Reject masked measurement reliability inputs

[FlorianPfaff]

What changed

• reject genuinely masked NumPy values before measurement weights, active flags, counts, dimensions, or covariance inputs are converted to backend arrays
• detect masked values nested in Python sequences and object arrays
• preserve support for fully unmasked MaskedArray inputs
• add regression tests for scalar, vector, nested, shared-covariance, and batched-covariance cases

Root cause

np.asarray(...) and backend array conversion expose the underlying payload of a numpy.ma.MaskedArray while discarding its mask. As a result, a hidden reliability weight or activity flag could silently participate in measurement selection, and masked count or covariance entries could be treated as ordinary values.

Impact

Reliability-weighted trackers now fail explicitly on missing masked inputs instead of silently using hidden data, preventing incorrect measurement activation and covariance handling.

Validation

Added focused regression coverage in tests/filters/test_measurement_reliability_masked_inputs.py. Existing GitHub checks are expected to validate the branch.

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ COPYPASTE	jscpd	yes		no	no	28.37s
✅ JSON	prettier	7	0	0	0	1.05s
✅ JSON	v8r	7		0	0	3.69s
✅ MARKDOWN	markdownlint	68	0	0	0	2.02s
✅ MARKDOWN	markdown-table-formatter	68	0	0	0	0.74s
✅ PYTHON	black	1795	47	0	0	95.19s
✅ PYTHON	isort	1795	75	0	0	2.78s
✅ REPOSITORY	betterleaks	yes		no	no	2.43s
✅ REPOSITORY	checkov	yes		no	no	56.12s
✅ REPOSITORY	gitleaks	yes		no	no	17.32s
✅ REPOSITORY	git_diff	yes		no	no	0.34s
✅ REPOSITORY	secretlint	yes		no	no	83.14s
✅ REPOSITORY	syft	yes		no	no	5.69s
✅ REPOSITORY	trivy-sbom	yes		no	no	6.67s
✅ REPOSITORY	trufflehog	yes		no	no	32.52s
✅ YAML	prettier	11	0	0	0	0.78s
✅ YAML	v8r	11		0	0	13.85s
✅ YAML	yamllint	11		0	0	0.67s

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

• Documentation: Custom Flavors
• Command: npx mega-linter-runner@9.6.0 --custom-flavor-setup --custom-flavor-linters PYTHON_BLACK,PYTHON_ISORT,COPYPASTE_JSCPD,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_BETTERLEAKS,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository