[pull] main from maxmind:main

.gitattributes

@@ -1,13 +1,14 @@
+/.github/ export-ignore
 /bin/ export-ignore
 /dev-bin/ export-ignore
 /maxmind-db/ export-ignore
 /tests/ export-ignore
 /.gitattributes export-ignore
 /.gitignore export-ignore
 /.gitmodules export-ignore
-/.travis.yml export-ignore
-/.php_cs export-ignore
+/.php-cs-fixer.php export-ignore
 /box.json export-ignore
 /phar-stub.php export-ignore
+/phpstan.neon export-ignore
 /phpunit.xml.dist export-ignore
 /README.dev.md export-ignore

.github/dependabot.yml

@@ -1,7 +1,17 @@
 version: 2
 updates:
-- package-ecosystem: composer
-  directory: "/"
-  schedule:
-    interval: daily
-  open-pull-requests-limit: 10
+  - package-ecosystem: composer
+    directory: /
+    schedule:
+      interval: daily
+      time: '14:00'
+    open-pull-requests-limit: 10
+    cooldown:
+      default-days: 7
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: daily
+      time: '14:00'
+    cooldown:
+      default-days: 7

.github/workflows/lint.yml

@@ -6,22 +6,29 @@ on:
   schedule:
     - cron: '55 3 * * SUN'
 
+permissions: {}
+
 jobs:
   run:
     runs-on: ubuntu-latest
     name: "PHP Lints"
     steps:
       - name: Setup PHP
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1 # 2.36.0
         with:
-          php-version: 7.4
+          php-version: 8.3
 
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v6
+        with:
+          persist-credentials: false
 
       - name: Install dependencies
         run: composer install --no-progress --prefer-dist --optimize-autoloader
 
+      - name: Validate composer.json
+        run: composer validate
+
       - name: Lint with php-cs-fixer
         run: vendor/bin/php-cs-fixer fix --verbose --diff --dry-run
 

.github/workflows/test.yml

@@ -6,17 +6,19 @@ on:
   schedule:
     - cron: '55 3 * * SUN'
 
+permissions: {}
+
 jobs:
   run:
     runs-on: ${{ matrix.operating-system }}
     strategy:
       matrix:
         operating-system: [ubuntu-latest, windows-latest, macos-latest]
-        php-versions: ['7.2', '7.3', '7.4', '8.0']
+        php-versions: ['8.1', '8.2', '8.3', '8.4', '8.5']
     name: "PHP ${{ matrix.php-versions }} test on ${{ matrix.operating-system }}"
     steps:
       - name: Setup PHP
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1 # 2.36.0
         with:
           php-version: ${{ matrix.php-versions }}
           tools: composer
@@ -25,12 +27,13 @@ jobs:
         run: echo "::add-matcher::${{ runner.tool_cache }}/phpunit.json"
 
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v6
         with:
           submodules: true
+          persist-credentials: false
 
       - name: Install dependencies
         run: composer install --no-progress --prefer-dist --optimize-autoloader
 
       - name: Test with phpunit
-        run: vendor/bin/phpunit --coverage-text
+        run: vendor/bin/phpunit

.github/workflows/zizmor.yml

@@ -0,0 +1,23 @@
+name: GitHub Actions Security Analysis with zizmor
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+    branches: ["**"]
+
+permissions: {}
+
+jobs:
+  zizmor:
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+        with:
+          persist-credentials: false
+
+      - name: Run zizmor
+        uses: zizmorcore/zizmor-action@e639db99335bc9038abc0e066dfcd72e23d26fb4 # v0.3.0

.gitignore

@@ -2,6 +2,8 @@ _site
 .gh-pages
 .idea
 .php_cs.cache
+.php-cs-fixer.cache
+.phpunit.cache/
 .phpunit.result.cache
 GeoLite2-City.mmdb
 box.phar
@@ -16,3 +18,7 @@ t.php
 vendor/
 *.sw?
 *.old
+
+# Claude Code directories
+.claude/
+.claude_cache/

.gitmodules

@@ -1,3 +1,3 @@
 [submodule "maxmind-db"]
 	path = maxmind-db
-	url = git://github.com/maxmind/MaxMind-DB.git
+	url = https://github.com/maxmind/MaxMind-DB

CHANGELOG.md

@@ -1,6 +1,71 @@
 CHANGELOG
 =========
 
+3.3.0 (2025-11-20)
+------------------
+
+* A new `anonymizer` property has been added to `GeoIp2\Model\Insights`.
+  This property is an instance of `GeoIp2\Record\Anonymizer` and provides
+  information about whether the IP address belongs to an anonymous network,
+  VPN provider details (including `confidence`, `providerName`, and
+  `networkLastSeen`), and various anonymity flags. This data is available
+  from the GeoIP2 Insights web service.
+* A new `ipRiskSnapshot` property has been added to `GeoIp2\Record\Traits`.
+  This property provides a risk score from 0.01 to 99.99 indicating the risk
+  associated with the IP address. Higher values indicate higher risk. This is
+  a static snapshot that is less dynamic than minFraud risk scoring. This
+  attribute is only available from the GeoIP2 Insights web service.
+* The `isAnonymous`, `isAnonymousVpn`, `isHostingProvider`, `isPublicProxy`,
+  `isResidentialProxy`, and `isTorExitNode` properties in
+  `GeoIp2\Record\Traits` have been deprecated. Please use the corresponding
+  properties in the new `anonymizer` object in the Insights response instead.
+
+3.2.0 (2025-05-05)
+------------------
+
+* Support for the GeoIP Anonymous Plus database has been added. To do a
+  lookup in this database, use the `anonymousPlus` method on
+  `GeoIP2\Database\Reader`.
+* `metroCode` on `GeoIp2\Record\Location` has been deprecated. The code
+  values are no longer being maintained.
+
+3.1.0 (2024-11-15)
+------------------
+
+* This library no longer uses implicitly nullable parameter types. This
+  will fix deprecation warning in PHP 8.4. Reported by Steven Lewis.
+  GitHub #230.
+* The PHPDoc type hints have been improved for use with PHPStan.
+
+3.0.0 (2023-12-04)
+------------------
+
+* IMPORTANT: PHP 8.1 or greater is now required.
+* BREAKING: Read-only properties are now used for the model and record
+  classes rather than magic methods. This significantly improves performance.
+* BREAKING: The `raw` property on model classes and the `record` property on
+  record classes have been removed.
+* BREAKING: On `GeoIp2\Record\Traits`, the deprecated `isAnonymousProxy` and
+  `isSatelliteProvider` properties have been removed.
+* BREAKING: The `jsonSerialize` output has changed.
+* `GeoIp2\WebService\Client` methods now throw an `InvalidArgumentException`
+  if an invalid IP address is passed to them. Previously, they would make
+  a request to the web service and throw a
+  `GeoIp2\Exception\InvalidRequestException`.
+* The `isAnycast` property was added to `GeoIp2\Record\Traits`. This returns
+  `true` if the IP address belongs to an [anycast
+  network](https://en.wikipedia.org/wiki/Anycast). This is available for the
+  GeoIP2 Country, City Plus, and Insights web services and the GeoIP2 Country,
+  City, and Enterprise databases.
+
+2.13.0 (2022-08-05)
+-------------------
+
+* The model class names are no longer constructed by concatenating strings.
+  This change was made to improve support for tools like PHP-Scoper.
+  Reported by Andrew Mead. GitHub #194.
+* Box 4.0.1 is now used to generate the `geoip2.phar` file.
+
 2.12.2 (2021-11-30)
 -------------------