RepoJournal
Go @golang
167 wires and counting

$ follow Go

Keep up with Go in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-05-10
stories 5
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

PKGSITE LIFTS QUERY LIMITS, EXPOSES MODULE TIMESTAMPS

By RepoJournal · Filed · About Go · Composed from the cited sources · methodology

Go's package discovery API just got faster and more informative—hardcoded constraints are gone, and clients can now read version timestamps directly from module metadata.

The biggest change lands in the internal/api layer where a hardcoded limit on GetImportedBy queries is being removed [1], letting you actually fetch the full dependency graph without pagination walls. In the same pass, the /module/{path} endpoint now exposes commitTime in the v1beta spec [2], meaning you no longer need a separate call to the /versions endpoint to find when a module version was published—the timestamp comes straight from the module proxy. Search pagination tightened up too: the default limit dropped to 25 results [3] to align with frontend expectations and shave milliseconds off first-page load. The CLI tooling got its own fixes [4], ensuring the packages command actually prints results, and the codebase ran through go fix [5] to catch any lurking issues.

$ ls golang/reviews/ # the step-back reads

the week in review FIPS 140 crypto fixes land across SHA-3, TLS 1.2, HKDF the month in review Go toolchain patches three CVEs as gopls hits v0.24.0
Full archive → Weekly reviews →

Quick answers

What shipped in Go on May 10, 2026?
Go's package discovery API just got faster and more informative—hardcoded constraints are gone, and clients can now read version timestamps directly from module metadata. In total, 5 commits landed.
What were the notable Go updates?
internal/api: remove limit on GetImportedBy ServePackageImportedBy, internal/api: expose commitTime in module metadata, and internal/api: set default search pagination limit to 25.
♥

$ log @golang --recent

RISC-V Zfa assembly support, and a faster archsimd unifier 9 shipped Plan 9 Mkdir race fixed, riscv64 gets clobberdead mode 7 shipped gopls closes a CVE on dash-prefixed module paths, and the exp collections get a Set 52 shipped Compiler stops lifting unsafe.Pointer arithmetic 35 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.