[dependabot]

Bumps the monthly-version-updates group with 2 updates: github.com/goforj/godump and github.com/klauspost/compress.

Updates github.com/goforj/godump from 1.9.1 to 1.10.0

Release notes

Sourced from github.com/goforj/godump's releases.

v1.10.0

GoDump v1.10.0 adds two opt-in ways to make dumps easier to read and control what they show.

Hide type annotations

Use WithoutTypes() to keep value colors and structure while omitting annotations such as #string, #int, and struct type names:

d := godump.NewDumper(godump.WithoutTypes(), godump.WithoutHeader())
d.Dump("hello")
// "hello"

Works with text, HTML, and diffs. Existing output stays unchanged unless the option is enabled. See #72, addressing #60.

Redact by serialization tags

Use WithRedactTags("json", "xml") to redact fields whose selected tag values equal "-". Call WithRedactTags() or WithRedactTags("*") to check every tag key.

type User struct {
    Name       string
    Credential string `json:"-"`
}
d := godump.NewDumper(
godump.WithRedactTags("json"),
godump.WithoutTypes(),
godump.WithoutHeader(),
)
d.Dump(User{Name: "Alice", Credential: "secret"})
// {
//   +Name       => "Alice"
//   +Credential => <redacted>
// }

Redaction follows traversal through nested and embedded structs and collections. Matching is exact and case-sensitive. JSON helpers keep their existing marshaling behavior; use WithDisableStringer(true) when tagged structs need field traversal instead of custom String() output. See #74, addressing #59.

Maintenance and compatibility

• Updated documentation, generated runnable examples, and development commands.
• Added repository security and supply-chain checks and refined dependency maintenance.
• Retained Go 1.18 compatibility, zero external library dependencies, and 100% main-package statement coverage.

Thanks to @​marvinpeter95 for the original WithoutTypes() contribution in #65, which this release builds on.

Full changelog: goforj/godump@v1.9.1...v1.10.0

Commits

• 7bb3368 feat: redact fields by serialization tags (#74)
• 0f1c095 fix: restore Go 1.27 linting and batch updates monthly (#71)
• 400a8b8 feat: add WithoutTypes option (#72)
• fdbc067 chore: harden repository security (#66)
• 5b1ba91 docs: improve development workflow (#64)
• 8e9b14a docs: use absolute README image URL (#63)
• 4daf363 docs: logo
• 36ebde3 docs: remove retired Go Report Card badge (#62)
• 7f18aba docs: separate API index links
• See full diff in compare view

Updates github.com/klauspost/compress from 1.20.2 to 1.20.3

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.20.3

What's Changed

• zstd: two-pass decode with match-source prefetch on arm64 (largest win decoding SpeedBestCompression-class data) by @​lizthegrey in klauspost/compress#1212
• zstd: speed up better encoder hashing, primes in registers on arm64 by @​lizthegrey in klauspost/compress#1230
• zstd: reuse dictionary sequence tables in the encoder by @​lizthegrey in klauspost/compress#1233
• zstd: close most of the decode gap to libzstd on real corpora by @​lizthegrey in klauspost/compress#1232
• huff0: align the decode inner loops to 64 bytes by @​lizthegrey in klauspost/compress#1236
• zstd: keep default-encoder hash primes in registers on arm64 by @​lizthegrey in klauspost/compress#1241
• zstd: align the sequence decode and execute loops to 64 bytes by @​lizthegrey in klauspost/compress#1240
• zstd, huff0: cheaper per-block table setup by @​lizthegrey in klauspost/compress#1234
• zstd, s2, flate: smoke-test Silesia in CI, add real-corpus benchmarks by @​lizthegrey in klauspost/compress#1237
• zip: reject entries named "." in ReadDir to stop infinite fs.WalkDir by @​Raghuvardhan-Reddy78 in klauspost/compress#1249
• zstd: decode at full speed into exact-size destinations by @​lizthegrey in klauspost/compress#1246
• s2: Reject short index chunk in RemoveIndexHeaders by @​Raghuvardhan-Reddy78 in klauspost/compress#1254
• zstd, huff0: keep the encoder bit writers in registers by @​lizthegrey in klauspost/compress#1245
• huff0: reuse Scratch across inputs in the fuzzers by @​lizthegrey in klauspost/compress#1257

New Contributors

• @​Raghuvardhan-Reddy78 made their first contribution in klauspost/compress#1235
• @​SulimanAbdulrazzaq made their first contribution in klauspost/compress#1255

Full Changelog: klauspost/compress@v1.20.1...v1.20.3

Commits

• b946d41 Revert #1255 (#1261)
• 748550b Merge commit from fork
• dd54d86 huff0: reuse Scratch across inputs in the fuzzers (#1257)
• d189b4c gzhttp: do not compress 206 responses without Content-Range, read Accept-Enco...
• 6b91995 zstd, huff0: keep the encoder bit writers in registers (#1245)
• 402c3a5 s2: Reject short index chunk in RemoveIndexHeaders (#1254)
• 29f5f81 build(deps): bump the github-actions group with 4 updates (#1252)
• 9b8ba61 dict: Stricter input validation (#1250)
• da4df9c zstd: decode at full speed into exact-size destinations (#1246)
• 1971eec reject zip entries named "." in ReadDir (#1249)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions