Skip to content

chore: bump github.com/ggwhite/go-masker/v2 from 2.3.1 to 2.4.2#413

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/ggwhite/go-masker/v2-2.4.2
Open

chore: bump github.com/ggwhite/go-masker/v2 from 2.3.1 to 2.4.2#413
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/ggwhite/go-masker/v2-2.4.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 24, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/ggwhite/go-masker/v2 from 2.3.1 to 2.4.2.

Release notes

Sourced from github.com/ggwhite/go-masker/v2's releases.

Release v2.4.2

Features

  • mapstruct tag — 遞迴遮罩 map values,支援巢狀 map/struct/ptr/slice/ptr-to-slice 組合 (#38)
  • Struct() reflect cache — 首次解析 type metadata 後快取(sync.Map),重複呼叫同型別效能提升 ≥ 50%
  • Format() — 直接輸出遮罩後確定性字串,不配置新 struct,適合 log/debug 場景

Fixes

  • Format() 敏感資料洩漏 — Marshal 失敗時改輸出 mask chars,不再回傳原始值
  • Format() dead code — 移除 writeMaskedField 中永遠不會到達的 reflect.String 分支
  • 10 項 code review 修正 — 含 Struct() non-struct input panic、nil handling、telephone 格式等

Release v2.4.1

Bug Fixes

  • Fix nil pointer panic when using abuse tag via DefaultMaskerMarshaler or NewMaskerMarshaler()
  • Fix panic on typed-nil pointer input to Struct() (e.g. (*T)(nil))
  • Fix panic on nil elements in []*T slices with mask:"struct"
  • Fix struct/ptr fields with non-struct tags being silently zeroed (now copied as-is)
  • Fix slice fields of non-standard element types ([]int, []*string, etc.) being silently dropped
  • Fix AbuseMasker replacing substrings inside longer words ("bad badminton""*** badminton")
  • Fix AllMasker not being overridable via Register()
  • Fix TelephoneMasker ignoring custom mask char (was hardcoded ****)
  • Fix TelephoneMasker corrupting multi-byte UTF-8 input

Improvements

  • Add sync.RWMutex to MaskerMarshaler — all exported methods are now safe for concurrent use
  • Replace strLoop() with strings.Repeat() for better performance
  • Deduplicate DefaultMaskerMarshaler initialization

Release v2.4.0

What's New

  • Add mapstruct tag for recursively masking map values — supports nested maps, structs, pointers, slices, and pointer-to-slice combinations (#38, closes #37)
Changelog

Sourced from github.com/ggwhite/go-masker/v2's changelog.

[2.4.2] - 2026-06-23

Features

  • mapstruct tag — 遞迴遮罩 map values,支援巢狀 map/struct/ptr/slice/ptr-to-slice 組合 (#38)
  • Struct() reflect cache — 首次解析 type metadata 後快取(sync.Map),重複呼叫同型別效能提升 ≥ 50%
  • Format() — 直接輸出遮罩後確定性字串,不配置新 struct,適合 log/debug 場景

Fixes

  • Format() 敏感資料洩漏 — Marshal 失敗時改輸出 mask chars,不再回傳原始值
  • Format() dead code — 移除 writeMaskedField 中永遠不會到達的 reflect.String 分支
  • 10 項 code review 修正 — 含 Struct() non-struct input panic、nil handling、telephone 格式等
Commits
  • 29ce760 docs: v2.4.2 changelog
  • db9e252 feat(F007-v3-type-cache): F007 v3 Struct() type cache + Format()
  • 6c64ddd docs: v2.4.1 changelog
  • a87e75c docs: v2.4.0 changelog
  • 21870db chore: update F007 status and learnings from batch run
  • da8b959 chore: add F007-v3-type-cache feature (type cache + Format for v3)
  • 9a40aa9 docs: update release skill for v2/v3 coexistence
  • c4040bd docs: add release skill and CHANGELOG.md
  • 33a4911 fix: resolve 10 bugs found in code review
  • 77733ef chore: track .4x/learnings.json (accumulated run knowledge)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/ggwhite/go-masker/v2](https://github.com/ggwhite/go-masker) from 2.3.1 to 2.4.2.
- [Release notes](https://github.com/ggwhite/go-masker/releases)
- [Changelog](https://github.com/ggwhite/go-masker/blob/master/CHANGELOG.md)
- [Commits](ggwhite/go-masker@v2.3.1...v2.4.2)

---
updated-dependencies:
- dependency-name: github.com/ggwhite/go-masker/v2
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go labels Jun 24, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Thank you for contributing to this project! 😊🕹️

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants