RepoJournal
Go @golang
167 wires and counting

$ follow Go

Keep up with Go in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-05-12
stories 23
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

TYPESCRIPT 6 HITS PKGSITE, GOLANG TOOLS SHED DEAD CODE

By RepoJournal · Filed · About Go · Composed from the cited sources · methodology

The Go ecosystem's documentation and tooling infrastructure jumped a major version overnight, trading deprecated patterns for stdlib-native approaches.

golang/pkgsite shipped TypeScript 6.0 [2] alongside Jest 30 and a full ESLint modernization [3], clearing npm audit advisories and shedding the marked dependency in favor of a lightweight regex [1]. The TypeScript jump required deferring baseUrl deprecation cleanup to TS 7, a deliberate tradeoff to keep the upgrade clean. Meanwhile, golang/tools cut through its own technical debt by replacing xcontext.Detach with Go 1.21's native context.WithoutCancel [6], eliminating duplicate context logic across jsonrpc2_v2. gopls also deprecated the experimental importsSource option [7]—it's now just on by default—and tightened up its modernize analyzer to avoid suggesting unsafe rewrites when side effects lurk in the needle or predicate [8]. On the runtime side, ARM assembly got tighter [4] and VDSO test failures on ppc64le are fixed [5].

Action items

References

  1. [1] static: drop marked dep, extract code fences with a regex ↗ golang/pkgsite
  2. [2] all: update typescript 5.9.3 -> 6.0.3 ↗ golang/pkgsite
  3. [3] all: update ESLint and related JS dev dependencies ↗ golang/pkgsite
  4. [4] cmd/internal/obj/arm: use single BIC for AND with negative-rotated immediate ↗ golang/go
  5. [5] runtime: fix TestUsingVDSO on linux/ppc64le ↗ golang/go
  6. [6] all: replace xcontext.Detach and notDone with context.WithoutCancel ↗ golang/tools
  7. [7] gopls: deprecate importsSource and remove its use ↗ golang/tools
  8. [8] go/analysis/passes/modernize: slicescontains: check for side effects ↗ golang/tools
  9. [9] go/analysis/passes/composite: clarify and optimize ↗ golang/tools
  10. [10] cmd/ejobs: add -since flag to filter by date ↗ golang/pkgsite-metrics

$ ls golang/reviews/ # the step-back reads

the week in review FIPS 140 crypto fixes land across SHA-3, TLS 1.2, HKDF the month in review Go toolchain patches three CVEs as gopls hits v0.24.0
Full archive → Weekly reviews →

Quick answers

What shipped in Go on May 12, 2026?
The Go ecosystem's documentation and tooling infrastructure jumped a major version overnight, trading deprecated patterns for stdlib-native approaches. In total, 23 commits landed.
What were the notable Go updates?
static: drop marked dep, extract code fences with a regex, all: update typescript 5.9.3 -> 6.0.3, and all: update ESLint and related JS dev dependencies.
♥

$ log @golang --recent

RISC-V Zfa assembly support, and a faster archsimd unifier 9 shipped Plan 9 Mkdir race fixed, riscv64 gets clobberdead mode 7 shipped gopls closes a CVE on dash-prefixed module paths, and the exp collections get a Set 52 shipped Compiler stops lifting unsafe.Pointer arithmetic 35 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.