feat: initial commit

.github/CODEOWNERS

@@ -0,0 +1,2 @@
+# Global owners for the repository
+* @ivuorinen

.github/CODE_OF_CONDUCT.md

@@ -0,0 +1,145 @@
+# Citizen Code of Conduct
+
+## 1. Purpose
+
+A primary goal of @ivuorinen's repositories is to be inclusive to the largest
+number of contributors, with the most varied and diverse backgrounds possible.
+As such, we are committed to providing a friendly, safe and welcoming
+environment for all, regardless of gender, sexual orientation, ability,
+ethnicity, socioeconomic status, and religion (or lack thereof).
+
+This code of conduct outlines our expectations for all those who participate in
+our community, as well as the consequences for unacceptable behavior.
+
+We invite all those who participate in @ivuorinen's repositories to help us
+create safe and positive experiences for everyone.
+
+## 2. Open [Source/Culture/Tech] Citizenship
+
+A supplemental goal of this Code of Conduct is to increase
+open [source/culture/tech] citizenship by encouraging participants to recognize
+and strengthen the relationships between our actions and their effects on our
+community.
+
+Communities mirror the societies in which they exist and positive action is
+essential to counteract the many forms of inequality and abuses of power that
+exist in society.
+
+If you see someone who is making an extra effort to ensure our community is
+welcoming, friendly, and encourages all participants to contribute to the
+fullest extent, we want to know.
+
+## 3. Expected Behavior
+
+The following behaviors are expected and requested of all community members:
+
+* Participate in an authentic and active way. In doing so, you contribute to the
+  health and longevity of this community.
+* Exercise consideration and respect in your speech and actions.
+* Attempt collaboration before conflict.
+* Refrain from demeaning, discriminatory, or harassing behavior and speech.
+* Be mindful of your surroundings and of your fellow participants. Alert
+  community leaders if you notice a dangerous situation, someone in distress, or
+  violations of this Code of Conduct, even if they seem inconsequential.
+* Remember that community event venues may be shared with members of the public;
+  please be respectful to all patrons of these locations.
+
+## 4. Unacceptable Behavior
+
+The following behaviors are considered harassment and are unacceptable within
+our community:
+
+* Violence, threats of violence or violent language directed against another
+  person.
+* Sexist, racist, homophobic, transphobic, ableist or otherwise discriminatory
+  jokes and language.
+* Posting or displaying sexually explicit or violent material.
+* Posting or threatening to post other people's personally identifying
+  information ("doxing").
+* Personal insults, particularly those related to gender, sexual orientation,
+  race, religion, or disability.
+* Inappropriate photography or recording.
+* Inappropriate physical contact. You should have someone's consent before
+  touching them.
+* Unwelcome sexual attention. This includes, sexualized comments or jokes;
+  inappropriate touching, groping, and unwelcomed sexual advances.
+* Deliberate intimidation, stalking or following (online or in person).
+* Advocating for, or encouraging, any of the above behavior.
+* Sustained disruption of community events, including talks and presentations.
+
+## 5. Weapons Policy
+
+No weapons will be allowed at @ivuorinen's repositories events, community
+spaces, or in other spaces covered by the scope of this Code of Conduct. Weapons
+include but are not limited to guns, explosives (including fireworks), and large
+knives such as those used for hunting or display, as well as any other item used
+for the purpose of causing injury or harm to others. Anyone seen in possession
+of one of these items will be asked to leave immediately, and will only be
+allowed to return without the weapon. Community members are further expected to
+comply with all state and local laws on this matter.
+
+## 6. Consequences of Unacceptable Behavior
+
+Unacceptable behavior from any community member, including sponsors and those
+with decision-making authority, will not be tolerated.
+
+Anyone asked to stop unacceptable behavior is expected to comply immediately.
+
+If a community member engages in unacceptable behavior, the community organizers
+may take any action they deem appropriate, up to and including a temporary ban
+or permanent expulsion from the community without warning (and without refund in
+the case of a paid event).
+
+## 7. Reporting Guidelines
+
+If you are subject to or witness unacceptable behavior, or have any other
+concerns, please notify a community organizer as soon as possible:
+<ismo@ivuorinen.net>
+
+Additionally, community organizers are available to help community members
+engage with local law enforcement or to otherwise help those experiencing
+unacceptable behavior feel safe. In the context of in-person events, organizers
+will also provide escorts as desired by the person experiencing distress.
+
+## 8. Addressing Grievances
+
+If you feel you have been falsely or unfairly accused of violating this Code of
+Conduct, you should notify @ivuorinen with a concise description of your
+grievance. Your grievance will be handled in accordance with our existing
+governing policies.
+
+## 9. Scope
+
+We expect all community participants (contributors, paid or otherwise; sponsors;
+and other guests) to abide by this Code of Conduct in all community
+venues--online and in-person--as well as in all one-on-one communications
+pertaining to community business.
+
+This code of conduct and its related procedures also applies to unacceptable
+behavior occurring outside the scope of community activities when such behavior
+has the potential to adversely affect the safety and well-being of community
+members.
+
+## 10. Contact info
+
+@ivuorinen
+<ismo@ivuorinen.net>
+
+## 11. License and attribution
+
+The Citizen Code of Conduct is distributed by [Stumptown Syndicate][stumptown]
+under a [Creative Commons Attribution-ShareAlike license][cc-by-sa].
+
+Portions of text derived from the [Django Code of Conduct][django] and
+the [Geek Feminism Anti-Harassment Policy][geek-feminism].
+
+* _Revision 2.3. Posted 6 March 2017._
+* _Revision 2.2. Posted 4 February 2016._
+* _Revision 2.1. Posted 23 June 2014._
+* _Revision 2.0, adopted by the [Stumptown Syndicate][stumptown] board on 10
+  January 2013. Posted 17 March 2013._
+
+[stumptown]: https://github.com/stumpsyn
+[cc-by-sa]: https://creativecommons.org/licenses/by-sa/3.0/
+[django]: https://www.djangoproject.com/conduct/
+[geek-feminism]: http://geekfeminism.wikia.com/wiki/Conference_anti-harassment/Policy

