RepoJournal
Go @golang
167 wires and counting

$ follow Go

Keep up with Go in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-05-13
stories 17
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

RUNTIME MEMORY OPTIMIZATION LANDS AS RISC-V CRYPTO SUPPORT EXPANDS

By RepoJournal · Filed · About Go · Composed from the cited sources · methodology

Go's allocator just got leaner, dropping specialized memory classes above 128 bytes to cut icache misses and improve performance across the board.

The runtime team shipped a major optimization [1] removing oversized specialized allocation classes that were benchmarking worse than the generic path. This addresses the icache regression from the recent sizespecializedmalloc experiment and should land before the next minor release. Meanwhile, RISC-V gets serious: three coordinated changes across go/arch [2], cmd/asm [3], and the main tree add full vector cryptography (Zvk, Zvbb, Zvbc) instruction support [3], cementing Go's position on cutting-edge hardware. On the security front, debug/pe and debug/macho now use safe buffer allocation [4] instead of heap-bombing on crafted binaries with huge decompression sizes — this prevents out-of-memory panics from malformed files. The telemetry desk added platform/target port counters [5] pairing GOOS and GOARCH together so the team can see exactly which OS/arch combinations see real traffic. Meanwhile, CGO users get a fix [6] forcing external linking when CGO_LDFLAGS contains static-linking flags, preventing the internal linker from choking on unresolvable libc symbols. On the infrastructure side, vulndb switched to the latest golang Docker image [7] to dodge minor version security issues during testing, and pkgsite squashed banner flakiness across screen tests [8] [9].

Action items

References

  1. [1] runtime: remove specialized classes larger than 128 bytes ↗ golang/go
  2. [2] riscv64: add support for zvk instructions ↗ golang/arch
  3. [3] cmd/asm, cmd/internal/obj: add zvbb/zvbc for riscv64 ↗ golang/go
  4. [4] debug/pe, debug/macho: use saferio.ReadData for ZLIB section decompression ↗ golang/go
  5. [5] cmd/go/internal/telemetrystats: add go/platform/target/port:*-* counter ↗ golang/go
  6. [6] cmd/go: force external linking when CGO_LDFLAGS contains static-linking flags ↗ golang/go
  7. [7] deploy: use the "latest" golang image for testing ↗ golang/vulndb
  8. [8] tests: update screen test to prevent dynamic banner ↗ golang/pkgsite
  9. [9] tests: hide dynamic banner in screen tests ↗ golang/pkgsite

$ ls golang/reviews/ # the step-back reads

the week in review FIPS 140 crypto fixes land across SHA-3, TLS 1.2, HKDF the month in review Go toolchain patches three CVEs as gopls hits v0.24.0
Full archive → Weekly reviews →

Quick answers

What shipped in Go on May 13, 2026?
Go's allocator just got leaner, dropping specialized memory classes above 128 bytes to cut icache misses and improve performance across the board. In total, 17 commits landed.
What were the notable Go updates?
runtime: remove specialized classes larger than 128 bytes, riscv64: add support for zvk instructions, and cmd/asm, cmd/internal/obj: add zvbb/zvbc for riscv64.
♥

$ log @golang --recent

RISC-V Zfa assembly support, and a faster archsimd unifier 9 shipped Plan 9 Mkdir race fixed, riscv64 gets clobberdead mode 7 shipped gopls closes a CVE on dash-prefixed module paths, and the exp collections get a Set 52 shipped Compiler stops lifting unsafe.Pointer arithmetic 35 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.