What were the notable Go updates?

index/suffixarray: report error rather than panic for corrupted data, index/suffixarray: protect against another data corruption, and cmd/dist: use go/build/constraint to parse build constraints.

@golang

Go and the standard library - backend infrastructure at scale

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

SUFFIX ARRAY PANIC FIX AND BUILD CONSTRAINT BUG LAND IN COMPILER CHANGES

By RepoJournal · Filed 06:01 UTC on May 5, 2026 · About Go

Go's standard library is hardening against corrupted data while the compiler fixes a critical precedence bug in build constraints that affects real codebases today.

The index/suffixarray package now reports errors instead of panicking when it encounters corrupted data [1], with additional boundary checks to prevent index-out-of-bounds crashes [2] — both trivial fixes that prevent silent failures in production. Meanwhile, cmd/dist landed a fix for a long-standing bug in build constraint evaluation where `gccgo && gc || gc` incorrectly evaluated to false instead of true [3][4], a precedence issue the previous implementation had that's now resolved using go/build/constraint. On the http2 front, the net package is stabilizing its http2wrap support by switching from DefaultTransport to an empty Transport during initialization [5], improving correctness when users don't explicitly configure http2. The compiler itself is tightening generic method handling by asserting byte stream version V4 at the type level [6], preventing silent drops of generic methods for experimental Go 1.27 users. pkg.go.dev shipped a search performance optimization [7] that dynamically calculates database limits based on offset and limit parameters, cutting latency while preserving correct grouping, and fixed a `latest` version resolution bug in GetModulePackages [8]. Tools saw a fix for gopls hover logic that was incorrectly including comments due to unchecked BinarySearchFunc results [9], plus a js platform test suppression [10].

Action items

→ Review build constraints in your codebase if you use complex && || combinations — test after next Go update golang/go [plan]
→ No immediate action required for most projects, but monitor suffix array usage in data processing pipelines golang/go [monitor]
→ If running experimental genericmethods, verify you're building with GOEXPERIMENT=genericmethods set golang/go [monitor]

References

[1] index/suffixarray: report error rather than panic for corrupted data golang/go
[2] index/suffixarray: protect against another data corruption golang/go
[3] cmd/dist: use go/build/constraint to parse build constraints golang/go
[4] cmd/dist: add a 'gccgo && gc || gc' build constraint testcase golang/go
[5] http2: use empty Transport rather than DefaultTransport in http2wrap golang/net
[6] cmd/compile/internal/noder: hoist up generic methods assertion golang/go
[7] internal/api: optimize search performance golang/pkgsite
[8] internal/postgres: fix GetModulePackages for latest golang/pkgsite
[9] gopls/internal/golang: fix invalid comment on hover golang/tools
[10] internal/typesinternal/typeindex: suppress test on js golang/tools

Quick answers

What shipped in Go on May 5, 2026?: Go's standard library is hardening against corrupted data while the compiler fixes a critical precedence bug in build constraints that affects real codebases today. In total, 15 commits landed.
What were the notable Go updates?: index/suffixarray: report error rather than panic for corrupted data, index/suffixarray: protect against another data corruption, and cmd/dist: use go/build/constraint to parse build constraints.

PRINTF ANALYZER GETS SMARTER, PLAYGROUND NEEDS GO 1.26

The printf linter stops falsely flagging intentional double newlines, while gotip now requires Go 1.26 to bootstrap.

go 13 shipped 1-min read

@golang 1 day ago

GO REWORKS HTTP/3 REGISTRATION, KILLS GLOBAL STATE IN MODULE LOADER

Damien Neil's paired changes to net/http and x/net/http3 fundamentally reshape how HTTP/3 integrates with the standard library, while Michael Matloob strips out state manipulation functions that no longer belong anywhere.

go 28 shipped 1-min read

@golang 2 days ago

GOPLS FIXES COMMENT HANDLING IN COMPOSITE LITERALS, VULNDB ADDS 46 SECURITY REPORTS

A critical gopls bug that corrupted code when comments appeared in composite literals is fixed, while the vulnerability database absorbs a major batch of 46 new security reports across the ecosystem.

go 21 shipped 2-min read

@golang 3 days ago

COMPILER SHRINKS CODE SIZE WHILE QUIC FIXES BUSY-LOOP HANGS

The Go compiler now frees unused registers at loop headers, cutting generated code size across all architectures, while the net package fixes a critical QUIC keep-alive deadlock that was burning CPU on blocked connections.

go 25 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.