Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 16, 2025

Bumps github.com/dromara/carbon/v2 from 2.6.11 to 2.6.13.

Release notes

Sourced from github.com/dromara/carbon/v2's releases.

v2.6.13

English
  • Use sync.Once in SetLocale method of language.go to ensure language files are loaded only once, and use sync.Map for thread-safe caching #319
  • Add boundary checks for escape character handling in format2layout method of helper.go to prevent panic caused by out-of-bounds access
中文
  • language.goSetLocale 方法中使用 sync.Once 确保语言文件只加载一次,使用 sync.Map 进行线程安全的缓存
  • helper.goformat2layout 方法中为转义字符处理添加边界检查, 防止越界访问导致的 panic

Full Changelog: dromara/carbon@v2.6.12...v2.6.13

v2.6.12

English
  • Lower golang environment dependency from 1.21 to 1.18
  • Upgrade testify testing framework from v1.10.0 to v1.11.1
  • Set isEmpty flag in UnmarshalJSON method of type_carbon.go file to indicate empty values
  • Use sync.Map to implement high-performance concurrent caching
  • Fix potential race conditions and null pointer dereference issues, improving concurrency safety
中文
  • golang 环境依赖从 1.21 降低到 1.18
  • testify 测试框架从 v1.10.0 升级到 v1.11.1
  • type_carbon.go 文件 UnmarshalJSON 方法中设置 isEmpty 标志以表示空值
  • 使用 sync.Map 实现高性能并发缓存
  • 修复潜在的竞态条件和空指针解引用问题,提高并发安全性

Full Changelog: dromara/carbon@v2.6.11...v2.6.12

Commits
  • 64dcb40 fix(helper): Fix the bug that may cause out-of-bounds access when parsing for...
  • 951745f fix(extremum): Add early return checks for invalid Carbon instances
  • f97deb5 style(language): Update the localeCache variable comment
  • dd28a26 build(carbon): Update the version number to 2.6.13
  • 0763da3 refactor(helper): Unify the declaration format of cache variables
  • 63a26af feat(language):Optimize the loading and caching mechanism of language resources
  • 89164ea docs:Update and optimize performance test data
  • acd5acf pref: cache locale resources on first load (#320)
  • dc2e1f6 build(deps): bump github/codeql-action from 3 to 4 (#321)
  • 49b0fde build: Remove unnecessary files
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/dromara/carbon/v2](https://github.com/dromara/carbon) from 2.6.11 to 2.6.13.
- [Release notes](https://github.com/dromara/carbon/releases)
- [Commits](dromara/carbon@v2.6.11...v2.6.13)

---
updated-dependencies:
- dependency-name: github.com/dromara/carbon/v2
  dependency-version: 2.6.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 29, 2025

Superseded by #1526.

@dependabot dependabot bot closed this Oct 29, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/dromara/carbon/v2-2.6.13 branch October 29, 2025 07:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant