Hi forum,

Locus 2.0.0, a MaxMind DB reader, was released tonight.

It’s the first breaking release and I used this opportunity to drop most deprecated code as well as polish the existing API.

Added

• support for retrieving databases using consumer-defined locus_custom_fetchers
• support for decoding IEEE-754 infinities in MMDB data
• locus:check/1 to API (which replaces locus:analyze/1 and can be up to 3200% faster )
• details to MMDB unpacking errors
• linting checks with rebar3_lint
• dead code checks with rebar3_hank

Changed

• return type of locus:lookup/2 (see MIGRATION.md)
• database loader to use persistent_term instead of ETS
• MMDB decoder to perform stricter metadata validations
• MMDB decoder to not crash upon maps containing duplicate keys
• databases downloaded through HTTP(S) without a last-modified response header to no longer be cached
• imported version of tls_certificate_check to ‘~> 1.7’
• single CT suite covering both filesystem and HTTP sources into one for each
• test coverage for the better

Removed

• locus:wait_for_loader/1 from API (deprecated in 1.10.0 - see MIGRATION.md)
• locus:wait_for_loader/2 from API (deprecated in 1.10.0 - see …)
• locus:wait_for_loaders/2 from API (deprecated in 1.10.0 - see …)
• locus:get_version/1 from API (deprecated in 1.4.0 - see …)
• locus:analyze/1 from API (locus:check/1 now fullfils this role - see …)
• deprecated loader options pre_readiness_update_period and post_readiness_update_period (see …)
• warnings on the use of discontinued GeoLite2 HTTP URLs

Links:

• Migration guide
• Hex package
• Documentation
• Source code (GitHub)
• Source code (GitLab)

Locus 1.9.0, after one month in beta, has been released!

Added

• support for downloading databases with full awareness of license keys (now mandatory)

Deprecated

• the use of discontinued https://geolite.maxmind.com/download/geoip/database/GeoLite2-... database URLs

Links:

• Hex package
• Documentation
• GitHub
• GitLab

Hi forum,

Locus 1.3.0 was released today.

Added:

• ability of loading databases from local file system
• type spec of database entries

Fixed:

• wrong handling of timezones on cached tarballs
• wrong handling of daylight saving time on conditional HTTP requests

The timezone / DST fixes mentioned above were also backported to earlier versions and tagged under:

• 1.0.1
• 1.1.4
• 1.2.2

Links:

• Package
• Documentation

Hello forum,

Locus 1.6.0 was released today.

Added:

• new API method for validating loaded databases (locus:analyze/1)
• new command line tool supporting database validation

Changed:

• safety of database HTTPS downloads was substantially improved by now rejecting expired certificates, mismatched hostnames, self-signed certificates or unknown certificate authorities
• test coverage using MaxMind’s test data was greatly extended
• database decoder was thoroughly optimized
• documentation was mildly improved

Fixed:

• misguided rejection of UTF-8 strings with non-printable (but valid) codepoints
• unnecessarily strict refusal to load 2.x database formats succeeding 2.0
• infinite recursion in maliciously crafted databases due to circular paths

Links:

• Hex package
• Documentation
• GitHub
• GitLab

I’m pleased to announce the release of Locus 1.8.0 .

Added

• support for returning types other than map upon successful lookups

Changed

• MMDB decoder, which was split into separate tree, data section and analysis modules
• imported stacktrace_compat version [1.0.2 => 1.1.1]

Removed

• support for OTP 18

Fixed

• incidents of locus managerial processes keeping references to old binaries, upon a database update, for a potentially unlimited time (OTP 20+ only)
• broken logging of playground shell on OTP 21.1+

Links:

• Hex package
• Documentation
• GitHub
• GitLab