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,38 @@
+---
+name: Bug report
+about: Create a report to help us improve
+title: ''
+labels: bug
+assignees: ivuorinen
+
+---
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**To Reproduce**
+Steps to reproduce the behavior:
+1. Go to '...'
+2. Click on '....'
+3. Scroll down to '....'
+4. See error
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.
+
+**Screenshots**
+If applicable, add screenshots to help explain your problem.
+
+**Desktop (please complete the following information):**
+ - OS: [e.g. iOS]
+ - Browser [e.g. chrome, safari]
+ - Version [e.g. 22]
+
+**Smartphone (please complete the following information):**
+ - Device: [e.g. iPhone6]
+ - OS: [e.g. iOS8.1]
+ - Browser [e.g. stock browser, safari]
+ - Version [e.g. 22]
+
+**Additional context**
+Add any other context about the problem here.

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,20 @@
+---
+name: Feature request
+about: Suggest an idea for this project
+title: ''
+labels: enhancement
+assignees: ivuorinen
+
+---
+
+**Is your feature request related to a problem? Please describe.**
+A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
+
+**Describe the solution you'd like**
+A clear and concise description of what you want to happen.
+
+**Describe alternatives you've considered**
+A clear and concise description of any alternative solutions or features you've considered.
+
+**Additional context**
+Add any other context or screenshots about the feature request here.

