RepoJournal
Go @golang
167 wires and counting

$ follow Go

Keep up with Go in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-05-23
stories 15
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

GO CORE FIXES METRIC READS, STRCONV BUG, AND S390X LINKAGE

By RepoJournal · Filed · About Go · Composed from the cited sources · methodology

The runtime/metrics package now has a test ensuring no stop-the-world pauses during Read calls, while the standard library patches a strconv output bug and fills gaps in S390X socket assembly exports.

Three critical fixes landed in golang/go overnight. The runtime/metrics package enforces its performance contract [1] - all metric reads must complete without pausing the entire application. A separate fix in internal/strconv [2] corrects middle digit computation that was leaving output bytes as NUL instead of '0' for long numbers. On the syscall front [3], S390X socket assembly symbols now have proper export linknames following earlier work that missed them. Supporting these core changes, the test infrastructure got cleaner too [4] and malloc generated code shed unreachable paths [5]. Across the ecosystem, vulndb bumped x/net to 0.55.0 [6] and updated both x/sys and x/crypto [7], while gopls fixed an MCP crash from invalid Root URIs [8] and improved diff error reporting [9].

Action items

References

  1. [1] runtime/metrics: ensure no stop-the-world in Read ↗ golang/go
  2. [2] internal/strconv: fix mishandling of long outputs ↗ golang/go
  3. [3] syscall: add export linknames for socketcall on S390X ↗ golang/go
  4. [4] cmd/go/testdata/script: remove get_404_meta net dependency ↗ golang/go
  5. [5] runtime: remove unreachable code in malloc_generated.go ↗ golang/go
  6. [6] all: bump x/net to 0.55.0 ↗ golang/vulndb
  7. [7] all: bump x/sys and x/crypto ↗ golang/vulndb
  8. [8] gopls/internal/cmd: mcp: discard invalid Root URIs ↗ golang/tools
  9. [9] gopls/internal/test/marker: improve checkDiffs errors ↗ golang/tools

$ ls golang/reviews/ # the step-back reads

the week in review FIPS 140 crypto fixes land across SHA-3, TLS 1.2, HKDF the month in review Go toolchain patches three CVEs as gopls hits v0.24.0
Full archive → Weekly reviews →

Quick answers

What shipped in Go on May 23, 2026?
The runtime/metrics package now has a test ensuring no stop-the-world pauses during Read calls, while the standard library patches a strconv output bug and fills gaps in S390X socket assembly exports. In total, 15 commits landed.
What were the notable Go updates?
runtime/metrics: ensure no stop-the-world in Read, internal/strconv: fix mishandling of long outputs, and syscall: add export linknames for socketcall on S390X.
♥

$ log @golang --recent

RISC-V Zfa assembly support, and a faster archsimd unifier 9 shipped Plan 9 Mkdir race fixed, riscv64 gets clobberdead mode 7 shipped gopls closes a CVE on dash-prefixed module paths, and the exp collections get a Set 52 shipped Compiler stops lifting unsafe.Pointer arithmetic 35 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.