What were the notable Go updates?

runtime: remove specialized classes larger than 128 bytes, riscv64: add support for zvk instructions, and cmd/asm, cmd/internal/obj: add zvbb/zvbc for riscv64.

@golang

Go and the standard library - backend infrastructure at scale

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

RUNTIME MEMORY OPTIMIZATION LANDS AS RISC-V CRYPTO SUPPORT EXPANDS

By RepoJournal · Filed 06:01 UTC on May 13, 2026 · About Go

Go's allocator just got leaner, dropping specialized memory classes above 128 bytes to cut icache misses and improve performance across the board.

The runtime team shipped a major optimization [1] removing oversized specialized allocation classes that were benchmarking worse than the generic path. This addresses the icache regression from the recent sizespecializedmalloc experiment and should land before the next minor release. Meanwhile, RISC-V gets serious: three coordinated changes across go/arch [2], cmd/asm [3], and the main tree add full vector cryptography (Zvk, Zvbb, Zvbc) instruction support [3], cementing Go's position on cutting-edge hardware. On the security front, debug/pe and debug/macho now use safe buffer allocation [4] instead of heap-bombing on crafted binaries with huge decompression sizes — this prevents out-of-memory panics from malformed files. The telemetry desk added platform/target port counters [5] pairing GOOS and GOARCH together so the team can see exactly which OS/arch combinations see real traffic. Meanwhile, CGO users get a fix [6] forcing external linking when CGO_LDFLAGS contains static-linking flags, preventing the internal linker from choking on unresolvable libc symbols. On the infrastructure side, vulndb switched to the latest golang Docker image [7] to dodge minor version security issues during testing, and pkgsite squashed banner flakiness across screen tests [8] [9].

Action items

→ Watch the runtime change [ref:4] — this may shift benchmark profiles. Validate your latency-critical services. golang/go [monitor]
→ If you're using debug/pe or debug/macho, upgrade when available [ref:7] — blocks a potential DoS vector. golang/go [plan]
→ Review CGO_LDFLAGS handling [ref:6] if you're mixing static link flags — behavior changes. golang/go [plan]

References

[1] runtime: remove specialized classes larger than 128 bytes golang/go
[2] riscv64: add support for zvk instructions golang/arch
[3] cmd/asm, cmd/internal/obj: add zvbb/zvbc for riscv64 golang/go
[4] debug/pe, debug/macho: use saferio.ReadData for ZLIB section decompression golang/go
[5] cmd/go/internal/telemetrystats: add go/platform/target/port:*-* counter golang/go
[6] cmd/go: force external linking when CGO_LDFLAGS contains static-linking flags golang/go
[7] deploy: use the "latest" golang image for testing golang/vulndb
[8] tests: update screen test to prevent dynamic banner golang/pkgsite
[9] tests: hide dynamic banner in screen tests golang/pkgsite

Quick answers

What shipped in Go on May 13, 2026?: Go's allocator just got leaner, dropping specialized memory classes above 128 bytes to cut icache misses and improve performance across the board. In total, 17 commits landed.
What were the notable Go updates?: runtime: remove specialized classes larger than 128 bytes, riscv64: add support for zvk instructions, and cmd/asm, cmd/internal/obj: add zvbb/zvbc for riscv64.

PRINTF ANALYZER GETS SMARTER, PLAYGROUND NEEDS GO 1.26

The printf linter stops falsely flagging intentional double newlines, while gotip now requires Go 1.26 to bootstrap.

go 13 shipped 1-min read

@golang 1 day ago

GO REWORKS HTTP/3 REGISTRATION, KILLS GLOBAL STATE IN MODULE LOADER

Damien Neil's paired changes to net/http and x/net/http3 fundamentally reshape how HTTP/3 integrates with the standard library, while Michael Matloob strips out state manipulation functions that no longer belong anywhere.

go 28 shipped 1-min read

@golang 2 days ago

GOPLS FIXES COMMENT HANDLING IN COMPOSITE LITERALS, VULNDB ADDS 46 SECURITY REPORTS

A critical gopls bug that corrupted code when comments appeared in composite literals is fixed, while the vulnerability database absorbs a major batch of 46 new security reports across the ecosystem.

go 21 shipped 2-min read

@golang 3 days ago

COMPILER SHRINKS CODE SIZE WHILE QUIC FIXES BUSY-LOOP HANGS

The Go compiler now frees unused registers at loop headers, cutting generated code size across all architectures, while the net package fixes a critical QUIC keep-alive deadlock that was burning CPU on blocked connections.

go 25 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.