What were the notable Go updates?

go/callgraph/rta: skip generic methods in fingerprinting, go/callgraph/static: support generic methods, and go/ssa: fix instantiation of generic methods on non-generic receivers.

@golang

Go and the standard library - backend infrastructure at scale

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

GO FIXES GENERIC METHOD BUGS ACROSS THE TOOLCHAIN

By RepoJournal · Filed 06:01 UTC on June 10, 2026 · About Go

The tools team shipped a series of fixes for generic method handling that were causing silent failures in callgraph analysis and SSA instantiation.

Generic methods are getting proper support across Go's analysis tools after a week of targeted fixes. The RTA callgraph fingerprinting now skips generic methods correctly [1], static callgraph analysis gained generic method support [2], and a critical bug in SSA instantiation that was returning uninstantiated methods instead of monomorphized instances is fixed [3]. These changes resolve golang/go#77549 and affect anyone using static analysis, code generation, or IDE features that depend on accurate method resolution. On the compiler side, the Go team tightened range loop semantics by eliminating redundant length re-evaluations [4], fixing spurious nil checks that interfere with line number assignment. The encoding/json/v2 initiative continues to stabilize: the format tag is now available via runtime Option [5] instead of requiring compile-time flags, giving developers runtime flexibility without losing the opt-in safety of the v2 API. Documentation was updated to drop the format tag mention from v1 docs [6]. Security documentation landed a new set of decision guidelines covering what Go considers in-scope for security patches: excessive resource consumption (O(n^2) panics) [7], panic classification [8], attacker-controlled environments [9], and HTTP client redirect behavior [10].

Action items

→ Update to latest golang/tools if you use static analysis, callgraph, or SSA packages golang/tools [plan]
→ Review security policy changes on golang.org to understand current scope golang/website [monitor]
→ Consider encoding/json/v2 with runtime format tag Option for new projects golang/go [monitor]

References

[1] go/callgraph/rta: skip generic methods in fingerprinting golang/tools
[2] go/callgraph/static: support generic methods golang/tools
[3] go/ssa: fix instantiation of generic methods on non-generic receivers golang/tools
[4] cmd/compile: don't re-evaluate length of value being ranged over golang/go
[5] encoding/json/v2: support format tag via runtime Option golang/go
[6] encoding/json: drop documentation mention of `format` golang/go
[7] _content/doc/security: decision: excessive resource consumption golang/website
[8] _content/doc/security: decision: panics golang/website
[9] _content/doc/security: decision: attacker-controlled environment golang/website
[10] _content/doc/security: decision: HTTP client redirects golang/website

Quick answers

What shipped in Go on June 10, 2026?: The tools team shipped a series of fixes for generic method handling that were causing silent failures in callgraph analysis and SSA instantiation. In total, 39 commits landed.
What were the notable Go updates?: go/callgraph/rta: skip generic methods in fingerprinting, go/callgraph/static: support generic methods, and go/ssa: fix instantiation of generic methods on non-generic receivers.

PRINTF ANALYZER GETS SMARTER, PLAYGROUND NEEDS GO 1.26

The printf linter stops falsely flagging intentional double newlines, while gotip now requires Go 1.26 to bootstrap.

go 13 shipped 1-min read

@golang 1 day ago

GO REWORKS HTTP/3 REGISTRATION, KILLS GLOBAL STATE IN MODULE LOADER

Damien Neil's paired changes to net/http and x/net/http3 fundamentally reshape how HTTP/3 integrates with the standard library, while Michael Matloob strips out state manipulation functions that no longer belong anywhere.

go 28 shipped 1-min read

@golang 2 days ago

GOPLS FIXES COMMENT HANDLING IN COMPOSITE LITERALS, VULNDB ADDS 46 SECURITY REPORTS

A critical gopls bug that corrupted code when comments appeared in composite literals is fixed, while the vulnerability database absorbs a major batch of 46 new security reports across the ecosystem.

go 21 shipped 2-min read

@golang 3 days ago

COMPILER SHRINKS CODE SIZE WHILE QUIC FIXES BUSY-LOOP HANGS

The Go compiler now frees unused registers at loop headers, cutting generated code size across all architectures, while the net package fixes a critical QUIC keep-alive deadlock that was burning CPU on blocked connections.

go 25 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.