.github/copilot-instructions.md

@@ -0,0 +1,79 @@
+# GitHub Copilot Instructions for monolog-gdpr-filter
+
+## Project Overview
+
+This project is a PHP library that provides a Monolog processor for GDPR compliance.
+
+It allows masking, removing, or replacing sensitive data in logs using regex patterns,
+field-level configuration, and custom callbacks. It is designed for easy integration with Monolog and Laravel.
+
+## Coding Conventions
+
+- **Language:** PHP 8.2+
+  - **PHP Version:** Ensure compatibility with PHP 8.2 and above.
+- **PSR Standards:** Follow PSR-12 for code style and autoloading.
+- **Testing:** Use PHPUnit for all tests. Place tests in the `tests/` directory. Run `composer test` to execute tests.
+  - All tests should be written in a way that they can run independently.
+  - Use Attribute-based annotations for test methods (e.g., `#[Test]`).
+  - Use Attribute-based annotations for Covers (e.g., `#[CoversClass(GdprProcessor::class)]`).
+  - **PHPUnit Version:** Use PHPUnit 10.x or above.
+  - **PHPUnit Configuration:** Use `phpunit.xml` for configuration.
+  - **Code Coverage:** Use PHPUnit's code coverage features. Generate reports in the `build/` directory.
+- **Type Declarations:** Use strict typing and type declarations for all functions and methods.
+- **Namespaces:** Use appropriate namespaces for all classes
+  (e.g., `Ivuorinen\MonologGdprFilter`, or `Tests\` for tests).
+- **Error Handling:** Use exceptions for error handling.
+- **Static Analysis:**
+  - Use Psalm and PHPStan for static analysis.
+  - Config files: `psalm.xml`, `phpstan.neon` (if present).
+- **Linting:** Use PHP_CodeSniffer with `phpcs.xml` for code style checks. All code must pass linting before merging.
+- **Composer:** Use Composer for dependency management. Follow PSR-4 autoloading.
+  - Use `composer install` to install dependencies.
+  - Use `composer update` to update dependencies.
+- **Formatting:** Use 4 spaces for indentation. No trailing whitespace. Use Unix line endings.
+  See `.editorconfig` and `phpcs.xml` for more details.
+- **Version Control:**
+  - Use Git for version control.
+  - Follow semantic versioning (MAJOR.MINOR.PATCH).
+  - Do not commit anything, user will do it themselves.
+- **Documentation:**
+  - Public classes and methods should have PHPDoc blocks.
+  - Update `README.md` for usage and installation changes.
+
+## Pull Request Guidelines
+
+- Ensure your branch is up-to-date with `main`.
+- Use descriptive branch names (e.g., `feature/add-gdpr-processor`, `fix/issue-42`).
+- Include a clear description of changes in the PR.
+- Link to any relevant issues (e.g., `fixes #42`).
+- Ensure all tests pass (`vendor/bin/phpunit`).
+- Run static analysis (`vendor/bin/psalm` and/or `vendor/bin/phpstan`).
+- Run code style checks (`vendor/bin/phpcs`).
+- Add or update tests for new features or bug fixes.
+- Update documentation as needed.
+
+## Directory Structure
+
+- `src/` — Main library source code
+- `tests/` — PHPUnit tests
+- `build/` — Build artifacts and coverage reports
+- `vendor/` — Composer dependencies
+
+## Commit Message Guidelines
+
+- Use clear, concise messages in semantic commits style
+  (e.g., `fix: mask email addresses in context`, `feat(logger): add audit logger option`).
+- Reference issues when relevant (e.g., `fix: #12 ...`).
+
+## Security & Privacy
+
+- Do not log or expose real sensitive data in tests or documentation.
+- Ensure all masking/removal logic is covered by tests.
+
+## Automation
+
+- Use Composer scripts for automation if needed.
+- CI will run tests, static analysis, and code style checks.
+
+---
+For questions, see the `README.md` or open an issue.

.github/renovate.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["github>ivuorinen/renovate-config"],
+  "packageRules": [
+    {
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchCurrentVersion": "!/^0/",
+      "automerge": true
+    },
+    {
+      "matchDepTypes": ["devDependencies"],
+      "automerge": true
+    }
+  ],
+  "schedule": ["before 4am on monday"],
+  "vulnerabilityAlerts": {
+    "labels": ["security"],
+    "assignees": ["ivuorinen"]
+  }
+}

.github/workflows/codeql.yml

@@ -0,0 +1,46 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+name: 'CodeQL'
+
+on:
+  push:
+    branches: ['main']
+  pull_request:
+    branches: ['main']
+  schedule:
+    - cron: '30 1 * * 0' # Run at 1:30 AM UTC every Sunday
+  merge_group:
+
+permissions:
+  actions: read
+  contents: read
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: ['javascript'] # Add languages used in your actions
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
+        with:
+          languages: ${{ matrix.language }}
+          queries: security-and-quality
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
+        with:
+          category: '/language:${{matrix.language}}'

