MaskedBundle v0.1.2

Maintenance release focused on bounded sensitive-data detection, Monolog integration hardening and CI supply-chain security.

Changed

• Share payment-card detection budgets across complete SensitiveJsonFormatter operations.
• Share payment-card detection budgets across message, context and extra in SensitiveDataProcessor.
• Skip unnecessary exact-value detection after payment-card detection has already entered fail-closed state.
• Add regression coverage for shared detector budgets and fail-closed behavior.
• Clarify shared detection-budget and formatter behavior in the documentation.
• Pin GitHub Actions dependencies to verified commit SHAs.
• Disable persisted checkout credentials in CI.

Compatibility

No public API breaking changes are introduced in this release.

Fixed

• Prevented sensitive data from bypassing masking during re-entrant JSON formatter normalization.
• Shared payment-card candidate-validation budgets across structured masking operations.
• Shared payment-card detection budgets between SensitiveLogger messages and structured context.
• Preserved fail-closed behavior after a shared detection budget is exhausted.

Documentation

• Documented payment-card candidate-validation limits and shared operation budgets.

MaskedBundle v0.1.0

First public release of MaskedBundle — a Symfony bundle for sensitive data detection and masking.

Highlights

• Automatic detection and masking of payment card numbers in free text
• Explicit masking of passwords, API tokens, credentials and application-specific secrets
• Recursive masking of structured array data and array keys
• SensitiveLogger integration for masking PSR-3 messages and context
• Monolog 3 processor integration
• Dedicated sensitive LineFormatter and JsonFormatter
• Configurable Unicode-safe mask character
• Defensive limits for pathological or excessively large inputs
• Fail-closed behavior when masking safety budgets are exceeded
• Shared exact-value search budgets across structured data and logging operations
• Protection of sensitive method arguments with PHP #[SensitiveParameter]
• No shared mutable secret registry

Requirements

• PHP 8.4.1+
• Symfony 8.1+
• ext-mbstring

Monolog integration is optional and currently targets Monolog API 3.

Installation

composer require alkinbg/masked-bundle

Status

This is the first public 0.x release. The main application-facing API is available and tested, while implementation details marked [@internal](https://github.com/internal) may continue to evolve before 1.0.0.

Full usage examples, configuration details and security considerations are available in the project README.