 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Added hardening to systemd service(s) (bsc#1181400). Modified:
* geoipupdate.service
-------------------------------------------------------------------
Fri Apr 23 14:36:31 UTC 2021 - Paolo Stivanin <info@paolostivanin.com>
- Update to 4.7.1:
* In verbose mode, we now print a message before each HTTP request.
Previously we would not print anything for retried requests.
* Expected response errors no longer cause request retries. For example, we
no longer retry the download request if the database subscription has
lapsed.
* When running with GEOIPUPDATE_FREQUENCY set, the Docker image will now
stop when sent a SIGTERM instead of waiting for a SIGKILL. Pull request
by Maxence POULAIN. GitHub #135.
-------------------------------------------------------------------
Wed Dec 16 12:19:29 UTC 2020 - Paolo Stivanin <info@paolostivanin.com>
- Update to 4.6.0
* Show version number in verbose output.
* Retry downloads in more scenarios. Previously we would not retry
failures occurring when reading the response body, but now we do.
-------------------------------------------------------------------
Wed Nov 4 15:54:26 UTC 2020 - Paolo Stivanin <info@paolostivanin.com>
- Update to version 4.5.0:
* We no longer use a third party library for exponential backoff
* The edition ID is now included when there is a failure retrieving
a database
* The Docker image no longer prints the generated GeoIP.conf when
starting up. This prevents a possible leak of the account's
license key
* The minimum Go version is now 1.11.
* Failing HTTP requests are now retried using an exponential backoff.
The period to keep retrying any failed request is set to 5 minutes
by default and can be adjusted using the new RetryFor
configuration option.
* When using the go package rather than the command-line tool, the
null value for RetryFor will be 0 seconds, which means no retries
will be performed. To change that, set RetryFor explicitly in the
Config you provide, or obtain your Config value via
geoipupdate.NewConfig.
-------------------------------------------------------------------
Thu May 07 08:06:55 UTC 2020 - Paolo Stivanin <info@paolostivanin.com>
- Update to version 4.3.0:
* Set release date
* Push multiple versions with different tags
* Use correct org name
* Add a less-strict .yamllintrc
* Test on go 1.14.x
* Shows location of GeoIP.conf when issue in file
* Remove extra space
* Fix typo in config file generation
* Make the edition IDs list format clearer
-------------------------------------------------------------------
Fri Apr 17 12:35:42 UTC 2020 - Vítězslav Čížek <vcizek@suse.com>
- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)
-------------------------------------------------------------------
Thu Mar 26 10:21:28 UTC 2020 - Vítězslav Čížek <vcizek@suse.com>
- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
account information now
- Add README.SUSE with description how to get the latest data
(jsc#SLE-11184, jsc#ECO-1405)
-------------------------------------------------------------------
Fri Mar 13 10:40:08 UTC 2020 - pgajdos@suse.com
- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
+ geoipupdate-legacy
-------------------------------------------------------------------
Wed Mar 04 07:24:45 UTC 2020 - info@paolostivanin.com
- Update to version 4.2.2:
* Prepare for 4.2.2
* Use go get on 1.10
* Only use debug.ReadBuildInfo on 1.12+
* Update changelog
* Set required Go version to 1.10
* Test back to Go 1.10
* Do not unnecessarily use errors.Is
* Add changelog for #76
* Update for GoReleaser nfpm section change
* Bump copyright year
- Add disable-pandoc.patch
-------------------------------------------------------------------
Wed Mar 04 07:23:56 UTC 2020 - info@paolostivanin.com
- Update to version 4.2.2:
* Prepare for 4.2.2
* Use go get on 1.10
* Only use debug.ReadBuildInfo on 1.12+
* Update changelog
* Set required Go version to 1.10
* Test back to Go 1.10
* Do not unnecessarily use errors.Is
* Add changelog for #76
* Update for GoReleaser nfpm section change
* Bump copyright year
-------------------------------------------------------------------
Tue Mar 03 15:31:26 UTC 2020 - info@paolostivanin.com
- Update to version 4.2.2:
* Prepare for 4.2.2
* Use go get on 1.10
* Only use debug.ReadBuildInfo on 1.12+
* Update changelog
* Set required Go version to 1.10
* Test back to Go 1.10
* Do not unnecessarily use errors.Is
* Add changelog for #76
* Update for GoReleaser nfpm section change
* Bump copyright year
-------------------------------------------------------------------
Tue Mar 3 13:47:31 UTC 2020 - Paolo Stivanin <info@paolostivanin.com>
- Update to 4.2.2
A lot of changes since last release. Please have a look at
https://github.com/maxmind/geoipupdate/releases for more info
-------------------------------------------------------------------
Thu Jun 20 05:35:01 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
- added systemd timer for weekly updates
(needs to be enabled by admin)
-------------------------------------------------------------------
Wed Jun 19 10:34:53 UTC 2019 - Johannes Weberhofer <jweberhofer@weberhofer.at>
- Fixed build
- Update to version 3.1.1
* This version now allows parsing of license keys longer than 12
characters.
