RepoJournal
Go @golang
167 wires and counting

$ follow Go

Keep up with Go in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-05-09
stories 28
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

HTTP/2 API RESTORED FOR GO 1.27 COMPATIBILITY

By RepoJournal · Filed · About Go · Composed from the cited sources · methodology

Go's http2 package accidentally dropped critical symbols in the 1.27 build — they're back now, preserving compatibility for applications relying on ErrNoCachedConn, ErrPushLimitReached, and friends.

The http2 wrapping implementation in golang/net [1] lost four error types and one constant during refactoring, breaking any code that caught or referenced them. Cherry Mui's team restored ErrNoCachedConn, ErrPushLimitReached, ErrRecursivePush, and TrailerPrefix to their original locations, plus added FrameWriteRequest methods back as no-ops to prevent runtime surprises. Separately, QUIC buffer slicing is now fixed [2] — overlapping stream data was being written multiple times instead of deduplicated, causing spurious FINAL_SIZE_ERROR crashes. On the stdlib side, importer.ForCompiler is officially un-deprecated [3] after the deprecation warning was meant to apply only to a parameter, not the entire function. Runtime/cgo also regained critical acquire/release synchronization around malloc [4] that was accidentally dropped, fixing concurrency bugs in #67800 and #78479.

$ ls golang/reviews/ # the step-back reads

the week in review FIPS 140 crypto fixes land across SHA-3, TLS 1.2, HKDF the month in review Go toolchain patches three CVEs as gopls hits v0.24.0
Full archive → Weekly reviews →

Quick answers

What shipped in Go on May 9, 2026?
Go's http2 package accidentally dropped critical symbols in the 1.27 build — they're back now, preserving compatibility for applications relying on ErrNoCachedConn, ErrPushLimitReached, and friends. In total, 28 commits landed.
What were the notable Go updates?
http2: avoid API changes when built with go1.27, quic: fix buffer slicing when handling overlapping stream data, and go/importer: un-deprecate importer.ForCompiler.
♥

$ log @golang --recent

RISC-V Zfa assembly support, and a faster archsimd unifier 9 shipped Plan 9 Mkdir race fixed, riscv64 gets clobberdead mode 7 shipped gopls closes a CVE on dash-prefixed module paths, and the exp collections get a Set 52 shipped Compiler stops lifting unsafe.Pointer arithmetic 35 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.