.github/workflows/phpcs.yaml

@@ -0,0 +1,22 @@
+name: Code Style Check
+
+on:
+  pull_request:
+    branches: [main]
+  push:
+    branches: [main]
+
+jobs:
+  phpcs:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: shivammathur/setup-php@0f7f1d08e3e32076e51cae65eb0b0c871405b16e # 2.34.1
+      - name: Install dependencies
+        run: composer install --no-interaction --prefer-dist
+      - name: Run PHP_CodeSniffer (PSR-12)
+        shell: bash
+        run: composer lint:tool:phpcs

.github/workflows/pr-lint.yml

@@ -0,0 +1,30 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+name: Lint Code Base
+
+on:
+  push:
+    branches: [master, main]
+  pull_request:
+    branches: [master, main]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions: read-all
+
+jobs:
+  Linter:
+    name: PR Lint
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    permissions:
+      statuses: write
+      contents: read
+      packages: read
+
+    steps:
+      - name: Run PR Lint
+        # https://github.com/ivuorinen/actions
+        uses: ivuorinen/actions/pr-lint@8476cd4675ea8210eadf4a267bbeb13bddea4e75 # 25.7.21

.github/workflows/stale.yml

@@ -0,0 +1,26 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+name: Stale
+
+on:
+  schedule:
+    - cron: '0 8 * * *' # Every day at 08:00
+  workflow_call:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  packages: read
+  statuses: read
+
+jobs:
+  stale:
+    name: 🧹 Clean up stale issues and PRs
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: write # only for delete-branch option
+      issues: write
+      pull-requests: write
+    steps:
+      - uses: ivuorinen/actions/stale@8476cd4675ea8210eadf4a267bbeb13bddea4e75 # 25.7.21

.github/workflows/sync-labels.yml

@@ -0,0 +1,41 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+name: Sync Labels
+
+on:
+  push:
+    branches:
+      - main
+      - master
+    paths:
+      - '.github/labels.yml'
+      - '.github/workflows/sync-labels.yml'
+  schedule:
+    - cron: '34 5 * * *' # Run every day at 05:34 AM UTC
+  workflow_call:
+  workflow_dispatch:
+  merge_group:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions: read-all
+
+jobs:
+  labels:
+    name: ♻️ Sync Labels
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    permissions:
+      contents: read
+      issues: write
+
+    steps:
+      - name: ⤵️ Checkout Repository
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+      - name: ⤵️ Sync Latest Labels Definitions
+        uses: ivuorinen/actions/sync-labels@8476cd4675ea8210eadf4a267bbeb13bddea4e75 # 25.7.21

.github/workflows/test-coverage.yaml

@@ -0,0 +1,59 @@
+name: Test & Coverage
+
+on:
+  pull_request:
+    branches: [main]
+  push:
+    branches: [main]
+
+permissions: read-all
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Setup PHP
+        uses: shivammathur/setup-php@0f7f1d08e3e32076e51cae65eb0b0c871405b16e # 2.34.1
+        with:
+          coverage: pcov
+
+      - name: Install dependencies
+        run: composer install --no-interaction --prefer-dist
+
+      - name: Configure matchers
+        uses: mheap/phpunit-matcher-action@5fe8d131daf5183c6137caea0d4e04a2b8afbb55 # v1.3.0
+
+      - name: Run Tests (teamcity format)
+        shell: bash
+        run: composer test:ci
+
+      - name: Upload coverage report
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        with:
+          name: coverage-report
+          path: coverage.xml
+
+      - name: Code Coverage Summary Report
+        id: coverage-summary
+        uses: saschanowak/CloverCodeCoverageSummary@217593f67675e88fe1e6afeab0175018eb37deaa # 1.1.0
+        with:
+          filename: coverage.xml
+
+      - name: 'Add Code Coverage to Job Summary'
+        run: |
+          cat code-coverage-summary.md >> $GITHUB_STEP_SUMMARY
+          cat code-coverage-details.md >> $GITHUB_STEP_SUMMARY
+
+      - name: 'Add Code Coverage Summary as PR Comment'
+        uses: marocchino/sticky-pull-request-comment@773744901bac0e8cbb5a0dc842800d45e9b2b405 # v2.9.4
+        if: github.event_name == 'pull_request'
+        with:
+          recreate: true
+          path: code-coverage-summary.md