Propagate changes from main into development

[github-actions]

Automated PR to propagate changes from main into development.

Triggered by push to main.

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

[Copilot]

Pull request overview

Automated sync PR to keep development aligned with main, updating the pinned checksum used to validate the downloaded GeoLite2 Country database during Docker image builds.

Changes:

• Update GEOLITE2_COUNTRY_SHA256 to match the current GeoLite2-Country.mmdb content used by the Docker build.

Comments suppressed due to low confidence (1)

Dockerfile:439

• The GeoLite2 database is downloaded from a mutable URL (GitHub raw/download), and in the CI branch the file is accepted without any checksum verification. This can cause supply-chain risk (unverified artifact in CI builds) and also leads to frequent rebuild breakages when the upstream file changes and the pinned SHA becomes stale. Consider pinning the download to a specific release/tag/commit (immutable URL) and verifying the checksum in CI as well (even if with a shorter timeout).

ARG GEOLITE2_COUNTRY_SHA256=c6549807950f93f609d6433fa295fa517fbdec0ad975a4aafba69c136d5d2347
RUN mkdir -p /app/data/geoip && \
        if [ -n "$CI" ]; then \
            echo "⏱️  CI detected - quick download (10s timeout, no retries)"; \
            if curl -fSL -m 10 "https://github.com/P3TERX/GeoLite.mmdb/raw/download/GeoLite2-Country.mmdb" \
                -o /app/data/geoip/GeoLite2-Country.mmdb 2>/dev/null; then \