fix: update dependencies in maxmind

[fukusuket]

What Changed

• Closed Compile error with latest maxmind crate #1722
• Closed [bug] When the -GeoIP is specified, the GeoIP fields are output in both the Details and ExtraFieldInfo in json-timeline. #1724

Evidence

Integraion-Test

• https://github.com/Yamato-Security/hayabusa/actions/runs/19841289365

I’d appreciate it if you could check it when you have time🙏

[Copilot]

Pull request overview

This PR updates the maxminddb dependency from version 0.26.0 to 0.27.0 and adapts the GeoIP lookup code to the new API. The primary changes involve updating how IP geolocation data is decoded and accessed.

• Migrated from direct type lookup to a two-step decode pattern for GeoIP lookups
• Updated field access from names.get("en") to names.english for localized names
• Updated multiple dependencies (syn, bytes, clap, hashbrown, etc.) to their latest versions

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 2 comments.

File	Description
src/options/geoip_search.rs	Adapts GeoIP lookup code to maxminddb 0.27.0 API, using new decode pattern and updated field access methods
Cargo.lock	Updates maxminddb from 0.26.0 to 0.27.0 and updates various other dependencies (syn, bytes, clap, hashbrown, etc.)

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[fukusuket]

% ./hayabusa json-timeline -d ../data/windows/hayabusa-sample-evtx-main -G ../data/maxmind -w -q -o timeline.json
% jq 'select(.Details.TgtASN != "")' timeline.json

{
  "Timestamp": "2019-08-03 22:50:29.101 +09:00",
  "RuleTitle": "Net Conn",
  "Level": "info",
  "Computer": "MSEDGEWIN10",
  "Channel": "Sysmon",
  "EventID": 3,
  "RecordID": 5521,
  "Details": {
    "Initiated": true,
    "Proto": "tcp",
    "SrcIP": "10.0.2.15",
    "SrcPort": 50105,
    "SrcHost": "MSEDGEWIN10.home",
    "TgtIP": "185.199.111.153",
    "TgtPort": 443,
    "TgtHost": "",
    "User": "MSEDGEWIN10\\IEUser",
    "Proc": "C:\\Windows\\System32\\mmc.exe",
    "PID": 4372,
    "PGUID": "747F3D96-9123-5D45-0000-001087596101",
    "SrcASN": "Private",
    "TgtASN": "FASTLY",
    "TgtCountry": "United States",
    "TgtCity": ""
  },
  "ExtraFieldInfo": {
    "DestinationIsIpv6": false,
    "DestinationPortName": "https",
    "SourceIsIpv6": false,
    "UtcTime": "2019-08-03 13:50:27.460",
    "SrcASN": "Private",
    "TgtASN": "FASTLY",
    "TgtCountry": "United States",
    "TgtCity": ""
  },

[fukusuket]

I also fixed #1724 :)

% ./hayabusa json-timeline -d ../data/windows/hayabusa-sample-evtx-main -w -q -o timeline.json -G ../data/maxmind -C
jq 'select(.Details.TgtASN = "FASTLY")' timeline.json

{
  "Timestamp": "2019-08-03 22:50:29.101 +09:00",
  "RuleTitle": "Net Conn",
  "Level": "info",
  "Computer": "MSEDGEWIN10",
  "Channel": "Sysmon",
  "EventID": 3,
  "RecordID": 5521,
  "Details": {
    "Initiated": true,
    "Proto": "tcp",
    "SrcIP": "10.0.2.15",
    "SrcPort": 50105,
    "SrcHost": "MSEDGEWIN10.home",
    "TgtIP": "185.199.111.153",
    "TgtPort": 443,
    "TgtHost": "",
    "User": "MSEDGEWIN10\\IEUser",
    "Proc": "C:\\Windows\\System32\\mmc.exe",
    "PID": 4372,
    "PGUID": "747F3D96-9123-5D45-0000-001087596101",
    "SrcASN": "Private",
    "TgtASN": "FASTLY",
    "TgtCountry": "United States",
    "TgtCity": ""
  },
  "ExtraFieldInfo": {
    "DestinationIsIpv6": false,
    "DestinationPortName": "https",
    "SourceIsIpv6": false,
    "UtcTime": "2019-08-03 13:50:27.460"
  },
  "RuleID": "a87defd7-1f87-4a34-8864-415ccb2ef21c"
}

[YamatoSecurity]

@fukusuket LGTM! Thanks so much for fixing both issues!