- Update to version 3.1.0
* This version restores the ability to use the `AccountID` / `UserId`
999999 along with an all-zero license key when downloading free
databases. However, the use of this combination is not recommended
and may break in future versions.
* When printing verbose output, only the first four character of the
`LicenseKey` will now be displayed.
- Update to version 3.0.1
* When there were no updates available, 3.0.0 incorrectly returned an
exit code of 1 instead of 0. This release reverts to the pre-3.0.0
behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
* BREAKING CHANGE: When downloading the free databases without a
MaxMind account, you must either not have `AccountID`, `UserId`,
or `LicenseKey` set in your configuration file or they must be set
to the zero values previously recommended in our documentation. Any
other value will cause an authorization error.
* BREAKING CHANGE: The configuration options `Protocol`,
`SkipPeerVerification`, and `SkipHostnameVerification` are no longer
supported. If they are present in the configuration file, they will
be ignored. HTTPS with peer and hostname verification will be used
on all requests.
* BREAKING CHANGE: The configuration file must have the `AccountID`
or the deprecated `UserId` when downloading a paid database.
Previously, when downloading the GeoIP Legacy Country database, you
were able to only provide the `LicenseKey`.
* IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
longer be distributed with `geoipupdate`. This Perl script had known
issues and did not have feature parity with the C implementation. If
you were using the Perl version, we recommend that you switch to the
C version. If you are not able to do this, you may continue using the
Perl version distributed with 2.5.0.
* This program no longer uses the following endpoints:
`/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
`/geoip/databases/{edition_id}/update` is now used instead.
* Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
that it was in array bounds. Issue found by fcntl.
* We now update the default GeoIP.conf during installation so that
directory paths match build parameters. Previously this config always
said the data directory was under /usr/local/share which was not always
accurate.
* Improve the error checking and display the underlying reason for the
error when possible. Reported by Jonathan Kosgei. GitHub #82.
* Document that the `LockFile` is not removed from the filesystem after
a successful exit from the program. GitHub issue #79.
* Make default configuration directory agree with default installation
directory.
-------------------------------------------------------------------
Thu Nov 16 09:09:29 UTC 2017 - mpluskal@suse.com
- Update to version 2.5.0:
* Document the LockFile option in the GeoIP.conf man page.
* Remove unused base64 library.
* Add the new configuration option PreserveFileTimes. If set, the
downloaded files will get the same modification times as their
original on the server. Default is 0 (unset).
* Use the correct types when calling curl_easy_setopt().
* In GeoIP.conf, the UserId option was renamed to AccountID and
the ProductIds option was renamed to EditionIDs. The old
options will continue to work, but upgrading to the new names
is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build
-------------------------------------------------------------------
Mon Oct 16 15:35:45 UTC 2017 - Mathias.Homann@opensuse.org
- Update to version 2.4.0:
* geoipupdate now checks that the database directory is writable.
If it is not, it reports the problem and aborts.
* geoipupdate now acquires a lock when starting up to ensure only
one instance may run at a time. A new option, LockFile, exists
to set the file to use as a lock. By default, LockFile is the
file .geoipupdate.lock in the database directory.
* geoipupdate now prints out additional information from the
server when a download request results in something other than
HTTP status 2xx. This provides more information when the API
does not respond with a database file. In conjunction with
changes to the download service itself, errors such as lacking
a subscription no longer show up with the message "not a valid
gzip file".
* ${datarootdir}/GeoIP is now created on make install.
-------------------------------------------------------------------
Thu Jan 5 15:40:45 UTC 2017 - mpluskal@suse.com
- Update to version 2.3.1:
* geoipupdate now uses TCP keep-alive when compiled with cURL
7.25 or greater.
* Previously, on an invalid gzip file, geoipupdate would output
binary data to stderr. It now displays an appropriate error
message.
* Install README, ChangeLog, GeoIP.conf.default etc into docdir.
* $(sysconfdir) is now created if it doesn't exist.
* The sample config file is now usable.
-------------------------------------------------------------------
Fri Jul 1 17:31:03 UTC 2016 - toddrme2178@gmail.com
- Fix Group tag.
-------------------------------------------------------------------
Thu Feb 4 20:17:08 UTC 2016 - mpluskal@suse.com
- Update to version 2.2.2
* geoipupdate now calls fsync on the database directory after a
rename to make it durable in the event of a crash.
-------------------------------------------------------------------
Sun Nov 8 13:56:31 UTC 2015 - p.drouand@gmail.com
- Update to version 2.2.1
* Version bump to fix PPA issue
- Changes from version 2.2.0
* geoipupdate now verifies the MD5 of the new database before
deploying it. If the database MD5 does not match the expected MD5,
geoipupdate will exit with an error.
* The copy of base64.c and base64.h was switched to a version under
GPL 2+ to prevent a license conflict.
* The LICENSE file was added to the distribution.
* Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner
-------------------------------------------------------------------
Sat Feb 21 11:07:53 UTC 2015 - mpluskal@suse.com
- Initial packaging